# Discourse Keybase Proof
**URL:** https://meta.discourse.org/t/discourse-keybase-proof/115239
**Category:** Feature
**Tags:** pr-welcome
**Created:** [April 16, 2019, 4:22pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239 "2019-04-16T16:22:48Z")
**Posts on this page:** 20
**Page:** 2
### Author:  [@kb\_xgess](https://meta.discourse.org/u/kb_xgess)
#### Post date: [June 14, 2019, 5:46pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/21 "2019-06-14T17:46:59Z")
> Ok, so I should just redirect back to the new\_proof\_url endpoint, fair enough đ
yeah. redirecting is perfect. it doesnât have to redirect to `new` it could also go to the userâs profile page or settings page or something like that as long as the flash notice tells the user something actionable. whatever makes the most sense. iâm not really sure. no opinions.
> the logged-in user is the discourse user that is making the proof
absolutely. yes. it looked like [here](https://github.com/etamponi/discourse-keybase-proofs-plugin/blob/master/app/controllers/proof_controller.rb#L5) weâre only checking if itâs the correct user on `create` and iâd argue we should also do it on `new`. thereâs no sense in trying to save a proof that we know will fail.
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 14, 2019, 5:51pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/22 "2019-06-14T17:51:39Z")
The code I pushed is not the latest. I rewrote the `create` method, removing the check for the `username` param as it should not be necessary anymore (as the `proof_valid?` check will fail).
The `new` method is just a placeholder for Discourse routing logic, it will never be called and it needs to allow non-logged-in requests to allow the user to log in if they logged off previously đ
EDIT: [this](https://github.com/etamponi/discourse-keybase-proofs-plugin/blob/master/app/controllers/proof_controller.rb) is the new code I just pushed (still not very polished, I pushed it just to let you see it).
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 14, 2019, 5:54pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/23 "2019-06-14T17:54:50Z")
About setting up a test domain: it would be great đ
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 25, 2019, 4:52pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/24 "2019-06-25T16:52:47Z")
I am having issues updating the proof custom field. The first time I put a JSON object in it, it works, but any attempt to change the value of the custom field fails. This is the code:
```ruby
def create
kb_username = params.fetch('kb_username')
sig_hash = params.fetch('sig_hash')
proof = Proof.new(current_user.username, kb_username, sig_hash)
unless proof.valid?
raise Discourse::InvalidParameters, I18n.t('keybase_proofs.invalid_proof')
end
proofs = current_user.custom_fields['keybase_proofs'] || {}
# Override the signature because the old one might have been
# revoked and not yet updated on our side.
proofs[kb_username] = proof.signature
current_user.custom_fields['keybase_proofs'] = proofs
current_user.save
render json: success_json
end
```
the first time this code is called, it adds the `proofs` to the custom field named `"keybase_proofs"`. If I call it again, it doesnât update the custom field.
Some more information: if I change the type of the custom field to a string, it works correctly.
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [June 25, 2019, 7:13pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/25 "2019-06-25T19:13:46Z")
Is that code up to date in GitHub?
I assume that
> [@emanuele](#):
>
> current\_user.custom\_fields[âkeybase\_proofsâ]
Is not returning a hash, so on the first time it works because you coalesce it to an empty Hash. But it fails on subsequent tries because itâs returning something else.
Adding a debugging break point there may help.
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 25, 2019, 10:38pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/26 "2019-06-25T22:38:59Z")
> [@Falco](#):
>
> Is that code up to date in GitHub?
Unfortunately not. Since I am learning how everything works together, my code is almost always in a very sad shape, not really worth pushing. But the code that is in GitHub shows exactly the same issue (but I didnât push the tests).
In the latest version of the code, which I have locally, I got rid of the JSON type and I am just using serialized JSON strings instead, and it is now working fine.
> [@Falco](#):
>
> Is not returning a hash, so on the first time it works because you coalesce it to an empty Hash. But it fails on subsequent tries because itâs returning something else.
This is not the case. When I say that âit failsâ, I mean âit fails to _update_â the field. So the first time the code runs, it saves the custom field correctly (I can also retrieve it, I use the data in the profile page and in the check proof endpoint). The second time I run the code (ie, if I add another Keybase identity to the same Discourse user), the custom field _is not updated_, it keeps only the first signature I added.
In case youâre curious and you want to debug the issue, Iâll create a branch with the original code and tests (that were failing) so you can investigate đ
> [@Falco](#):
>
> Adding a debugging break point there may help.
Unfortunately I donât know how to do it for this codebase using VS Code âč do you have any advice on an alternative editor? RubyMine?
Thanks!
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [June 25, 2019, 11:06pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/27 "2019-06-25T23:06:52Z")
> [@emanuele](#):
>
> Unfortunately I donât know how to do it for this codebase using VS Code âč do you have any advice on an alternative editor? RubyMine?
You can add a `byebug` to any line in the controller, and when that line is hit the console where you started the webserver (the one you run `bin/unicorn -x`) will stop and allow you to inspect the variables.
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 27, 2019, 9:32am UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/28 "2019-06-27T09:32:25Z")
The debugger confirms what I saw with previous testing: the JSON is stored the first time, and any attempt to change it later gets silently ignored. Anyway, for now I have fixed it by manually parsing/encoding the JSON string in the custom field.
---
### Author:  [@emanuele](https://meta.discourse.org/u/emanuele)
#### Post date: [June 27, 2019, 9:45am UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/29 "2019-06-27T09:45:35Z")
Hello everyone! In particular @sam and @kb_xgess.
The plugin is in good enough shape now to get reviewed: [GitHub - etamponi/discourse-keybase-proofs-plugin: Discourse Plugin for Keybase Proofs · GitHub](https://github.com/etamponi/discourse-keybase-proofs-plugin).
It should mostly work. There are a few things to fix before it is âshippableâ:
- The ânew proofâ UI needs some CSS love. It should also show an error if the logged in user is not the one for which the proof is requested.
- The config endpoint `/keybase-proofs/config` needs a couple of SVG logos, but I donât know where to get them from. Ideas? @kb_xgess, do they need to be SVG? Do you need both the black&white and the colored one?
- redirect-after-login doesnât work currently. @techAPJ is investigating, might be a bug in Discourse core _or_ (more likely?) a bug somewhere in the plugin.
Some notes on code quality:
- I didnât write frontend tests. I think Iâve got the gist of how to write tests for components, but I didnât want to spend more time figuring out how to mock requests and so on.
- proof\_controller.rb has a very ugly `pic_url` method, needed because I couldnât make the call to the keybase API from the client because of CORS. I guess it can be moved to somewhere else or someone can figure out how to fetch the information from the client side.
- I didnât run any linter/formatter on the code. Should I?
- The README might need some love đ
---
### Author:  [@Avamander](https://meta.discourse.org/u/Avamander)
#### Post date: [June 30, 2019, 8:47pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/30 "2019-06-30T20:47:07Z")
Iâd love to test it out, is there a test instance available?
---
### Author:  [@Avamander](https://meta.discourse.org/u/Avamander)
#### Post date: [June 30, 2019, 8:48pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/31 "2019-06-30T20:48:21Z")
> [@emanuele](#):
>
> needed because I couldnât make the call to the keybase API from the client because of CORS
Whatâs the endpoint URL? Maybe it can be requested from the devs?
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [June 30, 2019, 8:49pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/32 "2019-06-30T20:49:29Z")
As far as I know this needs to be allowed _per instance_ by the Keybase folks.
@kb_xgess, can you add [meta.discourse.org](http://meta.discourse.org) for us?
---
### Author:  [@kb\_xgess](https://meta.discourse.org/u/kb_xgess)
#### Post date: [July 1, 2019, 3:40pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/33 "2019-07-01T15:40:59Z")
takinâ a look at some of your code now. đ great progress! quick question about `meta.discourse.org`, is it running a different codebase? can we deploy your code to it? i ask because part of the back-and-forth protocol is keybase hitting discourse to check for the hosted proof. if itâs not there, itâll all just fail. so, it might be easier for you to iterate on a public server thatâs less production-y. if that makes sense. maybe a staging or hosted dev environment. or even if you have an account with ngrok, we can throw up a static url that always proxies to your localhost thatâs only on when you want it (entirely from your end). if you have the flexibility you need on [meta.discourse.org](http://meta.discourse.org), i can turn it on for that site with the configs in your code and some other defaults.
other question about the SVGs. SVGs are ideal because we actually need a handful of PNGs of different sizes for the mobile app, desktop app, and website, and itâs likely easier for everyone if we can render them all from the same initial inputs.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [July 1, 2019, 7:10pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/34 "2019-07-01T19:10:57Z")
> [@Falco](#):
>
> As far as I know this needs to be allowed _per instance_ by the Keybase folks.
Thatâs disappointing. Is that necessarily so, @kb_xgess? I was hoping that one could just, say, provide KeyBase a link to a profile on any Discourse server running the plugin (or any Discourse server if it gets pulled in to core) and you could then have proof on any Discourse server.
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [July 1, 2019, 7:13pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/35 "2019-07-01T19:13:03Z")
> [@pfaffman](#):
>
> Thatâs disappointing. Is that necessarily so, @kb_xgess?
That was very clear on their announcement post when they launched the service.
> [@kb\_xgess](#):
>
> it might be easier for you to iterate on a public server thatâs less production-y.
If you can add domains easily, please do add one for `keybase-test.demo.discourse.org` which I will be spinning up soon for our tests.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [July 1, 2019, 7:33pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/36 "2019-07-01T19:33:27Z")
> [@Falco](#):
>
> That was very clear on their announcement post when they launched the service.
Oh. I guess I havenât been following as closely as I thought. đż
Wait. Thatâs not what I get from the OP:
> [@Falco](#):
>
> We can implement the Keybase proof protocol, so people can add a proof of identity in the Discourse instances they participate.
Ah, but [Keybase â„'s Mastodon, and how to get your site on Keybase](https://keybase.io/blog/keybase-proofs-for-mastodon-and-everyone) says that they _wonât link to_
> [@](#):
>
> - sites which feel tiny and spammy. We donât want 10,000 partners with 5 members each; if you run, say, a family or apartment website, you donât need to do this integration. Just prove ownership of the domain in the old Keybase way, putting your familyâs proofs in [yoursite.com](http://yoursite.com/keybase.txt)
That makes sense, Iâm afraid. đ
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [July 1, 2019, 7:40pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/37 "2019-07-01T19:40:20Z")
Yes, the plan is creating all the necessary tooling, and Iâm sure @kb_xgess will enable it for communities where it makes sense. That doesnât mean that every ghost town, or login required instance will get it.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [July 1, 2019, 9:04pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/38 "2019-07-01T21:04:35Z")
> [@pfaffman](#):
>
> Just prove ownership of the domain in the old Keybase way, putting your familyâs proofs in [yoursite.com/keybase.txt](http://yoursite.com/keybase.txt)
Is this old-school way supported by the plugin? I am unclear.
---
### Author:  [@Avamander](https://meta.discourse.org/u/Avamander)
#### Post date: [July 1, 2019, 9:19pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/39 "2019-07-01T21:19:12Z")
> [@codinghorror](#):
>
> Is this old-school way supported by the plugin? I am unclear.
No, the new way is, but that requires whitelisting by Keybase
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [July 1, 2019, 9:32pm UTC](https://meta.discourse.org/t/discourse-keybase-proof/115239/40 "2019-07-01T21:32:55Z")
Thatâs the way that you prove to KeyBase that you own a web site. I thought a similar method might work. I was wrong.
[Previous page](https://meta.discourse.org/t/discourse-keybase-proof/115239.md?page=1)
[Next page](https://meta.discourse.org/t/discourse-keybase-proof/115239.md?page=3)