Mercurial > libervia-backend
view docker/backend-dev-demo/libervia.conf @ 4212:5f2d496c633f
core: get rid of `pickle`:
Use of `pickle` to serialise data was a technical legacy that was causing trouble to store
in database, to update (if a class was serialised, a change could break update), and to
security (pickle can lead to code execution).
This patch remove all use of Pickle in favour in JSON, notably:
- for caching data, a Pydantic model is now used instead
- for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation
- in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and
`to_dict` method have been implemented to do serialisation.
- new methods to (de)serialise data can now be specified with Identity data types. It is
notably used to (de)serialise `path` of avatars.
A migration script has been created to convert data (for upgrade or downgrade), with
special care for XEP-0373 case. Depending of size of database, this migration script can
be long to run.
rel 443
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 23 Feb 2024 13:31:04 +0100 |
parents | 22cd3094cd1e |
children |
line wrap: on
line source
[DEFAULT] log_fmt = [%%(name)s] %%(message)s init_wait_for_service=prosody:5222::Prosody init_script_path=/home/libervia/init_script.sh xmpp_domain = server1.test email_server = libervia-backend.test email_port = 8025 email_admins_list = admin@server1.test [component file-sharing] http_upload_public_facing_url = http://localhost:7777 http_upload_connection_type = http http_upload_port = 7777