From 3538067da666c9d332acc60c865f5e02cfc9b87e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Sun, 18 May 2025 14:58:34 +0400
Subject: [PATCH 1/6] Use production link

---
 app/views/settings/_account.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/settings/_account.html.erb b/app/views/settings/_account.html.erb
index eceed45..dd93823 100644
--- a/app/views/settings/_account.html.erb
+++ b/app/views/settings/_account.html.erb
@@ -52,7 +52,7 @@
   <section class="!pt-8 sm:!pt-12">
     <h3>OpenPGP</h3>
     <ul role="list">
-      <% example_link = link_to "example", "https://accounts.kosmos.org/.well-known/openpgpkey/hu/yuca4ky39mhwkjo78qb8zjgbfj1hg3yf.txt?l=jimmy",
+      <% example_link = link_to "example", "https://kosmos.org/.well-known/openpgpkey/hu/yuca4ky39mhwkjo78qb8zjgbfj1hg3yf.txt?l=jimmy",
           target: "_blank", class: "text-gray-500 underline" %>
       <%= render FormElements::FieldsetComponent.new(
             title: "Public key",

From 171524fb839628fe6b10aaee143e7a83b7e50d56 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Sun, 18 May 2025 14:58:34 +0400
Subject: [PATCH 2/6] Use production link

---
 app/views/settings/_account.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/settings/_account.html.erb b/app/views/settings/_account.html.erb
index eceed45..dd93823 100644
--- a/app/views/settings/_account.html.erb
+++ b/app/views/settings/_account.html.erb
@@ -52,7 +52,7 @@
   <section class="!pt-8 sm:!pt-12">
     <h3>OpenPGP</h3>
     <ul role="list">
-      <% example_link = link_to "example", "https://accounts.kosmos.org/.well-known/openpgpkey/hu/yuca4ky39mhwkjo78qb8zjgbfj1hg3yf.txt?l=jimmy",
+      <% example_link = link_to "example", "https://kosmos.org/.well-known/openpgpkey/hu/yuca4ky39mhwkjo78qb8zjgbfj1hg3yf.txt?l=jimmy",
           target: "_blank", class: "text-gray-500 underline" %>
       <%= render FormElements::FieldsetComponent.new(
             title: "Public key",

From c5c6765d67b0ebb3edde460d0d2c611a831a5aa8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Wed, 21 May 2025 16:29:22 +0400
Subject: [PATCH 3/6] Log LDAP exceptions

---
 extras/strfry/ldap-policy.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/extras/strfry/ldap-policy.ts b/extras/strfry/ldap-policy.ts
index 84f3ca8..a8f5646 100644
--- a/extras/strfry/ldap-policy.ts
+++ b/extras/strfry/ldap-policy.ts
@@ -63,9 +63,9 @@ export class LdapPolicy implements NPolicy {
         out['accept'] = false;
         out['msg'] = 'Only members can publish notes on this relay';
       }
-    } catch (ex) {
+    } catch (e) {
       out['accept'] = false;
-      out['msg'] = 'Auth service temporarily unavailable';
+      out['msg'] = `Auth service temporarily unavailable: ${e.message}`;
     } finally {
       await client.unbind();
       return ['OK', id, out['accept'], out['msg']];

From c1bac2625cde8dd2ce3f3067ef6754897af58586 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Wed, 21 May 2025 16:42:49 +0400
Subject: [PATCH 4/6] Only log exception to stdout

---
 extras/strfry/ldap-policy.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/extras/strfry/ldap-policy.ts b/extras/strfry/ldap-policy.ts
index a8f5646..ad932f0 100644
--- a/extras/strfry/ldap-policy.ts
+++ b/extras/strfry/ldap-policy.ts
@@ -65,7 +65,8 @@ export class LdapPolicy implements NPolicy {
       }
     } catch (e) {
       out['accept'] = false;
-      out['msg'] = `Auth service temporarily unavailable: ${e.message}`;
+      out['msg'] = 'Auth service temporarily unavailable';
+      console.warn(`[ldap-policy] Auth service temporarily unavailable: ${e.message}`)
     } finally {
       await client.unbind();
       return ['OK', id, out['accept'], out['msg']];

From 7f766473ab6f73db5db84d46d22213863d6523fb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Thu, 22 May 2025 13:21:37 +0400
Subject: [PATCH 5/6] Fix typo

---
 app/controllers/web_key_directory_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/web_key_directory_controller.rb b/app/controllers/web_key_directory_controller.rb
index 8e34bad..1bbb61f 100644
--- a/app/controllers/web_key_directory_controller.rb
+++ b/app/controllers/web_key_directory_controller.rb
@@ -6,7 +6,7 @@ class WebKeyDirectoryController < WellKnownController
     if params[:l].blank?
       # TODO store hashed username in db if existing implementations trigger
       # this a lot
-      msg = "WKD request with \"l\" param omitted for hu: #{params[:hashed_username]})"
+      msg = "WKD request with \"l\" param omitted for hu: #{params[:hashed_username]}"
       Sentry.capture_message(msg) if Setting.sentry_enabled?
       http_status :bad_request and return
     end

From 4bf6985b87cec0f052b5a6bd5936ce8863df2a13 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Fri, 23 May 2025 14:08:41 +0400
Subject: [PATCH 6/6] Fix wrong matcher for custom LDAP attribute

389ds doesn't like case-insensitive matches for 7-bit ASCII strings
---
 schemas/ldap/nostr_key.ldif | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/schemas/ldap/nostr_key.ldif b/schemas/ldap/nostr_key.ldif
index 9d6e63a..e2f8da1 100644
--- a/schemas/ldap/nostr_key.ldif
+++ b/schemas/ldap/nostr_key.ldif
@@ -4,6 +4,6 @@ add: attributeTypes
 attributeTypes: ( 1.3.6.1.4.1.61554.1.1.2.1.21
   NAME 'nostrKey'
   DESC 'Nostr public key'
-  EQUALITY caseIgnoreMatch
+  EQUALITY caseExactIA5Match
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
   SINGLE-VALUE )