1740519 - Retry signature verification by refetching metadata before retrying from scratch

Status: NEW

(Firefox :: Remote Settings Client, defect, P2)

Description

[Mathieu Leplatre [:leplatrem]]

While working on Bug 1725660 we realized that we would like to have an intermediary step that retries signature verification by refetching metadata, before retrying from scratch.

Comment 1

[Mathieu Leplatre [:leplatrem]]

Attachment: Bug 1740519 - Retry signature verification with latest metadata in get() r?robwu

Comment 2

[Mathieu Leplatre [:leplatrem]]

In Bug 1825349, the client throws an invalid signature on .get({ verifySignature: true }) because the locally downloaded certificate has expired since last synchronization.

I believe that this situation should be managed transparently by the Remote Settings client: if signature is invalid on .get(), refetch the metadata and retry.

Otherwise, offer a resuable pattern/snippet for consumers of the verifySignature: true option in the docs.
Something like this would work:

try {
   records = await client.get({ verifySignature: true });
} except (e) {
   if (e instanceof RemoteSettingsClient.InvalidSignatureError) {
      await client.sync();
      records = await client.get();
   }
}