impl: skip signature validation

fioan89 · fioan89 · commit 6f278d4567bc · 2025-07-30T23:59:10.000+03:00
Signature validation is skipped if the user configured the `disableSignatureVerification` to true.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+### Added
+
+- support for skipping CLI signature verification
+
 ### Changed
 
 - URL validation is stricter in the connection screen and URI protocol handler
diff --git a/src/main/kotlin/com/coder/toolbox/cli/CoderCLIManager.kt b/src/main/kotlin/com/coder/toolbox/cli/CoderCLIManager.kt
@@ -181,6 +181,12 @@ class CoderCLIManager(
                 }
             }
 
+            if (context.settingsStore.disableSignatureVerification) {
+                downloader.commit()
+                context.logger.info("Skipping over CLI signature verification, it is disabled by the user")
+                return true
+            }
+
             var signatureResult = withContext(Dispatchers.IO) {
                 downloader.downloadSignature(showTextProgress)
             }

Original file line number	Diff line number	Diff line change
`@@ -181,6 +181,12 @@ class CoderCLIManager(`
`181`	`181`	`}`
`182`	`182`	`}`
`183`	`183`
	`184`	`+ if (context.settingsStore.disableSignatureVerification) {`
	`185`	`+ downloader.commit()`
	`186`	`+ context.logger.info("Skipping over CLI signature verification, it is disabled by the user")`
	`187`	`+ return true`
	`188`	`+ }`
	`189`	`+`
`184`	`190`	`var signatureResult = withContext(Dispatchers.IO) {`
`185`	`191`	`downloader.downloadSignature(showTextProgress)`
`186`	`192`	`}`