Closed
Description
Client support for Rekor V2: sigstore-python
Description
In rekor V2, me may not be including the KindVersion in the "canonicalized body", while still having the KindVersion in the root of the response, just as in rekor V1.
This issue tracks a fix to make the parsing the KindVersion forward compatible.
For rekor V1, I think we will likely continue to use LogEntry._from_response()
, while for rekor V2, we would use start using LogEntry_from_dict_rekor()
, which works so far in my testing for parsing responses. (more are changes required for sending requests and verifying signatures.)