[tdprajwal]

What

make host-descriptor generates the signed Network Descriptor, JWKS and
schema-packs.json from the network's registry entry and serves them through NPM.
Also fixes a Keycloak restart loop after an interrupted boot.

Why

Another network needs these to find and verify us before admitting us.

Testing

Tested on two local networks: the peer verifies over HTTPS, and tampered
documents are refused. Calls signed with the UUID keyId are accepted;
osid-signed calls are refused.

Closes OpenAgriNet/network-adapter#74

[ameersohel45]

1. Key id mismatch (blocking)
setup.py:542 signs with the entry's osid, but the adapter looks up the key's own osid (sunbirdRegistry.go:548). Once validateSign is on, every call fails with key_id_mismatch. Quick-start doesn't show it because validateSign is off there. Can we agree on one id before merging?

2. Schema URL pattern
On an already-seeded registry, old rows still have raw.githubusercontent URLs, so the new pattern will refuse any update to them. Can the pattern accept both forms?

^https://(raw\.githubusercontent\.com/OpenAgriNet/network-specs/[A-Za-z0-9_-]+|openagrinet\.github\.io/network-specs)/schema/[A-Za-z0-9]+/v[0-9]+\.[0-9]+/[A-Za-z0-9_-]+\.yaml$

[ameersohel45]

make host-descriptor doesn't host anything
It only writes the descriptor, JWKS and schema-packs files into .well-known/. Serving them still needs NPM recreated for the new mount and well-known.conf pasted in by hand. Can we either make the command do what its name says, or rename it to something like make prepare-desc-jwks-schemaPack?

[tdprajwal]

Thanks @ameersohel45 , all three addressed:

1. Key id: switched from the osid to our own UUID keyId on the key. Adapters sign with it
   and the JWKS publishes it, so it's the same in every registry. feat: update knowledge-provider Helm charts #84's lookup needs to match
   k.KeyID as well as k.OSID; I'll share the diff, in comments there.
2. The pattern now accepts both URL forms, as suggested.
3. make host-descriptor now hosts: it generates the files, starts or reloads NPM, and checks
   the descriptor is served. The paste step is gone (the locations moved to server_proxy.conf).