[wp-meta] [Making WordPress.org] #3192: Provide an API endpoint to fetch plugin checksums

[Making WordPress.org]

#3192: Provide an API endpoint to fetch plugin checksums
------------------------------+-----------------------
 Reporter:  schlessera        |       Owner:  dd32
     Type:  enhancement       |      Status:  accepted
 Priority:  normal            |   Milestone:
Component:  Plugin Directory  |  Resolution:
 Keywords:                    |
------------------------------+-----------------------

Comment (by schlessera):

 @dd32 The way the `md5` and `sha256` are stored now duplicates all of the
 duplicate for every single type of hash we add (so x2 now, but might be
 even more later down the road).

 That's why we opted to turn around the schema, so that files are
 enumerated first, and for every file, you have the md5 hashes and then the
 sha256 hashes:

 {{{#!json
 {
     "plugin": "test-plugin-3",
     "version": "1.1.2-20160302",
     "source": [
         "https://plugins.svn.wordpress.org/test-plugin-3/tags/test-tag/",
         "https://plugins.svn.wordpress.org/test-plugin-3/tags/tag1/",
     ],
     "zip": [
         "https://downloads.wordpress.org/plugins/test-plugin-3.test-
 tag.zip",
         "https://downloads.wordpress.org/plugins/test-plugin-3.tag1.zip",
     ],
     "files": [
         "NEW-FILE": {
             "md5": "d41d8cd98f00b204e9800998ecf8427e",
             "sha256":
 "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
         },
         "plugin.php": {
             "md5": [
                 "01565c8754903cb7b29b2e851a34b866",
                 "4fdce3922d9dd6c6f717cac910dc10ba",
                 "9f9e54ca1e325013bf523d6ec31a4a49",
                 "79605ba19f6a0682007b314a90a2dba4"
             ],
             "sha256": [
 "2da8793f9ee56199ac7e88f34e07e412a97e91133c31068916c2e025af8ddac7",
 "221a74f498193d8f666a3f5836d9c122b0b4a3117dd05fd224f5cecffccd3837",
 "b94a3155ca9d14c205672a25a2dbadab39e69b0958fd299b847b08a7bfc08cf0",
 "1decb3435fb6915c7b3c3397f24d0a60ee83d3f4cb55a34ea905f5e164cf90c0"
             ]
         },
         "README.md": {
             "md5": "11995b9377c5bc4afcd46fb49f9bf887",
             "sha256":
 "ec210c8e2a08f87cbade08ad5eb4577586367dee9cc093579dd3c081d5872d61"
         }
     ]
 }
 }}}

 This multiplies the `md5` and `sha256` strings instead, but as the
 filenames will contain paths and can potentially be very long, this is
 preferable.

--
Ticket URL: <https://meta.trac.wordpress.org/ticket/3192#comment:15>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org