Command placeholders

[matteosuppo]

Now we only replace the port: https://github.com/arduino/arduino-create-agent/blob/devel/upload/upload.go#L78

But for more complex commands it could be useful a more flexible system.

Maybe instead of a command+signature we could send an encrypted json like

{
"command": "do stuff with $port and $fqbn",
"env": ["port", "env"]
}

Along with a non-encrypted json containing the actual value to be replaced:

{
 "commandline": "7bfe45p43lk....",
 "env": {
 "port": "COM4",
 "fqbn": "arduino:avr:uno"
 }
}

What do you think? Are there security issues that I don't see?

[zmoog]

Why do we need to change the current command + signature mechanism with something different?

[github-actions]

This issue has been marked as stale because it has been open 14 days with no activity. Remove stale label or comment, otherwise it will be closed in 7 days

[github-actions]

This issue has been closed becasue has been stale for 7 days. If you think this issue deserves some attention feel free to reopen it