repoze.who.plugins.macauthA repoze.who plugin for MAC Access Authentication: | |
Download |
repoze.who.plugins.macauth Ranking & Summary
Advertisement
- License:
- MPL
- Price:
- FREE
- Publisher Name:
- Mozilla Services Team
- Publisher web site:
- http://mozilla.org
repoze.who.plugins.macauth Tags
repoze.who.plugins.macauth Description
repoze.who.plugins.macauth is a repoze.who plugin for MAC Access Authentication: http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01To access resources using MAC Access Authentication, the client must have obtained a set of MAC credentials including an id and secret key. They use these credentials to make signed requests to the server.When accessing a protected resource, the server will generate a 401 challenge response with the scheme "MAC" as follows:> GET /protected_resource HTTP/1.1> Host: example.com HTTP/1.1 401 Unauthorized WWW-Authenticate: MACThe client will use their MAC credentials to build a request signature and include it in the Authorization header like so:> GET /protected_resource HTTP/1.1> Host: example.com> Authorization: MAC id="h480djs93hd8",> ts="1336363200",> nonce="dj83hs9s",> mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM=" HTTP/1.1 200 OK Content-Type: text/plain For your eyes only: secret data!This plugin uses the tokenlib library for verifying MAC credentials: https://github.com/mozilla-services/tokenlibIf this library does not meet your needs, you can provide a custom callback function to decode the MAC id token.Product's homepage
repoze.who.plugins.macauth Related Software