repoze.who.plugins.macauth

A repoze.who plugin for MAC Access Authentication:
Download

repoze.who.plugins.macauth Ranking & Summary

Advertisement

  • Rating:
  • License:
  • MPL
  • Price:
  • FREE
  • Publisher Name:
  • Mozilla Services Team
  • Publisher web site:
  • http://mozilla.org

repoze.who.plugins.macauth Tags


repoze.who.plugins.macauth Description

repoze.who.plugins.macauth is a repoze.who plugin for MAC Access Authentication: http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01To access resources using MAC Access Authentication, the client must have obtained a set of MAC credentials including an id and secret key. They use these credentials to make signed requests to the server.When accessing a protected resource, the server will generate a 401 challenge response with the scheme "MAC" as follows:> GET /protected_resource HTTP/1.1> Host: example.com HTTP/1.1 401 Unauthorized WWW-Authenticate: MACThe client will use their MAC credentials to build a request signature and include it in the Authorization header like so:> GET /protected_resource HTTP/1.1> Host: example.com> Authorization: MAC id="h480djs93hd8",> ts="1336363200",> nonce="dj83hs9s",> mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM=" HTTP/1.1 200 OK Content-Type: text/plain For your eyes only: secret data!This plugin uses the tokenlib library for verifying MAC credentials: https://github.com/mozilla-services/tokenlibIf this library does not meet your needs, you can provide a custom callback function to decode the MAC id token.Product's homepage


repoze.who.plugins.macauth Related Software