Core/grin - Grim: With great power comes great ツ

Core/grin

Fork 0

mirror of https://github.com/mimblewimble/grin.git synced 2025-01-22 03:51:08 +03:00

Commit graph

Author	SHA1	Message	Date
hashmap	8ee8043fd9	Use constant-time token verification in API (#1690 ) Fixes #1641. The size of the token can be leaked, even if we pad or cut user's input we can't make it indistinguishable form the normal case.	2018-10-09 09:32:53 -04:00
Michalis Kargakis	9e6ef6f237	Conform auth check to rfc2616 (#1607 ) According to rfc2616[1], the response from a server to a request with bad credentials should be a 401 instead of a 403. Grin does not have the concept of identities so it does not actually recognize a user request with bad credentials. [1] https://tools.ietf.org/html/rfc2616#section-10.4.2	2018-09-29 09:28:25 +02:00
Quentin Le Sceller	62fd8f2124	Implement Basic Auth for API and Owner API (#1566 ) * Add api_secret * Add to base64 method * Add basic auth in API * Add Basic Auth to owner API * Add flag to enable disable basic auth * Add .api_secret file	2018-09-26 22:38:44 +02:00

Author

SHA1

Message

Date

hashmap

8ee8043fd9

Use constant-time token verification in API (#1690 )

Fixes #1641. The size of the token can be leaked, even if we pad or cut user's input we can't make it indistinguishable form the normal case.

2018-10-09 09:32:53 -04:00

Michalis Kargakis

9e6ef6f237

Conform auth check to rfc2616 (#1607 )

According to rfc2616[1], the response from a server to a request with
bad credentials should be a 401 instead of a 403. Grin does not have
the concept of identities so it does not actually recognize a user
request with bad credentials.

[1] https://tools.ietf.org/html/rfc2616#section-10.4.2

2018-09-29 09:28:25 +02:00

Quentin Le Sceller

62fd8f2124

Implement Basic Auth for API and Owner API (#1566 )

* Add api_secret

* Add to base64 method

* Add basic auth in API

* Add Basic Auth to owner API

* Add flag to enable disable basic auth

* Add .api_secret file

2018-09-26 22:38:44 +02:00

3 commits