macauthlibA low-level library for implementing MAC Access Authentication | |
Download |
macauthlib Ranking & Summary
Advertisement
- License:
- MPL
- Price:
- FREE
- Publisher Name:
- Mozilla Services Team
- Publisher web site:
- http://mozilla.org
macauthlib Tags
macauthlib Description
macauthlib is a low-level Python library for implementing MAC Access Authentication, a simple HTTP request-signing scheme described in: http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-01To access resources using MAC Access Authentication, the client must have obtained a set of MAC credentials including an id and secret key. They use these credentials to make signed requests to the server.When accessing a protected resource, the server will generate a 401 challenge response with the scheme "MAC" as follows:> GET /protected_resource HTTP/1.1> Host: example.com< HTTP/1.1 401 Unauthorized< WWW-Authenticate: MACThe client will use their MAC credentials to build a request signature and include it in the Authorization header like so:> GET /protected_resource HTTP/1.1> Host: example.com> Authorization: MAC id="h480djs93hd8",> ts="1336363200",> nonce="dj83hs9s",> mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM=" HTTP/1.1 200 OK Content-Type: text/plain For your eyes only: secret data!This library provices the low-level functions necessary to implement such an authentication scheme. For MAC Auth clients, it provides the following function:- sign_request(req, id, key, hashmod=sha1): sign a request using MAC Access Auth.For MAC Auth servers, it provides the following functions:- get_id(req): get the claimed MAC Auth id from the request.- check_signature(req, key, hashmod=sha1): check that the request was signed with the given key.Product's homepage
macauthlib Related Software