Skip to content
This repository has been archived by the owner on Aug 25, 2023. It is now read-only.

feat: add httpsig validation in gnap middleware #316

Merged
merged 1 commit into from
Jul 12, 2022

Conversation

baha-ai
Copy link
Contributor

@baha-ai baha-ai commented Jun 24, 2022

This change adds http signature validation after gnap middleware request introspection step.

closes #315

Signed-off-by: Baha Shaaban baha.shaaban@securekey.com

@baha-ai baha-ai self-assigned this Jun 24, 2022
@cla-bot cla-bot bot added the cla-signed label Jun 24, 2022
@codecov
Copy link

codecov bot commented Jun 24, 2022

Codecov Report

Merging #316 (43d8c3b) into main (7d05718) will decrease coverage by 0.12%.
The diff coverage is 81.81%.

❗ Current head 43d8c3b differs from pull request most recent head 4fafbfa. Consider uploading reports for the commit 4fafbfa to get more accurate results

@@            Coverage Diff             @@
##             main     #316      +/-   ##
==========================================
- Coverage   86.40%   86.28%   -0.13%     
==========================================
  Files          26       26              
  Lines        2082     2121      +39     
==========================================
+ Hits         1799     1830      +31     
- Misses        176      180       +4     
- Partials      107      111       +4     
Impacted Files Coverage Δ
cmd/kms-server/startcmd/start.go 75.52% <40.00%> (-1.17%) ⬇️
cmd/kms-server/startcmd/params.go 91.46% <66.66%> (-0.95%) ⬇️
pkg/controller/mw/authmw/gnapmw/gnap_middleware.go 100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7d05718...4fafbfa. Read the comment docs.

@baha-ai baha-ai force-pushed the gnap_sig_verify branch 4 times, most recently from cc4e974 to ba1c4cb Compare June 28, 2022 21:21
@baha-ai baha-ai requested review from aholovko, fqutishat and Moopli June 28, 2022 21:32
@baha-ai baha-ai requested a review from DRK3 June 29, 2022 13:59
@baha-ai baha-ai force-pushed the gnap_sig_verify branch 4 times, most recently from 1a8a7f4 to 43d8c3b Compare July 12, 2022 17:12
This change adds http signature validation after gnap middleware request introspection step.

closes trustbloc#315

Signed-off-by: Baha Shaaban <baha.shaaban@securekey.com>
@fqutishat fqutishat merged commit 64f14ae into trustbloc:main Jul 12, 2022
@baha-ai baha-ai deleted the gnap_sig_verify branch July 12, 2022 18:39
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

validate gnap httpsig token
4 participants