Skip to main content

DRF Simple API Signing (SASigning) Introduction

STATUS

  • First Release (29 July 2018)

API Signing Benefits

  1. Identity Verification: You are sure that the request is coming from who you are expecting.

  2. You are sure that the message is not altered in communication channels.

  3. You can prevent relay attack (optional).

API Signing Workflow

Pseudo code explaining steps of API Signing Check in API:

1. Read a signature from header.
2. Construct the message. It may consist of
   * Secret Key
   * Request Method (PUT, GET, POST, ..)
   * URL Endpoint.
   * Request Body.
   * other arguments
those parameters are concatenated and separated by **delimeter** symbol.
3. Hash it with SHA256 using the Secret Key.

What SASigning Do?

SASigning provides an easy way to configure your API to accept, check and define signatures. It allows you to review plugin the signature checking in your flow.

SASIGNING DOCUMENTATION

Release files for drf-simple-api-signing 1.0.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for drf-simple-api-signing 1.0.2
File Size Uploaded
drf-simple-api-signing-1.0.2.tar.gz 207.7 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for drf-simple-api-signing 1.0.2
File Interpreter ABI Platform
drf_simple_api_signing-1.0.2-py3-none-any.whl Python 3 none any Details

Total release size: 214.7 kB

Release files / drf-simple-api-signing-1.0.2.tar.gz

Download URL drf-simple-api-signing-1.0.2.tar.gz
Size 207.7 kB
Tags Source
SHA-256 checksum
How to use checksums
43101eb378c87bc64e443fe0251455b842d0ad21326f4753ec280c41022cbbf7
BLAKE2b-256 checksum
How to use checksums
d2ae77c35e3bb1d916347dfc9a0d9ac4b31e3631418f9a7660d7238fed954b91
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.11.0 pkginfo/1.4.2 requests/2.19.1 setuptools/40.0.0 requests-toolbelt/0.8.0 tqdm/4.23.4 CPython/3.5.0

Release files / drf_simple_api_signing-1.0.2-py3-none-any.whl

Download URL drf_simple_api_signing-1.0.2-py3-none-any.whl
Size 7.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
92abe690b3e4795334757815bbcf83e4cf7098f9230769638514a7a84f984269
BLAKE2b-256 checksum
How to use checksums
86ef710ceee1b3075a56a302cd9fb2e026848dacaf38160c0bde36941769dfa4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.11.0 pkginfo/1.4.2 requests/2.19.1 setuptools/40.0.0 requests-toolbelt/0.8.0 tqdm/4.23.4 CPython/3.5.0

Release history Release notifications | RSS feed

This release

1.0.2 This release

2 release files

1.0.1

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page