DRF Simple API Signing (SASigning) Introduction
STATUS
First Release (29 July 2018)
API Signing Benefits
Identity Verification: You are sure that the request is coming from who you are expecting.
You are sure that the message is not altered in communication channels.
You can prevent relay attack (optional).
API Signing Workflow
Pseudo code explaining steps of API Signing Check in API:
1. Read a signature from header. 2. Construct the message. It may consist of * Secret Key * Request Method (PUT, GET, POST, ..) * URL Endpoint. * Request Body. * other arguments those parameters are concatenated and separated by **delimeter** symbol. 3. Hash it with SHA256 using the Secret Key.
What SASigning Do?
SASigning provides an easy way to configure your API to accept, check and define signatures. It allows you to review plugin the signature checking in your flow.
SASIGNING DOCUMENTATION
Visit Docs.
2 maintainers
Metadata
2 maintainers
Release files for drf-simple-api-signing 1.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| drf-simple-api-signing-1.0.2.tar.gz | 207.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| drf_simple_api_signing-1.0.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 214.7 kB
Release files / drf-simple-api-signing-1.0.2.tar.gz
| Download URL | drf-simple-api-signing-1.0.2.tar.gz |
|---|---|
| Size | 207.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
43101eb378c87bc64e443fe0251455b842d0ad21326f4753ec280c41022cbbf7
|
|
BLAKE2b-256 checksum How to use checksums |
d2ae77c35e3bb1d916347dfc9a0d9ac4b31e3631418f9a7660d7238fed954b91
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.11.0 pkginfo/1.4.2 requests/2.19.1 setuptools/40.0.0 requests-toolbelt/0.8.0 tqdm/4.23.4 CPython/3.5.0
|
Release files / drf_simple_api_signing-1.0.2-py3-none-any.whl
| Download URL | drf_simple_api_signing-1.0.2-py3-none-any.whl |
|---|---|
| Size | 7.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
92abe690b3e4795334757815bbcf83e4cf7098f9230769638514a7a84f984269
|
|
BLAKE2b-256 checksum How to use checksums |
86ef710ceee1b3075a56a302cd9fb2e026848dacaf38160c0bde36941769dfa4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.11.0 pkginfo/1.4.2 requests/2.19.1 setuptools/40.0.0 requests-toolbelt/0.8.0 tqdm/4.23.4 CPython/3.5.0
|
Security for drf-simple-api-signing 1.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
