Skip to main content

Shared-Secret Requests: A simple HTTP authentication library using shared secrets.

Project description

ssr

Shared-Secret Requests: A simple HTTP authentication library using shared secrets.

Overview

The ssr library exposes a simple set interfaces that facilitate server-server authentication using a shared secret. This shared secret or secret_key is used to generate a public key, using a client id and timestamp. The combination of the client id, timestamp and public key form a signature that a host server can use to verify the identity of the client server.

Scope

The scope of this project is limited to inter-app authentication e.g. to support RESTful data transfer between micro-services. Logistics around managing secrets is noot included in the scope of this project. For tools to manage secrets you can look into:

Installation

pip install ssr

Usage

SSR Client

TBD

Requests Session

import ssr

session = ssr.Session(
    secret_key=os.environ.get('APP_SECRET_KEY')
)

response = session.get(
    'https://myblog.com/api/post_reports/',
    params={'q': 'auth'}
)

Base Authentication

TBD

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

ssr-0.1.0.tar.gz (9.5 kB view details)

Uploaded Source

File details

Details for the file ssr-0.1.0.tar.gz.

File metadata

  • Download URL: ssr-0.1.0.tar.gz
  • Upload date:
  • Size: 9.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for ssr-0.1.0.tar.gz
Algorithm Hash digest
SHA256 0bfc86c52d53cca0152717bed81c3a587959095b4b0fee4cc751b4cc1877b594
MD5 d9d061a09fffd945806926e33f3b1b7d
BLAKE2b-256 f4f7b1fdbc0999f2695d1258f3924e1a7e2f3bcf4057d88737ebe7b90a57a0a8

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page