validatesns

Validate integrity of Amazon SNS messages.

Verifies cryptographic signature.
Checks signing certificate is hosted on an Amazon-controlled URL.
Requires message be no older than one hour, the maximum lifetime of an SNS message.

Licence: MIT.

Quick start

$ pip install validatesns

import validatesns

# Raise validatesns.ValidationError if message is invalid.
validatesns.validate(decoded_json_message_from_sns)

Gotchas

The validate function downloads the signing certificate on every call. For performance reasons, it’s worth caching certificates - you can do this by passing in a get_certificate function.

This takes a url, and returns the certificate content. Your function could cache to the filesystem, a database, or wherever makes sense.

Contribute

Github: https://github.com/nathforge/validatesns

Metadata

Release files for validatesns 0.1.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for validatesns 0.1.1
File	Size	Uploaded
validatesns-0.1.1.tar.gz	3.7 kB	Oct 30, 2015	Details

Release files / validatesns-0.1.1.tar.gz

Download URL	validatesns-0.1.1.tar.gz
Size	3.7 kB
Tags	Source
SHA-256 checksum How to use checksums	`8596c0d0df88e9ba01da657b784262381ac0ff87097808d408bd883c36710493`
BLAKE2b-256 checksum How to use checksums	`370b853d508150da9f568fdb6b2a510da1c869c7efb9643af363d8ddf1090b0b`
Upload date	Oct 30, 2015
Uploaded using Trusted Publishing? What is trusted publishing?	No