Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Validate httpsig on RS requests #585

Closed
wilsonianb opened this issue Aug 31, 2022 · 0 comments · Fixed by #672
Closed

Validate httpsig on RS requests #585

wilsonianb opened this issue Aug 31, 2022 · 0 comments · Fixed by #672
Assignees
@dclipp
Labels
pkg: backend Changes in the backend package.
Milestone
Rafiki <> Auth Se...

Comments

@wilsonianb
Copy link
Contributor

The backend should use the key returned in the token introspection response to validate the httpsig on the request from the client.
https://datatracker.ietf.org/doc/html/draft-ietf-gnap-resource-servers#section-3.3
@wilsonianb wilsonianb added the pkg: backend Changes in the backend package. label Aug 31, 2022
@sabineschaller sabineschaller mentioned this issue Sep 1, 2022
Closed
@sabineschaller sabineschaller self-assigned this Sep 5, 2022
@sabineschaller sabineschaller mentioned this issue Sep 19, 2022
Closed
@dclipp dclipp mentioned this issue Sep 28, 2022
Closed
4 tasks
@dclipp dclipp mentioned this issue Oct 13, 2022
Merged
4 tasks
@wilsonianb wilsonianb moved this to Done in Rafiki Nov 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dclipp dclipp

Labels
pkg: backend Changes in the backend package.
Projects
No open projects
Rafiki
Status: Done
Milestone
Rafiki <> Auth Server Integration
3 participants
@wilsonianb @sabineschaller @dclipp