Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use expiration time in x-atomic HTTP authorization #140

Open
joepio opened this issue Oct 26, 2022 · 0 comments
Open

Use expiration time in x-atomic HTTP authorization #140

joepio opened this issue Oct 26, 2022 · 0 comments
Labels
authentication related to key management, signin processes

Comments

@joepio
Copy link
Member

joepio commented Oct 26, 2022

Currently, in HTTP auth, we use the current timestamp and the server has a hard-coded max age for signed headers.

This gives no control to the client regarding how long a signature should be valid. We could invert this control by setting an expiration date instead of a timestamp.
@joepio joepio mentioned this issue Oct 27, 2022
Open
@joepio joepio added the authentication related to key management, signin processes label Jan 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
authentication related to key management, signin processes
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@joepio