peer service authentication with a fixed, shared key
client:
var fixedauth = require('fixedauth')
var headers = {
authorization: fixedauth.sign('secret key!')
}
// an http request with the above headers object
server:
var fixedauth = require('fixedauth')
// string resulting from fixedauth.sign, however you choose to transmit it
var signature
var isAuthorized = fixedauth.verify('secret key', signature)
Also available as connect-style middleware:
var fixedauth = require('fixedauth')
app.use(fixedauth('secret key!'))
Authenticate requests between a client and a server using a shared secret key and a sha256 HMAC. This scheme uses a timestamp to prevent against replay attacks. The client and server timestamp are required to be +/- 60 seconds of each other.
Based somewhat on hawk
$ npm install fixedauth
From package root:
$ npm install
$ npm test
MIT. (c) MMXIII AgileMD http://agilemd.com
FAQs
peer service authentication with a fixed, shared key
The npm package fixedauth receives a total of 1 weekly downloads. As such, fixedauth popularity was classified as not popular.
We found that fixedauth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.