QueryAuth 1.0.0-beta
Pre-release
Pre-release
jeremykendall
released this
23 Aug 02:41
·
62 commits
to master
since this release
New Features
- Adds replay attack prevention capability
- Addition of a cnonce to signature creation ensures each signature is unique, even if created during the same second
- Unique, validated signatures can be persisted to ensure they're never used again.
QueryAuth\Storage\SignatureStorage
interface is provided to check for, save, and purge signatures- If a signature exists in the storage layer, that request is likely a replay attack
Backwards Incompatible Changes
- DriftExceeded exceptions have been replaced by the
QueryAuth\Exception\TimeOutOfBoundsException
QueryAuth\Client
now requiresQueryAuth\KeyGenerator
as the second argument in its constructor, used to generate the cnonce.