Skip to content

QueryAuth 1.0.0-beta

Pre-release
Pre-release
Compare
Choose a tag to compare
@jeremykendall jeremykendall released this 23 Aug 02:41
· 62 commits to master since this release

New Features

  • Adds replay attack prevention capability
    • Addition of a cnonce to signature creation ensures each signature is unique, even if created during the same second
    • Unique, validated signatures can be persisted to ensure they're never used again.
    • QueryAuth\Storage\SignatureStorage interface is provided to check for, save, and purge signatures
    • If a signature exists in the storage layer, that request is likely a replay attack

Backwards Incompatible Changes