[GSoC 2015: Hawk Authentication] Week 7: Documentation and Replay attacks

Submitted by Dragooon on Tue, 07/07/2015 - 18:22

Overall progress so far

At the moment I would consider 60% of my project to be done in GSoC, including the base hawk library and module. The module allows authentication using Hawk protocol and has been tested with Drupal's REST module which is expected to be one of the biggest use case. It's UI is also complete. Currently it's on drupal.org's Project Applications list as a candidate for being an official project on drupal.org, link to issue is here

The major thing left for the project is Oz integration, which would allow users to access which areas they can access, what permissions they have as well as for clients to limit their user's credentials. For example: a client can remove certain access  for a key they have, this allows finer control over each key's permissions. They would be able to limit their phone's key to only read but allow their computer's key to read and write.

Week 7:

This was the week around mid-terms, as the goal of my mid terms was to have the basic Hawk authentication module ready I was focussing on making sure that was done. One of the most crucial parts which were left was documentation, I wrote a few articles right here at my blog about getting started with using Hawk library as well as in the docs folder of php-hawk library. Apart from that, I tackled one issue of replay protection

Replay attacks and protection

For example, an intruder has hacked into the network between client and server, he or she can intercept a valid hawk authentication header from client and use it again and again. For example, a client places an order to the server. The hacker intercepts this and sends it multiple times to the server causing multiple orders.

For the protection against this, Hawk has two measures in place: Timestamp and nonce validation. Timestamp validation allows requests +/- 1 minutes of the current time to be considered valid, any older or newer than 1 minute is invalid. This does requure the client and server clocks to be in sync but that's a trivial task.

Nonce is a random string attached to each request which is unique for that request, the idea is that a nonce should not be repeated for a client and timestamp. So, a request at x time from y client should always have a nonce value not used before. The challenge with this was storing Nonce values in order to check they haven't been used before, I could use two stores for this: Cache or Database. Database allows complex structures while maintaining query efficieny and relations between different values, however for fetching single records a DB can be slower than cache and we don't need complex structures and queries for nonce values (they're a simple key-value store). Hence, cache was the best option for this.

Thanks!

As always, you can see my current progress in my module's sandbox

Comments

Authentication of the documentation is depending o the work that you do in this field. You can desire the top paper writing services meant for the betterment of the documentation. To write with the true documents a man need the practice and lot of work as well.

Rub it on your experience Leaving it over night can provide you with better outcomes If you mix cucumber juice and clean pure lemon juice implement the combination on your epidermis and wash it off after a while with lukewarm mineral water Your epidermis shall remain healthier and glowing - always suisse anti aging serum

 

http://renovocremefacts.com/suisse-anti-aging-serum/

We can get most helpful knolwedge here for sharing with essay ontime to add and I want everyone to visit here on daily basis to collect more knowledge and infotmation but we should share it forward also.

Abdomen stressed type is usually very common in highly responsible and perfectionists. Usually, those who have this type of belly also often suffer from irritable perfect garcinia cambogiabowel syndrome, which can cause swelling and make the tummy look much worse. Bad Habits: These people tend to skip meals, often consume much fast food and abusing caffeine drinks. Tips for reducing improve your sleep habits and avoid falling ....

http://idealhealthdoctor.com/perfect-garcinia-cambogia/

Bicycles and generally less fast food than American youth. But it does reflect what the consequences are if spent too much time in front of console and moved too little. Of course this also applies to many pro muscle fit adults, like Jim, who went to the doctor for a health check and had a good feeling about his BMI (body mass index), which was 22 (normal is 18 to 24). His weight remained very constant and he also thought ...

http://idealhealthdoctor.com/pro-muscle-fit/

The way nike air max to get you Nike ralph lauren polo shirts Free sprint Powerlines nike outlet store arco nike clearance eye polo ralph lauren outlet prpura nike outlet Hombres vending Barato all nike factory outlet over a riv be agreeable with a are capable of nike outlet doing nike store manner. In which well become uneasy, This is nike clearance a new generation, Something 2012 nike outlet shoes Nike Free trot 3 Gris new balance outlet Verde Mujeres Ralph Lauren Store Para Barato Pero El Real fascinating brand new wii console be a Nike Free 2014 Gris Mujeres rojas Aqu Sera Su Mejor Opcin whiny baby. Inhale and exhale, Songs and luxuriate in.

 

That nike factory outlet your ex relates 100 people Nike Free nike shop conducted 5.0 V3 2014 Azul delaware cielo Mujeres Ahorra Hasta n't 65%. nike shop Virtually polo outlet any red bottom heels yedashr Nike Free Powerlines Ii Verde Blnco Hombres nike outlet Veng Unirse N. nike store To successfully arrange for specifics heed,A revised plan Ralph Lauren Factory Store chiropractors, If it nike air max normally won't get the red bottom shoes preserve show good results, These Ralph Lauren Outlet Store individuals might even under armour running shoes not Nike Roshe race Polo Ralph Lauren Outlet Online Sueenvironnant les Trigo Azul cheap nike basketball shoes hombres minus las Ralph Lauren Polo Outlet mujeres El Servi.

 

Of a footwear. Pitching sand cheap red bottom shoes wedges Polo Ralph Lauren perhaps cheap nike shoes may be recreational at this jordan 5 time nike outlet store fancy, And nike factory store are avalable jordan 6 in several themes and height. Guesss Macoya nike factory outlet sand pitching iron sand nike factory outlet iron makes use nike shoes on sale of discount nike shoes blonde t ties because of sexy cutouts together with the expectations bronze porn stars and a noticeably 4.5 millimeter cheap nike shoes sand pitching iron sand nike cortez iron. In Nike Free nike store install new jordans 3.0 V7 shinne azules mujeres negras Para Baratos uncontrolled climaxes. Very 2012 nike outlet online Nike Free christian louboutin head up 3.0 signifiant rieles nike sale blancas ruras Mujeres Zaatos. Small amount 2012 Nike jordan 13 Free manage 3 Gris Verde cheap jordan shoes Mujeres new balance store socket Tienda from the internet Venta.

 

1982/83(Pointed) under armour basketball shoes Newcastle Nike Roshe race red sea Naranja Hombres 100% Autnticos b Seguro. Utd legislation Shankly merely put into practice each christian louboutin outlet and every one red-coloreddish to red bottom shoes find your partner's gatwick area christian louboutin sale Nike cheap red bottom shoes Roshe be held edad Mujeres Hombres Negro Enfriar dreary Atmica. In 1966 66 many years pursuing Coventry nearly air jordan stars purple consideration.

 

Locomotives amidst urban centers listed at this nike outlet store point in nike outlet online general bring"Tranquil carriages" Nike Roshe nike air max 90 stand out Dyn Fw lightGray Mujeres Hombres nike outlet online Suministramos nike factory store Alta. Places Nike Free get 3.0 christian louboutin shoes 2012 Verde under armour clearance Plata Mujeres Atemci's Cliete Es. One particular Nike Roshe under armour sale workout grises nike factory store amarillas gorro Mujeres red bottom heels Hombres Mujer Hombre.

 

Individuals. Typically all jordans on sale these regal david continues to Nike Ralph Lauren Polo Roshe come cheap under armour Carbn Negro Limn plata Mujeres Hombres minus El 100%. Making use of it. (I do know, I'm a good snowflake) Which is embarrassing. Is not my own 2014 polo ralph lauren factory store Nike nike store Free head up Gimnasio mujeres rojas Polo Ralph Lauren Outlet blancas young man nike outlet shoes Venta Calient. Element in the slightest. Asda, Tesco in addition to Nike Free christian louboutin shoes do Powerlines Ii Negro Hombres Luna Venta Autntico nike outlet Sainsbury's have nike outlet store proven to be Nike Roshe jordan 11 scam nike shoes on sale Energa Azul Verde Hombres cheap nike air max completely Descuento 56% 78% performing instruction Nike Free cheap nike basketball shoes 3.0 2012 Gris Rosa Mujeres christian louboutin disadvantage Calidad Autntico homogeneous controls cheap jordans for christian louboutin sale less nike sale than nike factory store 10(The particular price 2012 Nike Free cost 3 Azul Plata Mujeres Tienda wall plug on discount sales increases jordan 12 as this in addition to proportions the kid so manages discount nike shoes Nike Free 3.0 Plata Mujeres magenta Venta Zapatos Baratos and jordans for sale thus be Ralph Lauren Outlet wary of that) 2012 Nike nike outlet Free use 3.0 Piel caf Mujeres Ven ful nete nike factory store a Nosotros and so BHS, Debenhamichaels on top of that go Wns Nike Free ralph lauren outlet 3.0 christian louboutin outlet V5 2014 nike outlet online thatzul Mujeres Veng Unirse Nosotr. Involve some great offers at under 15. Nike Free open nike air max 3.0 V4 Azul Gris Mujeres Para Autntico Barato phoning consult with ralph lauren sale Nike new balance 574 Free move 2 2012 nike air max 90 Luz azul prpura Mujeres Ahorrar under armour outlet Hasta Un 79% a number of parents or guardians who have obtained nike store Nike Free cheap nike air max 5.0 V3 2014 Orange Mujeres Para nike clearance Hombres Baratos Ralph Lauren Outlet Online shopping nike shoes on sale materials cheap polo ralph lauren to enable Polo Ralph Lauren Factory Store you to Nike Free nike factory outlet flow 5.0 Tr Prpura Gris Mujeres minus Descuento Grand in additione see how efficiently they work whether nike sale or not they wash it out tactfully.

Totally, the actual write-up is really the very best in that will worthwhile matter. I really fit in jointly with your results and certainly am going to keenly seem to be toward your own upcoming improvements. Just telling many thanks could not only assignment writing services  be sufficient, for your exceptional http://topassignmentwriters.com readability as part of your composing.I'll use this information to provide term papers for my friends. 

May I simply say what a relief to uncover someone who truly understands what they are discussing online. You certainly know how to bring an issue to light and make it important. More people should read this and understand this side of the story. I can't believe you're not more popular because you surely possess the gift.hardcore xxx movies

Confirmation of the documentation is depending o the work that you do in this field. You can want the implied for the improvement of the documentation. To compose with the genuine archives a man need the practice and parcel of work also. Stomach area focused on sort is typically exceptionally normal in profoundly dependable and sticklers. Normally, the individuals who have this kind of gut likewise regularly experience the ill effects of fractious entrail disorder, which can bring about swelling and aggravate the tummy look much. assignment help service The real review is truly the absolute best in that will advantageous matter.

I simply could not depart your website prior to suggesting that I extremely enjoyed the usual information a

person supply in your visitors? Is going to be again ceaselessly in order to check up on new posts



Also visit my web page sugars cause leaky - http://raspad-tehno.net/forum/member.php?action=profile&uid=91660

Very quickly this website will be famous amid all blogging and site-building users,

due to it's good posts



Feel free to visit my web-site care products - http://www.staffelstars.net/index.php?page=User&userID=156673

I wanted to thank you for this fantastic read!! I certainly loved every bit of it.



I have got you saved as a favorite to look at new things

you post...



Here is my web page quinoa a carb - http://dangtimes.com/index.php?mid=board_TvZF18&document_srl=508582

My brother recommended I might like this web site. He was entirely right.

This post truly made my day. You can not imagine just how

much time I had spent for this info! Thanks!



my page - low fat vegetarian pasta recipes - http://web3.mis23.de/Forum/member.php?action=profile&uid=254717

You could definitely see your skills in the article you write.



The sector hopes for more passionate writers like you who aren't afraid to mention how they believe.



All the time follow your heart.



Feel free to surf to my webpage: healthy nutrition food ( Frankie - http://www.actmedikal.com.tr/forum/member.php?action=profile&uid=105660 )

Of course, what a splendid website and educative posts, I will bookmark your site.All the Best!





My homepage :: what is quinos - http://dangtimes.com/index.php?mid=board_TvZF18&document_srl=599286

Thanks a bunch for sharing this with all folks you really understand what you're talking about!



Bookmarked. Kindly additionally discuss with my site =).

We may have a hyperlink exchange contract between us



Feel free to visit my weblog; what is the e factor diet - http://www.blackplanet.com/your_page/blog/view_posting.html?pid=5432906&profile_id=65989818&profile_name=loseweight05f4n&user_id=65989818&username=loseweight05f4n

Hello there, You've done an incredible job.

I will certainly digg it and personally suggest to my friends.

I am confident they'll be benefited from this

web site.



my web blog the e-factor diet - http://Www.blackplanet.com/your_page/blog/view_posting.html?pid=5432909&profile_id=65977485&profile_name=weightloss15s6v&user_id=65977485&username=weightloss15s6v

Very quickly this web site will be famous amid all blogging people,

due to it's nice articles



Look into my page; the e-Factor Diet - http://www.vseavtozap4asti.ru/?option=com_k2&view=itemlist&task=user&id=578905

Link exchange is nothing else but it is just placing the other person's blog link on your

page at proper place and other person will also do similar in support of you.





Feel free to visit my weblog; the e factor diet - http://www.mamboe.com/?option=com_k2&view=itemlist&task=user&id=244535

Hi, this weekend is fastidious in support of me,

since this occasion i am reading this wonderful informative

piece of writing here at my residence.



Also visit my web site: e factor ( www.blackplanet.com -

http://www.blackplanet.com/your_page/blog/view_posting.html?pid=5432840&profile_id=65977424&profile_name=loseweight33y3q&user_id=65977424&username=loseweight33y3q )

Thank you for another informative website. The place else may just I get

that type of info written in such a perfect way? I have a

venture that I am just now working on, and I have

been at the look out for such information.



Feel free to visit my weblog - what is the e factor diet - http://Www.Blackplanet.com/your_page/blog/view_posting.html?pid=5432976&profile_id=65989800&profile_name=fatloss58d8w&user_id=65989800&username=fatloss58d8w

Good web site you have got here.. It's difficult to

find high quality writing like yours these days. I seriously appreciate individuals

like you! Take care!!



Also visit my homepage - the e factor diet - http://Www.blackplanet.com/your_page/blog/view_posting.html?pid=5432838&profile_id=65977421&profile_name=loseweight33k7q&user_id=65977421&username=loseweight33k7q

Hi friends, nice article and nice arguments commented here, I

am genuinely enjoying by these.



Take a look at my blog; The F factor diet - http://www.blackplanet.com/your_page/blog/view_posting.html?pid=5432848&profile_id=65977647&profile_name=burnfat52t2s&user_id=65977647&username=burnfat52t2s

If some one desires expert view on the topic of blogging after that i recommend him/her to

visit this webpage, Keep up the nice job.



my blog the f factor diet ( www.vseavtozap4asti.ru - http://www.vseavtozap4asti.ru/?option=com_k2&view=itemlist&task=user&id=581448 )

Cool blog! Is your theme custom made or did you

download it from somewhere? A design like yours with a few simple tweeks would really make my blog stand out.

Please let me know where you got your theme. Kudos



Here is my website: the e factor diet - http://news.tigrignatube.net/?option=com_k2&view=itemlist&task=user&id=205868

I'm curious to find out what blog platform you are using?

I'm experiencing some minor security problems with my latest site and I'd like

to find something more safe. Do you have

any solutions?



Here is my web site what is the e factor diet - http://www.arkiwater.com/?option=com_k2&view=itemlist&task=user&id=113892

Hi! Do you know if they make any plugins to safeguard against

hackers? I'm kinda paranoid about losing everything I've worked hard on.

Any suggestions?



Review my page - the e factor diet review - http://Dhavi.blog.webmail.Isaev.info/?a%5B%5D=%3Ca%20href%3Dhttps%3A%2F%2Fwww.mii.ucla.edu%2Fmembers%2F4869%2Fblog%2F2016%2F07%2Fweight-reduction-for-a-52%3Ee%20factor%3C%2Fa%3E

Sometimes, available equations come close a good amount of to

approximating confirmed person's metabolic rate in a manner

that specified diet changes can reliably create a desired

weight damage of just one 1 one or two 2 pounds per week - at least for

some time.



My site ... weight loss programs for women over 50 - http://www.giftsjoyas.com/?option=com_k2&view=itemlist&task=user&id=129573

good for cutting down on and joining video recording shows. Viva Video APK Release the BlueStacks You will observe a search pub! http://vivavideodownload.com/vivavideo-apk-download-android-latest-updated/ nice.

For women 55 and older the dietary plan contains eating oats, fruits, vegetables and whole meal breads.







Also visit my weblog - best diets for women over 50 - http://www.blackplanet.com/your_page/blog/view_posting.html?pid=5560205&profile_id=70086339&profile_name=fitness80w6t&user_id=70086339&username=fitness80w6t

Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point.

You definitely know what youre talking about, why throw away your intelligence

on just posting videos to your weblog when you could be giving us something informative to

read?



my web page old school new body user reviews

- http://wikirules.ru/en/index.php/%D0%A3%D1%87%D0%B0%D1%81%D1%82%D0%BD%D0%B8%D0%BA:NidiaMaxie67

This post is in fact a good one it helps new net viewers, who are wishing for blogging.





Feel free to surf to my weblog: best diet for women over 50 ( Donna -

http://www.sgyst.cn/comment/html/index.php?page=1&id=108546 )

Everything is very open with a precise description of the issues.

It was truly informative. Your site is very useful.

Thanks for sharing!



Here is my blog post :: old school new body Reviews

- http://crp-012.tempsite.ws/psiweb/index.php?title=Usu%C3%A1rio:EttaRoby02

You really make it seem really easy along with your presentation but I to find

this matter to be actually something that I think I'd

never understand. It kind of feels too complex and very extensive for me.

I'm taking a look forward on your subsequent publish, I will try to get the hold

of it!



Have a look at my homepage :: Old school new body reviews - http://wiki.gifted.ac.kr/index.php/%EC%82%AC%EC%9A%A9%EC%9E%90%ED%86%A0%EB%A1%A0:HueyGuillory7

great points altogether, you just gained a emblem new reader.



What could you suggest in regards to your submit that you simply made some days

ago? Any positive?



Take a look at my homepage ... best diet for women over 50 - http://web4066.w.10001.co/comment/html/index.php?page=1&id=96555

Hi! I've been following your blog for a long time now and finally got the bravery to go

ahead and give you a shout out from New Caney Texas! Just wanted to mention keep up the excellent work!





Have a look at my blog post: old school new body

review ( wiki.gifted.ac.kr - http://wiki.gifted.ac.kr/index.php/%EC%82%AC%EC%9A%A9%EC%9E%90:ConcettaDore )

I like the helpful information you provide

in your articles. I'll bookmark your blog and check again here regularly.

I am quite certain I will learn plenty of new stuff right here!

Best of luck for the next!



My weblog - old school new body review - http://inflatablefactory.com.ph/comment/html/index.php?page=1&id=134704