Class Mixlib::Authentication::SignatureVerification
In: lib/mixlib/authentication/signatureverification.rb
Parent: Object

Methods

authenticate_request   authenticate_user_request   headers   new   valid_content_hash?   valid_request?   valid_signature?   valid_timestamp?  

Included Modules

Mixlib::Authentication::SignedHeaderAuth

Public Class methods

Public Instance methods

authenticate_request(user_secret, time_skew=(15*60))

Takes the request, boils down the pieces we are interested in, looks up the user, generates a signature, and compares to the signature in the request

Headers

X-Ops-Sign: algorithm=sha1;version=1.0; X-Ops-UserId: <user_id> X-Ops-Timestamp: X-Ops-Content-Hash: X-Ops-Authorization-#{line_number}

headers()

The authorization header is a Base64-encoded version of an RSA signature. The client sent it on multiple header lines, starting at index 1 - X-Ops-Authorization-1, X-Ops-Authorization-2, etc. Pull them out and concatenate.

[Validate]