github.com/mozilla/hawk issues | Ecosyste.ms: OpenCollective

Update history for current status

hwine opened this pull request 9 months ago

Add security fixes only admonition to README

ahal opened this pull request 9 months ago

Revert "Security fix"

lotas opened this pull request 9 months ago

calculateMac() should not be deprecated and split into two different versions

shawm11 opened this issue about 1 year ago

Migrate CodeQL to V2

lotas opened this pull request over 1 year ago

Validate bewit MAC before expiry

thusoy opened this pull request over 1 year ago

Security fix

chrisdlangton opened this pull request over 1 year ago

Update API.md

kriede opened this pull request about 2 years ago

types.js:8 Uncaught ReferenceError: Buffer is not defined

OyvindSigvaldsen opened this issue over 2 years ago

Parse URLs using stdlib

lotas opened this pull request over 2 years ago

Create absence

tonykairouz opened this pull request over 3 years ago

The incoming hash of the payload is being trusted and not verified

chrisdlangton opened this issue over 3 years ago

Porting test framework

kralos opened this issue over 3 years ago

Examples in API.md are broken

nponeccop opened this issue almost 4 years ago

Using hawk in Angular app for absence.io

ThRintelen opened this issue about 4 years ago

Travis CI free usage ends Dec 3; mozilla repos should switch to other CI platforms

hwine opened this issue about 4 years ago

Remove remnants of the browser-specific version

djmitche opened this pull request about 4 years ago

Support use of this library in frontend code

djmitche opened this issue about 4 years ago

Do not require @hapi/sntp anymore

djmitche opened this pull request about 4 years ago

Support webpack'ing hawk

djmitche opened this issue about 4 years ago

remove Hapi plugin

djmitche opened this pull request about 4 years ago

switch from Travis-CI to Taskcluster (and drop multiple HAPI checks)

djmitche opened this pull request about 4 years ago

Set up CI

djmitche opened this issue about 4 years ago

Decide future of hapi hawk plugin

hueniverse opened this issue about 4 years ago

Update mozilla/hawk to Mozilla repo standards

djmitche opened this issue about 4 years ago

Import changes made at hapi

djmitche opened this issue about 4 years ago

Add TypeScript typings

amaurym opened this issue almost 5 years ago

Drop hapi 17

hueniverse opened this issue almost 5 years ago

Only node 12

hueniverse opened this issue almost 5 years ago

No Changelog

djmitche opened this issue about 5 years ago

Rust Implementation

djmitche opened this issue about 5 years ago

Move Readme to API

jarrodyellets opened this pull request over 5 years ago

Remove browser exports

hueniverse opened this issue over 5 years ago

Update contact

hueniverse opened this issue over 10 years ago

Discrepancy between client and server in evaluation of resource field

jsolmon opened this issue over 10 years ago

Fix 'undefined module' error in lib/browser.js

secretfader opened this pull request over 10 years ago

using correct undefined check for global module variable

jcwilson opened this pull request over 10 years ago

Bring coverage back to 100%

hueniverse opened this issue over 10 years ago

Fix typo in browser.js comments

Roach opened this pull request over 10 years ago

Typo in browser.js comments

Roach opened this issue over 10 years ago

Fix time calculation. Stop clearing offset when setting storage.

MathieuLoutre opened this pull request over 10 years ago

client.authenticate in browser with browserify

hendrikcech opened this pull request almost 11 years ago

Community Question: Hawk in the Wild

drfloob opened this issue almost 11 years ago

Test doesn't restore console.error to original function

hueniverse opened this issue almost 11 years ago

Bring coverage back to 100% after lab fix

hueniverse opened this issue almost 11 years ago

Merge pull request #1 from hueniverse/master

skynet opened this pull request almost 11 years ago

Payload validation in browser.js broken in IE/Chrome

pcibraro opened this issue almost 11 years ago

Update README.md

pdehaan opened this pull request almost 11 years ago

Add "browser" field to package.json

grncdr opened this pull request almost 11 years ago

Question: Is Hawk appropriate for an "official" mobile app to make signed api requests on behalf of a user?

chadkouse opened this issue about 11 years ago

Hawk fails to install

bmhatfield opened this issue about 11 years ago

Protect against localStorage write failures.

mikeal opened this pull request over 11 years ago

Objective-C implementation

jvatic opened this issue over 11 years ago

Credential Warehouse and Lifecycle Mgmt

andrewdeandrade opened this issue over 11 years ago

PHP Implementation of Hawk (dflydev)

simensen opened this issue over 11 years ago

Make lib/browser.js a component

joaojeronimo opened this pull request over 11 years ago

Go implementation

titanous opened this issue over 11 years ago

Ruby implementation

titanous opened this issue over 11 years ago

Problems with sha1 test case

algermissen opened this issue over 11 years ago

Unit tests fail with coverage error (Windows)

mcandre opened this issue over 11 years ago

Improved Windows support for `npm test`

mcandre opened this pull request over 11 years ago

utils.parseHost https behind reverse proxy

jfromaniello opened this issue over 11 years ago

can't run tests on node 0.8.23

jfromaniello opened this issue over 11 years ago

what if only a public key is known by the server?

timkuijsten opened this issue over 11 years ago

Java port

algermissen opened this issue over 11 years ago

Python Implementation of Hawk

ozten opened this issue over 11 years ago

Verify that the Host header matches the server configuration

hueniverse opened this issue over 11 years ago

Persist NTP offset to LocalStorage

MathieuLoutre opened this pull request almost 12 years ago

Storing the NTP offset in LocalStorage for the browser

MathieuLoutre opened this issue almost 12 years ago

Considerations for CORS requests on the browser

MathieuLoutre opened this pull request almost 12 years ago

Add a streaming interface to payload hash

hueniverse opened this issue almost 12 years ago

Automatically adjust local browser time on stale 401

hueniverse opened this issue almost 12 years ago

broken link for Oz at the end of the README

kapouer opened this issue almost 12 years ago

Hawk Browser Client

MathieuLoutre opened this issue almost 12 years ago

artifacts.id is no longer required for generating a response header

geek opened this pull request almost 12 years ago

Only send the server's ts in response to stale request

hueniverse opened this issue almost 12 years ago

skip trailing '?' from uri in generateNormalizedString ?

kaerus opened this issue almost 12 years ago

remove sntp and rely on ntp synchronized system clock

kaerus opened this issue almost 12 years ago

0.7.0

hueniverse opened this pull request almost 12 years ago

0.6.1

hueniverse opened this pull request almost 12 years ago

Automatically use SNTP to calculate clock offset

hueniverse opened this issue almost 12 years ago

Additional Payload Validation Information in README

mcdee opened this pull request almost 12 years ago

Payload hash in Authentication Header (again)

mcdee opened this issue almost 12 years ago

Rearrange and clarify intro

mnot opened this pull request almost 12 years ago

Example requests omit header field name

mnot opened this issue almost 12 years ago

intro text

mnot opened this issue almost 12 years ago

nonce reuse

mnot opened this issue almost 12 years ago

Guidance on time window

mnot opened this issue almost 12 years ago

Migrate to cryptiles

hueniverse opened this pull request almost 12 years ago

Add Protocol Version To Header/Bewit

mcdee opened this issue almost 12 years ago

Payload Hash in Authentication Header - Required?

mcdee opened this issue almost 12 years ago

0.5.0

hueniverse opened this pull request almost 12 years ago

Payload hash support

hueniverse opened this issue almost 12 years ago

Add normalized string header

hueniverse opened this pull request almost 12 years ago

Hawk should "tag" calls to HMAC to avoid any chance of confusion

abarth opened this issue almost 12 years ago

Missing nonce in header example

hueniverse opened this pull request almost 12 years ago

Replay protection and time sync

hueniverse opened this pull request about 12 years ago

Protect server time information from manipulation

hueniverse opened this issue about 12 years ago

Add server response MAC protection

hueniverse opened this issue about 12 years ago

Question: Why Hawk and not Mac in the Authorization and WWW-Authenticate headers

zoowar opened this issue about 12 years ago