Metadata-Version: 2.0
Name: pyramid-hawkauth
Version: 2.0.0
Summary: A Pyramid authentication plugin for HAWK
Home-page: https://github.com/mozilla-services/pyramid_hawkauth
Author: Mozilla Services
Author-email: services-dev@mozilla.org
License: MPLv2.0
Description-Content-Type: UNKNOWN
Keywords: authentication token hawk request signing
Platform: UNKNOWN
Classifier: Programming Language :: Python
Classifier: License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)
Classifier: Development Status :: 5 - Production/Stable
Requires-Dist: pyramid
Requires-Dist: hawkauthlib (>=2.0.0)
Requires-Dist: tokenlib (>=2.0.0)
Provides-Extra: test
Requires-Dist: webtest; extra == 'test'

================
pyramid_hawkauth
================

This is a Pyramid authenitcation plugin for Hawk Access Authentication:

    https://npmjs.org/package/hawk

To access resources using Hawk Access Authentication, the client must have
obtained a set of Hawk credentials including an id and secret key.  They use
these credentials to make signed requests to the server.

When accessing a protected resource, the server will generate a 401 challenge
response with the scheme "Hawk" as follows::

    > GET /protected_resource HTTP/1.1
    > Host: example.com

    < HTTP/1.1 401 Unauthorized
    < WWW-Authenticate: Hawk

The client will use their Hawk credentials to build a request signature and
include it in the Authorization header like so::

    > GET /protected_resource HTTP/1.1
    > Host: example.com
    > Authorization: Hawk id="h480djs93hd8",
    >                     ts="1336363200",
    >                     nonce="dj83hs9s",
    >                     mac="bhCQXTVyfj5cmA9uKkPFx1zeOXM="

    < HTTP/1.1 200 OK
    < Content-Type: text/plain
    <
    < For your eyes only:  secret data!


This plugin uses the tokenlib library for verifying Hawk credentials:

    https://github.com/mozilla-services/tokenlib

If this library does not meet your needs, you can provide a custom callback
function to decode the Hawk id token.


2.0.0 - 2018-01-10
==================

  * Update use of tokenlib API for v0.3 and later.
  * Py27, Py35 compatible; thanks @return42!


v0.1.0 - 2014-13-01
===================

  * Initial release, based on pyramid_macauth codebase.