PHP implementation of Hawk about hawk HOT 7 CLOSED

Sweet! Do you have an example of how this is used on the server to validate incoming requests?

from hawk.

Server usage will be along the lines of:

$hawk = getallheaders()['Authentication']; // the authorisation header

// First parse the header to get the parts from the string
$hawk_parts = Hawk::parseHeader($hawk);

// Then with your own function, get the secret for the key from the database
$secret = getSecret($hawk_parts['id']);

// Now validate the request
$valid = Hawk::verifyHeader($hawk, array(
        'host'  =>  'api.example.com',
        'port'  =>  443,
        'path'  =>  '/user/123',
        'method'    =>  'GET'
    ), $secret); // return true if the request is valid, otherwise false

// Server response
if ( ! $valid)
{
        die('Invalid authentication');
}

else
{
        // API response
}

from hawk.

Looks great. Going to make some changes soon so hope you keep it up to date. I also plan to write some test cases and a test server for interop testing.

from hawk.

Great. If you want any help with anything or want someone else to help bash some ideas around then feel free to give me a shout - [email protected]

from hawk.

It would be great if you could implement 0.5.0 with payload hash support, URI bewit, and a new non-backwards compatible MAC calculation.

from hawk.

Note the changes from 0.6 to 0.9 are mainly just API changes, not protocol changes. The only exceptions are:

• added support for dlg and app attributes used by Oz in 0.9.0
• escaping of the ext string for '' (to '') and '\n' (to '\n')

from hawk.

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.

from hawk.