HTTP API: secrets infrastructure #1166

Merged
itamarst merged 18 commits from 3848.http-api-start-immutables into master 2021-12-22 18:39:51 +00:00

18 Commits

Author SHA1 Message Date
Itamar Turner-Trauring 58a71517c1 Correct way to skip with testtools. 2021-12-22 13:16:43 -05:00
Itamar Turner-Trauring 7a0c83e71b Split up test. 2021-12-22 11:52:13 -05:00
Itamar Turner-Trauring 8b4d166a54 Use hypothesis for another test. 2021-12-22 11:44:45 -05:00
Itamar Turner-Trauring 776f19cbb2 Even more hypothesis, this time for secrets' contents. 2021-12-21 12:34:02 -05:00
Itamar Turner-Trauring b1f4e82adf Switch to using hypothesis. 2021-12-21 11:55:16 -05:00
Itamar Turner-Trauring 2bda2a0127 Switch to using a fixture. 2021-12-21 11:10:53 -05:00
Itamar Turner-Trauring 1721865b20 No longer TODO. 2021-12-20 13:46:19 -05:00
Itamar Turner-Trauring 291b4e1896 Use more secure comparison to prevent timing-based side-channel attacks. 2021-12-20 11:17:27 -05:00
Itamar Turner-Trauring a529ba7d5e More skipping on Python 2. 2021-12-17 09:14:09 -05:00
Itamar Turner-Trauring 81b95f3335 Ensure secret was validated. 2021-12-16 11:53:31 -05:00
Itamar Turner-Trauring 428a9d0573 Lint fix. 2021-12-16 11:47:40 -05:00
Itamar Turner-Trauring fb0be6b894 Enforce length of lease secrets. 2021-12-16 11:46:35 -05:00
Itamar Turner-Trauring d2ce80dab8 News file. 2021-12-16 11:42:44 -05:00
Itamar Turner-Trauring 816dc0c73f X-Tahoe-Authorization can be validated and are passed to server methods. 2021-12-16 11:42:06 -05:00
Itamar Turner-Trauring da52a9aede Test for server-side secret handling. 2021-12-16 11:17:32 -05:00
Itamar Turner-Trauring 87fa9ac2a8 Infrastructure for sending secrets. 2021-12-16 11:17:11 -05:00
Itamar Turner-Trauring 1737340df6 Document response codes some more. 2021-12-16 10:52:02 -05:00
Itamar Turner-Trauring b32374c8bc Secret header parsing. 2021-12-16 10:39:58 -05:00