fixedauth

peer service authentication with a fixed, shared key

usage

client:

var fixedauth = require('fixedauth')
 
var headers = {
  authorization: fixedauth.sign('secret key!')
}
 
// an http request with the above headers object
 

server:

var fixedauth = require('fixedauth')
 
// string resulting from fixedauth.sign, however you choose to transmit it
var signature
 
var isAuthorized = fixedauth.verify('secret key', signature)
 

Also available as connect-style middleware:

var fixedauth = require('fixedauth')
 
app.use(fixedauth('secret key!'))

about

Authenticate requests between a client and a server using a shared secret key and a sha256 HMAC. This scheme uses a timestamp to prevent against replay attacks. The client and server timestamp are required to be +/- 60 seconds of each other.

Based somewhat on hawk

installation

$ npm install fixedauth

running the tests

From package root:

$ npm install
$ npm test

contributors

• jden jason@denizac.org

license

MIT. (c) MMXIII AgileMD http://agilemd.com