Add Url Signer to Python Keyczar

[GoogleCodeExporter]

Create a URL Signer class for Python like the one we have for Java Keyczar.

Original issue reported on code.google.com by arkajit.dey on 6 Aug 2008 at 11:14

[GoogleCodeExporter]

Original comment by arkajit.dey on 6 Aug 2008 at 11:15

• Changed title: Add Url Signer to Python Keyczar

[GoogleCodeExporter]

I can't find the URL Signer in the java code.  Was this feature removed?  If 
so, is this feature request still valid?  If not, is there documentation for 
the format somewhere?

Original comment by dgryski on 20 Jan 2012 at 2:14

[GoogleCodeExporter]

I don't know of any "URL signer", and don't see why a special-purpose URL 
signing construct would be needed.  The normal signing classes could be used to 
sign URLs.

Let's see if one of the old hands will chime in here.  Steve?

Original comment by swillden@google.com on 20 Jan 2012 at 2:32

[GoogleCodeExporter]

There is a Java URI signer under "experimental":
http://code.google.com/p/keyczar/source/browse/java/code/src/org/keyczar/experim
ental/UriSigner.java

This is a convenience class that canonicalizes URIs by sorting query parameters 
in lexicographic order before signing. The idea is that signing "a=1&b=2" will 
have the same signature as "b=2&a=1".

Another common case, which is not covered, are additional parameters that may 
be added on after the fact and are not relevant to the signature. To deal with 
that, you could associate a whitelist of signed parameter names with a key and 
ignore anything else. That's not implemented here, though.

This code could probably be dumped if nobody is using it. That's why it's under 
"experimental".

Original comment by stevew...@gmail.com on 23 Jan 2012 at 5:04