Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

kite: add support for VerifyKontrol #170

Open
rjeczalik opened this issue Jul 14, 2016 · 0 comments
Open

kite: add support for VerifyKontrol #170

rjeczalik opened this issue Jul 14, 2016 · 0 comments

Comments

@rjeczalik
Copy link
Member

Currently, when kiteKey auth is used, recipient will reject a request when sender used a kiteKey which was signed using different key pair. In order to support multiple kiteKey in a system, a recipient needs to ask kontrol to verify whether public key matches any of the private key stored in the key pair storage.

Add kontrol.verify method which will accept list of public keys and will respend whether they are: valid, invalid, expired (deleted).

Add config.VerifyKontrol bool field, when set to true will supersed any config.VerifyFunc or default verify behaviour. The VerifyKontrol method will call kontrol.verify when kontrolKey in received kiteKey does not match the internal one. The result of kontrol.verify are going to be cached by the internal cache.

Kite / client with each kontrol.verify request additionaly to foreign kontrolKey should also send its own kontrolKey to validate, whether the key is not expired, and ask for a new one in case it was deleted. Bonus improvement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant