HTTP Holder-Of-Key Authentication Scheme

Перейти к файлу

Yarik 6096dadcca Merge pull request #294 from mozilla/revert-290-sec-fix-payload-verification Revert "Security fix"		2024-04-02 16:31:49 +02:00
.github/workflows	Migrate CodeQL to V2	2023-07-10 10:25:39 +02:00
lib	Revert "Security fix"	2024-04-02 16:26:00 +02:00
test	Revert "Security fix"	2024-04-02 16:26:00 +02:00
.gitignore	add repo files (fixes #271 )	2020-10-22 21:40:06 +00:00
.taskcluster.yml	switch from Travis-CI to Taskcluster (and drop multiple HAPI version checks)	2020-10-22 22:07:48 +00:00
API.md	Remove remnants of the browser-specific version	2020-12-08 22:13:03 +00:00
CODE_OF_CONDUCT.md	add repo files (fixes #271 )	2020-10-22 21:40:06 +00:00
CONTRIBUTING.md	add repo files (fixes #271 )	2020-10-22 21:40:06 +00:00
LICENSE.md	Update deps. Closes #267 . Closes #268	2020-01-09 21:30:00 -08:00
README.md	some history	2020-10-22 22:17:32 +00:00
SECURITY.md	add repo files (fixes #271 )	2020-10-22 21:40:06 +00:00
package.json	Fix host parsing	2022-05-03 18:14:53 +02:00

README.md

hawk

HTTP Holder-Of-Key Authentication Scheme.

Documentation of the protocol, and the JS API, is in https://github.com/mozilla/hawk/blob/main/API.md.

Ownership Changes

This was once hueniverse/hawk and relased as hawk. Then, after the 7.0.10 release, it was moved to the hapijs/hawk repository and released as @hapi/hawk. Hapi later de-supported the library, after releasing version 8.0.0. It has since been moved to mozilla/hawk and is again released as hawk. All of the intermediate versions are also relased as hawk.

Changes are represented in GitHub releases on this repository.

Mozilla maintains several Hawk implementations in different langauages, so it is likely to stay at Mozilla for some time.

This library is in "maintenance mode" -- no features will be added, and only security-related bugfixes will be applied.