Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewTokenPayloadProvider ¶
func NewTokenPayloadProvider(secret string, serviceURL string) (model.TokenPayloadProvider, error)
NewTokenPayloadProvider creates new HTTP webhood provider it basically to the call to 3rd party http service to secure this interaction, the receiver should apply some actions to ensure the authorized Identity service is doing the request To provide that level of verification we are signing the request with HMAC-SHA256 signature https://en.wikipedia.org/wiki/HMAC We are not using SHA1 here, because SHA2 is more secure. We have limited SHA2 with SHA256 simplify the implementation, and SHA256 is the most popular among SHA2 family SHA3 is not so popular yet and is limited in client packages available Please verify signature on your side
you can also whitelist identifo's IP as an extra step
Types ¶
This section is empty.
Source Files