com.bazaarvoice.auth:jersey-hmac-auth-common

Common code for the Client and Server modules

Categories

Categories

Jersey Program Interface REST Frameworks
GroupId

GroupId

com.bazaarvoice.auth
ArtifactId

ArtifactId

jersey-hmac-auth-common
Last Version

Last Version

1.1
Release Date

Release Date

Type

Type

jar
Description

Description

Common code for the Client and Server modules

Download jersey-hmac-auth-common

How to add to project

<!-- https://jarcasting.com/artifacts/com.bazaarvoice.auth/jersey-hmac-auth-common/ -->
<dependency>
    <groupId>com.bazaarvoice.auth</groupId>
    <artifactId>jersey-hmac-auth-common</artifactId>
    <version>1.1</version>
</dependency>
// https://jarcasting.com/artifacts/com.bazaarvoice.auth/jersey-hmac-auth-common/
implementation 'com.bazaarvoice.auth:jersey-hmac-auth-common:1.1'
// https://jarcasting.com/artifacts/com.bazaarvoice.auth/jersey-hmac-auth-common/
implementation ("com.bazaarvoice.auth:jersey-hmac-auth-common:1.1")
'com.bazaarvoice.auth:jersey-hmac-auth-common:jar:1.1'
<dependency org="com.bazaarvoice.auth" name="jersey-hmac-auth-common" rev="1.1">
  <artifact name="jersey-hmac-auth-common" type="jar" />
</dependency>
@Grapes(
@Grab(group='com.bazaarvoice.auth', module='jersey-hmac-auth-common', version='1.1')
)
libraryDependencies += "com.bazaarvoice.auth" % "jersey-hmac-auth-common" % "1.1"
[com.bazaarvoice.auth/jersey-hmac-auth-common "1.1"]

Dependencies

compile (3)

Group / Artifact Type Version
com.google.guava : guava jar 16.0
org.slf4j : slf4j-api jar 1.7.5
joda-time : joda-time jar 2.3

test (2)

Group / Artifact Type Version
junit : junit jar 4.10
org.mockito : mockito-core jar 1.9.5

Project Modules

There are no modules declared in this project.

jersey-hmac-auth

Jersey-based HMAC authentication for the client and server.

This library makes it easy to add HMAC authentication to REST API's that are implemented using the Jersey library. Note that this also works for Jersey-based frameworks, like Dropwizard.

HMAC authentication provides a way for you to ensure the integrity and authenticity of API requests. You grant API access to permitted callers by giving each one an API key and a secret key that they use when generating requests. You can use this library to add support for HMAC authentication on the client and server.

On the client side, e.g. in an SDK library that interfaces with the API, the client must build requests following the authentication contract that jersey-hmac-auth implements. You can do this in any language. However, the jersey-hmac-auth library provides support in Java for client libraries that use the Jersey Client for making HTTP requests.

Getting Started

Server Side

Client Side

HMAC Versions

The HMAC version so far have only been used to distinguished between using POST/PUT data in signature or not.

The server may support any number of versions, however client must supply a version and appropriate include or not include data in signature.

  • Version 1 - Has mixed implementations for including content data in signature (deprecated)
  • Version 2 - Will not include content data in signature
  • Version 3 - Will include content data in signature

User Guide

See the User Guide for more details.

Contributing

To build and run tests locally:

$ git clone [email protected]:bazaarvoice/jersey-hmac-auth.git
$ cd jersey-hmac-auth
$ mvn clean install

To submit a new request or issue, please visit the Issues page.

Pull requests are always welcome.

Continuous Integration

Build Status

com.bazaarvoice.auth

Bazaarvoice

Versions

Version
1.1
1.0
0.18
0.17
0.16
0.15
0.14
0.13
0.10