Add checksum checking when validating VendorChecksum API tokens.

Review Request #12663 — Created Oct. 3, 2022 and submitted — Latest diff uploaded

Information

Djblets
release-3.x

Reviewers

This change makes the VendorChecksumTokenGenerator check the token's checksum
when validating tokens. This makes the token validation more precise and is
useful for weeding out any false positives during secret scanning.

This also fixes the character set that we're using for base62-encoding the
token checksums. The previous one had incorrectly swapped the placement of the
capital and lowercase characters in the set. Tokens that were generated using
the old character set are still considered valid.

Ran unit tests.

Changes between revision 2 and 3

orig
1
2
3

Commits

Summary ID Author
Add checksum checking when validating VendorChecksum API tokens.
85745ccbe8575b91006d740676c3092c4282c365 Michelle Aubin
Add checksum checking when validating VendorChecksum API tokens.
666361c32af88feb525657abd59c032cb7b6f4eb Michelle Aubin
djblets/secrets/token_generators/vendor_checksum.py
Loading...