AxisCommunications / AxisCommunications/go-dpop

[Request]: Helper function for hashing bound authorization token

Open
#4 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue
Dominant language
Go
Stars
18
Forks
3
Avg merge
1h 19m
Merged PRs (30d)
2

Description

### Contact Details

erik.blucher@eletive.com

### Is your feature request related to a problem?

Both resource servers and clients needs to hash bound authorization tokens during a normal DPoP authorization flow. If done incorrectly on either side it will result in a `ath` mismatch.

### A clear and concise description of what you want to happen.

It would be helpful if the dpop-package had a utility function to hash a token according to the specification. Then both clients and resource servers could be confident in that the hash is made according to specification and reduce likelihood that a `ath` mismatch will occur.

### Additional Notes

_No response_

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Research direction

The issue names no files or tests. Start by locating existing DPoP token and ath handling in the Go package, then compare it with the specification’s hashing requirements. Done means clients and resource servers can use one utility and produce matching ath values.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.