4 Commits

Author	SHA1	Message	Date
Wilmer Paulino	831a41b33e	macaroons: remove temporary macaroon creation and verification logic	2019-11-26 11:14:11 -08:00
Wilmer Paulino	38cd0e7847	auth: integrate proper macaroon creation and verification ... We move the proxy from using its placeholder macaroon creation and verification to instead use the agreed upon macaroon design. Much of this is solely a refactor, but some new functionality has also been introduced as part of integrating the LSAT mint: 1. A request's target service is now verified to ensure its attached LSAT is authorized. 2. The preimage is now checked against the token's committed payment hash to ensure it has been paid for.	2019-11-26 11:13:19 -08:00
Wilmer Paulino	95c405b0c7	auth+proxy: extend Authenticator methods with target service name ... The target service name remains unused in its current form, but will be required in order to verify that an incoming request with an LSAT attached is authorized to access the service being attempted. We can derive this from the request's host field, but we choose to extend the methods with the additional parameter in order to prevent parsing the host field again to determine which service is being accessed.	2019-11-26 11:12:48 -08:00
Oliver Gugger	8f4dfc5d57	auth+macaroons: allow authorization by macaroon only	2019-11-18 10:41:11 +01:00