{"id":13810771,"url":"https://github.com/google/ngx_token_binding","last_synced_at":"2025-05-14T15:31:14.874Z","repository":{"id":65981395,"uuid":"73665409","full_name":"google/ngx_token_binding","owner":"google","description":"NGINX module for Token Binding","archived":false,"fork":false,"pushed_at":"2023-01-09T02:21:31.000Z","size":18,"stargazers_count":45,"open_issues_count":1,"forks_count":11,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-04-19T22:27:30.595Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-11-14T04:00:10.000Z","updated_at":"2024-09-27T10:25:18.000Z","dependencies_parsed_at":"2023-02-19T19:31:27.345Z","dependency_job_id":null,"html_url":"https://github.com/google/ngx_token_binding","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fngx_token_binding","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fngx_token_binding/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fngx_token_binding/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fngx_token_binding/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/ngx_token_binding/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254171741,"owners_count":22026504,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T03:00:25.516Z","updated_at":"2025-05-14T15:31:09.863Z","avatar_url":"https://github.com/google.png","language":"C","readme":"# ngx_token_binding\n\nThis NGINX module provides mechanism to cryptographically bind HTTP cookies\nto client's HTTPS channel using Token Binding, as defined by following IETF\ndrafts:\n\n- [draft-ietf-tokbind-protocol](https://tools.ietf.org/html/draft-ietf-tokbind-protocol),\n- [draft-ietf-tokbind-negotiation](https://tools.ietf.org/html/draft-ietf-tokbind-negotiation),\n- [draft-ietf-tokbind-https](https://tools.ietf.org/html/draft-ietf-tokbind-https).\n\n## Status\n\nThis NGINX module is under active development.\n\n## Installation\n\n[Token Bind](https://github.com/google/token_bind) library used by this module\nrequires support for adding custom TLS extensions, which means that NGINX must\nbe compiled against [BoringSSL](https://boringssl.googlesource.com/boringssl)\nor [patched](https://github.com/google/token_bind/blob/master/example/custom_ext_resume.patch)\n[OpenSSL](http://openssl.org/).\n\nTo build `nginx` binary with patched OpenSSL:\n\n    $ cd nginx-1.x.x\n    $ ./configure --with-http_ssl_module \\\n                  --with-openssl=/path/to/patched/openssl/sources \\\n                  --add-module=/path/to/ngx_token_binding\n    $ make \u0026\u0026 make install\n\n## Configuration directives\n\n### `token_binding`\n\n- **syntax**: `token_binding on|off`\n- **default**: `off`\n- **context**: `http`, `server`\n\nEnables negotiation and verification of the Token Binding protocol.\n\nToken Binding ID variables (described below) are going to be available when\nclient successfully negotiates Token Binding.\n\n### `token_binding_cookie`\n\n- **syntax**: `token_binding_cookie \u003ccookie\u003e|all|none`\n- **default**: `none`\n- **context**: `http`, `server`\n\nBinds selected `\u003ccookie\u003e` (or all) to client's HTTPS channel and verifies that\nproperly bound cookies are received from the client.\n\nBecause Token Binding ID can be established only over HTTPS, `Secure` attribute\nis going to be added to cookies bound this way. Also, such cookies are going to\nbe removed from HTTP requests and responses.\n\n### `token_binding_secret`\n\n- **syntax**: `token_binding_secret \u003csecret\u003e`\n- **default**: `none`\n- **context**: `http`, `server`\n\nSecret used to bind cookies using `token_binding_cookie` directive.\n\n## Variables\n\n### `$provided_token_binding_id`\n\nReturns `base64url(sha256(ProvidedTokenBindingID))` if client negotiated\nToken Binding.\n\n### `$provided_token_binding_key_type`\n\nReturns key type of `ProvidedTokenBindingID` if client negotiated Token Binding.\n\n### `$referred_token_binding_id`\n\nReturns `base64url(sha256(ReferredTokenBindingID))` if client negotiated\nToken Binding.\n\n### `$referred_token_binding_key_type`\n\nReturns key type of `ReferredTokenBindingID` if client negotiated Token Binding.\n\n## Contributing\n\nSee [Contributing](CONTRIBUTING.md).\n\n## License\n\n    Copyright 2016 Google Inc.\n\n    Licensed under the Apache License, Version 2.0 (the \"License\");\n    you may not use this file except in compliance with the License.\n    You may obtain a copy of the License at\n\n        http://www.apache.org/licenses/LICENSE-2.0\n\n    Unless required by applicable law or agreed to in writing, software\n    distributed under the License is distributed on an \"AS IS\" BASIS,\n    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n    See the License for the specific language governing permissions and\n    limitations under the License.\n\n## Disclaimer\n\nThis is not an official Google product.\n","funding_links":[],"categories":["Projects built with Bazel"],"sub_categories":["Google projects"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fngx_token_binding","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgoogle%2Fngx_token_binding","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fngx_token_binding/lists"}