https://github.com/emilhernvall/mod_hmacauth

hmac-md5 auth for apache
https://github.com/emilhernvall/mod_hmacauth

Last synced: about 2 months ago
JSON representation

hmac-md5 auth for apache

• Host: GitHub
• URL: https://github.com/emilhernvall/mod_hmacauth
• Owner: EmilHernvall
• Created: 2014-07-01T15:46:27.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2014-07-01T17:59:33.000Z (over 10 years ago)
• Last Synced: 2023-03-11T22:52:53.891Z (almost 2 years ago)
• Language: C
• Homepage:
• Size: 141 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# mod_hmacauth

mod_hmacauth is an apache 2.2 module that provides hmac-md5 based

authentication of requests. Apache configuration can be used to specify which

files require authentication, and the requester then have to provide

a timestamp and a secret as part of the querystring. The secret is the hmac of

the timestamp and the requesters ip address. mod_hmacauth then checks that the

timestamp doesn't deviate too much from current time, and computes an hmac

secret on the server. If the supplied and server generated secrets match, the

request is allowed to proceed.

Sample config:

    LoadModule hmacauth_module modules/mod_hmacauth.so

    HMACAuthSecret "mysecret"

    

        SetHandler hmacauth

    

Sample querystring generation in PHP:

    $time = time();

    echo "?timestamp=".$time."&secret=".hash_hmac("md5", $time."|192.168.0.20", "mysecret")."\n";

Can be installed using:

    sudo apxs -c -i mod_hmacauth.c

(apxs may require some dev package)