parsec-cloud
parsec-cloud copied to clipboard
Feat/authenticated api server
The goal is to implement the authenticated part of the api using the http protocol.
TODO
- [x] Add test on the server side
- [x] Valid request
- [x]
Api-Version- [x] Missing header
- [x] Incompatible version
- [x] different but compatible version (revision changed)
- [x]
Authorization- [x] Missing header
- [x] Invalid value
- [x]
Author- [x] Missing header
- [x]
Authornot found in database
- [x]
Timestamp- [x] Missing header
- [x]
Signature- [x] Missing header
- [x] Invalid Signature
Questions
- [x] Were the
api_versioncome from ? theapi_versionwill be located in the headerAPI_VERSION - [x] Is the
Api-VersionHeader received from the user is correctly used ?- [x] Need to settle with the api version used
- [x] Need to send the
Api-Versionthat the serve will be using
- [x] What to do with the timestamp ? Wont be used right now
- [ ] Should
parsec.api.protocolhave its ownversionmodule ?
depends on #2338 closes #2624