Martyn Inglis
|
dbf70ec1eb
|
First pass at implementing API authentication using new JWT tokens
- NOTE - this does not manage secrets. There is only one URL and there is no functionality implemented
- prior to rolling out we need to store secrets properly
Uses the JWT libraries in [https://github.com/alphagov/notifications-python-client](https://github.com/alphagov/notifications-python-client)
- Tokens are checked on every request and will be rejected if token is invalid as per the rules in the python clients.
|
2015-12-15 10:47:20 +00:00 |
|