aries-cloudagent-python GitHub

PR #1120	allow for no body
	Signed-off-by: sklump <srklump@hotmail.com>

Created At 2021-04-26 13:06:44 +0000 UTC

PR #1118	make long strings look like elsewhere in aca-py; cover new routes code
	Signed-off-by: sklump <srklump@hotmail.com>

Created At 2021-04-26 11:36:26 +0000 UTC

PR #1116	Changes in Endorser Protocol
	This is a PR that contains changes in endorser protocol. The changes are defined in the issue #1040 #1028

Created At 2021-04-24 11:13:48 +0000 UTC

PR #1115	Add generic JWE envelope handling
	This decouples the in-memory pack/unpack from the envelope handling code, to allow other encryption methods in future.

Created At 2021-04-23 23:02:21 +0000 UTC

PR #1112	Feature/secure comparison
	Signed-off-by: wadeking98 <wkingnumber2@gmail.com> compare_digest only supports ascii strings or bytes like objects. I added .encode() method to the compare_digest to allow utf string to be compared.

Created At 2021-04-22 21:01:56 +0000 UTC

PR #1111

secured api_key against timing attacks

Signed-off-by: wadeking98 <wkingnumber2@gmail.com> @andrewwhitehead comparing user input to secrets and then responding makes this application vulnerable to timing attacks. See resource here: https://blog.sqreen.com/developer-security-best-practices-protecting-against-timing-attacks/ While an attacker isn’t likely to be able to exploit this from somewhere over the internet due to network jitter, they might be able to pull it off if the agent ever supports TOR, HTTP/2 (timeless timing attack), or if they get access to a pod inside the same openshift cluster that can send requests to the agent (ie: the api pod)

Created At 2021-04-22 19:00:50 +0000 UTC

PR #1110	Issue cred bound counter offer
	https://github.com/hyperledger/aries-cloudagent-python/issues/1103

Created At 2021-04-22 14:18:40 +0000 UTC

PR #1107	Fixes for JSON-LD routes
	Had a few bugs slip past; discovered these after more manual testing. This PR activates the json-ld routes, makes the DID resolver DID Document validation less picky, and corrects a schema validation issue in `verify`.

Created At 2021-04-21 04:27:48 +0000 UTC

PR #1105	Update package dependencies

Created At 2021-04-21 03:22:59 +0000 UTC