Skip to content

feat: Use Django signing for payload protection#776

Open
JohananOppongAmoateng wants to merge 1 commit intodjango-commons:mainfrom
JohananOppongAmoateng:124
Open

feat: Use Django signing for payload protection#776
JohananOppongAmoateng wants to merge 1 commit intodjango-commons:mainfrom
JohananOppongAmoateng:124

Conversation

@JohananOppongAmoateng
Copy link
Contributor

This PR replaces the custom HMAC-based checksum generation with Django's built-in cryptographic signing framework (django.core.signing). This provides stronger protection against payload tampering and leverages Django's standard security mechanisms. Closes #124

@github-actions
Copy link
Contributor

Coverage report

Click to see where and how coverage changed

FileStatementsMissingCoverageCoverage
(new stmts)
Lines missing
  src/django_unicorn
  utils.py
  src/django_unicorn/views
  request.py 111
  tests
  test_utils.py
  tests/views
  test_unit_views.py
  tests/views/message
  test_message.py
  test_set_property.py
Project Total  

This report was generated by python-coverage-comment-action

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Sign payloads to prevent tampering

1 participant