• epriestley's avatar
    Allow Phabricator to accept Conduit requests signed with an SSH key · 657b36dd
    epriestley authored
    Summary:
    Ref T4209.  Depends on D10402.
    
    This updates Conduit to support authenticating calls from other servers by signing the request parameters with the sending server's private key and verifying it with the public key stored in the database.
    
    Test Plan:
      - Made like 500 bad calls using the stuff in D10402.
      - Made a few valid calls using the stuff in D10402.
    
    Reviewers: hach-que, btrahan, #blessed_reviewers
    
    Reviewed By: btrahan, #blessed_reviewers
    
    Subscribers: epriestley, Korvin
    
    Maniphest Tasks: T6240, T4209
    
    Differential Revision: https://secure.phabricator.com/D10401
    657b36dd
PhabricatorConduitAPIController.php 15.8 KB