Re: [Handle-info] HS_SECKEY authentication for REST API

To: Robert R Tupelo-Schneck <schneck@cnri.reston.va.us>

Subject: Re: [Handle-info] HS_SECKEY authentication for REST API

Date: Fri, 25 Jan 2019 12:11:14 -0800

Delivered-to: handle-info-archive@cnriweb-cogent.cnri.reston.va.us

Delivered-to: handle-info@cnriweb.cnri.reston.va.us

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=whitman-edu.20150623.gappssmtp.com; s=20150623; h=from:references:in-reply-to:mime-version:thread-index:date :message-id:subject:to:cc; bh=5Wli50sbNAj49/69H900cpo35Q/DnFQoELNOIqbhxrM=; b=gNKWnoEjbvYf8MkEF1e4/J0HscO6p1HrUhYbK/6MRC3SFpKpPX82wLp/bmaGxAxXLo /NycOgwZ+bdzVcnvXA+Gi3LxczU/bkgF1Bi5AuLKVNXvNaqDbeyexxwTzxUsKXgptQm6 g0UbvCGvOUWBRc1hdY+HLceqU4VpynBFoSBJgzO3wtYpeEYKbxQpPpdEj73TFgaLpGnJ eAo9mceoPUxc3Q2MVk6fSPxS1jSVKxmig69KWsDn0AkV7YQ+W/NSVlcax0u5Pcr3gbNG JfAlGep1dYqL4Rzz+LnM3+el8PStTeuyaWOJKN5UY9JXUKn2NAJHo4ljPFGdgJgLUYVH 3jFA==

In-reply-to: <21394CD0-172B-4EDA-9D19-548193504CC6@cnri.reston.va.us>

List-archive: <http://www.handle.net/mailman/private/handle-info/>

List-help: <mailto:handle-info-request@cnri.reston.va.us?subject=help>

List-id: "Handle.Net Mailing List" <handle-info.cnri.reston.va.us>

List-post: <mailto:handle-info@cnri.reston.va.us>

List-subscribe: <http://www.handle.net/mailman/listinfo/handle-info>, <mailto:handle-info-request@cnri.reston.va.us?subject=subscribe>

List-unsubscribe: <http://www.handle.net/mailman/options/handle-info>, <mailto:handle-info-request@cnri.reston.va.us?subject=unsubscribe>

References: <7c8a8662cd3acaa010edd6b887ee1558@mail.gmail.com> <06223B45-D664-4760-A294-95B0C4004BB6@cnri.reston.va.us> <5362729b6e68dab132cdf28da6b19e98@mail.gmail.com> <21394CD0-172B-4EDA-9D19-548193504CC6@cnri.reston.va.us>

Sender: handle-info-bounces@cnri.reston.va.us

Thread-index: AQISl1aO7P2/r/cpOvvwBJZKxpoHoAG1+dtiAdcQ+5oC9vv3DqUQhSvw

But I thought PUT /api/handles need a HS_SECKEY, right? I don’t know how to use that admprv.bin in PHP for auth.

Kun

From: Robert R Tupelo-Schneck <schneck@cnri.reston.va.us>
Sent: Friday, January 25, 2019 12:09 PM
To: Kun Lin <link@whitman.edu>
Cc: handle-info@cnri.reston.va.us
Subject: Re: [Handle-info] HS_SECKEY authentication for REST API

Yes, PUT /api/handles/{handle} can be used. The technical manual describes the API.

I should add that we generally try to discourage use of HS_SECKEY. Although HTTP Basic authentication is significantly simpler than the alternatives, HS_SECKEY does not have the security allowed by use of public/private key pairs.

Robert

On Jan 25, 2019, at 3:03 PM, Kun Lin <link@whitman.edu> wrote:

Is there a way to create a brand new handle via API?
Kun

From: Robert R Tupelo-Schneck <schneck@cnri.reston.va.us>
Sent: Friday, January 25, 2019 12:02 PM
To: Kun Lin <link@whitman.edu>
Cc: handle-info@cnri.reston.va.us
Subject: Re: [Handle-info] HS_SECKEY authentication for REST API

Create a handle, and in that handle record create a value of type HS_SECKEY. By convention the secret or public key is placed at index 300, but this is not necessary. Also, the HS_SECKEY value should be made not-world-readable (the hdl-admintool client does this for you).

After this handle is created with an HS_SECKEY value, that handle can be used with HTTP Basic authentication.

Robert

On Jan 24, 2019, at 7:53 PM, Kun Lin <link@whitman.edu> wrote:

For the purpose of using REST API and Basic Access Authentication. How to set the HS_SECKEY password? I didn’t remember setting it. I always use admpriv.bin file for auth in clients.

----
Kun Lin
Systems and Application Librarian
Whitman College

PGP Public Key https://keybase.io/dnwklin/pgp_keys.asc

_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info

_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info

_______________________________________________ Handle-Info mailing list Handle-Info@cnri.reston.va.us http://www.handle.net/mailman/listinfo/handle-info