4 ms·
yes. the permission access is as strong as a shared_secret between Alpha and Beta. shared_secret AUTH_TOKEN=HASH(shared_secret + challenge_string) wh
by eof 12y ago
yes. the permission access is as strong as a shared_secret between Alpha and Beta.
shared_secret
AUTH_TOKEN=HASH(shared_secret + challenge_string)
when Gamma asks for access to Beta, Beta gives a unique challenge_string, and says "give me AUTH_TOKEN and I will let you in":
Gamma -> Beta
"let me in"
Beta -> Gamma
challenge_string = "dlkjaflkjaflkjflkjflfkjflkj"
"give me AUTH_TOKEN and I will let you in"
Gamma -> Alpha
challenge_string = "dlkjaflkjaflkjflkjflfkjflkj"
"can you give me AUTH_TOKEN?"
Alpha -> Gamma
AUTH_TOKEN= HASH(shared_secret + "dlkjaflkjaflkjflkjflfkjflkj")
"here is AUTH_TOKEN"
Gamma -> Beta
"here is AUTH_TOKEN and challenge_string let me in"
Beta -> Gamma
if (AUTH_TOKEN == HASH(SHARED_SECRET+CHALLENGE_STRING)
"you can come in"
else
"no"