Replace Personal-Access Token Random string with a private key. We can use that for signing etc.

l3montree-dev / devguard

DevGuard Backend - Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy, Compliance to security Frameworks - OWASP Incubating Project

https://flawfix.dev

Other

37 stars 4 forks source link

Replace Personal-Access Token Random string with a private key. We can use that for signing etc. #98

Closed timbastin closed 2 months ago

Refoo0 commented 2 months ago

Generate a public and private key pair.
Send the public key to the server.
Extract the fingerprint of the public key.
Save the public key and fingerprint in the database.
Serialize function for the request body.
Calculate the SHA-256 hash of the serialized data.
Implement a signing function for the SHA-256 hash.
Implement a verification function.