{"repo":"cloudflare/privacypass-origin","free":true,"listed":false,"github":"https://github.com/cloudflare/privacypass-origin","clone":"git clone https://github.com/cloudflare/privacypass-origin.git","description":"A TypeScript Origin for the Privacy Pass Authentication Protocol","language":"TypeScript","stars":13,"topics":["authentication","cryptography","privacy-pass","token","typescript"],"license":null,"category":"auth-billing-email","readme_excerpt":"privacypass-origin This Worker implements the challenge and redemption protocols in Privacy Pass. A live demonstration of this worker can be found here. Overview The test server has two HTTP endpoints: - GET /login : This API will return a static HTML page representing the application, which is a simple (and non-functional) login form. It also returns a WWW-Authenticate: PrivateToken challenge as defined by Privacy Pass authentication. - GET /login (+Authorization: PrivateToken) : This API is used by the application for performing a \"login\" request. Clients will interact with this API upon submitting the login form details. - If the login request contains a Privacy Pass token, the token is validated before accepting the request. - If not, it's the request above. When verifying Privacy Pass tokens, the server will first fetch the token verification key from the issuer (as identified by ISSUER NAME ). That's it! Configuration To deploy and interact with this test server, you need to configure the following Cloudflare Worker variables: - ISSUER NAME: This is the name of the Privacy Pass issuer server that the origin trusts for issuing tokens. This is a public variable. Dependencies The test server uses existing APIs for creating Privacy Pass token challenges and verifying the resulting tokens. For example, when verifying a token, one can use standard WebCrypto APIs for verifying the Token signature against the Issuer's public key.","default_branch":null,"files":null,"tree":[],"storefront":"/r/cloudflare","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/cloudflare/privacypass-origin/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}