Confirmed users
358
edits
CloudServices/Sagrada/TokenServer: Difference between revisions
Jump to navigation
Jump to search
CloudServices/Sagrada/TokenServer (view source)
Revision as of 00:21, 12 January 2012
, 12 January 2012→Definitions and assumptions
Tarek.ziade (talk | contribs) No edit summary |
|||
| Line 51: | Line 51: | ||
* '''Metadata Token''': used to send application-specific metadata for the Service. | * '''Metadata Token''': used to send application-specific metadata for the Service. | ||
* '''Master Secret''': a secret shared between Login Server and Service Node. Never used directly, only for deriving other secrets. | * '''Master Secret''': a secret shared between Login Server and Service Node. Never used directly, only for deriving other secrets. | ||
* '''Signing Secret''': derived from the master secret, used to sign auth and metadata tokens. | * '''Signing Secret''': derived from the master secret, used to sign auth and metadata tokens. | ||
* '''Encryption Secret''': derived from the master secret, used to encrypt the metadata token. | * '''Encryption Secret''': derived from the master secret, used to encrypt the metadata token. | ||
* '''Token Secret''': derived from the master secret and auth token, used as '''oauth_consumer_secret'''. This is the only secret shared with the client and is different for each token. | * '''Token Secret''': derived from the master secret and auth token, used as '''oauth_consumer_secret'''. This is the only secret shared with the client and is different for each auth token. | ||