Skip to content

Support data integrity header #1942

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
webb-ben opened this issue Feb 23, 2025 · 0 comments · May be fixed by #1998
Open

Support data integrity header #1942

webb-ben opened this issue Feb 23, 2025 · 0 comments · May be fixed by #1998
Labels
enhancement New feature or request security Security

Comments

@webb-ben
Copy link
Member

webb-ben commented Feb 23, 2025

Is your feature request related to a problem? Please describe.
To enhance data integrity verification in pygeoapi responses, we should consider adding the Content-Digest header. This would allow clients to validate that the response body has not been tampered with during transmission.

Describe the solution you'd like
I have a working implementation that takes the Want-Content-Digest and returns the corresponding digest as supported. This is included in a similar way that the apply_gzip function is implemented. I think this could similarly be configurable as gzip, however not sure what the server config would want to specify (acceptable digest methods, sending digest without it being requested).

Describe alternatives you've considered
I know this may be applied in an upstream webserver. To do so in nginx would require custom njs. Similar to gzip I still think this is a functionality that is important to be a part of pygeoapi.

Additional context
It would be interesting to think of a plugin oriented structure to apply the changes to header and content that we are making with gzip and content integrity to pygeoapi responses. Not sure what this would look like.

@webb-ben webb-ben added enhancement New feature or request security Security labels Feb 23, 2025
@webb-ben webb-ben changed the title Support Data integrity header Support data integrity header Feb 23, 2025
@webb-ben webb-ben linked a pull request Apr 17, 2025 that will close this issue
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request security Security
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant