[IPython-dev] Disabling Authentication for Kernels

[Thomas Kluyver]

On 2 March 2015 at 12:14, Andrew Gibiansky <andrew.gibiansky at gmail.com>
wrote:

> 1. What are good ways to debug this?
>

I don't know of any. Hash matching is an all or nothing thing - there's no
way to tell if you're nearly correct.


> 2. My suspicion is that I am treating the key incorrectly. If I understand
> correctly, the provided key is something like "base64-base64-base64". Is
> that string meant to be taken literally as the key (when decoded from
> Utf8), or is the idea to do a base64 decoding of that and use that as the
> key?
>

Taken literally, i.e. those ascii bytes are given to the HMAC function. I
believe the key is actually a UUID.

You can see a very simple but valid signing function I wrote recently here:

https://github.com/takluyver/aiokernel/blob/master/aiokernel.py#L15

Thomas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20150302/1d0468b8/attachment.html>