Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-20626

Support RFC 3230/5843 Digest Headers in CMIS contentStream operations

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 8.3
    • Fix Version/s: 8.10
    • Component/s: CMIS

      Description

      Sometimes content streams get corrupted over the wire. Content stream hashes are often used to protect against these corruptions.
      Update nuxeo-chemistry to validate contentStream input to AtomPub and Browser Binding CMIS operations, including setContentStream, appendContentStream, checkIn, and createDocument, by comparing the content stream digest against an RFC 3230/5843 "Digest" request header if present. The code should throw a CMIS invalidArgument exception if the hashes are not equal. Also enhance getContentStream CMIS operation to support RFC 3230 "Want-Digest" request header by setting the appropriate "Digest" or "Content-MD5" response header.

      https://www.ietf.org/rfc/rfc1864.txt
      https://www.ietf.org/rfc/rfc3230.txt
      https://www.ietf.org/rfc/rfc5843.txt

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 hours
                4h