-
Notifications
You must be signed in to change notification settings - Fork 28
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Deprecate Content-Transfer-Encoding per RFC 8951 #31
base: master
Are you sure you want to change the base?
Conversation
… Note that the value of this header will still be verified if this header is present, otherwise the absence of this header is silently ignored.
Hey @61131 Thanks for submitting this pull request! I just wanted to let you know that I'll assign myself and another dev as reviewers since this seems like a nice change to follow the latest EST standards and I'd be happy to merge this functionality post-review. |
errText: "415 Content-Transfer-Encoding must be base64\n", | ||
}, | ||
{ | ||
name: "Enroll/MissingContentTransferEncoding", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we actually keep this test but just change the expected status returned? It'd be nice to have test cases that demonstrate that clients can send nothing at all.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nevermind, I see now they are in a function that is explicitly meant to check for errors.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall looks good, but some blocking changes are required indicated in other comments
The Content-Transfer-Encoding for EST has been deprecated as per RFC 8951. This document identifies that the POST request and payload response of all endpoints use base64 encoding. This format should be used regardless of any Content-Transfer-Encoding header, and any value in such a header MUST be ignored.
This PR removes the requirement for the Content-Transfer-Encoding header in requests and responses and any validation associated with the header if it is present.