Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
python-tuf/tuf/ngclient
History
Lukas Puehringer 15dd931609 Metadata API: make new verify_delegate unaware of Metadata 
Change new _Delegator.verify_delegate to take payload bytes and
signatures instead of a Metadata object and a payload serializer.

This allows using verify_delegate for payloads that do not come in
a Metadata container, but e.g. in a DSSE envelope (see #2385).

Usage becomes a bit more cumbersome, but still feels reasonable with the
recently added shortcut for default canonical bytes representation of
Metadata.signed.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
2023-08-01 15:31:59 +02:00
..
_internal Metadata API: make new verify_delegate unaware of Metadata 2023-08-01 15:31:59 +02:00
__init__.py Merge pull request #2279 from fridex/export-targetfile-ngclient 2023-01-31 09:19:41 +01:00
config.py Fix pydocstyle D400: first line should end with a period 2023-01-26 15:33:09 +01:00
fetcher.py Merge branch 'theupdateframework:develop' into metaclass-fix 2022-12-27 16:28:43 +05:30
README.md Improve README 2021-07-05 10:45:19 +03:00
updater.py Merge pull request #2241 from jku/repository-lib-uploader 2023-02-08 10:30:52 +01:00

README.md

Next-gen TUF client for Python

This package provides modules for TUF client implementers.

tuf.ngclient.Updater is a class that implements the client workflow described in the TUF specification (see https://theupdateframework.github.io/specification/latest/#detailed-client-workflow)

tuf.ngclient.FetcherInterface is an abstract class that client implementers can implement a concrete class of in order to reuse their own networking/download libraries -- a Requests-based implementation is used by default.

This package:

  • Aims to be a clean, easy-to-validate reference client implementation written in modern Python
  • At the same time aims to be the library of choice for anyone implementing a TUF client in Python: light-weight, easy to integrate and with minimal required dependencies
  • Is still under development but is planned to become the default client in this implementation (i.e., the older tuf.client will be deprecated in the future)