5 commits

Author	SHA1	Message	Date
jelhan	bfe1f488d4	remove proof key knowledge cause it's not secure implemented yet	2015-10-29 12:48:46 +01:00
jelhan	dec12d81a7	move legacy support to api	2015-10-17 15:44:27 +02:00
jelhan	b9bef69977	user has to proof that he knows encryption key when he participates ... Therefore sha256 hash of encryption key is validated against one which is stored on server on poll creation. This one is transfered as X-Croodle-Proof-Key-Knowledge HTTP HEADER. Prevents an attacker of transmitting data with wrong encryption key, which would cause decryption errors for legit users.	2015-08-23 18:56:41 +02:00
jelhan	6ed0cc367a	reimplement expiration date in new api models	2015-08-23 06:18:05 +02:00
jelhan	09c8310bb6	rewritten API models	2015-08-22 23:47:31 +02:00