How to use hwcrypto.js check persons use usb-token











up vote
1
down vote

favorite












I am currently developing a web based signing system use hwcrypto
When user plug usb-token device to computer then click button, it prompt select certificate and enter password:



window.hwcrypto.getCertificate({lang: lang, filter: filter})

.then(function(cert) {

    window.hwcrypto.sign(cert, {type: hashtype, hex: hash}, {lang: lang})

    .then(function(signature){

        // call jquery ajax to do some important thing

        $.ajax({

            url: 'index.php?action=very_important_action',

            dataType: 'html',

            success: function(response) {

                console.log(response);

        });

    });

});


It works, but i worry users call ajax function directly not use usb-token. How can I protect that?






javascript







share|improve this question


























    up vote
    1
    down vote

    favorite












    I am currently developing a web based signing system use hwcrypto
    When user plug usb-token device to computer then click button, it prompt select certificate and enter password:



    window.hwcrypto.getCertificate({lang: lang, filter: filter})
    
.then(function(cert) {
    
    window.hwcrypto.sign(cert, {type: hashtype, hex: hash}, {lang: lang})
    
    .then(function(signature){
    
        // call jquery ajax to do some important thing
    
        $.ajax({
    
            url: 'index.php?action=very_important_action',
    
            dataType: 'html',
    
            success: function(response) {
    
                console.log(response);
    
        });
    
    });
    
});


    It works, but i worry users call ajax function directly not use usb-token. How can I protect that?






    javascript







    share|improve this question
























      up vote
      1
      down vote

      favorite









      up vote
      1
      down vote

      favorite











      I am currently developing a web based signing system use hwcrypto
      When user plug usb-token device to computer then click button, it prompt select certificate and enter password:



      window.hwcrypto.getCertificate({lang: lang, filter: filter})
      
.then(function(cert) {
      
    window.hwcrypto.sign(cert, {type: hashtype, hex: hash}, {lang: lang})
      
    .then(function(signature){
      
        // call jquery ajax to do some important thing
      
        $.ajax({
      
            url: 'index.php?action=very_important_action',
      
            dataType: 'html',
      
            success: function(response) {
      
                console.log(response);
      
        });
      
    });
      
});


      It works, but i worry users call ajax function directly not use usb-token. How can I protect that?






      javascript







      share|improve this question













      I am currently developing a web based signing system use hwcrypto
      When user plug usb-token device to computer then click button, it prompt select certificate and enter password:



      window.hwcrypto.getCertificate({lang: lang, filter: filter})
      
.then(function(cert) {
      
    window.hwcrypto.sign(cert, {type: hashtype, hex: hash}, {lang: lang})
      
    .then(function(signature){
      
        // call jquery ajax to do some important thing
      
        $.ajax({
      
            url: 'index.php?action=very_important_action',
      
            dataType: 'html',
      
            success: function(response) {
      
                console.log(response);
      
        });
      
    });
      
});


      It works, but i worry users call ajax function directly not use usb-token. How can I protect that?






      javascript




      javascript






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked yesterday









      Bùi văn Nguyện

      37717




      37717
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          1
          down vote













          I have a few approaches in mind, but it depends on your implementation -




          1. You can set the usb-token in your local storage, and the page that is being requested has the check that usb-token field should already be available in the local storage.

          2. You can check for every ajax request that is being made, by using $.ajax.beforeSend and check if you have usb-token available.

          3. You can send the token as a query parameter and check in the page that is being requested, that if the parameter containing the token exists or not.






          share|improve this answer





















            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














             

            draft saved


            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372325%2fhow-to-use-hwcrypto-js-check-persons-use-usb-token%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            1
            down vote













            I have a few approaches in mind, but it depends on your implementation -




            1. You can set the usb-token in your local storage, and the page that is being requested has the check that usb-token field should already be available in the local storage.

            2. You can check for every ajax request that is being made, by using $.ajax.beforeSend and check if you have usb-token available.

            3. You can send the token as a query parameter and check in the page that is being requested, that if the parameter containing the token exists or not.






            share|improve this answer

























              up vote
              1
              down vote













              I have a few approaches in mind, but it depends on your implementation -




              1. You can set the usb-token in your local storage, and the page that is being requested has the check that usb-token field should already be available in the local storage.

              2. You can check for every ajax request that is being made, by using $.ajax.beforeSend and check if you have usb-token available.

              3. You can send the token as a query parameter and check in the page that is being requested, that if the parameter containing the token exists or not.






              share|improve this answer























                up vote
                1
                down vote










                up vote
                1
                down vote









                I have a few approaches in mind, but it depends on your implementation -




                1. You can set the usb-token in your local storage, and the page that is being requested has the check that usb-token field should already be available in the local storage.

                2. You can check for every ajax request that is being made, by using $.ajax.beforeSend and check if you have usb-token available.

                3. You can send the token as a query parameter and check in the page that is being requested, that if the parameter containing the token exists or not.






                share|improve this answer












                I have a few approaches in mind, but it depends on your implementation -




                1. You can set the usb-token in your local storage, and the page that is being requested has the check that usb-token field should already be available in the local storage.

                2. You can check for every ajax request that is being made, by using $.ajax.beforeSend and check if you have usb-token available.

                3. You can send the token as a query parameter and check in the page that is being requested, that if the parameter containing the token exists or not.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered yesterday









                Aseem Upadhyay

                1,056520




                1,056520






























                     

                    draft saved


                    draft discarded



















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372325%2fhow-to-use-hwcrypto-js-check-persons-use-usb-token%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Can a sorcerer learn a 5th-level spell early by creating spell slots using the Font of Magic feature?

                    Image
                    28 6 $begingroup$ Per the Font of Magic feature, sorcerer can use Flexible Casting to create 5th-level spell slots at level 7, even though they are not typically available until level 9. You can transform unexpended sorcery points into one spell slot as a bonus action on your turn. The Creating Spell Slots table shows the cost of creating a spell slot of [5th level is 7] If such a sorcerer levels up while still having this 5th-level spell slot, can they choose a 5th-level spell as the spell they gain upon levelling up? The Spellcasting feature states: Additionally, when you gain a level in this class, you can choose one of the sorcerer spells you know and replace it with another spell from the sorcerer spell list, which also must be of a level for which you have spell slots.
                    Read more

                    ts Property 'filter' does not exist on type '{}'

                    Image
                    1 I'm trying to follow Angular Material guide to create a custom filter for autocomplete input text https://material.angular.io/components/autocomplete/overview This is what I have TS import { Component, OnInit } from '@angular/core'; import { TemplateRef } from '@angular/core'; import { FormControl } from "@angular/forms"; import { Observable } from "rxjs"; import { map, startWith, filter } from 'rxjs/operators'; (...) export class AppComponent implements OnInit { title = 'Your Profile'; displayedColumns: string = ['selected', 'name', 'description', 'pnr']; dataSource = ELEMENT_DATA; myControl = new FormControl(); options: any = ['One', 'Two', 'Three']; filteredOptions:
                    Read more

                    mat-slide-toggle shouldn't change it's state when I click cancel in confirmation window

                    Image
                    1 When I checked the slide toggle it should work as expected. But when I try to uncheck it there is a confirmation window asking if you are sure. When I click cancel in that confirmation window, still the toggle changes to unchecked, which shouldn't happen. It should stay in the same state. Here is my Html and TS Code // html <mat-slide-toggle (change)="change($event)" [checked]="isChecked()" > To-pay </mat-slide-toggle> TS code: // ts change(e) { if(this.checked) { if(confirm("Are you sure")) { console.log("toggle") } else { e.stopPropagation(); console.log("toggle should not change if I click the cancel button") }
                    Read more