tree da567fc5e0d76bdf3193e37cebae53211976a554
parent 026a90f851b5f25b9a0eeac7f8a37294eaac47a2
author Suharsh Sivakumar <suharshs@suharshs-macbookair.roam.corp.google.com> 1411497306 -0700
committer Suharsh Sivakumar <suharshs@suharshs-macbookair.roam.corp.google.com> 1411497308 -0700

veryon/services/identity: CSRFCop uses macaroons to send data along with token.

* Updated CSRFCop to take arbritrary input in NewToken.
* In ValidateToken the input is decoded and the HMAC is verified.
* Updated the identity server revocation to use a macaroon instead of maintaining state.
* Updated csrf_test to test for varying cookies instead of varying tokens.
* This also fixes https://code.google.com/p/envyor/issues/detail?id=319.

Change-Id: Ife8f7dd9533c0c0149a182179f9226253d61f3d3