From 906971868bca446e0e0534bf1fc1837b488aa9a6 Mon Sep 17 00:00:00 2001 From: mblackgeo <18327836+mblackgeo@users.noreply.github.com> Date: Thu, 24 Mar 2022 12:28:00 +0000 Subject: [PATCH] Add links to PyPI and GHA on badges --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 047a482..f836263 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Protect Flask routes with AWS Cognito -![PyPI](https://img.shields.io/pypi/v/flask_cognito_lib?style=for-the-badge) ![Tests](https://img.shields.io/github/workflow/status/mblackgeo/flask-cognito-lib/tests?style=for-the-badge) [![codecov](https://img.shields.io/codecov/c/github/mblackgeo/flask-cognito-lib?style=for-the-badge&token=TGV2RMGNZ5)](https://codecov.io/gh/mblackgeo/flask-cognito-lib) +[![PyPI](https://img.shields.io/pypi/v/flask_cognito_lib?style=for-the-badge)](https://pypi.org/project/flask-cognito-lib/) [![Tests](https://img.shields.io/github/workflow/status/mblackgeo/flask-cognito-lib/tests?style=for-the-badge)](https://github.com/mblackgeo/flask-cognito-lib/actions/workflows/pipeline.yml) [![codecov](https://img.shields.io/codecov/c/github/mblackgeo/flask-cognito-lib?style=for-the-badge&token=TGV2RMGNZ5)](https://codecov.io/gh/mblackgeo/flask-cognito-lib) A Flask extension that supports protecting routes with AWS Cognito following [OAuth 2.1 best practices](https://oauth.net/2.1/). That means the full authorization code flow, including Proof Key for Code Exchange (RFC 7636) to prevent Cross Site Request Forgery (CRSF), along with secure storage of access tokens in HTTP only cookies (to prevent Cross Site Scripting attacks), and additional `nonce` validation (if using ID tokens) to prevent replay attacks.