GSoC 2021 with SCoRe Lab — Week 11

Nipuna Weerasekara
SCoRe Lab
Published in
2 min readAug 9, 2021

tl;drThis is the twelfth article of my journey into the Google Summer of Code 2021 with SCoRe Lab. Here I discuss week eleven (2nd of August to 8th of August) of my GSoC experience.

The end is nigh!

So, the end of the Google Summer of Code 2021 program is around the corner and I am so excited to complete my milestones and publish our DNSTool-Middleware-API to the world. Currently, in the API, a user can register, submit a scan, update the state of the scan and the user can download the scan results. The user can use the DNSTool-CLI to download the scan results and the DNSTool-CLI will be directly communicating with the Middleware API. For the authentication part in DNSTool-CLI, we use a custom generated service account (just like in the Google Cloud Platform), and then by using that service account, the included private key is used to sign a JWT token which provides several important (but not secret) information to the API about the scans to be downloaded. Then the user can send the JWT token to list the scan results files and by using that JWT token the user verification is done and the relevant files are returned to the user. Of course, the user does not have to do any of these tasks by themselves, that’s is why we provide DNSTool-CLI. Behind the scenes, DNSTool-CLI does all of these tasks on behalf of the user and the user only has to do is to provide the obtained service account JSON file to the CLI. For example,

$ dnstool download --service-account /path/to/service/account.json

See, how cool is that? 😁

Since there is only one week (9th August to 15th August) left to work on the DNSTool-Middleware-API, there are only a few things left to do 🙏. This week, I wrote test cases for the API using Flask Test Client and it was awesome to see all the test cases are passing with flying colors.

So in the coming week, I will complete the API documentation and Wiki for the DNSTool-Middleware-API. Until we meet again, happy coding…

--

--

Nipuna Weerasekara
SCoRe Lab

I am a web developer turned security researcher. Find me on niweera.com