1270618 - Get content signatures from Autograph for actions

Status: RESOLVED FIXED

Description

[Michael Cooper [:mythmon]]

When an action is created or updated, it should have a content signature generated by making an API call to Autograph [0].

These signatures are made with short lived keys that could expire in as little as six weeks. There will be at least a two week overlap where the old key is valid, but Autograph uses a new key for new signatures. There should be a management command that will refresh the content signatures of any action who's signature is more than one week old. This command can be run on a daily cron job.

Ops will provide the infrastructure for running cron jobs, in this bug we only have to make the management command that will be run in the cronjob and the create/update hooks to get new keys.

[0]: https://github.com/mozilla-services/autograph

Comment 1

[Michael Cooper [:mythmon]]

This landed on master in PR #222

https://github.com/mozilla/normandy/pull/222