httpsignatures-go

httpsignatures-go copied to clipboard

Greetings! I'm packaging [Woodpecker CI](https://woodpecker-ci.org/) for Debian, and as this library is a required dependency of Woodpecker I'll be packaging `httpsignatures-go` too. It would greatly help with the Debian packaging...

seabass-labrax

Can you expose some functions so I can use it on frameworks that don't use the standard http handler signature or `*http.request` object such as the Fiber framework?

pjebs

Implement rsa-sha1/rsa-sha256/ecdsa-sha256 algorithms

4

This supersedes my [original PR](https://github.com/99designs/httpsignatures-go/pull/11) that only implemented the rsa-* algorithms, and adds support for ecdsa-sha256 as well. **Notes for reviewer** * I think the ECDSA signature generation is correct,...

ejholmes

Hi, I'm @msporny, primary author of the HTTP Signatures specification at IETF for many years now. You've implemented some variation of that specification. I need your help to move that...

msporny

The 7th draft of the "Signing HTTP Messages" spec [recommends](https://tools.ietf.org/html/draft-cavage-http-signatures-07#appendix-C.2) the use of the `Host` header when calculating a signature. However, it looks like `Request` from `net/http` removes `Host` from...

v-yarotsky

Date is not a mandatory header

1

According to IETF specs `Date` is suggested but not mandatory: > 2.3. Signature String Construction > > In order to generate the string that is signed with a key, the...

tbarbugli