An HTTP Signature is a way to sign HTTP messages in order to securely check integrity. It was brought forward by Joyent and is under active standardization.
Links:
Questions tagged [http-signature]
8 questions
3
votes
0 answers
In HTTP Signatures, should I use 'request-line' or 'target-request'?
I'm looking at the Readme.md for http-signing that is part of Joyent's node-http-signature module, and it says to use a "special name" to include the HTTP request target into the signature base:
To include the HTTP request line in the signature…
Cheeso
- 189,189
- 101
- 473
- 713
1
vote
1 answer
Add HTTP Signature and Digest headers with Spring Cloud Gateway
I would like to add some http headers to requests running through a Spring Cloud Gateway. The issue is that there seems to be methods for adding headers, and methods for doing something with the body, but no method that allows me to adjust the…
Vegard
- 1,802
- 2
- 21
- 34
1
vote
3 answers
REST based web services security based on HTTP signatures
I have been doing some research on using the right security mechanism for our REST web service. I was going through the documentation on HTTP Signatures -> https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures-12.
Based on this…
JayKrish
- 937
- 6
- 13
1
vote
2 answers
Converting Nodejs signature hashing function to Python
I'm trying to connect to an API that only has Nodejs doc, but I need to use Python.
The official doc states the hhtp request need to be signed like this and only gives this code:
var pk = ".... your private key ....";
var data = JSON.strigify( {some…
Breathe
- 714
- 5
- 21
0
votes
0 answers
Create an HMAC SHA256 hash for HTTP Signature in Swift
I'm fairly new to Swift and am currently working on HTTP signatures. I'm using the approach from this answer but the implementation doesn't work and gives me a different hash than I get from an alternate implementation I have in Python (which I'm…
tchaymore
- 3,728
- 13
- 55
- 86
0
votes
0 answers
How to create signature using the previously created key and secret for access rest-api
Currently, I am working on an API where only the access key and secret key are available. To access their API I need to generate the signature in algorithm="hmac-sha256.
They have some python code as an example like
response =…
Zakaria Shahed
- 2,589
- 6
- 23
- 52
0
votes
1 answer
Is it possible to use request-promise with httpSignature
According to the docs, it seems doable.
The request-promise docs says
Since request-promise wraps around request everything that works with
request also works with request-promise. Also check out the request
docs for more examples.
And the…
Parris Varney
- 11,320
- 12
- 47
- 76
0
votes
1 answer
Nodejs - superagent-http-signature - signature not sent
I'm using this site
var superagent = require('superagent');
var superagentHttpSignature = require('superagent-http-signature');
superagent
.get('http://project.dev/api/v3/project/tasks/get?task_id=1026')
.set('Accept', 'application/json')
…
Lysender
- 179
- 1
- 2
- 14