http-signature-header

HTTP Signature Header (http-signature-header)

A JavaScript library for creating and verifying HTTP Signature headers

Table of Contents

• Background
• Install
• Usage
• Contribute
• Commercial Support
• License

Background

HTTP Signatures IETF draft

Install

To install locally (for development):

git clone https://github.com/digitalbazaar/http-signature-header.git
cd http-signature-header
npm install

Usage

const {createAuthzHeader, createSignatureString} = require('http-signature-header');

const requestOptions = {
  url,
  method: 'POST',
  headers
}
const includeHeaders = ['expires', 'host', '(request-target)'];
const plaintext = createSignatureString({includeHeaders, requestOptions});

const data = new TextEncoder().encode(plaintext);
const signature = base64url.encode(await signer.sign({data}));

const Authorization = createAuthzHeader({
  includeHeaders,
  keyId: signer.id,
  signature
});

Contribute

Please follow the existing code style.

PRs accepted.

If editing the Readme, please conform to the standard-readme specification.

Commercial Support

Commercial support for this library is available upon request from Digital Bazaar: [e-mail]

License

BSD-3-Clause © Digital Bazaar

Changelog

3.0.0 - 2022-01-11

Changed

• No changes, renaming mistake. See version 4.x.