HTTP Signature Header _(http-signature-header)_


> A JavaScript library for creating and verifying HTTP Signature headers

Table of Contents

- Background
- Install
- Usage
- Contribute
- Commercial Support
- License

Background

HTTP Signatures IETF draft

Install

To install locally (for development):

``
git clone https://github.com/digitalbazaar/http-signature-header.git
cd http-signature-header
npm install
`

Usage

`js
import {
createAuthzHeader, createSignatureString
} from '@digitalbazaar/http-signature-header';

const requestOptions = {
url,
method: 'POST',
headers
}
const includeHeaders = ['expires', 'host', '(request-target)'];
const plaintext = createSignatureString({includeHeaders, requestOptions});

const data = new TextEncoder().encode(plaintext);
const signature = base64url.encode(await signer.sign({data}));

const Authorization = createAuthzHeader({
includeHeaders,
keyId: signer.id,
signature
});
``

Contribute

Please follow the existing code style.

PRs accepted.

If editing the Readme, please conform to the
standard-readme specification.

Commercial Support

Commercial support for this library is available upon request from
Digital Bazaar: support@digitalbazaar.com

License

BSD-3-Clause © Digital Bazaar