Home

HttpMessageSigning

A C# implementation of the "Authorization" scheme of the IETF Internet-Draft Signing HTTP Messages.

Motivation

When communicating over the Internet using the HTTP protocol, it can be desirable for a server or client to authenticate the sender of a particular message. It can also be desirable to ensure that the message was not tampered with during transit. The Signing HTTP Messages Internet-Draft describes a way for servers and clients to simultaneously add authentication and message integrity to HTTP messages by using a digital signature.

This repository is a C# implementation of that specification.

Quick start

Super-Duper-Happy-Paths

This page contains some Super-Duper-Happy-Paths.

NuGet packages

This page contains an index of the supported NuGet packages.

Signing

Signing requests

This page describes the configuration required to signing requests.

Verifying

Verifying signatures basics

This page describes the verify signatures basics.

Registering clients

This page describes how to add registered Clients.

Verifying signatures in an ASP.NET Core application

This page describes the configuration required to verify signatures in an ASP.NET Core application.

Verifying signatures in an OWIN application

This page describes the configuration required to verify signatures in an OWIN application.

Storage

Server-side storage

This page describes scenarios for server-side storage.

Deep dive

Supported cryptographic algorithms

This page describes the supported cryptographic algorithms.

Load-balanced environments

This page describes scenarios for configurations for load-balanced environments.

Contribute

Extensibility

This page describes the extensibility points.