Add keyPassphrase option to signer

[ashpieboop]

Fix #81

Allow requests to be signed with a private key that is protected with a passphrase.

[jasonbking]

Can you run 'make check' -- it looks like there's a couple of minor formatting errors -- can you fix this and update the PR?

[ashpieboop]

There you go, fixed those.

However it looks like my make check couldn't complete because of missing dependencies (I don't have json in my path?):

$ make check

deps/javascriptlint/build/install/jsl --nologo --nosummary --conf=tools/jsl.node.conf lib/parser.js lib/signer.js lib/index.js lib/utils.js lib/verify.js
/r/arisu/dev/node-http-signature/lib/parser.js
/r/arisu/dev/node-http-signature/lib/signer.js
/r/arisu/dev/node-http-signature/lib/index.js
/r/arisu/dev/node-http-signature/lib/utils.js
/r/arisu/dev/node-http-signature/lib/verify.js
deps/jsstyle/jsstyle -f tools/jsstyle.conf lib/parser.js lib/signer.js lib/index.js lib/utils.js lib/verify.js
/bin/sh: json: command not found
version is:
[ "`cat package.json | json version`" = "`grep '^## ' CHANGES.md | head -2 | tail -1 | awk '{print $2}'`" ]
/bin/sh: json: command not found
make: *** [Makefile:32: check-version] Error 1

[jasonbking]

It looks like the two issues are:

17:51:35  lib/signer.js: 108: line > 80 characters
17:51:35  lib/signer.js: 350: line > 80 characters

The json utility is:

json@10.0.0 | Proprietary | deps: none | versions: 16
a 'json' command for massaging and processing JSON on the command line
https://github.com/trentm/json#readme

keywords: json, jsontool, filter, command, shell

bin: json

dist
.tarball: https://registry.npmjs.org/json/-/json-10.0.0.tgz
.shasum: c49a939d4abc7067cc225419d5dd17ab7bf2f66c
.integrity: sha512-iK7tAZtpoghibjdB1ncCWykeBMmke3JThUe+rnkD4qkZaglOIQ70Pw7r5UJ4lyUT+7gnw7ehmmLUHDuhqzQD+g==
.unpackedSize: 122.1 kB

maintainers:
- trentm <trentm@gmail.com>

dist-tags:
latest: 10.0.0

published a week ago by trentm <trentm@gmail.com>

(i.e. npm install json).

[ashpieboop]

Thanks for the help; since it is used by a dev tool I'd add it to dev dependencies and also add the make check as a lint script in package.json (I can make the PR if you want).

Anyway, the make check fully passes and there are no other problems.

[NigelNec]

Hello everyone,

When I download this package, I tried in 2 different projects, with "npm i http-signature@latest" the code from this PR is not included, the file "signer.js" is only 450 lines instead of 483.

My package.json indicates version 1.3.4

Am I doing something wrong?

Thanks in Advance,
Nigel

[ashpieboop]

@NigelNec this package simply didn't get a release since this PR was merged (yet).

check the commit history

[NigelNec]

Understood, I'll download the zip file for now.
Thanks for the help

[jasonbking]

I'll get a release cut and updated on npm. It'll probably be tomorrow when that happens.