Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to version 04 of Signing HTTP Messages #51

Open
bblfish opened this issue Mar 21, 2021 · 6 comments
Open

Update to version 04 of Signing HTTP Messages #51

bblfish opened this issue Mar 21, 2021 · 6 comments

Comments

@bblfish
Copy link

bblfish commented Mar 21, 2021

A new version of the spec came out last week Signing HTTP Messages v.02. It comes with a Diff from the previous version.

Btw. Since Authentication is not part of the IETF work, I have been working on how to integrate it back in to the Solid Project. Here is a very early spec which I worked from memory of a previous implementation. I was thinking of using your library to test out these ideas. Also: Is there a forum where people are discussing authentication with HTTP Sig?

@bblfish bblfish changed the title Update to version 02 of Signing HTTP Messages Update to version 04 of Signing HTTP Messages Apr 28, 2021
@bblfish
Copy link
Author

bblfish commented Apr 28, 2021

I have implemented RFC8941 on which the new Signing HTTP Messages depends, and then implemented Signing HTTP Messages on top of that.

Since Scala compiles to Java this could be taken out into its own project and just like Akka one could develop an API that allows Java developers to work nicely with it too. One could then also compile to JS and do the same there.

@ghilainm
Copy link

ghilainm commented Oct 4, 2021

By the way there is now a version 06 which is out :). Do you plan to migrate to that one to?

@bblfish
Copy link
Author

bblfish commented Oct 4, 2021

Ah, thanks for letting me know. I am just rewriting some libraries for Scala(-JS) 3 and then I can build a client version to go with the server one. So I want to do that this month, which will also get me to update the libraries. Contact me directly if you have a special need.

@bblfish
Copy link
Author

bblfish commented Dec 13, 2021

I extracted the httpSig code I wrote earlier this year, to a new repository /bblfish/httpSig which already has 2 packages but I think it will contain a handful more so as to make the pieces re-useable.

@bblfish
Copy link
Author

bblfish commented Jan 17, 2022

I now have the tests working for Signing Http Messages 07 having implemented most of it.
The implementation is available in the httpSig repo.
Currently it works with JVM based Akka.
I going to try to get it to work for http4s next so I can use it in the the browser with JS - and it could also be made to work on nodejs.

My EU finding is coming to an end, so if anyone has real needs for other implementations this is the best time to contact me.

@robelcik
Copy link

robelcik commented Aug 1, 2022

Hello.
Here is a Java version, currently implementing draft 11. Enjoy, 😃
https://github.com/Visma-AutoPay/http-signatures

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants