Skip to content

Enforce SHA-384 signature generation#401

Open
tim-kos wants to merge 1 commit intomainfrom
fix/enforce-sha384-signatures
Open

Enforce SHA-384 signature generation#401
tim-kos wants to merge 1 commit intomainfrom
fix/enforce-sha384-signatures

Conversation

@tim-kos
Copy link
Copy Markdown
Member

@tim-kos tim-kos commented Apr 27, 2026

Summary

  • enforce SHA-384 as the only signature algorithm in _calcSignature()
  • add a regression test to guarantee SHA-384 output even if extra args are passed
  • document in README that calcSignature() returns SHA-384 signatures

Why

API keys default to SHA-384, so allowing algorithm drift from SDK internals can cause avoidable auth failures in downstream integrations.

Fixes #400

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enforce SHA-384 signatures in Node SDK

1 participant