API Reference MessageSignatures v#0.1.0

Copy Markdown View Source

Modules

RFC 9421 HTTP Message Signatures: create and verify signatures over HTTP message components.

A covered-component identifier (RFC 9421 Section 2): an sf-string naming either a derived component or an HTTP field, plus optional parameters.

Error struct returned by all MessageSignatures functions.

Loads PEM-encoded keys into the {algorithm, key_material} pairs used by signing and verification operations.

Resolves verification keys by keyid.

A transport-agnostic HTTP message used for signing and verification.

Replay-protection hook for verification.

Verifies RFC 9421 signatures on incoming requests.

A Req request step that signs outgoing requests per RFC 9421.

Builds the RFC 9421 §2.5 signature base — the exact byte string that is signed and verified. This string is THE interop debugging artifact; MessageSignatures.signature_base/3 exposes it publicly.

The covered components + signature parameters of one signature: the value of a Signature-Input dictionary member, and (identically serialized) the value of the @signature-params base line.

A successful verification: which signature verified, under which key and algorithm, and what it covered.