Changelog

Copy Markdown View Source

v0.1.0 (2026-07-22)

Added

  • RFC 9421 HTTP Message Signatures for request and response message components, including strict signature-base canonicalization, signing, verification, key-resolution, nonce-checking, and optional Req and Plug integrations.
  • Support for hmac-sha256, ed25519, ecdsa-p256-sha256, ecdsa-p384-sha384, rsa-pss-sha512, and rsa-v1_5-sha256.
  • All RFC 9421 Appendix B vectors asserted byte-exact on signature-base construction; B.2.5/B.2.6 byte-exact on signing.
  • A Python differential check against pyauth/http-message-signatures 0.5.0 produced 50/50 HMAC-SHA256 agreement across varied methods, component subsets, paths, and queries.