Skip to content

@hellocoop/httpsig@1.3.0

Choose a tag to compare

@dickhardt dickhardt released this 12 Apr 01:17
· 3 commits to main since this release

What's New

Update httpsig to match draft-hardt-httpbis-signature-key-04:

  • Rename well-known to dwk in jwks_uri scheme (breaking: wellKnown property renamed to dwk in types)
  • Add Signature-Error header support with generateSignatureErrorHeader() and parseSignatureError() for all 8 spec error codes
  • Add Accept-Signature header support with generateAcceptSignatureHeader() and parseAcceptSignature() including the sigkey parameter (jkt, uri, x509)
  • Structured errors on verification failure: verify() now returns a signatureError field that can be used to build Signature-Error response headers