Replies: 1 comment
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I understand HTTP Request Signature has been in IETF draft for years, but it is being used (and we are using it)
We are using https://github.com/joyent/node-http-signature on the server side to verify the signature and https://pypi.org/project/requests-http-signature/ on the client side to generate the signature (as an example). It would be nice to test our APIs in Insomnia using this authentication scheme, basically an Access Key ID and a Secret.
We are using HMAC-SHA256 but other algorithms are supported, see https://medium.com/@technospace/ensuring-message-integrity-with-http-signatures-86f121ac9823
There is a plugin available for Insomnia but it only supports RSA and not HMAC (as I can figure out): https://github.com/adnsio/insomnia-plugin-http-signature
I would like to see this authentication model supported in the Auth menu of Insomnia (which I love)
Ref: https://tools.ietf.org/html/draft-ietf-httpbis-message-signatures-00
All reactions