Skip to content

Please add support for HTTP Signature Auth #2421

Description

@penngrove

I understand HTTP Request Signature has been in IETF draft for years, but it is being used (and we are using it)

We are using https://github.com/joyent/node-http-signature on the server side to verify the signature and https://pypi.org/project/requests-http-signature/ on the client side to generate the signature (as an example). It would be nice to test our APIs in Insomnia using this authentication scheme, basically an Access Key ID and a Secret.

We are using HMAC-SHA256 but other algorithms are supported, see https://medium.com/@technospace/ensuring-message-integrity-with-http-signatures-86f121ac9823

There is a plugin available for Insomnia but it only supports RSA and not HMAC (as I can figure out): https://github.com/adnsio/insomnia-plugin-http-signature

I would like to see this authentication model supported in the Auth menu of Insomnia (which I love)

Ref: https://tools.ietf.org/html/draft-ietf-httpbis-message-signatures-00

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions