I understand HTTP Request Signature has been in IETF draft for years, but it is being used (and we are using it)
We are using https://github.com/joyent/node-http-signature on the server side to verify the signature and https://pypi.org/project/requests-http-signature/ on the client side to generate the signature (as an example). It would be nice to test our APIs in Insomnia using this authentication scheme, basically an Access Key ID and a Secret.
We are using HMAC-SHA256 but other algorithms are supported, see https://medium.com/@technospace/ensuring-message-integrity-with-http-signatures-86f121ac9823
There is a plugin available for Insomnia but it only supports RSA and not HMAC (as I can figure out): https://github.com/adnsio/insomnia-plugin-http-signature
I would like to see this authentication model supported in the Auth menu of Insomnia (which I love)
Ref: https://tools.ietf.org/html/draft-ietf-httpbis-message-signatures-00
I understand HTTP Request Signature has been in IETF draft for years, but it is being used (and we are using it)
We are using https://github.com/joyent/node-http-signature on the server side to verify the signature and https://pypi.org/project/requests-http-signature/ on the client side to generate the signature (as an example). It would be nice to test our APIs in Insomnia using this authentication scheme, basically an Access Key ID and a Secret.
We are using HMAC-SHA256 but other algorithms are supported, see https://medium.com/@technospace/ensuring-message-integrity-with-http-signatures-86f121ac9823
There is a plugin available for Insomnia but it only supports RSA and not HMAC (as I can figure out): https://github.com/adnsio/insomnia-plugin-http-signature
I would like to see this authentication model supported in the Auth menu of Insomnia (which I love)
Ref: https://tools.ietf.org/html/draft-ietf-httpbis-message-signatures-00