Replies: 1 comment
-
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I understand HTTP Request Signature has been in IETF draft for years, but it is being used (and we are using it)
We are using https://github.com/joyent/node-http-signature on the server side to verify the signature and https://pypi.org/project/requests-http-signature/ on the client side to generate the signature (as an example). It would be nice to test our APIs in Insomnia using this authentication scheme, basically an Access Key ID and a Secret.
We are using HMAC-SHA256 but other algorithms are supported, see https://medium.com/@technospace/ensuring-message-integrity-with-http-signatures-86f121ac9823
There is a plugin available for Insomnia but it only supports RSA and not HMAC (as I can figure out): https://github.com/adnsio/insomnia-plugin-http-signature
I would like to see this authentication model supported in the Auth menu of Insomnia (which I love)
Ref: https://tools.ietf.org/html/draft-ietf-httpbis-message-signatures-00
Beta Was this translation helpful? Give feedback.
All reactions