http-signature / 1.1.1 last updated 6 months ago created on Jul 14th 2011

Install

npm install --save http-signature

Clone

git clone git@github.com:joyent/node-http-signature.git

dependencies show all 14

main	assert-plus	0.2.0	MIT
	sshpk	1.9.2	MIT
	jsprim	1.3.0	MIT

maintainers

arekinath

mcavage

pfmooney

versions 14 total

1.1.1	6 months ago	arekinath
1.1.0	8 months ago	arekinath
1.0.2	10 months ago	arekinath
1.0.1	10 months ago	arekinath
1.0.0	10 months ago	arekinath
0.11.0	a year ago	pfmooney
0.10.1	2 years ago	pfmooney
0.10.0	3 years ago	mcavage
0.9.11	3 years ago	mcavage
0.9.10	4 years ago	mcavage
0.9.9	4 years ago	mcavage
0.9.8	4 years ago	mcavage
0.9.7	5 years ago	mcavage
0.9.6	5 years ago	mcavage

177027 Downloads yesterday.

readme

node-http-signature

node-http-signature is a node.js library that has client and server components for Joyent's HTTP Signature Scheme.

Usage

Note the example below signs a request with the same key/cert used to start an HTTP server. This is almost certainly not what you actually want, but is just used to illustrate the API calls; you will need to provide your own key management in addition to this library.

Client

var fs = require('fs');
var https = require('https');
var httpSignature = require('http-signature');

var key = fs.readFileSync('./key.pem', 'ascii');

var options = {
  host: 'localhost',
  port: 8443,
  path: '/',
  method: 'GET',
  headers: {}
};

// Adds a 'Date' header in, signs it, and adds the
// 'Authorization' header in.
var req = https.request(options, function(res) {
  console.log(res.statusCode);
});


httpSignature.sign(req, {
  key: key,
  keyId: './cert.pem'
});

req.end();

Server

var fs = require('fs');
var https = require('https');
var httpSignature = require('http-signature');

var options = {
  key: fs.readFileSync('./key.pem'),
  cert: fs.readFileSync('./cert.pem')
};

https.createServer(options, function (req, res) {
  var rc = 200;
  var parsed = httpSignature.parseRequest(req);
  var pub = fs.readFileSync(parsed.keyId, 'ascii');
  if (!httpSignature.verifySignature(parsed, pub))
    rc = 401;

  res.writeHead(rc);
  res.end();
}).listen(8443);

Installation

1	npm install http-signature

License

MIT.

Bugs

See https://github.com/joyent/node-http-signature/issues.