alexferl / zerohttp / 22806424706

94%

Build Type

push

github

Committed by web-flow

Commit Message

feat: add HMAC request signing middleware (#38)

* feat: add HMAC request signing middleware

Add HMAC-SHA256/384/512 request signing authentication for machine-to-machine
API security. Features include:

- Stateless authentication with replay protection via timestamps
- Key rotation support (multiple secrets per access key)
- Pre-signed URLs for temporary access without headers
- Configurable body size limits with UNSIGNED-PAYLOAD option
- RFC 9457 Problem Details error responses
- Client-side Signer for easy request signing

Signed-off-by: alexferl <me@alexferl.com>

* remove roadmap task file

Signed-off-by: alexferl <me@alexferl.com>

---------

Signed-off-by: alexferl <me@alexferl.com>

Coverage Stats

565 of 630 new or added lines in 2 files covered. (89.68%)

7 existing lines in 2 files now uncovered.

6125 of 6578 relevant lines covered (93.11%)

30.5 hits per line