httpsigtest

server

go run main.go server

This will start up a server which uses the httpsig's NewVerifyMiddleware to verify incoming messages.

client

go run main.go client {method} where {method} is one of [get, post, patch, put, delete]

This will create a request and send it using an http.Client configured to use httpsig's NewSignTransport which will sign outgoing messages.

postman collection

This collection will send signed requests to the running server. It has tests that ensure the responses are 200 OK and contain the message "Your request has a valid signature!"

  1. Run the requests in the collection

image

  1. Ensure all tests pass:

image

Todo:

  1. write code in the collection's Pre-request Script to generate the sig headers