99designs / http-signatures-php

Sign and verify PSR-7 HTTP messages in PHP.
MIT License
44 stars 32 forks source link

Cannot omit "headers" as required by specification #43

Closed liamdennehy closed 5 years ago

liamdennehy commented 5 years ago

Specification allows messages to omit the "headers" signature parameter, requiring signers and validators to use the implicit value date instead. Presently this library cannot handle this.

Implemented in PR #42

liamdennehy commented 5 years ago

See https://github.com/liamdennehy/http-signatures-php/tree/reference-tests for Headers Ommission #42 and RSA Support #35 combine to pass the Signing HTTP Messages Reference Tests.

Will submit a properly rebased PR once the two dependent PRs are accepted.

liamdennehy commented 5 years ago

Closing issue due to inactivity.