acquia / http-hmac-spec

An HMAC message format for securing RESTful web APIs.
81 stars 14 forks source link

Add fixture for query url parameters to not be sorted by the libraries #26

Open nickveenhof opened 7 years ago

nickveenhof commented 7 years ago

We had an issue where some libraries such as http-hmac-go were unwillingly ordering the query parameters

Test:

localhost/endpoint?zkey=bla&akey=bla

The signature should use localhost/endpoint?zkey=bla&akey=bla and not localhost/endpoint?akey=bla&zkey=bla