search

gs1 / EPCIS

Draft files being shared for EPCIS 2.0 development
Other
20 stars 7 forks source link

Webhook signature & minor modifications #404

Closed domguinard closed 2 years ago

domguinard commented 2 years ago

IUnsupportedMediaTypeException remove the I

lastNotifiedAt -

I've requested an additional field on a query subscription so that it can be conveyed the timestamp of the last successful notification made to the client, i.e. when the client was notified last time and it responded with 200 OK. The proposed field name for the subscription details would be lastNotifiedAt

Webhook auth: Client request: signatureToken GS1-Signature Also: specify HMAC and JWS as examples

Change location header examples, e.g. for for capture

Changing 404 to be NoSuchResourceException

jmcanterafonseca-iota commented 2 years ago

even though we agreed signatureToken on our last call, still wondering if it should be signatureKey which opens the door to a symmetric or asymmetric key.

mgh128 commented 2 years ago

I think signatureToken could also support both symmetric and asymmetric keys, since it could point to a JSON Web Signature (which uses the JSON Web Token structure/format) and can support signatures based on either symmetric or asymmetric keys.