search

w3c-ccg / http-signatures-test-suite

The HTTP Signatures test suite
Other
8 stars 3 forks source link

Don't provide 'headers` in 'verify' mode commandline #13

Open liamdennehy opened 5 years ago

liamdennehy commented 5 years ago

An implementation is expected to use the headers signature parameter of a received HTTP message to validate a message, so listing these headers in the commandline of the verify mode serves no purpose.

These should be removed so the implementation relies entirely on the provided message as required, including if the headers listed are not in the message (not-in-request invocation).

liamdennehy commented 5 years ago

@aljones15: Apologies for not editing the tests myself, I'm not confident enough in node or my understanding of this suite to confidently propose changes.