w3c-ccg / http-signatures

Signing HTTP Messages specification
https://w3c-dvcg.github.io/http-signatures/
Other
34 stars 9 forks source link

Missing pseudo headers in draft version #11 examples #68

Open hrobache opened 5 years ago

hrobache commented 5 years ago

I have a doubt about § C.3. (All headers test)

The signing string is specified as this:

(request-target): post /foo?param=value&pet=dog host: example.com date: Sun, 05 Jan 2014 21:31:40 GMT content-type: application/json digest: SHA-256=X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE= content-length: 18

Aren't pseudo-headers (created) and (expires) missing? If yes, I guess the signature value should be fixed as well.