From be44d4f19fd21fdbb7904e314c7fa470b01f6a75 Mon Sep 17 00:00:00 2001 From: Kevin Gill Date: Fri, 19 Oct 2018 21:36:45 +0100 Subject: [PATCH] Support https://tools.ietf.org/html/draft-cavage-http-signatures-08#section-4, which uses a Signature header instead of Authorization header. --- requests_http_signature/__init__.py | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/requests_http_signature/__init__.py b/requests_http_signature/__init__.py index 4786131..27ab7a9 100644 --- a/requests_http_signature/__init__.py +++ b/requests_http_signature/__init__.py @@ -121,3 +121,25 @@ class HTTPSignatureAuth(requests.auth.AuthBase): sts = self.get_string_to_sign(request, headers) key = key_resolver(key_id=sig_struct["keyId"], algorithm=sig_struct["algorithm"]) Crypto(sig_struct["algorithm"]).verify(sig, sts, key) + +class HTTPSignatureHeaderAuth(HTTPSignatureAuth): + """ + https://tools.ietf.org/html/draft-cavage-http-signatures-08#section-4 + + Using "Signature" header instead of "Authorization" header. + """ + + def __call__(self, request): + self.add_date(request) + self.add_digest(request) + raw_sig = Crypto(self.algorithm).sign(string_to_sign=self.get_string_to_sign(request, self.headers), + key=self.key, + passphrase=self.passphrase) + sig = base64.b64encode(raw_sig).decode() + sig_struct = [("keyId", self.key_id), + ("algorithm", self.algorithm), + ("headers", " ".join(self.headers)), + ("signature", sig)] + request.headers["Signature"] = ",".join('{}="{}"'.format(k, v) for k, v in sig_struct) + return request +