https://github.com/kiranandcode/http_sig_ocaml

HTTP Signatures for OCaml
https://github.com/kiranandcode/http_sig_ocaml

http http-signature ocaml ocaml-library

Last synced: 26 days ago
JSON representation

HTTP Signatures for OCaml

• Host: GitHub
• URL: https://github.com/kiranandcode/http_sig_ocaml
• Owner: kiranandcode
• License: lgpl-3.0
• Created: 2022-09-23T13:15:56.000Z (about 2 years ago)
• Default Branch: master
• Last Pushed: 2022-09-23T13:16:36.000Z (about 2 years ago)
• Last Synced: 2024-07-20T19:13:01.430Z (4 months ago)
• Topics: http, http-signature, ocaml, ocaml-library
• Language: OCaml
• Homepage:
• Size: 7.81 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: readme.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Http_sig - Http Signature Signing Scheme for OCaml

This library implements the [Http_sig

RFC](https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures-12)

(or a subset therein).

## Examples

 

- For validating incoming requests:

```ocaml

let resolve_public_key url =

  let+ (_, body) = activity_req (Uri.of_string url) in

  let+ pub_key = Cohttp_lwt.Body.to_string body in

  let pub_key =

    pub_key

    |> Cstruct.of_string

    |> X509.Public_key.decode_pem

    |> Result.map_err (fun (`Msg err) -> err) in

  Lwt.return pub_key

let handle_post req =

  let+ valid_request =

    Http_sig.verify_request

      ~resolve_public_key req in

  if not valid 

  then Dream.respond ~status:`Bad_Request ""

  else Dream.respond "OK"

```

- For sending requests:

```ocaml

let req_post ~headers url body =

  let body = Cohttp_lwt.Body.of_string body in

  try

    Cohttp_lwt_unix.Client.post

      ~headers

      ~body

      url >> Result.return

  with exn ->

    Lwt.return (Result.of_exn exn)

let signed_post ~headers (key_id, priv_key) uri body_str =

  let current_time = Ptime_clock.now () in

  let headers =

    Http_sig.build_signed_headers

      ~current_time ~method_:"POST" ~body_str

      ~headers ~key_id ~priv_key ~uri

    |> Cohttp.Header.of_list in

  req_post ~headers uri body_str

```