Struct HmacSigner 

pub struct HmacSigner;

HMAC-SHA256 API signer.

Sorts parameters in lexicographic order, joins them into a query string, and then signs the result with HMAC-SHA256.

Security notes (v4.8.0 fix for H-1 parameter smuggling)

• Both key and value are RFC 3986 percent-encoded before being joined, eliminating the canonical-string ambiguity between {a:1,b:2} and {a:"1&b=2"} (parameter smuggling).
• The caller must include a timestamp/random nonce as one of the signed parameters and verify the time window on the server side; otherwise signed requests can still be replayed.

Implementations

impl HmacSigner

pub fn new() -> Self

Trait Implementations

impl ApiSigner for HmacSigner

fn sign(&self, params: &HashMap<String, String>, secret: &str) -> String

fn verify( &self, params: &HashMap<String, String>, secret: &str, signature: &str, ) -> bool

impl Default for HmacSigner

fn default() -> Self

Returns the “default value” for a type.