Skip to main content

check_request_profile

wimsey_httpsig

Function check_request_profile 

Source 
pub fn check_request_profile(
    params: &SignatureParams,
) -> Result<(), HttpSigError>
Expand description

Errors unless params satisfies the WIMSE profile for a request signature (Section 3 of draft-ietf-wimse-http-signature).

The profile makes created, expires, nonce and tag mandatory on every message and wimse-aud mandatory on requests, and forbids keyid and alg — the signing key travels in the WIT and the algorithm is pinned by that WIT’s cnf JWK, so repeating either here would only invite confusion.

§Errors

Returns HttpSigError::MissingParameter, HttpSigError::ForbiddenParameter or HttpSigError::WrongTag for the first rule the parameters break.