Skip to main content

check_response_profile

Function check_response_profile 

Source
pub fn check_response_profile(
    params: &SignatureParams,
    response_signing_required: bool,
) -> Result<(), HttpSigError>
Expand description

Errors unless params satisfies the WIMSE profile for a response signature (Section 3 of draft-ietf-wimse-http-signature).

created, expires, nonce and tag are mandatory on every message, and keyid and alg are forbidden on every message, exactly as for a request. The difference is at the ends: wimse-aud names the service a request is for and has no meaning coming back, while wimse-req-nonce carries the requesting client’s nonce and is required when that client asked for a signed response.

§Errors

Returns HttpSigError::MissingParameter, HttpSigError::ForbiddenParameter or HttpSigError::WrongTag for the first rule the parameters break.