Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
krichprollsch
/
httpsign
Public
forked from
yaronf/httpsign
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Branch selector
expireAfter
User selector
All users
All time
Commit history
Commits on Mar 17, 2026
Add tests for SetExpiresAfter functionality
Show description for 9f23d36
krichprollsch
committed
9f23d36
View commit details
Copy full SHA for 9f23d36
Browse repository at this point
fix comment for SetExpiresAfter config
krichprollsch
committed
f5bf533
View commit details
Copy full SHA for f5bf533
Browse repository at this point
add expiresAfter to use a relative delay for expiration
krichprollsch
committed
27d9571
View commit details
Copy full SHA for 27d9571
Browse repository at this point
Commits on Mar 13, 2026
Merge review-wip: security review fixes
Show description for d8c4d2c
yaronf
and
claude
committed
d8c4d2c
View commit details
Copy full SHA for d8c4d2c
Browse repository at this point
Add CLAUDE.md, fuzz corpus, and update .gitignore
Show description for a0dea36
yaronf
and
claude
committed
a0dea36
View commit details
Copy full SHA for a0dea36
Browse repository at this point
Commits on Mar 12, 2026
Fix #15: safe type assertions, constant-time digest compare, nil message error
Show description for 174f152
yaronf
and
claude
committed
174f152
View commit details
Copy full SHA for 174f152
Browse repository at this point
Commits on Mar 11, 2026
Fix #14: add comment for RSA-PSS nil opts (backward compat)
Show description for 51c21c6
yaronf
committed
51c21c6
View commit details
Copy full SHA for 51c21c6
Browse repository at this point
Fix #13: validate trailer headers unconditionally
Show description for 8ad60bc
yaronf
committed
8ad60bc
View commit details
Copy full SHA for 8ad60bc
Browse repository at this point
Fix #12: Opaque verification errors to avoid leaking crypto internals
Show description for cb33937
yaronf
committed
cb33937
View commit details
Copy full SHA for cb33937
Browse repository at this point
Fix #11: parseRequest(nil) returns error instead of (nil, nil)
Show description for b32a0b4
yaronf
committed
b32a0b4
View commit details
Copy full SHA for b32a0b4
Browse repository at this point
Fix #10: hasHeader compares by header name only, ignoring params
Show description for 5b2d189
yaronf
committed
5b2d189
View commit details
Copy full SHA for 5b2d189
Browse repository at this point
Fix #8: Cap WrapHandler response body buffering via MaxBodySize
Show description for 9f7da13
yaronf
committed
9f7da13
View commit details
Copy full SHA for 9f7da13
Browse repository at this point
Fix #7: Document replay window as security parameter (doc only)
Show description for 633435f
yaronf
committed
633435f
View commit details
Copy full SHA for 633435f
Browse repository at this point
Fix #6: Add SetNonceValidator for replay prevention
Show description for 763f75d
yaronf
committed
763f75d
View commit details
Copy full SHA for 763f75d
Browse repository at this point
Fix #4: @scheme override for TLS-terminating reverse proxies
Show description for 50fba69
yaronf
committed
50fba69
View commit details
Copy full SHA for 50fba69
Browse repository at this point
Make keyid optional in RequestDetails/ResponseDetails (breaking change)
Show description for 2534cdb
yaronf
committed
2534cdb
View commit details
Copy full SHA for 2534cdb
Browse repository at this point
Fix unbounded body buffering (OOM/DoS)
Show description for a4a6d7e
yaronf
committed
a4a6d7e
View commit details
Copy full SHA for a4a6d7e
Browse repository at this point
Fix security issue: reject signatures missing keyid when SetKeyID is configured
Show description for b2d95b2
yaronf
committed
b2d95b2
View commit details
Copy full SHA for b2d95b2
Browse repository at this point
Commits on Mar 2, 2026
Fix RSA-PSS salt length to comply with RFC 9421
Show description for 4f9db58
yaronf
committed
4f9db58
View commit details
Copy full SHA for 4f9db58
Browse repository at this point
Commits on Oct 31, 2025
Update GitHub Actions to use Go 1.24
Show description for c2013d0
yaronf
committed
c2013d0
View commit details
Copy full SHA for c2013d0
Browse repository at this point
Fix go.mod for GitHub Actions compatibility
Show description for 0f8454a
yaronf
committed
0f8454a
View commit details
Copy full SHA for 0f8454a
Browse repository at this point
Minor lint fixes
Show description for 562a1d7
yaronf
committed
562a1d7
View commit details
Copy full SHA for 562a1d7
Browse repository at this point
Add jwx v3 support with backward compatibility
Show description for a023926
yaronf
committed
a023926
View commit details
Copy full SHA for a023926
Browse repository at this point
Commits on Oct 15, 2025
Fixed a panic in one of the tests
yaronf
committed
afa1d36
View commit details
Copy full SHA for afa1d36
Browse repository at this point
Remove redundant example code
yaronf
committed
f4e3f9c
View commit details
Copy full SHA for f4e3f9c
Browse repository at this point
Commits on Sep 7, 2025
Update README.md
yaronf
authored
10e4b1c
View commit details
Copy full SHA for 10e4b1c
Browse repository at this point
Commits on Jul 29, 2025
Merge pull request #14 from jvatic/verify
Show description for d569067
yaronf
authored
d569067
View commit details
Copy full SHA for d569067
Browse repository at this point
doc: add sentence about Message.Verify
jvatic
committed
d6f8d15
View commit details
Copy full SHA for d6f8d15
Browse repository at this point
Commits on Jul 23, 2025
feat: Add alternative verification API and expand MessageDetails
Show description for 41581d9
jvatic
committed
41581d9
View commit details
Copy full SHA for 41581d9
Browse repository at this point
chore: add .editorconfig to preserve trailing whitespace in test files
jvatic
committed
1dd53b0
View commit details
Copy full SHA for 1dd53b0
Browse repository at this point
Merge pull request #15 from shadow3x3x3/prevent-ed25519-panic
Show description for 412ad6f
yaronf
authored
412ad6f
View commit details
Copy full SHA for 412ad6f
Browse repository at this point
Fix panic when using ed25519 with a key that is not 64 bytes long
shadow3x3x3
committed
1ea0400
View commit details
Copy full SHA for 1ea0400
Browse repository at this point
Commits on Jul 18, 2025
Merge remote-tracking branch 'origin/main'
yaronf
committed
8f767a7
View commit details
Copy full SHA for 8f767a7
Browse repository at this point
Remove redundant test
yaronf
committed
f896756
View commit details
Copy full SHA for f896756
Browse repository at this point
Go suddenly complains about a missing final HTTP chunk
yaronf
committed
9fccc3b
View commit details
Copy full SHA for 9fccc3b
Browse repository at this point
Previous
Next
You can’t perform that action at this time.