atl / py-http-signature Goto Github PK

this project is dead, development is happening on a fork: https://github.com/ahknight/httpsig

If you try a ssh agent authentication at it fails you get a misleading error: AttributeError: 'Signer' object has no attribute '_hash' instead of the SystemError no valid encryption which makes more sense. Adding self._hash = None below line 25 fixes the problem.

Development status is set to "Development Status :: 3 - Alpha", yet library/project has had no significant changes in ~3 years. Consider reclassification to one of the following:

Development Status :: 5 - Production/Stable
Development Status :: 6 - Mature
Development Status :: 7 - Inactive

Thank you.
-A

The code should be updated to work with the latest spec, as now used in the node-http-signature project [1], and being developed into a formal spec [2][3][4].

We need this for some PaySwarm work so I'm going to take a first pass at an update. It will break backwards compatibility. I'm unsure how to manage versioning without creating a mess.

[1] https://github.com/joyent/node-http-signature
[2] https://github.com/web-payments/payswarm.com/tree/master/specs/source/http-signatures
[3] https://payswarm.com/specs/source/http-signatures/
[4] https://datatracker.ietf.org/doc/draft-cavage-http-signatures/

There seem to be minor variants in pem files. It would be nice to know what is known working from the get go.