Sign requests with RFC 9421 HTTP Message Signatures - #39

Merged

thomas-waite merged 13 commits into

rfc9421-signatures

Sep 1, 2026

Commits on Aug 24, 2026

chore: fix test runs on fresh checkouts

thomas-waite
and
claude
authored
6ae1e41
feat(core): replace bare body signature with RFC 9421 message signatures

thomas-waite
and
claude
authored
a23cb3f
feat(x402): adopt RFC 9421 signature headers and restore nonce replay protection

thomas-waite
and
claude
authored
6e8f677
feat(cli): prove signs method, URL, and body via RFC 9421 headers

thomas-waite
and
claude
authored
f8c0c72
docs: describe the RFC 9421 signing flow across docs and skills

thomas-waite
and
claude
authored
dc110d9
feat!: drop the nonce from the signature profile

thomas-waite
and
claude
authored
d1a2a2a
fix(x402): match pending discounts case-insensitively and checksum surfaced addresses

thomas-waite
and
claude
authored
e653d12
fix(core): reject non-token HTTP methods in the signature base

thomas-waite
and
claude
authored
f4e05dd
fix(x402): skip body normalization for bodyless requests

thomas-waite
and
claude
authored
7ed6c07
fix(core): tolerate 30 seconds of client clock skew

thomas-waite
and
claude
authored
78bce2b

Commits on Aug 27, 2026

Merge branch 'new-cli' into rfc9421-signatures

thomas-waite
and
claude
committed
6e67da6
fix(cli): normalize the prove method input to uppercase

thomas-waite
and
claude
committed
9de434d
docs(skills): cite RFC 9421 and RFC 9530 for the signature headers

thomas-waite
and
claude
committed
3c7ab59