Sign requests with RFC 9421 HTTP Message Signatures - #39

Open

thomas-waite wants to merge 10 commits into

rfc9421-signatures

Commits on Aug 19, 2026

chore: fix test runs on fresh checkouts

thomas-waite
and
claude
committed
58b2ee1
feat(core): replace bare body signature with RFC 9421 message signatures

thomas-waite
and
claude
committed
bdfaab7
feat(x402): adopt RFC 9421 signature headers and restore nonce replay protection

thomas-waite
and
claude
committed
c712290
feat(cli): prove signs method, URL, and body via RFC 9421 headers

thomas-waite
and
claude
committed
69697c7

Commits on Aug 20, 2026

docs: describe the RFC 9421 signing flow across docs and skills

thomas-waite
and
claude
committed
7513eae

Commits on Aug 21, 2026

feat!: drop the nonce from the signature profile

thomas-waite
and
claude
committed
52265a9
fix(x402): match pending discounts case-insensitively and checksum surfaced addresses

thomas-waite
and
claude
committed
335dc16
fix(core): reject non-token HTTP methods in the signature base

thomas-waite
and
claude
committed
8d763ee
fix(x402): skip body normalization for bodyless requests

thomas-waite
and
claude
committed
4da9659
fix(core): tolerate 30 seconds of client clock skew

thomas-waite
and
claude
committed
d8b5eb2