<![CDATA[I've started working on generating RFC9421 compatible HTTP-Signatures in #GoActivityPub about a week and a half ago, but it felt more like a month.]]>I've started working on generating RFC9421 compatible HTTP-Signatures in about a week and a half ago, but it felt more like a month.

Writing tests for the client module took the bulk of this time and it was a proper slog. We did manage to increase code coverage from under 20% to 80% plus.

This makes it a bit harder to migrate to a new API when the future version 1 of the library will be tagged, but the changes I have planned shouldn't be insurmountable.

Now I just need to implement the verification, and I'll be done with what is a very large milestone for the library.

]]>https://board.circlewithadot.net/topic/9272ccdd-4070-45a3-b609-594d6a750592/i-ve-started-working-on-generating-rfc9421-compatible-http-signatures-in-goactivitypub-about-a-week-and-a-half-ago-but-it-felt-more-like-a-month.RSS for NodeThu, 30 Apr 2026 04:42:20 GMTFri, 17 Apr 2026 11:31:12 GMT60<![CDATA[Reply to I've started working on generating RFC9421 compatible HTTP-Signatures in #GoActivityPub about a week and a half ago, but it felt more like a month. on Mon, 27 Apr 2026 20:04:23 GMT]]>@fentiger thanx, I'll check it out. This one had one large annoyance in the fact that they split all functionality in a thousand little packages...

]]>https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116478460819411772https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116478460819411772Mon, 27 Apr 2026 20:04:23 GMT<![CDATA[Reply to I've started working on generating RFC9421 compatible HTTP-Signatures in #GoActivityPub about a week and a half ago, but it felt more like a month. on Mon, 27 Apr 2026 17:38:49 GMT]]>@marius That library doesn't look like it's seen much activity recently.

I ended up using this one and I've found the maintainer to be very responsive.]]>https://board.circlewithadot.net/post/https://zotum.net/item/265fab64-1cb5-47cc-bbc9-9fef0cedfb11https://board.circlewithadot.net/post/https://zotum.net/item/265fab64-1cb5-47cc-bbc9-9fef0cedfb11Mon, 27 Apr 2026 17:38:49 GMT<![CDATA[Reply to I've started working on generating RFC9421 compatible HTTP-Signatures in #GoActivityPub about a week and a half ago, but it felt more like a month. on Mon, 27 Apr 2026 15:48:56 GMT]]>The work is done, huzzah!! 🥳

With the coverage increased to +85% and with a couple of pending improvements to the common-fate/httpsig library. Until those land, I'm using a forked version.

The auth module has transformed during this work to only have logic related to extracting authorized actors from either OAuth2 and HTTP-Signature headers (both the widely used draft and the new RFC9421 version).

This makes me confident that the convergence of the library's modules that I'm planning for v1 is actually a good idea.

]]>https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116477456341746526https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116477456341746526Mon, 27 Apr 2026 15:48:56 GMT<![CDATA[Reply to I've started working on generating RFC9421 compatible HTTP-Signatures in #GoActivityPub about a week and a half ago, but it felt more like a month. on Fri, 17 Apr 2026 12:27:26 GMT]]>As always, as I start the work for the verifier in the auth module, the coverage is quite low:

Link Preview Image
Coveralls.io - Test Coverage History and Statistics

This repository has 82.96% test coverage and 18 builds.

favicon

Coveralls.io (coveralls.io)

]]>https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116420040881814636https://board.circlewithadot.net/post/https://metalhead.club/users/mariusor/statuses/116420040881814636Fri, 17 Apr 2026 12:27:26 GMT