feat: RFC 9421 HTTP Message Signatures for gateway responses (PE-9049)#671

Merged

djwhitt merged 13 commits intodevelopfrom

PE-9049-httpsig

Apr 14, 2026

Commits on Apr 14, 2026

feat: add RFC 9421 HTTP Message Signatures for gateway responses (PE-9049)

vilenarios
authored and
djwhitt
committed
fix: address CodeRabbit review feedback on HTTPSIG implementation

vilenarios
authored and
djwhitt
committed
docs: add HTTPSIG to OpenAPI spec for /ar-io/info and data endpoints

vilenarios
authored and
djwhitt
committed
fix: address CodeRabbit review round 2 - security hardening and OpenAPI 206 headers

vilenarios
authored and
djwhitt
committed
fix: use linkSync for exclusive key file creation per CodeRabbit review

vilenarios
authored and
djwhitt
committed
fix: use unique temp file paths for attestation cache writes

vilenarios
authored and
djwhitt
committed
test: improve HTTPSIG test coverage - error paths, cache invalidation, edge cases

vilenarios
authored and
djwhitt
committed
fix: narrow Turbo fallback to module-not-found and require trigger header for signing

vilenarios
authored and
djwhitt
committed
docs: add field-level TSDoc to CachedAttestation per CodeRabbit review

vilenarios
authored and
djwhitt
committed
chore: remove dead HTTPSIG_ATTESTATION_CACHED export and clarify middleware docstring

vilenarios
authored and
djwhitt
committed
refactor: simplify HTTPSIG contexts and restore helper compatibility
djwhitt
committed
fix: encode HTTPSIG signature base as latin1 instead of ascii

djwhitt
and
claude
committed
chore: drop misleading devDep comment in tryTurboUpload

djwhitt
and
claude
committed