HTTP Digest Headers

Based on the draft specification for HTTP Digest Headers, this library facilitates the creation and verification of a Content-Digest header.

This is useful when verifying the content of a message body as part of signature verification.

Specifications

• HTTPBIS-DIGEST-HEADERS

The library currently only supports sha-256 and sha-512 algorithms

Examples

Creating a digest header

1import { createContentDigestHeader } from 'httpbis-digest-headers';
2request.setHeader('Content-Digest', createContentDigestHeader(messageBody, ['sha-256']))

Verify a digest header

1import { verifyContentDigest } from 'httpbis-digest-headers';
2const server = http.createServer(async (req, res) => {
3  const buffers = [];
4
5  for await (const chunk of req) {
6    buffers.push(chunk);
7  }
8  const verified = verifyContentDigest(Buffer.concat(buffers), req.getHeader('Content-Digest'))
9});```