Repository navigation

feat: RFC 9421 HTTP Message Signatures + shared crypto layer + JWT processor - #166

Merged

kawasima merged 18 commits into

developfrom

feat/rfc9421-http-message-signatures

Apr 5, 2026

Merged

feat: RFC 9421 HTTP Message Signatures + shared crypto layer + JWT processor#166
kawasima merged 18 commits into
developfrom
feat/rfc9421-http-message-signatures

Commits on Apr 5, 2026
- feat(crypto): add enkan.security.crypto — shared cryptographic signing/verification layer
  
  kawasima
  and
  claude
  committed
  1bb8af4
- feat(jwt): add enkan.web.jwt — stateless JWT signing and verification
  
  kawasima
  and
  claude
  committed
  ef153d2
- feat(rfc9421): add SignatureAlgorithm, SignatureComponent, and SignatureBaseBuilder
  
  kawasima
  and
  claude
  committed
  e03e7ad
- feat(rfc9421): add HttpMessageSignatures sign/verify utility
  
  kawasima
  and
  claude
  committed
  b2b6389
- feat(rfc9421): add SignatureVerificationMiddleware with Accept-Signature negotiation
  
  kawasima
  and
  claude
  committed
  ad35de7
- fix: address review findings — security, correctness, and test coverage
  
  kawasima
  and
  claude
  committed
  05fde4e
- fix(security): harden DER INTEGER length parsing and JWT number parsing
  
  kawasima
  and
  claude
  committed
  84bc8d8
- fix: address code review findings from PR #166
  
  kawasima
  and
  claude
  committed
  6c51822
- fix: replace IllegalArgumentException with MisconfigurationException for dev misconfiguration
  
  kawasima
  and
  claude
  committed
  d38fc6e
- fix: pre-emptive hardening of design, performance, and security issues
  
  kawasima
  and
  claude
  committed
  143dad0
- fix: second review pass — RFC 9421 multi-value query params, JWT escape sequences, edge-case hardening
  
  kawasima
  and
  claude
  committed
  25140e4
- fix: RFC 9421 compliance — header name case-folding and expires/created ordering
  
  kawasima
  and
  claude
  committed
  2365d48
- fix: RFC 9421 §2.2.8 — query-param multi-value as separate lines, percent-decode without + expansion
  
  kawasima
  and
  claude
  committed
  3ab2e39
- fix: ECDSA key type validation in JcaSigner, prefer Host header for @authority
  
  kawasima
  and
  claude
  committed
  035ca78
- fix: address Copilot PR review comments
  
  kawasima
  and
  claude
  committed
  ba509cb
- fix(signature): address second-round Copilot review findings
  
  kawasima
  and
  claude
  committed
  fecacc7
- fix(crypto,signature): address remaining review findings
  
  kawasima
  and
  claude
  committed
  0baefd4
- test(signature,jwt): add final edge-case coverage
  
  kawasima
  and
  claude
  committed
  da2e507

Commits

Commits on Apr 5, 2026