Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update X-Stamp docs #65

Merged
merged 3 commits into from
Nov 29, 2023
Merged

Update X-Stamp docs #65

merged 3 commits into from
Nov 29, 2023

Conversation

oliviathet
Copy link
Contributor

Noticed that #39 is stuck in a non-mergeable state. Closed that PR and added changes to this branch along with some fixes to Github links and wording.

Copy link

vercel bot commented Nov 29, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Nov 29, 2023 6:00pm

@oliviathet oliviathet changed the title Update X-Stamp Docs Update X-Stamp docs Nov 29, 2023
3. Create a JSON-encoded string with the appropriate properties depending on authenticator type:
- If using an API Key, make a JSON-encoded string with public key, signature, and signature scheme
- If using a WebAuthn Credential, make a JSON-encoded string with the authenticator data, client data, credential ID and signature
4. Base64url encode this string
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unfortunately this isn't consistent right now. Webauthn stamps aren't base64url encoded, but API key stamps are.

- If using an API Key, make a JSON-encoded string with public key, signature, and signature scheme
- If using a WebAuthn Credential, make a JSON-encoded string with the authenticator data, client data, credential ID and signature
4. Base64url encode this string
5. Add this string to your request as an X-Stamp header
Copy link
Contributor

@r-n-o r-n-o Nov 29, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should mention the difference in naming: webauthn stamp should be passed as X-Stamp-Webauthn header values, whereas API key stamps should be under X-Stamp.

Copy link
Contributor

@r-n-o r-n-o left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@oliviathet
Copy link
Contributor Author

lol @r-n-o that was fast! was just about to write a comment. thank you for all the helpful comments, helped w my own understanding too :)

@oliviathet oliviathet merged commit e95a810 into main Nov 29, 2023
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants