apsig.draft

apsig.draft provide signer and verifier implementation of cavage-http-signatures. not compatible with RFC9421 implementation.

`Signer`

Signs an HTTP request with a digital signature.

Parameters:

Name	Type	Description	Default
`private_key`	`RSAPrivateKey`	The RSA private key used to sign the request.	required
`method`	`str`	The HTTP method (e.g., "GET", "POST").	required
`url`	`str`	The URL of the request.	required
`headers`	`dict`	A dictionary of HTTP headers that will be signed.	required
`key_id`	`str`	The key identifier to include in the signature header.	required
`body`	`bytes`	The request body. Defaults to an empty byte string.	`b''`
`signed_headers`	`list[str]`	A list of headers to include in the signature. Defaults to a secure set of headers.	`None`

Raises:

Type	Description
`ValueError`	If the signing process fails due to invalid parameters.

Parameters:

Name	Type	Description	Default
`public_pem`	`str`	The public key in PEM format used to verify the signature.	required
`method`	`str`	The HTTP method (e.g., "GET", "POST").	required
`url`	`str`	The URL of the request.	required
`headers`	`dict`	A dictionary of HTTP headers, including the signature and other relevant information.	required
`body`	`bytes`	The request body. Defaults to an empty byte string.	`None`
`clock_skew`	`int`	The number of seconds to allow for clock skew. Defaults to 300.	`300`

Verifies the digital signature of an HTTP request.

Parameters:

Name	Type	Description	Default
`raise_on_fail`	`bool`	Return error on failure. defaults to False.	`False`

Returns:

Raises:

Type	Description
`ValueError`	If the signature header is missing or if the algorithm is unsupported.