Micke Nordin 410d8c144b feat(ocm): align RFC 9421 http-sig with updated OCM spec ...

Implements the changes from cs3org/OCM-API#391 and closes the
remaining gaps with the HTTP Message Signatures section:

- discover peer JWK Sets via the new `jwksUri` discovery field
  instead of the fixed /.well-known/jwks.json path; advertise
  our own jwksUri and require it (https) from peers advertising
  the `http-sig` capability
- stop covering the Date header; freshness is anchored on the
  `created` signature parameter
- mark and select the OCM signature by its integrity-protected
  tag="ocm" parameter instead of the dictionary label
- require the JWK `alg` parameter and derive the signature
  algorithm from it, accepting fully-specified RFC 9864 names
- reject signed requests whose verification key cannot be
  resolved instead of treating them as unsigned
- derive the signer origin from the spec-canonical fqdn#id
  keyid form

Signed-off-by: Micke Nordin <kano@sunet.se>

2026-08-09 16:21:06 +02:00

..

AlgorithmTest.php

feat(ocm): align RFC 9421 http-sig with updated OCM spec

2026-08-09 16:21:06 +02:00

ContentDigestTest.php

…

SignatureBaseTest.php

…