verify

Verify an RFC 9421 HTTP Message Signature

Verify an RFC 9421-signed HTTP request against an Ed25519 public key.

Checks the Ed25519 signature over the reconstructed signing base and (optionally) verifies the Content-Digest header against the request body.

post/verify/rfc9421

Request

  • Base URL: https://api.algovoi.co.uk (the document declares no server; this is the origin it was published from)
  • URL: https://api.algovoi.co.uk/verify/rfc9421
  • Auth: none declared

Request body

methodstring required

HTTP method (e.g. POST)

authoritystring required

HTTP authority (host[:port])

pathstring required

Request path + query (e.g. /checkout?token=abc)

schemestring

URI scheme

headersobject required

All HTTP headers as a flat dict (lowercase keys). Must include 'signature-input' and 'signature'. Include 'content-digest' when require_content_digest=true.

body_b64string

Request body, base64-encoded. Empty string for requests with no body.

public_key_hexstring required

Ed25519 public key as 64-char hex (32 bytes). Must match the keyid used when signing.

require_content_digestboolean

If true, verify Content-Digest header against the body. Set false for GET/HEAD requests.

modestring

'rfc9421' (default) for RFC 9421 §2.5 compliant signing base. 'algovoi-v0' for legacy format used in rfc9421_proxy_chain_v0 conformance vectors.

Response

Successful Response

validboolean required
signature_validboolean required
content_digest_validboolean required
signing_basestring required
covered_componentsstring[] required
parametersobject required
labelstring required
errorsstring[] required
spec_refstring required
digest_spec_refstring required

Changes

No recorded changes to this operation across all 1 revision of this API.