3 ms·

Is this similar to how Amazon's authentication works?

• mhio 5y ago
  AWS signing uses the same concept, but the secret/key is not used to create the "signature". AWS use a hash of the headers, payload and auth scope to create an equivalent string to the `Signature` header described in the draft. [0] AWS then sign that equivalent `Signature` string with your secret token plus some AWS specifics to create an `Authorization` header to add to the request. [0]: https://docs.aws.amazon.com/general/latest/gr/sigv4-create-string-to-sign.html https://docs.aws.amazon.com/general/latest/gr/sigv4-create-s...
• mooreds 5y ago
  That's my understanding. Here's a Twitter thread from Ben Kehoe (an AWS community hero) with more: https://twitter.com/ben11kehoe/status/1457765599040311298 https://twitter.com/ben11kehoe/status/1457765599040311298