skills.rest
tomitribe
tomitribeOFFICIAL
Explore all skills by this author →
WebsiteGitHub

http-signatures

Automates signing and verification of HTTP messages using Java libraries.

2|Updated Feb 18, 2026
Search Tags:#authentication#verification#java#headers#signing#http-signatures
One-click install
npx skills add https://github.com/tomitribe/claude-plugins --skill http-signatures
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: http-signatures
Source: https://github.com/tomitribe/claude-plugins/tree/main/plugins/http-signatures/skills/http-signatures
Command: npx skills add https://github.com/tomitribe/claude-plugins --skill http-signatures

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Securely sign and verify HTTP requests to ensure integrity and authenticity when interacting with APIs that implement the HTTP Signatures standard. This library provides a ready-to-use Java implementation that reduces boilerplate, handles key management, and aligns with RFC-like signing guidance.

Core Features & Use Cases

  • Signing requests: build a signing string from selected headers and sign with a private key.
  • Verification: parse and verify incoming Authorization headers against known public keys.
  • Flexible algorithms: support HMAC, RSA, ECDSA, and DSA choices and timing checks for created/expires fields.
  • Use Case: integrate with a microservice that signs outgoing requests and validates responses in a secure service mesh.

Quick Start

Sign a sample HTTP request using a test private key and verify the resulting Authorization header.

Frequently Asked Questions about http-signatures

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sign HTTP requests in Java to secure API communications?▼

You can sign HTTP requests in Java by building a signing string from selected headers and applying a private key. This library automates that process, managing key IDs, algorithms, and header creation to ensure request integrity and authenticity.

How does HTTP signature verification work for incoming Authorization headers?▼

HTTP signature verification validates incoming Authorization headers against known public keys. This library automates parsing and verification, checking key IDs, algorithms, and created/expires time fields to ensure request authenticity.

Can I use HMAC and RSA algorithms for HTTP message signing?▼

Yes, you can use HMAC, RSA, ECDSA, and DSA algorithms for HTTP message signing. This library provides flexible algorithm support and includes timing checks for created and expires fields to ensure secure API communications.

What is the best way to manage keyId and headers when signing HTTP messages?▼

The best way to manage keyId and headers when signing HTTP messages is to use an automated library that handles these fields. This Skill ensures correct handling of key IDs, algorithms, and headers with robust error reporting for API communications.

Does Java HTTP signatures support created and expires timing checks?▼

Yes, Java HTTP signatures support created and expires timing checks. This library applies these checks during verification to validate the time fields, ensuring signed requests are processed securely within their valid time window.

Related Skills

Explore More Software Engineering Skills→
davidrrowleydavidrrowley

azure-security-keyvault-keys-java

Manage cryptographic keys and perform operations in Azure Key Vault with Java.

Community
Intermediate
hoangnh2412hoangnh2412
12

authentication-dotnet-api-key

Implement custom API Key authentication for ASP.NET Core backends.

Community
Intermediate
gursheyssgursheyss

convex-http-actions

Implement HTTP routing, authentication, CORS, and webhook signature verification in Convex actions.

Community
Advanced
Nir-BhayNir-Bhay
19

api-authentication

Provide code examples for OAuth 2.0, JWT, and API key authentication.

Community
Advanced