http-sig: Update http message signatures for OCM after spec review - #62543

Merged

CarlSchwan merged 8 commits into

kano-update-httpsig

Aug 10, 2026

Commits on Aug 9, 2026

feat(ocm): align RFC 9421 http-sig with updated OCM spec
mickenordin
committed
410d8c1
fix(ocm): correct confirmRequestOrigin @since to 35.0.0
mickenordin
committed
5c0c6fd
fix(ocm): allow plain-http jwksUri for http-only peers
mickenordin
committed
f602a7a
fix(ocm): derive JWKS signing keyId per request, not from a frozen host
mickenordin
committed
2abd52c
fix(ocm): treat RFC 9421 keyid as opaque, verify by sender origin
mickenordin
committed
dae8a36
chore(cloud_federation_api): move jwks
mickenordin
committed
f0edd14
chore(http-sig): Simplify implementation
mickenordin
committed
41cc0a4
test(OCM): Throw IdentityNotFoundException
mickenordin
committed
3dcf085