Skip to content

🤖 AI: Fix V1 Outbound Header - #25

Open
ejinotti-mdsol wants to merge 5 commits into
masterfrom
fix/outbound-v1-authentication-header
Open

🤖 AI: Fix V1 Outbound Header#25
ejinotti-mdsol wants to merge 5 commits into
masterfrom
fix/outbound-v1-authentication-header

Conversation

@ejinotti-mdsol

Copy link
Copy Markdown
Contributor

What changed

  • Format outbound X-MWS-Authentication headers as
    MWS <app_uuid>:<signature> instead of sending the raw signature.
  • Add regression coverage that validates the header envelope and
    cryptographically verifies the generated signature.
  • Bump the crate version to 0.7.2.

Why

The malformed header caused v1 requests—and v1 fallback after a v2
verification failure—to be rejected by compliant MAuth receivers.

@ejinotti-mdsol

Copy link
Copy Markdown
Contributor Author

@ykitamura-mdsol fyi

Comment thread factbook.yaml Outdated
metadata:
json_schema: https://github.com/mdsol/platform-standards/tree/main/schemas/v1alpha1.schema.json
name: mauth-core
title: MAuth Core

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You may want to make a few updates to this factbook 🙂

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ha, thanks i just copy/pasted it!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants