top | item 46115326

(no title)

lillesvin | 3 months ago

Ah, my bad. Sorry.

But couldn't you then just make the call to an echo service (like HTTPbin) or simply dump the request when you send it?

discuss

order

kichik|3 months ago

The echo server will have no knowledge on how to construct the string to be signed.

lillesvin|3 months ago

But neither does the actual server. HMAC only verifies that the message is from whoever it claims to be from and that it is intact. It won't know what you intended the body of the request to look like.