Remove Python 3.8 and 3.9 from PyPI metadata
- Multiple signature support (#22)
- Drop Python 3.9 support
- Remove extra ? in get_request_target (#19)
- Vendor http_sfv
- Package is stable
- fix: convert url to string in HTTPSignatureComponentResolver constructor (#18)
- Switch to trusted publishing
- [http-message-signatures-add] Add support for ‘tag’ signature parameter (#17)
- Add max_clock_skew to HTTPMessageVerifier (#11)
- Documentation and test infrastructure improvements
- Fix call signature in RSA_V1_5_SHA256 algorithm
- Test improvements
- Relocate VerifyResult
- Fix casting bug
- Add type information
- Clean up algorithms namespace
- Use max-age=24h by default
- Validate created and expires params
- Support query parameter addressing
- Raise InvalidSignature in more code paths
- Return related request method
- Clarify that sign and verify work on both requests and responses
- Add body placeholder
- Return VerifyResult in verifier
- Organize exceptions
- Initial release.
- Begin http-message-signatures