matecsaj/ebay_rest

V2 - Replace custom HTTP signing code with RFC 9421 library

开放

#105 创建于 2026年1月29日

 (0 条评论) (0 个反应) (0 位负责人)Python (14 个派生)auto 404
enhancementgood first issue

仓库指标

星标
 (71 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

Motivation The project implements custom HTTP digital-signature logic in digital_signatures.py (canonicalization, signature headers, content digests). This is security-sensitive and unnecessary to maintain in-house.

Goal Refactor digital_signatures.py to use an RFC 9421-compliant HTTP message-signature library, while keeping eBay-specific signing requirements unchanged.

Recommended Technology requests-http-signature https://github.com/pyauth/requests-http-signature

Outcome Improved correctness, reduced security risk, and less non-core maintenance.

贡献者指南