node-hpka v1.0.0

• Exposing res objects in sessionAgreement and sessionRevocation handlers
• Since I want to do proper semantic versioning, the major version number has been bumped because that change is not backwards-compatible

node-hpka v0.4.1

Exposing usernameBuffer and sessionIdBuffer in both HPKAReq and SessionReq

node-hpka v0.4.0

• Adding HPKA sessions support
• Adding much cleaner and thorough unit testing

node-hpka v0.3.12

Fixing timestamp encoding issues.

NOTE: Please report backwards-compatibility issues encountered with this version, just as you would report any other type of issue.

node-hpka v0.3.11

Removing the condition added in v0.3.10. (Sorry)

node-hpka v0.3.10

Updating the server code to the latest version of the draft spec. Namely, adding a 30 seconds "ahead of time signature" window.

node-hpka v0.3.9

Fixing a conflict of host vs hostname when making an HPKA-signed request. The bug was triggered when making a request when hostname differs from a user-imposed Host header value.

node-hpka v0.3.8

Making the usage of request bodies easier. Content-Length is automatically set. JS objects can now be passed as bodies in order to make a request with a JSON body (Content-Type is set automatically in this case, as it was already the case with a FormData object).

node-hpka v0.3.7

• Taking HTTP verbs into account, as now described by the current draft of the protocol.
• Exposing the verifySignature(Buffer reqBlob, Buffer signature, String reqUrl, String httpVerb, Function callback(isSignatureValid, reqUser, hpkaReq)) method that allow out-of-context authenticators validation

NOTE: Must use same version both on client and server side

node-hpka v0.3.6

Making req.hpkareq and req.username available to default handlers after a user registration or key rotation where next() has been called in the end