Client
JavaScript client
The hmac-manager npm package
signs requests so they verify against an HmacManager-protected API, and verifies
incoming ones so a Node service can be such an API itself — no .NET hop and no
mesh sidecar required. It builds the same
signing content the .NET library does.
Signing runs anywhere with WebCrypto. Verifying is server-side by nature: it needs the private key, and a browser bundle that has one has published it.
npm install hmac-managerShips ESM (dist/index.js), CommonJS (dist/index.cjs) and type declarations.
Install
Module formats, runtime requirements, and where the private key can safely live.
Signing requests
What gets signed, how bodies are hashed, and handling the result.
Verifying requests
Authenticating incoming requests in a Node service with the hmac-manager package.
Schemes
Folding header values into the signature, on both sides.
API
The full exported surface of the hmac-manager package.