Concepts

The same vocabulary is used by the .NET library, the mesh verifier and the TypeScript client. Reading this once means the other three sections are mostly about syntax.

Policies The unit of configuration — keys, algorithms, a replay window and schemes. Schemes Named header sets whose values are folded into the signature, and mapped to claims. Signing content Exactly what string gets hashed, in what order, and why a mismatch happens. Nonce and replay How a captured request is stopped from being sent twice, and which cache to use. Algorithms The two hashes in play — one for the body, one for the signature. Headers The headers a signed request carries, and how to consolidate them into one.