NIP-98: Authenticate an HTTP request

A signed kind 27235 event can bind an HTTP method, URL, timestamp and optional body digest to a request.

Implementation

Coax has tag extraction and a public request-field observer. The existing service and production relay advertise HTTP-auth capability.

Example

The existing observer compares public fixture fields. Matching fields are not authenticated HTTP access.

What remains

The demo compares supplied fields only. It does not verify an event, reserve replay IDs, authorize a request or create a session.

All implemented NIPs · Full write-up and source links