Skip to content

feat(confidentialhttp): signer package#1989

Draft
wentzeld wants to merge 1 commit intomainfrom
signingExpansion
Draft

feat(confidentialhttp): signer package#1989
wentzeld wants to merge 1 commit intomainfrom
signingExpansion

Conversation

@wentzeld
Copy link
Copy Markdown
Contributor

Summary

  • New pkg/capabilities/v2/actions/confidentialhttp/signer package implementing all 8 signers.
  • Pure signing logic — never calls Vault DON. Secrets passed in as map[string]string.
  • OAuth2 token cache with singleflight + TTL safety margin.

Blocked by: chainlink-protos signingExpansion PR.

Remove-before-merge

  • replace directive in go.mod pointing at local chainlink-protos.

  New package pkg/capabilities/v2/actions/confidentialhttp/signer implementing
  Signer/Builder for ApiKey, Basic, Bearer, HMAC-SHA256, AWS SigV4, custom HMAC,
  OAuth2 client_credentials, and OAuth2 refresh_token. Includes per-request
  OAuth2 token cache with singleflight and TTL safety margin.

  Shared between the enclave app and cre-cli simulator. Signers never talk to
  Vault DON; secret values are injected by the caller as map[string]string.

  // remove before merge: replace directive pinning local chainlink-protos
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant