feat(signing): L1 signing — RFC 9421, KMS providers, JWKS, webhook verification by MichielDean · Pull Request #32 · adcontextprotocol/adcp-sdk-java

feat(signing): add core L1 signing SPI interfaces (AdcpUse, SigningContext, VerificationKeyResolver)

Lobsterdog Contributors

committed

feat(signing): add RFC 9421 canonicalizer, signer, verifier, and conformance tests

Lobsterdog Contributors

committed

feat(signing): add InProcessSigningProvider, WebhookSigner seam, and verification round-trip tests

Lobsterdog Contributors

committed

feat(signing): add KMS provider module skeletons and BouncyCastle stub

Lobsterdog Contributors

committed

docs(signing): add RFC 9421 canonicalizer design spec

Lobsterdog Contributors

committed

feat(signing): implement AWS KMS SigningProvider with lazy-init, tripwire, and ECDSA DER conversion

Lobsterdog Contributors

committed

feat(signing): implement GCP KMS SigningProvider with lazy-init, tripwire, and ECDSA DER conversion

Lobsterdog Contributors

committed

feat(signing): add JWKS VerificationKeyResolver with caching, SSRF validation, and brand.json walk

Lobsterdog Contributors

committed

feat(signing): add InMemoryReplayStore and InMemoryRevocationStore for nonce dedup and key revocation

Lobsterdog Contributors

committed

feat(signing): add pre-deploy KMS probe CLI command

Lobsterdog Contributors

committed

feat(signing): add SigningKeyGenerator for Ed25519/ES256/ES384 keypair generation

Lobsterdog Contributors

committed

feat(signing): add IDNA hostname canonicalization to Rfc9421Canonicalizer

Lobsterdog Contributors

committed

feat(signing): add key origin consistency check and eTLD+1 utility

Lobsterdog Contributors

committed

feat(signing): add JWS verification for revocation lists

Lobsterdog Contributors

committed

feat(signing): add CachingRevocationChecker with JWS verification

Lobsterdog Contributors

committed

feat(signing): add legacy HMAC-SHA256 webhook verification (deprecated)

Lobsterdog Contributors

committed

feat(signing): add Standard Webhooks v1 interop verifier

Lobsterdog Contributors

committed

feat(signing): add webhook challenge proof-of-control

Lobsterdog Contributors

committed

chore: add gitguardian config to ignore test key fixtures

Lobsterdog Contributors

committed

chore: add gitguardian config to ignore test key fixtures

Lobsterdog Contributors

committed

chore: remove gitguardian config (paths-ignore requires default branch presence)

Lobsterdog Contributors

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(signing): L1 signing — RFC 9421, KMS providers, JWKS, webhook verification#32

feat(signing): L1 signing — RFC 9421, KMS providers, JWKS, webhook verification#32
MichielDean wants to merge 21 commits into
mainfrom
feat/l1-signing-track4

Commits on Jun 17, 2026

feat(signing): add core L1 signing SPI interfaces (AdcpUse, SigningContext, VerificationKeyResolver)

feat(signing): add RFC 9421 canonicalizer, signer, verifier, and conformance tests

feat(signing): add InProcessSigningProvider, WebhookSigner seam, and verification round-trip tests

feat(signing): add KMS provider module skeletons and BouncyCastle stub

docs(signing): add RFC 9421 canonicalizer design spec

feat(signing): implement AWS KMS SigningProvider with lazy-init, tripwire, and ECDSA DER conversion

feat(signing): implement GCP KMS SigningProvider with lazy-init, tripwire, and ECDSA DER conversion

feat(signing): add JWKS VerificationKeyResolver with caching, SSRF validation, and brand.json walk

feat(signing): add InMemoryReplayStore and InMemoryRevocationStore for nonce dedup and key revocation

feat(signing): add pre-deploy KMS probe CLI command

feat(signing): add SigningKeyGenerator for Ed25519/ES256/ES384 keypair generation

feat(signing): add IDNA hostname canonicalization to Rfc9421Canonicalizer

feat(signing): add key origin consistency check and eTLD+1 utility

feat(signing): add JWS verification for revocation lists

feat(signing): add CachingRevocationChecker with JWS verification

feat(signing): add legacy HMAC-SHA256 webhook verification (deprecated)

feat(signing): add Standard Webhooks v1 interop verifier

feat(signing): add webhook challenge proof-of-control

chore: add gitguardian config to ignore test key fixtures

chore: add gitguardian config to ignore test key fixtures

chore: remove gitguardian config (paths-ignore requires default branch presence)