@@ -760,7 +760,8 @@ contain the following information about its OCM API:
760760 _ `"denylist"` - some servers MAY be blocked based on their IP
761761 address
762762 _ `"allowlist"` - unknown servers MAY be blocked based on their IP
763- address \* `"invite"` - an invite MUST have been exchanged between the
763+ address
764+ _ `"invite"` - an invite MUST have been exchanged between the
764765 sender and the receiver before a Share Creation Notification can be
765766 sent
766767* DEPRECATED: publicKey (object) - Use public keys at
@@ -1132,7 +1133,8 @@ To obtain an access token, the Receiving Server MUST send an HTTP POST
11321133request to the Sending Server’s {tokenEndPoint} as discovered in the
11331134OCM provider metadata, following section 4.4.2 of [RFC6749]. The
11341135request payload MUST be in `x-www-form-urlencoded` form, as shown
1135- in the following example :
1136+ in the following example (with line breaks in the Signature headers
1137+ for display purposes only) :
11361138
11371139` ` `
11381140POST {tokenEndPoint} HTTP/1.1
@@ -1142,11 +1144,12 @@ Content-Type: application/x-www-form-urlencoded
11421144Digest: SHA-256=ok6mQ3WZzKc8nb7s/Jt2yY1uK7d2n8Zq7dhl3Q0s1xk=
11431145Content-Length: 101
11441146Signature-Input:
1145- sig1=("@method" "@target-uri" "content-digest" "date"); \
1146- created=1730815200; keyid="receiver.example.org#2025"; \
1147- alg="rsa-sha256"
1148- Signature: sig1=:
1149- bM2sV2a4oM8pWc4Q8r9Zb8bQ7a2vH1kR9xT0yJ3uE4wO5lV6bZ1cP2rN3qD4tR5hC=:
1147+ sig1=("@method" "@target-uri" "content-digest" "date");
1148+ created=1730815200;
1149+ keyid="receiver.example.org#key1";
1150+ alg="rsa-sha256"
1151+ Signature: sig1=:bM2sV2a4oM8pWc4Q8r9Zb8bQ7a2vH1kR9xT0yJ3uE4wO5lV6bZ1cP
1152+ 2rN3qD4tR5hC=:
11501153
11511154grant_type=authorization_code&
11521155client_id=receiver.example.org&
@@ -1463,22 +1466,27 @@ Content-Digest: sha-256=:LkpHyFOVbBDPxc7YbHDOWNzAv88qWuVfLNf4TUf9Uo8=:
14631466}
14641467` ` `
14651468
1466- The signature base is constructed according to [RFC9421] :
1469+ The signature base is constructed according to [RFC9421] (with line
1470+ breaks in @signature-params for display purposes only) :
14671471
14681472` ` `
14691473"@method": POST
14701474"@target-uri": https://receiver.example.org/ocm/shares
14711475"content-digest": sha-256=:<digest-value>=:
1472- "@signature-params": ("@method" "@target-uri" "content-digest")\
1473- ;created=<timestamp>;keyid="sender.example.org#key1";alg="ed25519"
1476+ "@signature-params": ("@method" "@target-uri" "content-digest");
1477+ created=<timestamp>;
1478+ keyid="sender.example.org#key1";
1479+ alg="ed25519"
14741480` ` `
14751481
14761482Sign this base using for example Ed25519 ([RFC8032]) to produce the
1477- signature, then add headers :
1483+ signature, then add headers (line breaks for display purposes only) :
14781484
14791485` ` `
1480- Signature-Input: sig1=("@method" "@target-uri" "content-digest")\
1481- ;created=<timestamp>;keyid="sender.example.org#key1";alg="ed25519"
1486+ Signature-Input: sig1=("@method" "@target-uri" "content-digest");
1487+ created=<timestamp>;
1488+ keyid="sender.example.org#key1";
1489+ alg="ed25519"
14821490Signature: sig1=:<signature-value>=:
14831491` ` `
14841492
0 commit comments