Griffin HTTP Message Signatures

Code examples and utilities for implementing Griffin's HTTP message signatures and webhook verification. This repository contains sample implementations for signing API requests and verifying incoming webhooks in multiple programming languages.

Overview

Griffin uses HTTP Message Signatures to:

1. Verify client API requests - Customers sign their API requests to Griffin

Contents

• Getting Started
• API HTTP Message signatures
• Language Examples
• Resources
• Contributing
• Disclaimer
• License

Getting Started

To use the Griffin API securely:

1. Generate an Ed25519 key pair
2. Register your public key with Griffin via the app
3. Sign your API requests using your private key

API HTTP Message signatures

For detailed implementation instructions, see the Griffin documentation on message signatures.

Language Examples

This repository contains example implementations in various programming languages:

• Python - Using the http-message-signatures library
• Golang - Using github.com/yaronf/httpsign

Resources

• Griffin API Documentation
• Message Signatures Guide
• HTTP Message Signatures Specification

Contributing

Contributions are welcome! If you have improvements or additional language examples, please submit a pull request.

Disclaimer

Important

The external libraries used in these examples have not undergone a thorough security review by Griffin. While we provide these examples for convenience, we do not endorse any third-party libraries and are not liable for any security issues or bugs they may contain. You should conduct your own review of any libraries before using them in production.

License

EPL 2.0 License