Payload hashing algorithm doesn't work / differs

[SurelyPlus]

The body / payload hashing uses the same HmacSHA256 for header and body. In the javascript standard implementation it uses different mechanisms.

if the method Hawk.calculateBodyMac is intended for hashing the body and using this hash in the generateAuthentication, then it should use only hashing.

[AndrewF5543]

I ran into the same thing while I was using this library. I had to manually hash my request body using java.security.MessageDigest in order to get my client working.

[AndrewF5543]

For posterity's sake, here's the code that I ended up implementing. Note that Hawk version, content type, and algorithm were constants in my use case, so their values are hard coded in. Future users may wish to change these in their own implementations:

             final StringBuilder sb = new StringBuilder(1024);
             sb.append("hawk.");
             sb.append("1");
             sb.append(".payload\n");
             sb.append("application/json");
             sb.append('\n');
             sb.append(postData);
             sb.append('\n');
             MessageDigest digest = MessageDigest.getInstance("SHA-256");
             String hashedPostData = BaseEncoding.base64().encode(digest.digest(sb.toString().getBytes("UTF-8")));

[mcdee]

This repository isn't maintained any more; if anyone is interested in updating it to the current version of Hawk let me know and I'll sort out suitable access.