A C# library demonstrating secure API authentication using cryptographic request signatures to ensure request integrity and authenticity.
Secure API authentication mechanism using Request Signatures
This tool is designed for developers implementing secure API authentication mechanisms that avoid sending secret keys directly, enhancing security against tampering and replay attacks. It is ideal for API providers and consumers who require strong identity verification and request integrity in their client-server communications.
This tool requires .NET runtime to run both server and client components. It is a demonstration project, so for production use, additional security hardening and integration with secure key management systems are recommended. Proper synchronization of client and server clocks is essential to prevent legitimate requests from being rejected due to timestamp validation.
Clone the repository
Start the server: cd RequestSigning.Server && dotnet run
In a new terminal, start the client: cd RequestSigning.Client && dotnet runcd RequestSigning.Server && dotnet run
Starts the API server implementation
cd RequestSigning.Client && dotnet run
Starts the demo client that sends signed requests to the server