4 releases (breaking)

0.3.0 Nov 9, 2021
0.2.0 May 9, 2021
0.1.0 Jan 27, 2021
0.0.0 Dec 15, 2020

#1867 in Cryptography

26 downloads per month

MIT license

6KB
90 lines

This packages originated from https://github.com/facebook/relay. It verifies automatically generated files and effectively prevents from manual pollution. Usage (simplified GraphQL schema snapshoting example):

// we can save a signed file
let new_snapshot = signedsource::sign_file(&format!("# {}\n\n{}", signedsource::SIGNING_TOKEN, schema))

// or verify its content
signedsource::is_signed(&old_snapshot)
signedsource::is_valid_signature(&old_snapshot)

It is also possible to re-sign file which is already signed (means update the signature when it already exists).

Dependencies

~2.4–3.5MB
~63K SLoC