Merge pull request #30 from github/spec-signing-example

Spec signing example

Author: Ben Lavender

docs/example/crcp_client_key.txt

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAuAr7aMOLW08UrP8gWPzfP5+GF1ov3I2Wn1n7AsDxez36+hyU
+AY7skZzd7+Nz/j8HT10NRSMA/lkc49FaJlNQ2wAsvsF53AwtTna+FkR1e1P66+Ph
+KB9NeoCf5TCvVvihR1VI/BS4AAOdYLCr8NuX89I74qK2WYSziHzTzxbMMZldgXO+
+GDlKdZXNzCrk4Kj0ger2bap9/amUXRuuqOVSLZJ3l0mYRWu45TG9tlF8jmix48+2
+e1pzhbw1qezD7vB8lsGH2qaKQrs1Em1tZHRgxbrslbDbmD+q3Oq0CpnFNp7eIoAx
+XcrLPyw/IlplCLM0hxouPRlQ/yEhfnLnjnbhHQIDAQABAoIBAQCigPfqUjcbYaFE
++2SJjoZlPCr/NZ/rI43qmF3d2ZWfl2OjMlaxZYyXKiaBKZoC1Y5T0jrkX/sBmpe6
+xODP1GMhbG8V4+oAlTPwA0LmkH4Xblixrp3henpD/4yvpyQ7K//j53cxNe4d/RMa
+DAVV/9+U533/KGLQei64BlhTk7Kq21ndm+sEReVrAGqUfxJBB1jmKYKskAFU+7zW
+0tTveS7zbo7uTEdfrcDzh2eU70BR3qi2RsjBZtHm2mdVk8y8TnqpgvEautNwo5pM
+idNgLOozsWWH/mEHZG43OsJjwJjmeeZnd4rp/RdMWdCv4/VInTUNa6ln1koQR1f3
+psg2ifxVAoGBAPD6ar87DdEM8rC1QjHwDdYNkB9P2KPizhs+/NrTGNCtiCUm+RHr
+YDwYYW3FnVgW6ejAmPXsg+U9OBeAiV9TpclyaEBsmP2M9L1xbdAlJ3YJXcVLDBEP
+Vc/d3MW3BFx6dqTeoI4SsjkWl/hzYlRaA92kSFzNj4nxcXLigXyg3UfvAoGBAMOD
++qnlnrOVfyK2c3PU+u7UHRQT+TUxn2IwuXsF8/Bf5Mvs1GvqGvx2/N2BN34RlMLg
+wnyNaBj6xdtQ6T8nMGQIfjLPti9apFdgtZNa92sSUFzmLS5ZRSQGFGnpTrPuyRnI
+Y3Fm+cHGnFBxqMLJnZ05Te606UuUL3iJDvBw7ruzAoGAIPbQhWpJoJA53qxc6sHg
+0qg2T+I3S2vqL9X09uYrndgvKI3lQmtFVdMr+L0woe04gCtggTuia0htlOFzaUPj
+COSKmE2CvCR9EjEjCXcbp8zuM9/pPagwX+gEnFNF2HS0KCeAJQ8vrBmIHmeCSvGp
+V7dyYqeH/CG4GDQd7HOA8acCgYBOg5uPyqQ2ndxWRkqKw4aZjhi3TWYQVIMa3VI+
+8x8I8plgwxRy2apIpEfbc96jA9BnifbQKcEZ9uqprg5czBIEudxj70HMNmw0oqOI
+L0mYd9xJ0i1mpXa8hqx/868lVsjvT6ePjLjTdjyjmWEaB/kBgFepeoENVs7RasjT
+Cab1PQKBgD7syNO54fsV81N7Ko+ERdUz5Y59VLE6IC2hSiG0e9p6n1PrMtwLpsCd
+lcLv/nw+QvoPdK3mOmD+vhoejQ8i4uv2+Ns/LDbkGnap3YKlgIdwvWPT0wUt8ixN
+aayIKvORDVMbhYljbD4LDWfm/sBrKAvdeM2XjqeJvyPcstDmQ2aN
+-----END RSA PRIVATE KEY-----

docs/example/crpc_server_key.txt

@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAr7aMOLW08UrP8gWPzf
+P5+GF1ov3I2Wn1n7AsDxez36+hyUAY7skZzd7+Nz/j8HT10NRSMA/lkc49FaJlNQ
+2wAsvsF53AwtTna+FkR1e1P66+PhKB9NeoCf5TCvVvihR1VI/BS4AAOdYLCr8NuX
+89I74qK2WYSziHzTzxbMMZldgXO+GDlKdZXNzCrk4Kj0ger2bap9/amUXRuuqOVS
+LZJ3l0mYRWu45TG9tlF8jmix48+2e1pzhbw1qezD7vB8lsGH2qaKQrs1Em1tZHRg
+xbrslbDbmD+q3Oq0CpnFNp7eIoAxXcrLPyw/IlplCLM0hxouPRlQ/yEhfnLnjnbh
+HQIDAQAB
+-----END PUBLIC KEY-----

docs/protocol-description.md

@@ -172,16 +172,38 @@ string to be signed is:
 `https://example.com/_chatops\nabc123\n2017-05-11T19:15:23Z\n{"method": "foo"}`
 
 The signature header starts with the word `Signature`, followed by whitespace,
-followed by comma-separated key-value pairs separated by an `=`. Each
-value is closed with double quotes. Keys must be all lowercase.
+followed by comma-separated key-value pairs separated by an `=`. Keys must be
+all lowercase.
 
  * `keyid`: An implementation-specific key identifier that servers can use to
  determine which private key signed this request.
  * `signature`: The base64-encoded RSA-SHA256 signature of the signing string.
 
 An example signature header would be:
 
-`Chatops-Signature: Signature keyid="rsakey1",signature="<base64-encoded-signature>"`
+`Chatops-Signature: Signature keyid=rsakey1,signature=<base64-encoded-signature>`
+
+Use the [sample server public key](./example/crpc_server_key.txt) to verify the
+following message with your implementation.
+
+Signature string:
+
+```
+http://test.host/_chatops\n889c9543c22695bc031f723ef2fd28ef1fbed6b0\n2017-06-28T22:51:41Z\n
+```
+
+Signature:
+
+```
+trtOLqLMKzCohxT6Uzeqs+n5Q1msTQUIO4GDl0pyyyTea5MOte6dIQ+k9AlY
+HOJ2IHTxGHVhDYJTm2AtgHOEZqrLpqOLqORj64HbwIWtTyuRBUmUmzHWMJKH
+a6jy4u9aB8VgSKxE7oDHU6Zo/7kGvqvTBSumF2kMaSjkMXhkUd5WmuQGWpPJ
+5hC0W65alCJU1inQQDZDgj1oH/849zZB3WU8Ne61BMM1Qb4IcljDU6UciGyP
+OgXRNSALvgKdCSJyhLhHBxYvuypCjUpgiWKm4h3u0GOpem8NoBXLjeEHT4fR
+wJYP8hmQWauUgOmjvKt2wufykHZDZNp4fPwkm6qGKg==
+```
+
+(Line breaks added for readability)
 
 #### Authentication