HMAC SHA-256 Auth Node

H

Web/Auth

HMAC SHA-256 Auth

Creates REST auth that verifies an HMAC-SHA256 request signature.

hmac_sha256_authweb

Inputs4

Outputs1

Security exposure10/10

Packageweb

Ratings

Scores range from 0 to 10. Higher values mean more impact, exposure, or operational weight.

No score metadata has been set for this node yet.

Input Pins

4

Secret

String

secret

Shared HMAC secret

Signature Header

String

signature_header

Header that carries the lowercase hex HMAC signature

Default x-signature

Timestamp Header

String

timestamp_header

Header that carries the Unix timestamp in seconds

Default x-timestamp

Max Skew Seconds

Integer

max_skew_seconds

Allowed timestamp skew in seconds; zero disables timestamp freshness checks

Default 300

Output Pins

1

Auth

Struct

auth

HMAC auth config

SchemaRestAuthConfigRestAuthConfigRestAuthConfig6 fields

variant 1objectvariant

typeconstrequired

const "none"

variant 2objectvariant

headerstringrequired

keystringrequired

typeconstrequired

const "api_key"

variant 3objectvariant

tokenstringrequired

typeconstrequired

const "bearer_token"

variant 4objectvariant

usernamestringrequired

passwordstringrequired

typeconstrequired

const "basic_auth"

variant 5objectvariant

secretstringrequired

signature_headerstring

default "x-signature"

timestamp_headerstring

default "x-timestamp"

max_skew_secondsinteger:uint64

format uint64default 300min 0

typeconstrequired

const "hmac_sha256"

variant 6objectvariant

issuerstring | null

default null

audiencestring | null

default null

required_scopesArray<string>

default []

itemsstringarray item

jwks_urlstring | null

default null

jwks_flow_pathanyOf (2)

default null

variant 1FlowPathvariant

pathstringrequired

store_refstringrequired

cache_store_refstring | null

variant 2nullvariant

+2 more fields

Schema enforced

Node Info

Internal name

hmac_sha256_auth

Category

Web/Auth

Version

3