Skip to content

Commit 499da8c

Browse files
fix
Signed-off-by: Abhishek Choudhary <shreemaan.abhishek@gmail.com>
1 parent ce57ee7 commit 499da8c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/en/latest/plugins/hmac-auth.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ The following attributes are available for configurations on Routes or Services.
5454
| allowed_algorithms | array[string] | False | ["hmac-sha1","hmac-sha256","hmac-sha512"] | combination of "hmac-sha1","hmac-sha256",and "hmac-sha512" | The list of HMAC algorithms allowed. |
5555
| clock_skew | integer | False | 300 | >=1 | Maximum allowable time difference in seconds between the client request's timestamp and APISIX server's current time. This helps account for discrepancies in time synchronization between the client’s and server’s clocks and protect against replay attacks. The timestamp in the Date header (must be in GMT format) will be used for the calculation. |
5656
| signed_headers | array[string] | False | | | The list of HMAC-signed headers that should be included in the client request's HMAC signature. |
57-
| validate_request_body | boolean | False | false | | If true, validate the integrity of the request body to ensure it has not been tampered with during transmission. Specifically, the Plugin creates a SHA-256 base64-encoded digest and compare it to the `Digest` header. If the Digest` header is missing or if the digests do not match, the validation fails. |
57+
| validate_request_body | boolean | False | false | | If true, validate the integrity of the request body to ensure it has not been tampered with during transmission. Specifically, the Plugin creates a SHA-256 base64-encoded digest and compare it to the `Digest` header. If the `Digest` header is missing or if the digests do not match, the validation fails. |
5858
| hide_credentials | boolean | False | false | | If true, do not pass the authorization request header to Upstream services. |
5959
| anonymous_consumer | string | False | | | Anonymous Consumer name. If configured, allow anonymous users to bypass the authentication. |
6060
| realm | string | False | hmac | | The realm to include in the `WWW-Authenticate` header when authentication fails. |

0 commit comments

Comments
 (0)