Skip to content

OAuthHmacSigner only supports HMAC-SHA1 (no ability to use HMAC-SHA256 which is required by NetSuite) #702

@svonduhn

Description

@svonduhn

Description:
As a NetSuite integration developer, I would like to be able to use HMAC-SHA256, so that I can connect to Netsuite when HMAC-SHA1 is deprecated after August 2021.

Solution:
I would like to have the ability to sign OAuth 1.0 requests using HMAC-SHA256.

Other Information:
As the signature method is hard-coded in the OAuthHmacSigner class, the only way to support this would be a new signer class, or a code change to make the signature method configurable.

Additional Information:
NetSuite, a major cloud-based service and ERP, will stop allowing any connections made using HMAC-SHA1 after their next release in August 2021 (exact date TBD). As such, I would like to have the ability to switch to HMAC-SHA256 as a signature method, so there will be no interruptions in any integrations using this library.

Metadata

Metadata

Assignees

Labels

priority: p2Moderately-important priority. Fix may not be included in next release.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions