Kong hmac-auth plugin

Please help me i am trying to configure hmac-auth plugin in my kong.
what i am doing is

  1. hmac-auth plugin parameter
    name:- hmac-auth
    config.enforce_headers=date, request-line
    config.algorithms=hmac-sha256
  2. Trying to hit the service through Postman with below parameters
    Authorization : hmac username=“bob”, algorithm=“hmac-sha256”, headers=“date request-line”, signature=“ZjBmNzI4Y2U2NTg2MTQ4YjhlNDUxNjg2NjEzODkzMmE3ZGM4YmM1OTBhYzQzNDBjMzA3ZmNjYTJhNGQ3MDBmOQ==”

X-Date :- Thu, 28 Mar 2019 16:31:21 GMT

after hitting the request i am facing the issue is :- “message”: “HMAC signature cannot be verified”

I think, the signature i am creating is wrong

Please let me know how how i need to Create signature in (proper steps)

Thanks
Prashant

1 Like