request signing proof-of-concept

[xavdid]

Why?

We're exploring adding supporting cryptographic signing of API requests (instead of using API keys). This PR is a basic proof of concept for the cryptographic primitives and top-level UX.

from pathlib import Path

from stripe import StripeClient

PUB_KEY_ID = "keyid_test_123"
PRIV_KEY_LOCATION = "/some/path/to/a/secp256r1-key.pem"

client = StripeClient(
    signing_keys={
        "key_id": PUB_KEY_ID,
        "private_key": Path(PRIV_KEY_LOCATION).read_text(),
    },
)

customers = client.v1.customers.list()
print(customers)

See #api-key-request-signing for more info.

What?

• Implemented the request signing algorithm per this doc

See Also

[xavdid]

closing, since we may be rethinking this approach