Harden HMAC authentication against timing and validation bypasses#98

Merged

pwelter34 merged 3 commits intomainfrom

claude/security-review-hash-auth-cwPAK

Apr 13, 2026

Commits on Apr 13, 2026

fix: harden HMAC authentication against timing, CIDR, and body-hash bypass attacks
claude
committed
docs: document x-timestamp and x-content-sha256 as required signed headers
claude
committed
docs: add Python and Java samples to README.md
claude
committed