Repository navigation
add a context signing helper - #125
Merged
bpapillon merged 1 commit intoOct 30, 2026
Merged
Conversation
cbrady
marked this pull request as ready for review
October 30, 2026 15:17
bpapillon
approved these changes
Oct 30, 2026
bpapillon
deleted the
chris/sch-7984-schematic-java-add-a-context-signing-helper
branch
October 30, 2026 19:21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
ContextSignature.sign, which a customer's backend calls to sign the company and user a browser SDK sends with a publishable key, for environments that require context signatures. It returns theX-Schematic-Context-Sigvalue the JS SDK'sgetContextSignatureexpects. A signature lasts 10 minutes by default;options().lifetimeSeconds(...)accepts up to the API's one-hour maximum, andissuedAt(...)sets the start time. It matches the Go and Node helpers (SchematicHQ/schematic-go#263, SchematicHQ/schematic-node#216).The JSON is built by hand rather than with Jackson, which sorts keys by UTF-16 code unit and escapes differently from the API. Keys sort by code point, U+2028 and U+2029 are escaped, and lone surrogates become U+FFFD as the API reads them. It sticks to Java 8 APIs to match the build target.
The tests run the shared vectors from the API (SchematicHQ/schematic-api#9729), copied into
src/test/resources/contextsig/. Merge after #9729, and refresh the copy if the vectors change there.