add link to JSON signing algorithm on federation auth section

This commit is contained in:
Logan Devine 2026-03-04 08:13:13 -08:00 committed by GitHub
parent 2baca03e6b
commit ba3674da8e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -277,12 +277,12 @@ queried from multiple servers to mitigate against DNS spoofing.
Every HTTP request made by a homeserver is authenticated using public Every HTTP request made by a homeserver is authenticated using public
key digital signatures. The request method, target and body are signed key digital signatures. The request method, target and body are signed
by wrapping them in a JSON object and signing it using the JSON signing by wrapping them in a JSON object and signing it using the [JSON signing
algorithm. The resulting signatures are added as an Authorization header algorithm](/appendices#signing-json). The resulting signatures are added
with an auth scheme of `X-Matrix`. Note that the target field should as an Authorization header with an auth scheme of `X-Matrix`. Note that
include the full path starting with `/_matrix/...`, including the `?` the target field should include the full path starting with `/_matrix/...`,
and any query parameters if present, but should not include the leading including the `?` and any query parameters if present, but should not
`https:`, nor the destination server's hostname. include the leading `https:`, nor the destination server's hostname.
Step 1 sign JSON: Step 1 sign JSON: