Method signedRequest

src/http.js:290–325

* Signed HTTP request * * https://datatracker.ietf.org/doc/html/rfc8555#section-6.2 * * @param {string} url Request URL * @param {object} payload Request payload * @param {object} [opts] * @param {string} [opts.kid] JWS KID * @param {string} [opts.nonce] JWS a

(url, payload, {
        kid = null,
        nonce = null,
        includeExternalAccountBinding = false
    } = {}, attempts = 0)

     */

    async signedRequest(url, payload, {
        kid = null,
        nonce = null,
        includeExternalAccountBinding = false
    } = {}, attempts = 0) {
        if (!nonce) {
            nonce = await this.getNonce();
        }

        /* External account binding */
        if (includeExternalAccountBinding && this.externalAccountBinding) {
            if (this.externalAccountBinding.kid && this.externalAccountBinding.hmacKey) {
                const jwk = this.getJwk();
                const eabKid = this.externalAccountBinding.kid;
                const eabHmacKey = this.externalAccountBinding.hmacKey;

                payload.externalAccountBinding = this.createSignedHmacBody(eabHmacKey, url, jwk, {kid: eabKid});
            }
        }

        /* Sign body and send request */
        const data = this.createSignedBody(url, payload, {nonce, kid});
        const resp = await this.request(url, 'post', {data});

        /* Retry on bad nonce - https://datatracker.ietf.org/doc/html/rfc8555#section-6.5 */
        if (resp.data && resp.data.type && (resp.status === 400) && (resp.data.type === 'urn:ietf:params:acme:error:badNonce') && (attempts < this.maxBadNonceRetries)) {
            nonce = resp.headers['replay-nonce'] || null;
            attempts += 1;

            log(`Caught invalid nonce error, retrying (${attempts}/${this.maxBadNonceRetries}) signed request to: ${url}`);
            return this.signedRequest(url, payload, {kid, nonce, includeExternalAccountBinding}, attempts);
        }

        /* Return response */
        return resp;
    }
}

/* Export client */