This fork of the original project add the following features:
- Support for the signature using the algorithm HS2019 of the RFC9421
HTTP Message Signatures. - Support for the signature using JSON Web Signature (RFC7515) used by OpenFinance (document
openFinance Framework - Implementation Guidelines - Protocol Functions and Security Measures) . - Add more debug traces.
- Use caching for the private key and its related X.509 certificate to reduce local IO for each request to sign.
Tested with the version 2024.x of Burp Professional and developed using Intellij IDEA Community Edition.
See here to download a build of the extension (extension jar file is attached to the build job).
See here.
- https://www.berlin-group.org/openfinance-downloads
- https://c2914bdb-1b7a-4d22-b792-c58ac5d6648e.usrfiles.com/ugd/c2914b_0bc6a7d6cd6641c5a4a430d09c50f2fd.pdf
- https://medium.com/syntaxa-tech-blog/open-banking-message-signing-b4ab4f7f92d1
- https://developer.revolut.com/docs/guides/build-banking-apps/tutorials/work-with-json-web-signatures
- https://datatracker.ietf.org/doc/rfc9421/
- https://datatracker.ietf.org/doc/rfc7515