cshum/imagor v0.9.7

on GitHub

Custom HMAC Signer Support

Imagor uses SHA1 HMAC signer by default, the same one used by Thumbor. However, SHA1 is not considered cryptographically secure. If that is a concern it is possible to configure different HMAC signing method and truncate length. Imagor supports sha1, sha256, sha512 signer type:

IMAGOR_SIGNER_TYPE=sha256
IMAGOR_SIGNER_TRUNCATE=32

An example URL signature generator in Node.js:

var hmacSHA256 = require("crypto-js/hmac-sha256")
var Base64 = require("crypto-js/enc-base64")

function sign(path, secret) {
  var hash = hmacSHA256(path, secret)
  hash = Base64.stringify(hash).slice(0, 32).replace(/\+/g, '-').replace(/\//g, '_')
  return hash + '/' + path
}

What's Changed

• feat(imagor): imagor-signer-type by @cshum in #67
• fix(imagor): fix fanout reader upstream error and premature close handling
• fix(imagor): ErrPass handling
• refactor(imagor): fanout reader lazy init
• build: docker go 1.18.3

Full Changelog: v0.9.6...v0.9.7