Interface: HttpAkamaiEdgeGridAuth

Akamai EdgeGrid (EG1-HMAC-SHA256), as Akamai's own clients sign: an HMAC over the method, the scheme, the host, the path and the query as sent, the headers headersToSign names that the request sends and, for a POST, the hash of the first maxBodySize bytes of its body, under a key derived from clientSecret and the timestamp. Sent as authorization: EG1-HMAC-SHA256 client_token=…;access_token=…;timestamp=…;nonce=…;signature=…. The three credentials are redacted like secrets, whether a placeholder or text.

Properties

accessToken

accessToken: string;

ctx.secret(name).

---

authType

authType: "akamai-eg";

---

clientSecret

clientSecret: string;

ctx.secret(name).

---

clientToken

clientToken: string;

ctx.secret(name).

---

headersToSign?

optional headersToSign?: string;

Header names separated by commas, signed in that order when the request sends them; never authorization or a header the host sets (user-agent, content-length, host...).

---

host?

optional host?: string;

The API client's host (akab-….luna.akamaiapis.net); one that is not the URL's is refused.

---

maxBodySize?

optional maxBodySize?: number;

The bytes of a POST body that are hashed: the API client's max_body, 131,072 by default.

---

nonce?

optional nonce?: string;

A fixed nonce, for tests; the host makes a fresh one otherwise.

---

timestamp?

optional timestamp?: string;

A fixed UTC time, 20261010T08:15:00+0000, for tests; the host reads its clock otherwise.