v0.9.7

Custom HMAC Signer Support

Imagor uses SHA1 HMAC signer by default, the same one used by Thumbor. However, SHA1 is not considered cryptographically secure. If that is a concern it is possible to configure different HMAC signing method and truncate length. Imagor supports sha1, sha256, sha512 signer type:

IMAGOR_SIGNER_TYPE=sha256
IMAGOR_SIGNER_TRUNCATE=32

An example URL signature generator in Node.js:

var hmacSHA256 = require("crypto-js/hmac-sha256")
var Base64 = require("crypto-js/enc-base64")

function sign(path, secret) {
  var hash = hmacSHA256(path, secret)
  hash = Base64.stringify(hash).slice(0, 32).replace(/\+/g, '-').replace(/\//g, '_')
  return hash + '/' + path
}

What's Changed

• feat(imagor): imagor-signer-type by @cshum in #67
• fix(imagor): fix fanout reader upstream error and premature close handling
• fix(imagor): ErrPass handling
• refactor(imagor): fanout reader lazy init
• build: docker go 1.18.3

Full Changelog: v0.9.6...v0.9.7