Documentation on remote signing

[JuanIrache]

Is there documentation on how to implement remote signing? The only thing I see is this example with a placeholder signing url:

function createRemoteSigner() {
  return {
    type: 'remote',
    async reserveSize() {
      const url = `https://my.signing.service/box-size`;
      const res = await fetch(url);
      const data = (await res.json()) as { boxSize: number };
      return data.boxSize;
    },
    async sign({ reserveSize, toBeSigned }) {
      const url = `https://my.signing.service/sign?boxSize=${reserveSize}`;
      const res = await fetch(url, {
        method: 'POST',
        headers: new Headers({
          'Content-Type': 'application/octet-stream',
        }),
        body: toBeSigned,
      });
      return res.buffer();
    },
  };
}

But I don't see what that URL should be or do. The python example is more comprehensive and works with a certificate, but the behaviour of the /attach route is neither obvious nor documented, so I don't see an obvious path to porting it to node.

Am I missing something or is this uncharted territory?

[crandmck]

Implementing a remote signing service is not something we've documented really.

You're right, https://github.com/contentauth/c2pa-python-example is the closest thing we have right now.
There is some basic info on how to use the /attach route, defined here.

The Node library has something similar in RemoteSigner (docs here), but it's not documented well IMO.

I'll try to get more information on this and improve the docs if I can.

[JuanIrache]

Thank you @crandmck . Additional documentation on how to implement the logic from the Python example in Node would be greatly appreciated. We can sign remotely with the Python code but I don't think we can run it in our specific environment.

[JuanIrache]

Hi @crandmck Can we expect an update on this or should we try to work with the existing documentation? Thanks