A branded Message from Message.request, Message.response, or Message.create.
A generated spec with label, components, algorithm, and expiresIn, plus
optional created, nonce, alg, keyid, tag (or the same choices nested under
parameters), digest, and fieldSchemas; or an exact-input spec with only label,
signatureInput, and algorithm.
A KeyHandle for the same algorithm, or a Signer callback.
Generated specs accept clock, nonce, signingTimeout, and context;
exact-input specs accept fieldSchemas, signingTimeout, and context. signingTimeout
is 1 through 300,000 milliseconds (default 5,000).
ok(message), or a core error such as input.invalid_options,
fields.label_in_use, input.signer_algorithm_mismatch, crypto.signing_failed, or
crypto.signer_failed.
Signing and verifying guide, reference, and the error reasons.
Sign a lossless HTTP message with explicit components and caller-owned custody.
Appends one
Signature-Inputand oneSignaturefield occurrence and returns a new branded Message. The input message is never modified, and existing signatures stay.