Is the project still maintained?
Hello @ahknight, first of all thank for the great work at drf-httpsig. I'm thinking about using this package for signature authentication, but I'm wondering if there's people still maintaining it as the last accepted commit was on March 2018.
With "maintaining" I don't necessarily mean implementing new features, but at least reading issues and reviewing pull requests. I'm personally happy to submit some changes I would need (like signature expiration check based on "Date" header).
Otherwise I might start with my own implementation to solve the problem we are having. Thank you!
I started using my own fork of the repo, where I upgraded versions and implemented support for signature expiration checks.
You can see changes here: https://github.com/ahknight/drf-httpsig/compare/master...martinzugnoni:master
I'm happy to get the code reviewed and potentially merged into the main repo if you feel changes are useful.