Function: signForwardedIpHeaders()

signForwardedIpHeaders(ip, shopSlug, key, now?): Promise<Record<string, string>>

Sign the three forwarded-IP headers from a PRE-IMPORTED HMAC key. Low-level SSOT for the header shape + canonical message, shared by the middleware (which caches the key across requests on the hot GraphQL path) and buildForwardedIpHeaders (one-shot from a secret). The backend recomputes the same signature to verify.

Parameters

ip

string

shopSlug

string

key

CryptoKey

now?

() => number

Returns

Promise<Record<string, string>>