@mavnn @Bonfire That's interesting. A missing `created` field would be an error with draft-cavage-12 signatures; they need to have a created stamp to avoid replay attacks. I wonder about the one-success-only issue; I bet that means that Bonfire is trying RFC 9421 signatures, they work, but it falls back to draft-cavage-12 signatures. I'll see if I can do some testing to make this work better.
@[email protected] @[email protected] Thank you!