HMAC-Base64 Generator
Runs fully in your browser. No API calls. Payload order + types are enforced.
AIT Payload
AIA Payload
RawBody (strict order)
Hmac-Base64
Note: Your secret key is used locally in this page to compute HMAC. Don’t use this on an untrusted machine.
CORS Proof Demo
This browser call should fail unless the backend explicitly allows this GitHub Pages origin.
Page Origin
Result
Not run yet
Expected outcome on GitHub Pages when CORS is not configured: the request is sent, but JavaScript cannot read the response and the browser reports a CORS error.