NewClient constructs an [http.Client] that disallows access to public networks, controlled by the localOnly flag.

NewRequestWithContext is a wrapper around [http.NewRequestWithContext] that sets some defaults in the returned request.

NewSigner constructs a signer according to the provided Config and claim.

RateLimiter wraps the provided RoundTripper with a limiter allowing 10 requests/second/host.

ResponseRecorder returns a ResponseWriter that records the HTTP status and body length into the provided pointers, and returns another response writer that understand the go 1.20 http `Unwrap` scheme.

Signer signs requests.