We have many JS libraries that could be used off the shelf that already implement proper canonical signature signing.