forge/Vervis
1
0
Fork 0
Code Pull requests Activity

When verifying HTTP sig, require ActivityPub-Actor to be signed only if present

Browse source
This commit is contained in:
fr33domlover 2019-03-16 15:48:25 +00:00
parent 475e398d6d
commit a9eaf35d5e
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/Vervis/Foundation.hs
View file

@ -599,7 +599,8 @@ instance YesodRemoteActorStore App where
instance YesodHttpSig App where instance YesodHttpSig App where
data HttpSigVerResult App = HttpSigVerResult (Either String FedURI) data HttpSigVerResult App = HttpSigVerResult (Either String FedURI)
httpSigVerHeaders = const [hRequestTarget, hHost, hActivityPubActor] httpSigVerRequiredHeaders = const [hRequestTarget, hHost]
httpSigVerWantedHeaders = const [hActivityPubActor]
httpSigVerSeconds = httpSigVerSeconds =
fromIntegral . toSeconds . appHttpSigTimeLimit . appSettings fromIntegral . toSeconds . appHttpSigTimeLimit . appSettings
where where