SuperSeriousBusiness/GoToSocial
1
1
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial synced 2025-06-05 21:59:39 +02:00
Code Issues Projects Releases Wiki Activity

[feature] Try HTTP signature validation with and without query params for incoming requests (#2591)

Browse Source 
* [feature] Verify signatures both with + without query params

* Bump to tagged version
This commit is contained in:
tobi
2024-01-31 15:15:28 +01:00
committed by GitHub
parent c675d47a8c
commit b614d33c40
18 changed files with 1799 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/gtscontext/context.go
View File

@@ -21,8 +21,8 @@ import (
"context"
"net/url"
"github.com/go-fed/httpsig"
"github.com/superseriousbusiness/gotosocial/internal/gtsmodel"
"github.com/superseriousbusiness/httpsig"
)
// package private context key type.
@@ -129,8 +129,8 @@ func SetOtherIRIs(ctx context.Context, iris []*url.URL) context.Context {
// HTTPSignatureVerifier returns an http signature verifier for the current ActivityPub
// request chain. This verifier can be called to authenticate the current request.
func HTTPSignatureVerifier(ctx context.Context) httpsig.Verifier {
verifier, _ := ctx.Value(httpSigVerifierKey).(httpsig.Verifier)
func HTTPSignatureVerifier(ctx context.Context) httpsig.VerifierWithOptions {
verifier, _ := ctx.Value(httpSigVerifierKey).(httpsig.VerifierWithOptions)
return verifier
}