octo/BirdsiteLive
1
0
Fork 0
mirror of https://github.com/NicolasConstant/BirdsiteLive synced 2025-06-05 21:49:16 +02:00
Code Issues Projects Releases Wiki Activity

added AP call date check

Browse Source
This commit is contained in:
Nicolas Constant
2020-12-03 02:37:03 -05:00
parent c86847a146
commit 9ff5707e92
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/BirdsiteLive.Domain/UserService.cs
View File

@ -164,6 +164,14 @@ namespace BirdsiteLive.Domain
private async Task<SignatureValidationResult> ValidateSignature(string actor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders) private async Task<SignatureValidationResult> ValidateSignature(string actor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders)
{ {
//Check Date Validity
var date = requestHeaders["date"];
var d = DateTime.Parse(date).ToUniversalTime();
var now = DateTime.UtcNow;
var delta = Math.Abs((d - now).TotalSeconds);
if (delta > 30) return new SignatureValidationResult { SignatureIsValidated = false };
//Check Signature
var signatures = rawSig.Split(','); var signatures = rawSig.Split(',');
var signature_header = new Dictionary<string, string>(); var signature_header = new Dictionary<string, string>();
foreach (var signature in signatures) foreach (var signature in signatures)