summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/ActivityPubServerService.ts
diff options
context:
space:
mode:
authorJulia <julia@insertdomain.name>2024-11-21 02:58:28 +0000
committerJulia <julia@insertdomain.name>2024-11-21 02:58:28 +0000
commit41536480ce78ccd36772fc6dcc57e36039becbbb (patch)
treee20b48508b5126cf0a11cf2343278ab9930b24e6 /packages/backend/src/server/ActivityPubServerService.ts
parentmerge: Fix linter error in emojis endpoint (!758) (diff)
parentBump develop version (diff)
downloadsharkey-41536480ce78ccd36772fc6dcc57e36039becbbb.tar.gz
sharkey-41536480ce78ccd36772fc6dcc57e36039becbbb.tar.bz2
sharkey-41536480ce78ccd36772fc6dcc57e36039becbbb.zip
merge: Bump develop version (!766)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/766
Diffstat (limited to 'packages/backend/src/server/ActivityPubServerService.ts')
-rw-r--r--packages/backend/src/server/ActivityPubServerService.ts4
1 files changed, 2 insertions, 2 deletions
diff --git a/packages/backend/src/server/ActivityPubServerService.ts b/packages/backend/src/server/ActivityPubServerService.ts
index 52592c47c6..f955329fd1 100644
--- a/packages/backend/src/server/ActivityPubServerService.ts
+++ b/packages/backend/src/server/ActivityPubServerService.ts
@@ -152,7 +152,7 @@ export class ActivityPubServerService {
let signature;
try {
- signature = httpSignature.parseRequest(request.raw, { 'headers': [] });
+ signature = httpSignature.parseRequest(request.raw, { 'headers': ['(request-target)', 'host', 'date'], authorizationHeaderName: 'signature' });
} catch (e) {
// not signed, or malformed signature: refuse
this.authlogger.warn(`${request.id} ${request.url} not signed, or malformed signature: refuse`);
@@ -229,7 +229,7 @@ export class ActivityPubServerService {
let signature;
try {
- signature = httpSignature.parseRequest(request.raw, { 'headers': [] });
+ signature = httpSignature.parseRequest(request.raw, { 'headers': ['(request-target)', 'digest', 'host', 'date'], authorizationHeaderName: 'signature' });
} catch (e) {
reply.code(401);
return;