775212121c
Verify HTTP signatures only when request accepts "activity+json" type
2019-12-19 20:17:18 +07:00
a12b6454bb
Add an option to require fetches to be signed
2019-12-16 22:24:03 +07:00
b0e6058021
Parse http signature for request to objects/activities
2019-09-12 23:03:52 +03:00
88d064d80e
http signature plug: remove redundant checks handled by HTTPSignatures library
...
the redundant checks assumed a POST request, which will not work for signed GETs.
this check was originally needed because the HTTPSignatures adapter assumed that
the requests were also POST requests. but now, the adapter has been corrected.
2019-07-18 15:11:21 +00:00
071f78733a
switch to pleroma/http_signatures library
2019-05-14 20:03:13 +00:00
a3a9cec483
[Credo] fix Credo.Check.Readability.AliasOrder
2019-03-13 04:26:54 +01:00
980b5288ed
update copyright years to 2019
2018-12-31 15:41:47 +00:00
2791ce9a1f
add license boilerplate to pleroma core
2018-12-23 20:56:42 +00:00
8da406afa2
activitypub: verify remote http signature digests by recomputing the digest and replacing the digest header
2018-07-31 23:24:30 +00:00
dd9bb37893
Rename id helper method.
2018-05-26 13:57:11 +02:00
4d2c6707c2
activitypub: normalize the actor to ensure we have its URI
2018-05-19 03:28:28 -05:00
ab4aa5720a
Fix a bunch of unused variable warnings
2018-05-04 20:59:01 +00:00
0a14d155d6
Fail faster.
2018-04-02 13:13:14 +02:00
f29902a241
More signature debugging.
2018-03-11 14:37:23 +01:00
5ea6d96dbe
Fix signing bug.
2018-02-25 20:15:04 +01:00
ac67453e8a
More logging for signature problems.
2018-02-24 17:36:26 +01:00
2757682894
More logging.
2018-02-22 14:57:35 +01:00
38b61fddfe
HttpSignature Plug: Skip if already valid.
2018-02-15 19:58:26 +01:00
a9c23e1c32
Add plug to validate signed http requests.
2017-12-12 10:17:21 +01:00
Egor Kislitsyn
rinpatch
Ariadne Conill
William Pitcock
Haelwenn (lanodan) Monnier
lain
Mark Felder
Roger Braun