usbharu
/
Hideout
mirror of https://github.com/usbharu/Hideout.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

fix: Misskeyの脆弱性修正でHTTP Signatureの検証エラーが出て連合できなくなっていた問題を修正

This commit is contained in:
usbharu 2023-12-07 01:10:33 +09:00
parent 06561569ab
commit b3002625a4
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/main/kotlin/dev/usbharu/hideout/activitypub/service/common/APRequestServiceImpl.kt
View File

@ -84,7 +84,7 @@ class APRequestServiceImpl(
headers { headers {
appendAll(headers) appendAll(headers)
append("Signature", sign.signatureHeader) append("Signature", sign.signatureHeader)
remove("Host") // remove("Host")
} }
} }
contentType(Activity) contentType(Activity)
@ -173,7 +173,7 @@ class APRequestServiceImpl(
append("Accept", Activity) append("Accept", Activity)
append("Date", date) append("Date", date)
append("Host", u.host) append("Host", u.host)
append("Digest", "sha-256=$digest") append("Digest", "SHA-256=$digest")
} }
val sign = httpSignatureSigner.sign( val sign = httpSignatureSigner.sign(
@ -193,7 +193,7 @@ class APRequestServiceImpl(
headers { headers {
appendAll(headers) appendAll(headers)
append("Signature", sign.signatureHeader) append("Signature", sign.signatureHeader)
remove("Host") // remove("Host")
} }
setBody(requestBody) setBody(requestBody)
contentType(Activity) contentType(Activity)