GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

[ActivityPub][HTTPSignatures] Fix verify

Browse Source
This commit is contained in:
Diogo Cordeiro 2020-06-28 00:58:16 +01:00 committed by Diogo Peralta Cordeiro
parent 78f0ab022c
commit 32a7cd6458
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/ActivityPub/lib/httpsignature.php
View File

@ -160,6 +160,8 @@ class HttpSignature
*/ */
public static function verify($publicKey, $signatureData, $inputHeaders, $path, $body): array public static function verify($publicKey, $signatureData, $inputHeaders, $path, $body): array
{ {
// We need this because the used Request headers fields specified by Signature are in lower case.
$headersContent = array_change_key_case($inputHeaders, CASE_LOWER);
$digest = 'SHA-256=' . base64_encode(hash('sha256', $body, true)); $digest = 'SHA-256=' . base64_encode(hash('sha256', $body, true));
$headersToSign = []; $headersToSign = [];
foreach (explode(' ', $signatureData['headers']) as $h) { foreach (explode(' ', $signatureData['headers']) as $h) {
@ -167,8 +169,8 @@ class HttpSignature
$headersToSign[$h] = 'post ' . $path; $headersToSign[$h] = 'post ' . $path;
} elseif ($h == 'digest') { } elseif ($h == 'digest') {
$headersToSign[$h] = $digest; $headersToSign[$h] = $digest;
} elseif (isset($inputHeaders[$h][0])) { } elseif (isset($headersContent[$h][0])) {
$headersToSign[$h] = $inputHeaders[$h]; $headersToSign[$h] = $headersContent[$h];
} }
} }
$signingString = self::_headersToSigningString($headersToSign); $signingString = self::_headersToSigningString($headersToSign);