GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

[ActivityPub][Inbox] Signature verification after Actor update would always fail

Browse Source
This commit is contained in:
Diogo Cordeiro 2020-06-28 00:49:55 +01:00
parent 4544f29832
commit 6e3954f3bb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/ActivityPub/actions/apinbox.php
View File

@ -106,7 +106,7 @@ class apInboxAction extends ManagedAction
ActivityPubReturn::error(json_encode($signatureData, true), 400); ActivityPubReturn::error(json_encode($signatureData, true), 400);
} }
list($verified, $headers) = HTTPSignature::verify($actor_public_key, $signatureData, $headers, $path, $body); list($verified, /*$headers*/) = HTTPSignature::verify($actor_public_key, $signatureData, $headers, $path, $body);
// If the signature fails verification the first time, update profile as it might have changed public key // If the signature fails verification the first time, update profile as it might have changed public key
if ($verified !== 1) { if ($verified !== 1) {