GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

[ActivityPub][Inbox] Signature verification after Actor update would always fail

Browse Source
This commit is contained in:
Diogo Cordeiro 2020-06-28 00:49:55 +01:00 committed by Diogo Peralta Cordeiro
parent f93d8694c3
commit 78f0ab022c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/ActivityPub/actions/apinbox.php
View File

@ -106,7 +106,7 @@ class apInboxAction extends ManagedAction
ActivityPubReturn::error(json_encode($signatureData, true), 400);
}
list($verified, $headers) = HTTPSignature::verify($actor_public_key, $signatureData, $headers, $path, $body);
list($verified, /*$headers*/) = HTTPSignature::verify($actor_public_key, $signatureData, $headers, $path, $body);
// If the signature fails verification the first time, update profile as it might have changed public key
if ($verified !== 1) {