Unfloyded/Legamunt
0
0
Fork 0
Code Activity

If HTTP signature is wrong and webfinger cache is stale, retry with resolve (#5129)

Browse source 
If the signature could not be verified and the webfinger of the account
was last retrieved longer than the cache period, try re-resolving the
account and then attempting to verify the signature again
This commit is contained in:
Eugen Rochko 2017-09-28 17:50:14 +02:00 • committed by GitHub
parent a3202f61af
commit 76f360c625
3 changed files with 19 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
app/controllers/concerns/signature_verification.rb
View file

@ -44,6 +44,15 @@ module SignatureVerification
if account.keypair.public_key.verify(OpenSSL::Digest::SHA256.new, signature, compare_signed_string)
@signed_request_account = account
@signed_request_account
elsif account.possibly_stale?
account = account.refresh!
if account.keypair.public_key.verify(OpenSSL::Digest::SHA256.new, signature, compare_signed_string)
@signed_request_account = account
@signed_request_account
else
@signed_request_account = nil
end
else
@signed_request_account = nil
end