hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

ReceiverWorker: Check that signature matches actor

Browse source
This commit is contained in:
Phantasm 2026-04-30 01:34:14 +02:00
commit 42683e79df
No known key found for this signature in database
GPG key ID: 2669E588BCC634C8
2 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
test/pleroma/workers/receiver_worker_test.exs
View file

@ -304,7 +304,7 @@ defmodule Pleroma.Workers.ReceiverWorkerTest do
end
test "cancels when signature actor does not match payload actor" do
alice = insert(:user, local: false, ap_id: "https://example.com/users/alice")
_alice = insert(:user, local: false, ap_id: "https://example.com/users/alice")
bob = insert(:user, local: false, ap_id: "https://example.com/users/bob")
note = insert(:note, user: bob, object_local: false)
@ -343,7 +343,7 @@ defmodule Pleroma.Workers.ReceiverWorkerTest do
with_mock Pleroma.Signature, [:passthrough],
refetch_public_key: fn _conn -> {:ok, :fake_public_key} end,
validate_signature: fn _conn -> true end do
assert {:cancel, :invalid_signature} = ReceiverWorker.perform(oban_job)
assert {:cancel, :actor_signature_mismatch} = ReceiverWorker.perform(oban_job)
end
end
end