activitypub: verify remote http signature digests by recomputing the digest and replacing the digest header

This commit is contained in:
William Pitcock 2018-07-31 23:17:47 +00:00
commit 8da406afa2
3 changed files with 22 additions and 1 deletions

View file

@ -35,7 +35,8 @@ defmodule Pleroma.Web.Endpoint do
parsers: [:urlencoded, :multipart, :json],
pass: ["*/*"],
json_decoder: Jason,
length: Application.get_env(:pleroma, :instance) |> Keyword.get(:upload_limit)
length: Application.get_env(:pleroma, :instance) |> Keyword.get(:upload_limit),
body_reader: {Pleroma.Web.Plugs.DigestPlug, :read_body, []}
)
plug(Plug.MethodOverride)