Add plug to validate signed http requests.
This commit is contained in:
parent
e2e6365035
commit
a9c23e1c32
3 changed files with 43 additions and 1 deletions
19
lib/pleroma/plugs/http_signature.ex
Normal file
19
lib/pleroma/plugs/http_signature.ex
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
defmodule Pleroma.Web.Plugs.HTTPSignaturePlug do
|
||||
alias Pleroma.Web.HTTPSignatures
|
||||
import Plug.Conn
|
||||
|
||||
def init(options) do
|
||||
options
|
||||
end
|
||||
|
||||
def call(conn, opts) do
|
||||
if get_req_header(conn, "signature") do
|
||||
conn = conn
|
||||
|> put_req_header("(request-target)", String.downcase("#{conn.method} #{conn.request_path}"))
|
||||
|
||||
assign(conn, :valid_signature, HTTPSignatures.validate_conn(conn))
|
||||
else
|
||||
conn
|
||||
end
|
||||
end
|
||||
end
|
||||
Loading…
Add table
Add a link
Reference in a new issue