Merge branch 'fix/http-signatures-post' into 'develop'

activitypub: publisher: add (request-target) to http signature when POSTing

See merge request pleroma/pleroma!1569
This commit is contained in:
rinpatch 2019-08-14 19:16:52 +00:00
commit dc902ad3df
2 changed files with 3 additions and 1 deletions

View file

@ -46,7 +46,7 @@ defmodule Pleroma.Web.ActivityPub.Publisher do
"""
def publish_one(%{inbox: inbox, json: json, actor: %User{} = actor, id: id} = params) do
Logger.info("Federating #{id} to #{inbox}")
host = URI.parse(inbox).host
%{host: host, path: path} = URI.parse(inbox)
digest = "SHA-256=" <> (:crypto.hash(:sha256, json) |> Base.encode64())
@ -56,6 +56,7 @@ defmodule Pleroma.Web.ActivityPub.Publisher do
signature =
Pleroma.Signature.sign(actor, %{
"(request-target)": "post #{path}",
host: host,
"content-length": byte_size(json),
digest: digest,