Signature.check_signature_policy/2 requires date or (created) to be signed and within signature_max_age (2 h) / signature_max_clock_skew (1 h), and requires a signed, hashed digest for requests with a body. Based on Akkoma's http_signatures fork (required headers, max_sig_age) and Mastodon's SignedRequest (clock skew margin). |
||
|---|---|---|
| .. | ||
| benchmark.exs | ||
| config.exs | ||
| description.exs | ||
| dev.exs | ||
| docker.exs | ||
| dokku.exs | ||
| emoji.txt | ||
| prod.exs | ||
| test.exs | ||