Signature.check_signature_policy/2 requires date or (created) to be signed and within signature_max_age (2 h) / signature_max_clock_skew (1 h), and requires a signed, hashed digest for requests with a body. Based on Akkoma's http_signatures fork (required headers, max_sig_age) and Mastodon's SignedRequest (clock skew margin). |
||
|---|---|---|
| .. | ||
| administration | ||
| assets | ||
| configuration | ||
| development | ||
| installation | ||
| clients.md | ||
| index.md | ||