erici/snacforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Tweaked check_signature() for GET variables.

Browse Source 
Instead of unconditionally stripping ? variables when retrieving the keyId,
try first calling actor_request() directly, and only strip them and retry
if it fails.
This commit is contained in:
grunfink
2026-02-03 07:15:22 +01:00
parent 8dd51011df
commit 083a3387fc
1 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
http.c
+13 -5
View File
@@ -182,14 +182,22 @@ int check_signature(const xs_dict *req, xs_str **err)
if ((p = strchr(keyId, '#')) != NULL)
*p = '\0';
/* also strip cgi variables */
if ((p = strchr(keyId, '?')) != NULL)
*p = '\0';
xs *actor = NULL;
int status;
if (!valid_status((status = actor_request(NULL, keyId, &actor)))) {
/* does it have ? variables? */
if ((p = strchr(keyId, '?')) != NULL) {
/* try first with them */
if (!valid_status((status = actor_request(NULL, keyId, &actor)))) {
*p = '\0';
/* retry stripping them */
status = actor_request(NULL, keyId, &actor);
}
}
else
status = actor_request(NULL, keyId, &actor);
if (!valid_status(status)) {
*err = xs_fmt("actor request error %s %d", keyId, status);
return 0;
}