grunfink
083a3387fc
Tweaked check_signature() for GET variables.
...
Instead of unconditionally stripping ? variables when retrieving the keyId,
try first calling actor_request() directly, and only strip them and retry
if it fails.
2026-02-03 07:15:22 +01:00
grunfink
11af00194e
Bumped copyright year.
2026-01-01 17:01:03 +01:00
grunfink
212284c792
xs_http.h: new file.
2025-10-13 13:07:06 +02:00
default
932227bbac
Bumped copyright year.
2025-01-08 16:59:14 +01:00
default
8cf7559a7e
Added more const.
2024-05-23 10:01:37 +02:00
default
4777fc86cb
Added const everywhere.
2024-05-21 14:12:15 +02:00
iwojim0
7312f4ce51
Ability to federate with hidden networks #93 (update for v2.49)
2024-03-09 14:37:54 +00:00
default
951e6b2315
Replaced all xs_dict_iter() with xs_dict_next().
2024-03-09 08:58:43 +01:00
default
755d997fb1
Updated copyright year.
2024-01-04 09:22:03 +01:00
default
607335aa74
Try to avoid host header misconfigurations in check_signature().
2024-01-03 09:22:07 +01:00
default
6bd8aed25d
Made check_signature() a bit clearer.
2024-01-03 08:56:17 +01:00
default
de6d61f66f
Also strip cgi variables (things after ?) in key request for checking.
2023-12-18 10:07:42 +01:00
default
af912dba0b
actor_request() accepts again an optional snac argument.
2023-12-17 19:53:54 +01:00
default
c06b74cc8e
Revert "Reverted actor_request() without user."
...
This reverts commit 8d0a69cd75
2023-12-11 10:12:57 +01:00
default
8d0a69cd75
Reverted actor_request() without user.
...
Some sites require even Person requests to be signed.
2023-12-11 08:00:49 +01:00
default
09b926c168
More functions do not require the user argument.
2023-12-10 17:50:03 +01:00
default
0e6c5f9463
actor_request() does not need a user argument.
2023-12-10 17:46:54 +01:00
default
90179f8459
activitypub_request() may have a NULL user.
...
In the NULL user case, only non-signed requests will be done,
but it's probably enough for actor requests in most cases.
2023-12-10 10:27:45 +01:00
default
0f8c0cd694
Updated comment in headers.
2023-07-28 11:34:18 +02:00
default
f5e437a100
Fixed crash in check_signature().
2023-06-13 22:09:20 +02:00
default
970ad7a540
Got rid of xs_encdec.h.
2023-05-17 10:08:57 +02:00
default
be5f08e6c3
Use xs_replace_n() where it suits.
2023-05-02 06:49:00 +02:00
default
aaf6ff20c1
Add the baseurl to the user agent in the signed GET.
2023-03-02 17:28:29 +01:00
default
b2ce9323db
Added the url to srv_archive().
2023-03-02 17:13:17 +01:00
default
d75a22adab
New function srv_archive_error().
2023-03-01 08:25:36 +01:00
default
829cdb6721
Move the #main-key adding back to the origin.
2023-02-02 04:16:17 +01:00
default
adff9c55e2
New function http_signed_request_raw().
2023-02-02 04:05:50 +01:00
default
463439283a
Minor header tweaks.
2023-02-02 03:49:38 +01:00
default
fd1e281cba
Use a shorter timeout for first output connections.
2023-01-24 15:06:58 +01:00
default
a38c7aeadc
Updated year in copyright notices.
2023-01-17 09:50:16 +01:00
default
bb0d8f2a27
Backport from xs.
2023-01-12 09:28:02 +01:00
default
1aac24ca75
More keyId/signature tweaks.
2023-01-11 09:38:19 +01:00
default
23eb05ee99
Use the already loaded actor in check_signature().
2023-01-10 18:21:00 +01:00
default
f5ac531c92
Log check_signature() errors.
2023-01-09 08:11:29 +01:00
default
54d1013ea9
More work in check_signature() error archiving.
2023-01-08 10:19:25 +01:00
default
7bcac99c88
Don't use goto in check_signature().
...
It seems to interfere with cleanup functions in llvm.
2023-01-08 10:11:33 +01:00
default
1f949b48cf
Move the ~/error directory to where it belongs.
2023-01-08 10:04:01 +01:00
default
448c4ad7a2
The headers of signature errors are archived in the ~/error directory (if exists).
2023-01-08 10:02:31 +01:00
default
384cb7418a
Minor refactor to check_signature().
2023-01-08 09:55:13 +01:00
default
315a43a826
Added support for HTTP signature pseudo-headers (created) and (expires).
...
They are used in Lemmy.
2023-01-08 00:26:48 +01:00
default
849913dc59
Use the time functions of xs_time.h.
2022-10-02 09:27:17 +02:00
default
2688230a19
Fixed check_signature().
2022-09-30 04:33:42 +02:00
default
73a02fca6f
More work in check_signature() (non-working).
2022-09-29 15:08:56 +02:00
default
392c014c26
New function check_signature() (incomplete).
2022-09-29 14:44:24 +02:00
default
f1dbd8e700
New variable USER_AGENT.
2022-09-27 18:01:51 +02:00
default
acb4bcd80f
Use xs_evp_sign() for signing.
2022-09-26 14:45:31 +02:00
default
8f738e1417
Serve the actor as the correct content-type.
2022-09-26 12:29:26 +02:00
default
bf1ee12da2
More sign work (I'm tired).
2022-09-25 21:45:58 +02:00
default
e132ce5076
New function msg_actor().
2022-09-25 21:02:47 +02:00
default
fcf9329449
Minor tweak in http signatures.
2022-09-25 18:54:05 +02:00
grunfink
default
iwojim0