mirrors/snac2
3
0
Fork 0
mirror of https://codeberg.org/grunfink/snac2.git synced 2024-11-09 19:50:26 +03:00
Code Issues Packages Projects Releases Wiki Activity

Added support for HTTP signature pseudo-headers (created) and (expires).

Browse Source 
They are used in Lemmy.
This commit is contained in:
default 2023-01-08 00:26:48 +01:00
parent 9525be7495
commit 315a43a826
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
http.c
View File

@ -109,6 +109,8 @@ int check_signature(snac *snac, char *req)
xs *keyId = NULL;
xs *headers = NULL;
xs *signature = NULL;
xs *created = NULL;
xs *expires = NULL;
char *pubkey;
char *p;
@ -127,6 +129,12 @@ int check_signature(snac *snac, char *req)
else
if (xs_startswith(v, "signature"))
signature = xs_crop(xs_dup(v), 11, -1);
else
if (xs_startswith(v, "created"))
created = xs_crop(xs_dup(v), 9, -1);
else
if (xs_startswith(v, "expires"))
expires = xs_crop(xs_dup(v), 9, -1);
}
}
@ -170,6 +178,14 @@ int check_signature(snac *snac, char *req)
if (strcmp(v, "(request-target)") == 0) {
ss = xs_fmt("%s: post %s", v, xs_dict_get(req, "path"));
}
else
if (strcmp(v, "(created)") == 0) {
ss = xs_fmt("%s: %s", v, created);
}
else
if (strcmp(v, "(expires)") == 0) {
ss = xs_fmt("%s: %s", v, expires);
}
else {
/* add the header */
if ((hc = xs_dict_get(req, v)) == NULL) {
@ -187,7 +203,8 @@ int check_signature(snac *snac, char *req)
}
if (xs_evp_verify(pubkey, sig_str, strlen(sig_str), signature) != 1) {
snac_debug(snac, 1, xs_fmt("rsa verify error %s", keyId));
snac_debug(snac, 0, xs_fmt("rsa verify error %s", keyId));
return 0;
}
return 1;