gearheads
/
mastodon
Archived
2
0
Fork 0
Code Releases 4 Activity

HTTP signatures spec no longer requires algorithms field (#7525) 

Fix #7520
gh/stable
Eugen Rochko 2018-05-17 04:03:28 +02:00 committed by GitHub
parent 6bed372ad2
commit dfb6907e08
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/concerns/signature_verification.rb
View File

@ -107,9 +107,7 @@ module SignatureVerification
def incompatible_signature?(signature_params) def incompatible_signature?(signature_params)
signature_params['keyId'].blank? || signature_params['keyId'].blank? ||
signature_params['signature'].blank? || signature_params['signature'].blank?
signature_params['algorithm'].blank? ||
signature_params['algorithm'] != 'rsa-sha256'
end end
def account_from_key_id(key_id) def account_from_key_id(key_id)