2
2
mirror of https://github.com/mastodon/mastodon synced 2025-04-12 00:56:38 +02:00
ThibG fa929d8b81
Tweak signature verification ()
* Add more specific error message when request body digest is invalid

This may help other implementors debug their implementation.

* Relax Host parameter requirement to GET requests

The only POST requests processed by Mastodon need objects/actors (including
their host) to be explicitly mentioned in the request's body, so replaying
a legitimate request to another host should not be a security issue.

* Support Digest headers using multiple algorithms or lowercase alogirthm names
2020-11-01 23:38:31 +01:00
..
2020-10-12 16:33:49 +02:00
2020-10-12 16:33:49 +02:00