michael/pyfedi
1
0
Fork 0
mirror of https://codeberg.org/rimu/pyfedi synced 2025-01-24 11:51:27 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

verify signatures produced by Discourse #111

Browse source
This commit is contained in:
rimu 2024-05-27 22:44:42 +12:00
parent d1f7d35a83
commit 53b64942c9
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
app/activitypub/signature.py
View file

@ -172,6 +172,17 @@ class RsaKeys:
return private_key_serialized, public_key_serialized return private_key_serialized, public_key_serialized
# Signatures
def signature_part(signature, key):
parts = signature.split(',')
for part in parts:
part_parts = part.split('=')
part_parts[0] = part_parts[0].strip()
if part_parts[0] == key:
return part_parts[1].strip().replace('"', '')
return ''
class HttpSignature: class HttpSignature:
""" """
Allows for calculation and verification of HTTP signatures Allows for calculation and verification of HTTP signatures
@ -198,6 +209,10 @@ class HttpSignature:
for header_name in header_names: for header_name in header_names:
if header_name == "(request-target)": if header_name == "(request-target)":
value = f"{request.method.lower()} {request.path}" value = f"{request.method.lower()} {request.path}"
elif header_name == '(created)':
value = signature_part(request.headers.get('Signature'), 'created') # Don't use parse_signature because changing HttpSignatureDetails changes everything & I don't have the spoons for that ATM.
elif header_name == '(expires)':
value = signature_part(request.headers.get('Signature'), 'expires')
elif header_name == "content-type": elif header_name == "content-type":
value = request.headers.get("Content-Type", "") value = request.headers.get("Content-Type", "")
elif header_name == "content-length": elif header_name == "content-length":