slon-project/slon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Slon/Modules/ActivityPub: Add http_signature_is_always_valid option

Browse source 
For testing purposes, we can set http_signature_is always_valid to any
value in the db settings Object. This allows us e.g. to replay
ActivityPub payloads using curl, without having to deal with signatures
while we are implementing new features.
This commit is contained in:
Alec Murphy 2025-03-15 18:02:47 -04:00
parent 11d114aa9d
commit c4ec8ae999
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
Slon/Modules/ActivityPub.HC
View file

@ -28,6 +28,10 @@ Bool @slon_activitypub_http_signature_is_valid(SlonHttpSession* session, U8* use
SLON_SCRATCH_BUFFER_AND_REQUEST_JSON SLON_SCRATCH_BUFFER_AND_REQUEST_JSON
no_warn scratch_buffer; no_warn scratch_buffer;
if (db->o("settings")->@("http_signature_is_always_valid")) {
goto http_signature_skip_digest_check;
}
// 1. Check that we have a signature and digest // 1. Check that we have a signature and digest
if (!StrLen(session->header("signature")) || !StrLen(session->header("digest"))) { if (!StrLen(session->header("signature")) || !StrLen(session->header("digest"))) {
AdamLog("[verify_signature] no signature or digest header present\n"); AdamLog("[verify_signature] no signature or digest header present\n");
@ -59,6 +63,7 @@ Bool @slon_activitypub_http_signature_is_valid(SlonHttpSession* session, U8* use
Free(computed_digest); Free(computed_digest);
} }
http_signature_skip_digest_check:
// Parse values from Signature header // Parse values from Signature header
U8* signature_header = session->header("signature"); U8* signature_header = session->header("signature");
I64 signature_fragment_count = 0; I64 signature_fragment_count = 0;
@ -101,6 +106,10 @@ Bool @slon_activitypub_http_signature_is_valid(SlonHttpSession* session, U8* use
session->actor_for_key_id = @slon_strnew(session, keyId); session->actor_for_key_id = @slon_strnew(session, keyId);
StrFind("#", session->actor_for_key_id)[0] = NULL; StrFind("#", session->actor_for_key_id)[0] = NULL;
if (db->o("settings")->@("http_signature_is_always_valid")) {
return TRUE;
}
// Check if public key is cached for keyId, if not, fetch it // Check if public key is cached for keyId, if not, fetch it
if (!db->o("public_keys")->@(keyId)) { if (!db->o("public_keys")->@(keyId)) {