NoLog.cz/gancio
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity

fix digest httpsignature header

Browse source
This commit is contained in:
les 2021-03-18 17:57:37 +01:00
parent 5bb7a709aa
commit e95096dd97
No known key found for this signature in database
GPG key ID: 352918250B012177
1 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
server/federation/helpers.js
View file

@ -34,7 +34,6 @@ const Helpers = {
},
async signAndSend (message, inbox) {
log.debug('sign and send', inbox)
// get the URI of the actor object and append 'inbox' to it
const inboxUrl = new url.URL(inbox)
const privkey = settingsController.secretSettings.privateKey
@ -44,26 +43,26 @@ const Helpers = {
const digest = crypto.createHash('sha256')
.update(message)
.digest('base64')
const stringToSign = `(request-target): post ${inboxUrl.pathname}\nhost: ${inboxUrl.hostname}\ndate: ${d.toUTCString()}\ndigest: ${digest}`
const stringToSign = `(request-target): post ${inboxUrl.pathname}\nhost: ${inboxUrl.hostname}\ndate: ${d.toUTCString()}\ndigest: SHA-256=${digest}`
signer.update(stringToSign)
signer.end()
const signature = signer.sign(privkey)
const signature_b64 = signature.toString('base64')
const header = `keyId="${config.baseurl}/federation/u/${settingsController.settings.instance_name}",headers="(request-target) host date digest",signature="${signature_b64}"`
const header = `keyId="${config.baseurl}/federation/u/${settingsController.settings.instance_name}",algorithm="rsa-sha265",headers="(request-target) host date digest",signature="${signature_b64}"`
try {
const ret = await axios(inbox, {
headers: {
Host: inboxUrl.hostname,
Date: d.toUTCString(),
Signature: header,
Digest: `SHA256=${digest}`,
Digest: `SHA-256=${digest}`,
'Content-Type': 'application/activity+json; charset=utf-8',
Accept: 'application/activity+json, application/json; chartset=utf-8'
},
method: 'post',
data: message
})
log.debug(`sign ${ret.status} => ${ret.data}`)
log.debug(`signed ${ret.status} => ${ret.data}`)
} catch (e) {
log.error(`Response: ${e.response.status} ${e.response.data}`)
}