sam/pleroma
sam/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
pleroma/lib/pleroma/web
History
Hélène 61254111e5
HttpSignaturePlug: accept standard (request-target) 
The (request-target) used by Pleroma is non-standard, but many HTTP
signature implementations do it this way due to a misinterpretation of
the draft 06 of HTTP signatures: "path" was interpreted as not having
the query, though later examples show that it must be the absolute path
with the query part of the URL as well.

This behavior is kept to make sure most software (Pleroma itself,
Mastodon, and probably others) do not break, but Pleroma now accepts
signatures for a (request-target) containing the query, as expected by
many HTTP signature libraries, and clarified in the draft 11 of HTTP
signatures.

Additionally, the new draft renamed (request-target) to @request-target.
We now support both for incoming requests' signatures.
2022-08-18 17:01:34 +02:00
..
activity_pub Merge branch 'from/upstream-develop/tusooa/2871-fix-local-public' into 'develop' 2022-08-02 05:39:50 +00:00
admin_api Pass in msgctxt for config translation strings 2022-07-14 17:41:33 -04:00
api_spec Merge branch 'from/upstream-develop/tusooa/sync-settings' into 'develop' 2022-08-12 01:34:36 +00:00
auth Copyright bump for 2022 2022-02-25 23:11:42 -07:00
channels Copyright bump for 2022 2022-02-25 23:11:42 -07:00
common_api Copyright bump for 2022 2022-02-25 23:11:42 -07:00
fallback Copyright bump for 2022 2022-02-25 23:11:42 -07:00
federator Copyright bump for 2022 2022-02-25 23:11:42 -07:00
feed Merge branch 'from/upstream-develop/tusooa/translate-pages' into 'develop' 2022-03-20 18:14:37 +00:00
mailer Copyright bump for 2022 2022-02-25 23:11:42 -07:00
mastodon_api Merge branch 'from/upstream-develop/tusooa/2871-fix-local-public' into 'develop' 2022-08-02 05:39:50 +00:00
media_proxy Fix Varnish 7 support by ensuring Media Preview Proxy fetches headers with a capitalized HEAD verb 2022-08-10 17:09:58 -04:00
metadata Copyright bump for 2022 2022-02-25 23:11:42 -07:00
mongoose_im Copyright bump for 2022 2022-02-25 23:11:42 -07:00
nodeinfo Copyright bump for 2022 2022-02-25 23:11:42 -07:00
o_auth Merge branch 'from/upstream-develop/tusooa/translate-pages' into 'develop' 2022-03-20 18:14:37 +00:00
o_status Copyright bump for 2022 2022-02-25 23:11:42 -07:00
pleroma_api Implement settings api 2022-07-16 01:20:25 -04:00
plugs HttpSignaturePlug: accept standard (request-target) 2022-08-18 17:01:34 +02:00
preload/providers Copyright bump for 2022 2022-02-25 23:11:42 -07:00
push Copyright bump for 2022 2022-02-25 23:11:42 -07:00
rich_media Copyright bump for 2022 2022-02-25 23:11:42 -07:00
static_fe Document way to do notice compatibility routes with Nginx reverse-proxy instead 2022-07-16 23:44:37 -06:00
templates Make mail and mailer translatable 2022-03-01 19:17:11 -05:00
twitter_api Merge branch 'develop' into 'from/develop/tusooa/emit-move' 2022-07-31 21:32:49 +00:00
utils Copyright bump for 2022 2022-02-25 23:11:42 -07:00
views Merge branch 'from/upstream-develop/tusooa/translate-pages' into 'develop' 2022-03-20 18:14:37 +00:00
web_finger Copyright bump for 2022 2022-02-25 23:11:42 -07:00
api_spec.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
common_api.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
controller_helper.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
embed_controller.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
endpoint.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
federator.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
gettext.ex Fix incorrect fallback when English is set to first language 2022-04-17 22:39:52 -04:00
instance_document.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
manifest_controller.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
media_proxy.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
metadata.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
o_auth.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
plug.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
preload.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
push.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
rel_me.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
router.ex Merge branch 'from/upstream-develop/tusooa/sync-settings' into 'develop' 2022-08-12 01:34:36 +00:00
shout_channel.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
streamer.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
translation_helpers.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
uploader_controller.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
web_finger.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
xml.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00