28 lines
670 B
Elixir
28 lines
670 B
Elixir
defmodule Pleroma.Web.Plugs.HTTPSignaturePlug do
|
|
alias Pleroma.Web.HTTPSignatures
|
|
import Plug.Conn
|
|
require Logger
|
|
|
|
def init(options) do
|
|
options
|
|
end
|
|
|
|
def call(%{assigns: %{valid_signature: true}} = conn, opts) do
|
|
conn
|
|
end
|
|
|
|
def call(conn, opts) do
|
|
user = conn.params["actor"]
|
|
Logger.debug("Checking sig for #{user}")
|
|
if get_req_header(conn, "signature") do
|
|
conn = conn
|
|
|> put_req_header("(request-target)", String.downcase("#{conn.method}") <> " #{conn.request_path}")
|
|
|
|
assign(conn, :valid_signature, HTTPSignatures.validate_conn(conn))
|
|
else
|
|
Logger.debug("No signature header!")
|
|
conn
|
|
end
|
|
end
|
|
end
|