tobias/friendica
1
0
Fork 0
Code Pull requests Activity

Fix headers (string to array) and make sure the signature doesn't change

Browse source
This commit is contained in:
Philipp Holzer 2021-08-25 13:45:00 +02:00
commit befd5c860d
No known key found for this signature in database
GPG key ID: 9A28B7D4FF5667BD
3 changed files with 14 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/Module/Magic.php
View file

@ -88,9 +88,10 @@ class Magic extends BaseModule
$exp = explode('/profile/', $contact['url']);
$basepath = $exp[0];
$header = [];
$header['Accept'] = 'application/x-dfrn+json, application/x-zot+json';
$header['X-Open-Web-Auth'] = Strings::getRandomHex();
$header = [
'Accept' => ['application/x-dfrn+json', 'application/x-zot+json'],
'X-Open-Web-Auth' => [Strings::getRandomHex()],
];
// Create a header that is signed with the local users private key.
$header = HTTPSignature::createSig(

16
src/Util/HTTPSignature.php
View file

@ -140,6 +140,9 @@ class HTTPSignature
public static function createSig($head, $prvkey, $keyid = 'Key')
{
$return_headers = [];
if (!empty($head)) {
$return_headers = $head;
}
$alg = 'sha512';
$algorithm = 'rsa-sha512';
@ -149,15 +152,7 @@ class HTTPSignature
$headerval = 'keyId="' . $keyid . '",algorithm="' . $algorithm
. '",headers="' . $x['headers'] . '",signature="' . $x['signature'] . '"';
$sighead = 'Authorization: Signature ' . $headerval;
if ($head) {
foreach ($head as $k => $v) {
$return_headers[] = $k . ': ' . $v;
}
}
$return_headers[] = $sighead;
$return_headers['Authorization'] = ['Signature ' . $headerval];
return $return_headers;
}
@ -176,6 +171,9 @@ class HTTPSignature
$fields = '';
foreach ($head as $k => $v) {
if (is_array($v)) {
$v = implode(', ', $v);
}
$headers .= strtolower($k) . ': ' . trim($v) . "\n";
if ($fields) {
$fields .= ' ';