pim/architex
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sign body contents for federation request if present

Browse source
This commit is contained in:
Pim Kunis 2021-08-14 17:15:02 +02:00
parent be9860f7d0
commit 46231b9b09
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/matrix_server_web/federation/sign_request_middleware.ex
View file

@ -12,7 +12,7 @@ defmodule MatrixServerWeb.Federation.Middleware.SignRequest do
defp sign_request(env, false), do: env
defp sign_request(%Tesla.Env{method: method, url: path, opts: opts} = env, true) do
defp sign_request(%Tesla.Env{method: method, url: path, opts: opts, body: body} = env, true) do
origin = MatrixServer.server_name()
object_to_sign = %{
@ -22,6 +22,9 @@ defmodule MatrixServerWeb.Federation.Middleware.SignRequest do
destination: Keyword.fetch!(opts, :server_name)
}
object_to_sign =
if not is_nil(body), do: Map.put(object_to_sign, :content, body), else: object_to_sign
with {:ok, sig, key_id} <- MatrixServer.KeyServer.sign_object(object_to_sign) do
sigs = %{origin => %{key_id => sig}}
auth_headers = create_signature_authorization_headers(sigs, origin)