glenux-archive/cloutier--bird.makeup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

added AP call date check

Browse source
This commit is contained in:
Nicolas Constant 2020-12-03 02:37:03 -05:00
parent c86847a146
commit 9ff5707e92
No known key found for this signature in database
GPG key ID: 1E9F677FB01A5688
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/BirdsiteLive.Domain/UserService.cs
View file

@ -164,6 +164,14 @@ namespace BirdsiteLive.Domain
private async Task<SignatureValidationResult> ValidateSignature(string actor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders) private async Task<SignatureValidationResult> ValidateSignature(string actor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders)
{ {
//Check Date Validity
var date = requestHeaders["date"];
var d = DateTime.Parse(date).ToUniversalTime();
var now = DateTime.UtcNow;
var delta = Math.Abs((d - now).TotalSeconds);
if (delta > 30) return new SignatureValidationResult { SignatureIsValidated = false };
//Check Signature
var signatures = rawSig.Split(','); var signatures = rawSig.Split(',');
var signature_header = new Dictionary<string, string>(); var signature_header = new Dictionary<string, string>();
foreach (var signature in signatures) foreach (var signature in signatures)