Sharkey/packages/backend
dakkar 58c0ac6c89 check signatures with and without query - fix #1036
@Oneric explained:

> Spec says query params must be included in the signature; Mastodon
> being Mastodon used to always exclude it though and for
> compatibility everyone followed this. At some point GtS decided to
> follow spec instead which caused interop issues, but succeeded in
> getting Mastodon (and others like *oma) to accept incoming requests
> with (and also still without) query params though outgoing requests
> remaing query-param-free. Some still only accept query-param-less
> requests though and GtS uses a retry mechanism to resend any request
> failing with 401 with an query-parama-less signature once. (Also
> see:
> https://docs.gotosocial.org/en/latest/federation/http_signatures/ )
>
> So for incoming requests both versions need to be checked. For
> outgoing requests, unless you want to jump through retry hoops like
> GtS, omitting query-params is the safer bet for now (presumably this
> will only change if Mastodon ever decides to send out requests
> signed with query params)
2025-04-21 16:44:13 +01:00
..
.vscode
assets Merge tag '2024.10.1' into feature/2024.10 2024-11-08 15:52:37 +00:00
migration allow unsigned fetch for all system users 2025-03-16 10:49:16 -04:00
scripts implement redisForRateLimit 2025-02-18 10:36:29 -05:00
src check signatures with and without query - fix #1036 2025-04-21 16:44:13 +01:00
test fix unit tests in activitypub.ts 2025-03-21 12:37:06 -04:00
test-federation merge upstream 2025-02-03 2025-02-03 14:36:09 -05:00
test-server refactor/perf(backend): provide metadata statically (#14601) 2024-09-22 12:53:13 +09:00
.madgerc
.swcrc
eslint.config.js disable '@typescript-eslint/prefer-nullish-coalescing' for primitive types 2025-03-03 08:39:24 -05:00
jest.config.cjs
jest.config.e2e.cjs
jest.config.fed.cjs test(backend): add federation test (#14582) 2024-10-15 13:37:00 +09:00
jest.config.unit.cjs
jsconfig.json
ormconfig.js
package.json chore: update sfm to 0.24.6 2025-03-05 15:52:35 +01:00
README.md
tsconfig.json fix linting and type checks in all packages 2024-10-15 21:41:36 -04:00

Misskey Backend