Event-Federation/wordpress-activitypub
Event-Federation/wordpress-activitypub
7
1
Fork 0
Code Issues 3 Pull requests Projects Releases Wiki Activity Actions

Add secure mode to REST get requests

Browse source
This commit is contained in:
Django Doucet 2023-05-05 14:39:33 -06:00
parent 6c95a23d10
commit 9202c19730
2 changed files with 8 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
includes/class-signature.php
View file

@ -195,8 +195,7 @@ class Signature {
}
}
strtok( $signature_block['keyId'], '?');
$public_key = \Activitypub\get_remote_metadata_by_actor( $signature_block['keyId'] ); // phpcs:ignore
$public_key = \Activitypub\get_remote_metadata_by_actor( strtok( strip_fragment_from_url( $signature_block['keyId'] ), '?' ) ); // phpcs:ignore
if ( \is_wp_error( $public_key ) ) {
return $public_key;
} else {

14
includes/rest/class-server.php
View file

@ -90,13 +90,13 @@ class Server {
}
} else {
// SecureMode/Authorized fetch.
// $secure_mode = \get_option( 'activitypub_use_secure_mode', '0' );
// if ( $secure_mode ) {
// $verified_request = Signature::verify_http_signature( $request );
// if ( \is_wp_error( $verified_request ) ) {
// return $verified_request;
// }
// }
$secure_mode = \get_option( 'activitypub_use_secure_mode', '0' );
if ( $secure_mode ) {
$verified_request = Signature::verify_http_signature( $request );
if ( \is_wp_error( $verified_request ) ) {
return $verified_request;
}
}
}
}
}