]>
git.immae.eu Git - github/Chocobozzz/PeerTube.git/blob - server/middlewares/secure.js
3 const db
= require('../initializers/database')
4 const logger
= require('../helpers/logger')
5 const peertubeCrypto
= require('../helpers/peertube-crypto')
7 const secureMiddleware
= {
11 function checkSignature (req
, res
, next
) {
12 const host
= req
.body
.signature
.host
13 db
.Pod
.loadByHost(host
, function (err
, pod
) {
15 logger
.error('Cannot get signed host in body.', { error: err
})
16 return res
.sendStatus(500)
20 logger
.error('Unknown pod %s.', host
)
21 return res
.sendStatus(403)
24 logger
.debug('Checking signature from %s.', host
)
28 signatureShouldBe
= req
.body
.data
30 signatureShouldBe
= host
33 const signatureOk
= peertubeCrypto
.checkSignature(pod
.publicKey
, signatureShouldBe
, req
.body
.signature
.signature
)
35 if (signatureOk
=== true) {
43 logger
.error('Signature is not okay in body for %s.', req
.body
.signature
.host
)
44 return res
.sendStatus(403)
48 // ---------------------------------------------------------------------------
50 module
.exports
= secureMiddleware