From f862be2749b4f2d8dee99128d7e3064a69920e11 Mon Sep 17 00:00:00 2001 From: "mira.bat" <97340105+irafire@users.noreply.github.com> Date: Thu, 27 Jul 2023 17:01:15 +0200 Subject: Add an option to sign federated fetches for mastodon compatibility (#5898) * Fix player error modal Not hidden when we change the video * Correctly dispose player components * Sign cross-server fetch requests for mastodon AUTHORIZED_FETCH compatibilty * Add a remote fetch sign configuration knob * Federated fetches refactoring --------- Co-authored-by: Chocobozzz Co-authored-by: ira --- server/initializers/constants.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'server/initializers/constants.ts') diff --git a/server/initializers/constants.ts b/server/initializers/constants.ts index 9e5a02854..de5f11f8f 100644 --- a/server/initializers/constants.ts +++ b/server/initializers/constants.ts @@ -712,7 +712,8 @@ const ACTIVITY_PUB_ACTOR_TYPES: { [ id: string ]: ActivityPubActorType } = { const HTTP_SIGNATURE = { HEADER_NAME: 'signature', ALGORITHM: 'rsa-sha256', - HEADERS_TO_SIGN: [ '(request-target)', 'host', 'date', 'digest' ], + HEADERS_TO_SIGN_WITH_PAYLOAD: [ '(request-target)', 'host', 'date', 'digest' ], + HEADERS_TO_SIGN_WITHOUT_PAYLOAD: [ '(request-target)', 'host', 'date' ], CLOCK_SKEW_SECONDS: 1800 } -- cgit v1.2.3