versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2025-12-06 08:28:19 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(federation): 🐛 Make HTTP header validation lowercase

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-08-27 02:17:07 +02:00
parent 9a917e2801
commit df5e06ca8a
No known key found for this signature in database
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
server/api/users/:uuid/inbox/index.ts
View file

@ -39,9 +39,9 @@ export const schemas = {
uuid: z.string().uuid(), uuid: z.string().uuid(),
}), }),
header: z.object({ header: z.object({
"X-Signature": z.string(), "x-signature": z.string(),
"X-Nonce": z.string(), "x-nonce": z.string(),
"X-Signed-By": z.string().url().or(z.literal("instance")), "x-signed-by": z.string().url().or(z.literal("instance")),
authorization: z.string().optional(), authorization: z.string().optional(),
}), }),
body: z.any(), body: z.any(),
@ -57,9 +57,9 @@ export default apiRoute((app) =>
async (context) => { async (context) => {
const { uuid } = context.req.valid("param"); const { uuid } = context.req.valid("param");
const { const {
"X-Signature": signature, "x-signature": signature,
"X-Nonce": nonce, "x-nonce": nonce,
"X-Signed-By": signedBy, "x-signed-by": signedBy,
authorization, authorization,
} = context.req.valid("header"); } = context.req.valid("header");
const logger = getLogger(["federation", "inbox"]); const logger = getLogger(["federation", "inbox"]);