versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2025-12-06 08:28:19 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(federation): 🐛 Make HTTP header validation lowercase

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-08-27 02:17:07 +02:00
parent 9a917e2801
commit df5e06ca8a
No known key found for this signature in database
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
server/api/users/:uuid/inbox/index.ts
View file

@ -39,9 +39,9 @@ export const schemas = {
uuid: z.string().uuid(),
}),
header: z.object({
"X-Signature": z.string(),
"X-Nonce": z.string(),
"X-Signed-By": z.string().url().or(z.literal("instance")),
"x-signature": z.string(),
"x-nonce": z.string(),
"x-signed-by": z.string().url().or(z.literal("instance")),
authorization: z.string().optional(),
}),
body: z.any(),
@ -57,9 +57,9 @@ export default apiRoute((app) =>
async (context) => {
const { uuid } = context.req.valid("param");
const {
"X-Signature": signature,
"X-Nonce": nonce,
"X-Signed-By": signedBy,
"x-signature": signature,
"x-nonce": nonce,
"x-signed-by": signedBy,
authorization,
} = context.req.valid("header");
const logger = getLogger(["federation", "inbox"]);