aiden
/
mastodon
mirror of https://github.com/mastodon/mastodon
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,567 Commits
153 Branches
284 Tags
1.0 GiB
Commit Graph

5 Commits (08deec4c84f00d241d60a6962806d5abe4638edd)

Author SHA1 Message Date
Daigo 3 Dango 01d6aa0397 Suppress backtrace from Request#perform ()
Eugen Rochko d2f56d1cbc Change max redirects followed to 2 () 
I see no reason to allow more than that. Usually a redirect is
HTTP->HTTPS, then maybe URL structure changed, but more than that
is highly unlikely to be a legitimate use case.
unarist a4c500176b Include requested URL into the message on network errors ()
Eugen Rochko fdea173237 Add Digest header to requests with body, handle acct and URI keyId ()
Eugen Rochko 1618b68bfa HTTP signatures () 
* Add Request class with HTTP signature generator

Spec: https://tools.ietf.org/html/draft-cavage-http-signatures-06

* Add HTTP signature verification concern

* Add test for SignatureVerification concern

* Add basic test for Request class

* Make PuSH subscribe/unsubscribe requests use new Request class

Accidentally fix lease_seconds not being set and sent properly, and
change the new minimum subscription duration to 1 day

* Make all PuSH workers use new Request class

* Make Salmon sender use new Request class

* Make FetchLinkService use new Request class

* Make FetchAtomService use the new Request class

* Make Remotable use the new Request class

* Make ResolveRemoteAccountService use the new Request class

* Add more tests

* Allow +-30 seconds window for signed request to remain valid

* Disable time window validation for signed requests, restore 7 days
as PuSH subscription duration (which was previous default due to a bug)