activitypub: add digest header to outbound messages and sign it

2018-07-31 21:41:18 +00:00 · 2018-07-31 21:41:18 +00:00 · 2890aef9e8
commit 2890aef9e8
parent ba72c51a0f
1 changed files with 7 additions and 1 deletions
--- a/lib/pleroma/web/activity_pub/activity_pub.ex
+++ b/lib/pleroma/web/activity_pub/activity_pub.ex
@ -641,8 +641,14 @@ defmodule Pleroma.Web.ActivityPub.ActivityPub do
    Logger.info("Federating #{id} to #{inbox}")
    host = URI.parse(inbox).host

+    digest = "SHA-256=" <> (:crypto.hash(:sha256, json) |> Base.encode64())
+
    signature =
-      Pleroma.Web.HTTPSignatures.sign(actor, %{host: host, "content-length": byte_size(json)})
+      Pleroma.Web.HTTPSignatures.sign(actor, %{
+        host: host,
+        "content-length": byte_size(json),
+        digest: digest
+      })

    @httpoison.post(
      inbox,