pleroma/lib/pleroma
Hélène 61254111e5
HttpSignaturePlug: accept standard (request-target)
The (request-target) used by Pleroma is non-standard, but many HTTP
signature implementations do it this way due to a misinterpretation of
the draft 06 of HTTP signatures: "path" was interpreted as not having
the query, though later examples show that it must be the absolute path
with the query part of the URL as well.

This behavior is kept to make sure most software (Pleroma itself,
Mastodon, and probably others) do not break, but Pleroma now accepts
signatures for a (request-target) containing the query, as expected by
many HTTP signature libraries, and clarified in the draft 11 of HTTP
signatures.

Additionally, the new draft renamed (request-target) to @request-target.
We now support both for incoming requests' signatures.
2022-08-18 17:01:34 +02:00
..
activity Lint 2022-05-06 13:54:13 -04:00
bbs Copyright bump for 2022 2022-02-25 23:11:42 -07:00
captcha Copyright bump for 2022 2022-02-25 23:11:42 -07:00
chat Copyright bump for 2022 2022-02-25 23:11:42 -07:00
config Better way of getting keys 2022-07-01 12:15:02 +02:00
conversation Copyright bump for 2022 2022-02-25 23:11:42 -07:00
docs Pass in msgctxt for config translation strings 2022-07-14 17:41:33 -04:00
ecto_type EctoType: Add MIME validator 2022-03-17 22:37:26 +01:00
emails Merge branch 'from/upstream-develop/tusooa/translate-pages' into 'develop' 2022-03-20 18:14:37 +00:00
emoji Emoji: apply recommended tail call changes 2022-07-27 02:08:46 +02:00
gopher Copyright bump for 2022 2022-02-25 23:11:42 -07:00
gun Copyright bump for 2022 2022-02-25 23:11:42 -07:00
helpers Copyright bump for 2022 2022-02-25 23:11:42 -07:00
http hackney adapter helper & reverse proxy client: enable TLSv1.3 2022-05-31 00:51:45 +02:00
instances Copyright bump for 2022 2022-02-25 23:11:42 -07:00
mfa Copyright bump for 2022 2022-02-25 23:11:42 -07:00
migration_helper Copyright bump for 2022 2022-02-25 23:11:42 -07:00
migrators Copyright bump for 2022 2022-02-25 23:11:42 -07:00
object Copyright bump for 2022 2022-02-25 23:11:42 -07:00
password Copyright bump for 2022 2022-02-25 23:11:42 -07:00
reverse_proxy hackney adapter helper & reverse proxy client: enable TLSv1.3 2022-05-31 00:51:45 +02:00
telemetry Copyright bump for 2022 2022-02-25 23:11:42 -07:00
tesla/middleware Copyright bump for 2022 2022-02-25 23:11:42 -07:00
tests Copyright bump for 2022 2022-02-25 23:11:42 -07:00
upload Descriptions from exif data with only whitespeces are considered empty 2022-07-01 13:47:23 +02:00
uploaders Copyright bump for 2022 2022-02-25 23:11:42 -07:00
user Allow users to create backups without providing email address 2022-05-07 00:23:55 -04:00
web HttpSignaturePlug: accept standard (request-target) 2022-08-18 17:01:34 +02:00
workers Treat containment failure as cancel in ReceiverWorker 2022-08-08 08:41:33 -04:00
activity.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
announcement_read_relationship.ex Implement announcement read relationships 2022-03-08 13:09:49 -05:00
announcement.ex Use utc_datetime in db schema 2022-03-18 11:17:22 -04:00
application_requirements.ex Rename the Exiftool module 2022-07-01 12:15:02 +02:00
application.ex Allow higher amount of restarts for Pleroma.Repo during testing 2022-07-14 13:50:44 +02:00
bookmark.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
caching.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
captcha.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
chat.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
clippy.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
config_db.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
config.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
constants.ex EctoType: Add MIME validator 2022-03-17 22:37:26 +01:00
conversation.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
counter_cache.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
data_migration.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
delivery.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
ecto_enums.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
emoji-test.txt Add unicode 14 support 2022-02-21 12:28:33 -06:00
emoji.ex Emoji: split qualification variation into a module 2022-07-26 02:04:12 +02:00
filter.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
following_relationship.ex Merge branch 'develop' into 'from/develop/tusooa/emit-move' 2022-07-31 21:32:49 +00:00
formatter.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
frontend.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
gun.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
hashtag.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
healthcheck.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
html.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
http.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
instances.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
job_queue_monitor.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
jwt.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
keys.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
list.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
logging.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
maintenance.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
maps.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
marker.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
mfa.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
moderation_log.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
notification.ex Merge branch 'delete_report_notifs_when_demoting_from_superuser' into 'develop' 2022-03-20 18:13:19 +00:00
object_tombstone.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
object.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
otp_version.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
pagination.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
password_reset_token.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
registration.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
release_tasks.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
repo.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
report_note.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
reverse_proxy.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
scheduled_activity.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
signature.ex fix resolution of GTS user keys 2022-08-16 18:51:34 +02:00
stats.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
thread_mute.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
upload.ex Use EXIF data of image to prefill image description 2022-07-01 12:13:46 +02:00
user_invite_token.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
user_note.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
user_relationship.ex Use :utc_datetime 2022-07-16 16:28:22 +02:00
user.ex bugfix/follow-state (#104) 2022-08-03 01:07:53 -04:00
utils.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
web.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00
xml_builder.ex Copyright bump for 2022 2022-02-25 23:11:42 -07:00