mirror of
https://github.com/superseriousbusiness/gotosocial.git
synced 2024-10-31 22:40:01 +00:00
af1a26a68f
On outgoing `GET` requests that are signed (e.g. authorized fetch), if the initial request fails with `401`, try again, but _without_ the query parameters included in the HTTP signature. This is primarily useful for compatibility with Mastodon; though hopefully this can be removed in the not-too-distant future, as they've started changing their behavior here. Signed-off-by: Milas Bowman <devnull@milas.dev>
43 lines
1.6 KiB
Go
43 lines
1.6 KiB
Go
// GoToSocial
|
|
// Copyright (C) GoToSocial Authors admin@gotosocial.org
|
|
// SPDX-License-Identifier: AGPL-3.0-or-later
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package transport
|
|
|
|
import (
|
|
"github.com/superseriousbusiness/httpsig"
|
|
)
|
|
|
|
var (
|
|
// http signer preferences
|
|
prefs = []httpsig.Algorithm{httpsig.RSA_SHA256}
|
|
digestAlgo = httpsig.DigestSha256
|
|
getHeaders = []string{httpsig.RequestTarget, "host", "date"}
|
|
postHeaders = []string{httpsig.RequestTarget, "host", "date", "digest"}
|
|
)
|
|
|
|
// NewGETSigner returns a new httpsig.Signer instance initialized with GTS GET preferences.
|
|
func NewGETSigner(expiresIn int64) (httpsig.SignerWithOptions, error) {
|
|
sig, _, err := httpsig.NewSigner(prefs, digestAlgo, getHeaders, httpsig.Signature, expiresIn)
|
|
return sig, err
|
|
}
|
|
|
|
// NewPOSTSigner returns a new httpsig.Signer instance initialized with GTS POST preferences.
|
|
func NewPOSTSigner(expiresIn int64) (httpsig.SignerWithOptions, error) {
|
|
sig, _, err := httpsig.NewSigner(prefs, digestAlgo, postHeaders, httpsig.Signature, expiresIn)
|
|
return sig, err
|
|
}
|