2018-12-27 10:24:04 +00:00
|
|
|
|
# Portions of this file are derived from Pleroma:
|
|
|
|
|
# Copyright © 2017-2018 Pleroma Authors <https://pleroma.social>
|
|
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
# Upstream: https://git.pleroma.social/pleroma/pleroma/blob/develop/lib/pleroma/plugs/http_signature.ex
|
|
|
|
|
|
2020-01-26 20:36:50 +00:00
|
|
|
|
defmodule Mobilizon.Web.Plugs.HTTPSignatures do
|
2018-06-14 16:15:27 +00:00
|
|
|
|
@moduledoc """
|
|
|
|
|
Plug to check HTTP Signatures on every incoming request
|
|
|
|
|
"""
|
|
|
|
|
|
2018-05-17 09:32:23 +00:00
|
|
|
|
import Plug.Conn
|
2020-01-22 23:55:07 +00:00
|
|
|
|
|
2018-05-17 09:32:23 +00:00
|
|
|
|
require Logger
|
|
|
|
|
|
|
|
|
|
def init(options) do
|
|
|
|
|
options
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def call(%{assigns: %{valid_signature: true}} = conn, _opts) do
|
|
|
|
|
conn
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def call(conn, _opts) do
|
2019-12-03 10:29:51 +00:00
|
|
|
|
case get_req_header(conn, "signature") do
|
|
|
|
|
[signature | _] ->
|
|
|
|
|
if signature do
|
|
|
|
|
# set (request-target) header to the appropriate value
|
|
|
|
|
# we also replace the digest header with the one we computed
|
|
|
|
|
conn =
|
|
|
|
|
conn
|
|
|
|
|
|> put_req_header(
|
|
|
|
|
"(request-target)",
|
|
|
|
|
String.downcase("#{conn.method}") <> " #{conn.request_path}"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
conn =
|
|
|
|
|
if conn.assigns[:digest] do
|
|
|
|
|
conn
|
|
|
|
|
|> put_req_header("digest", conn.assigns[:digest])
|
|
|
|
|
else
|
|
|
|
|
conn
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
signature_valid = HTTPSignatures.validate_conn(conn)
|
|
|
|
|
Logger.debug("Is signature valid ? #{inspect(signature_valid)}")
|
|
|
|
|
assign(conn, :valid_signature, signature_valid)
|
2019-07-30 14:40:59 +00:00
|
|
|
|
else
|
2019-12-03 10:29:51 +00:00
|
|
|
|
Logger.debug("No signature header!")
|
2019-07-30 14:40:59 +00:00
|
|
|
|
conn
|
|
|
|
|
end
|
2018-11-12 17:17:53 +00:00
|
|
|
|
|
2019-12-03 10:29:51 +00:00
|
|
|
|
_ ->
|
|
|
|
|
conn
|
2018-05-17 09:32:23 +00:00
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
end
|