tarrien/Mastodon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add ActivityPub secure mode (#11269)

Browse Source 
* Add HTTP signature requirement for served ActivityPub resources

* Change `SECURE_MODE` to `AUTHORIZED_FETCH`

* Add 'Signature' to 'Vary' header and improve code style

* Improve code style by adding `public_fetch_mode?` method
This commit is contained in:
Eugen Rochko
2019-07-11 20:11:09 +02:00
committed by GitHub
parent 4e1260feaa
commit 5bf67ca913
14 changed files with 89 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/activitypub/replies_controller.rb
View File

@ -7,11 +7,13 @@ class ActivityPub::RepliesController < Api::BaseController
DESCENDANTS_LIMIT = 60
before_action :require_signature!, if: :authorized_fetch_mode?
before_action :set_status
before_action :set_cache_headers
before_action :set_replies
def index
expires_in 0, public: public_fetch_mode?
render json: replies_collection_presenter, serializer: ActivityPub::CollectionSerializer, adapter: ActivityPub::Adapter, content_type: 'application/activity+json', skip_activities: true
end