tootlab-mastodon/app/services/activitypub
ThibG 28b482874a Improvements to signature verification (#9667)
* Refactor signature verification a bit

* Rescue signature verification if recorded public key is invalid

Fixes #8822

* Always re-fetch AP signing key when HTTP Signature verification fails

But when the account is not marked as stale, avoid fetching collections and
media, and avoid webfinger round-trip.

* Apply stoplight to key/account update as well as initial key retrieval
2019-01-07 21:45:13 +01:00
..
fetch_featured_collection_service.rb Guard against nil URLs in Request class (#7284) 2018-05-02 15:44:22 +02:00
fetch_remote_account_service.rb Improvements to signature verification (#9667) 2019-01-07 21:45:13 +01:00
fetch_remote_key_service.rb Improve federated ID validation (#8372) 2018-08-22 20:55:14 +02:00
fetch_remote_status_service.rb Improve federated ID validation (#8372) 2018-08-22 20:55:14 +02:00
process_account_service.rb Improvements to signature verification (#9667) 2019-01-07 21:45:13 +01:00
process_collection_service.rb Reduce usage of LD signatures (#9659) 2018-12-30 09:48:59 +01:00