Mizah/Sharkey
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

authorized fetch #217

Browse source 
the implementation is copied from the other places we already check
HTTP signatures, and cross-checked with Firefish's implementation
This commit is contained in:
dakkar 2023-12-20 12:17:59 +00:00
parent 6526968f2d
commit e5ea882ed7
4 changed files with 136 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.config/example.yml
View file

@ -212,6 +212,8 @@ proxyRemoteFiles: true
# Sign to ActivityPub GET request (default: true)
signToActivityPubGet: true
# check that inbound ActivityPub GET requests are signed ("authorized fetch")
checkActivityPubGetSignature: false
# For security reasons, uploading attachments from the intranet is prohibited,
# but exceptions can be made from the following settings. Default value is "undefined".