forks/forgejo
1
0
Fork 0
Code Releases Activity

activitypub: warn instead of error

Browse source
This commit is contained in:
oliverpool 2024-03-19 16:10:20 +01:00
parent e7abda6a0d
commit 7b576d0a5d
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
routers/api/v1/activitypub/reqsignature.go
View file

@ -14,6 +14,7 @@ import (
"code.gitea.io/gitea/modules/activitypub"
"code.gitea.io/gitea/modules/httplib"
"code.gitea.io/gitea/modules/log"
"code.gitea.io/gitea/modules/setting"
gitea_context "code.gitea.io/gitea/services/context"
@ -89,7 +90,8 @@ func verifyHTTPSignatures(ctx *gitea_context.APIContext) (authenticated bool, er
func ReqHTTPSignature() func(ctx *gitea_context.APIContext) {
return func(ctx *gitea_context.APIContext) {
if authenticated, err := verifyHTTPSignatures(ctx); err != nil {
ctx.ServerError("verifyHttpSignatures", err)
log.Warn("verifyHttpSignatures failed: %v", err)
ctx.Error(http.StatusBadRequest, "reqSignature", "request signature verification failed")
} else if !authenticated {
ctx.Error(http.StatusForbidden, "reqSignature", "request signature verification failed")
}

2
tests/integration/api_activitypub_person_test.go
View file

@ -108,6 +108,6 @@ func TestActivityPubPersonInbox(t *testing.T) {
// Unsigned request fails
req := NewRequest(t, "POST", user2inboxurl)
MakeRequest(t, req, http.StatusInternalServerError)
MakeRequest(t, req, http.StatusBadRequest)
})
}