- def call(conn, opts) do
- if get_req_header(conn, "signature") do
- conn = conn
- |> put_req_header("(request-target)", String.downcase("#{conn.method} #{conn.request_path}"))
+ def call(%{assigns: %{valid_signature: true}} = conn, _opts) do
+ conn
+ end
+
+ def call(conn, _opts) do
+ user = Utils.get_ap_id(conn.params["actor"])
+ Logger.debug("Checking sig for #{user}")
+ [signature | _] = get_req_header(conn, "signature")
+
+ cond do
+ signature && String.contains?(signature, user) ->
+ # set (request-target) header to the appropriate value
+ # we also replace the digest header with the one we computed
+ conn =
+ conn
+ |> put_req_header(
+ "(request-target)",
+ String.downcase("#{conn.method}") <> " #{conn.request_path}"
+ )
+
+ conn =
+ if conn.assigns[:digest] do
+ conn
+ |> put_req_header("digest", conn.assigns[:digest])
+ else
+ conn
+ end
+
+ assign(conn, :valid_signature, HTTPSignatures.validate_conn(conn))
+
+ signature ->
+ Logger.debug("Signature not from actor")
+ assign(conn, :valid_signature, false)