aboutsummaryrefslogtreecommitdiff
path: root/registry/registry.go
diff options
context:
space:
mode:
authorJulio Capote <jcapote@gmail.com>2023-01-05 12:57:40 +0000
committerJulio Capote <jcapote@gmail.com>2023-01-05 12:57:40 +0000
commit687a12e8a7a5c2fb5a3a4b6a6efa3500c5bb913c (patch)
tree087ba148e3c0206f47e52bc2e6a8b9b7bc27153e /registry/registry.go
parent4018304b3bd32308ca81ff9b2d548f248489d200 (diff)
downloadcommunique-687a12e8a7a5c2fb5a3a4b6a6efa3500c5bb913c.tar.gz
sign more headers
Diffstat (limited to '')
-rw-r--r--registry/registry.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/registry/registry.go b/registry/registry.go
index 1f1c27a..93f8926 100644
--- a/registry/registry.go
+++ b/registry/registry.go
@@ -257,7 +257,7 @@ func (r *Registry) deliverAcceptToInbox(url, actorUrl *url.URL, follow vocab.Act
prefs := []httpsig.Algorithm{httpsig.RSA_SHA512, httpsig.RSA_SHA256}
digestAlgorithm := httpsig.DigestSha256
// The "Date" and "Digest" headers must already be set on r, as well as r.URL.
- headersToSign := []string{httpsig.RequestTarget, "date", "digest"}
+ headersToSign := []string{httpsig.RequestTarget, "host", "date", "digest", "content-type"}
signer, _, err := httpsig.NewSigner(prefs, digestAlgorithm, headersToSign, httpsig.Signature, 0)
if err != nil {
return err