From 687a12e8a7a5c2fb5a3a4b6a6efa3500c5bb913c Mon Sep 17 00:00:00 2001
From: Julio Capote <jcapote@gmail.com>
Date: Thu, 5 Jan 2023 07:57:40 -0500
Subject: sign more headers

---
 registry/registry.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'registry')

diff --git a/registry/registry.go b/registry/registry.go
index 1f1c27a..93f8926 100644
--- a/registry/registry.go
+++ b/registry/registry.go
@@ -257,7 +257,7 @@ func (r *Registry) deliverAcceptToInbox(url, actorUrl *url.URL, follow vocab.Act
 	prefs := []httpsig.Algorithm{httpsig.RSA_SHA512, httpsig.RSA_SHA256}
 	digestAlgorithm := httpsig.DigestSha256
 	// The "Date" and "Digest" headers must already be set on r, as well as r.URL.
-	headersToSign := []string{httpsig.RequestTarget, "date", "digest"}
+	headersToSign := []string{httpsig.RequestTarget, "host", "date", "digest", "content-type"}
 	signer, _, err := httpsig.NewSigner(prefs, digestAlgorithm, headersToSign, httpsig.Signature, 0)
 	if err != nil {
 		return err
-- 
cgit v1.2.3