Test sig check

This commit is contained in:
Bryan Ashby 2023-04-19 12:37:11 -06:00
parent c4553a01a5
commit 1c27891f15
No known key found for this signature in database
GPG Key ID: C2C1B501E4EFD994
1 changed files with 12 additions and 11 deletions

View File

@ -801,23 +801,24 @@ exports.getModule = class ActivityPubWebHandler extends WebHandlerModule {
return false; return false;
} }
if (signature.keyId !== pubKey.id) { // if (signature.keyId !== pubKey.id) {
this.log.warn( // this.log.warn(
{ // {
actorId: actor.id, // actorId: actor.id,
signatureKeyId: signature.keyId, // signatureKeyId: signature.keyId,
actorPubKeyId: pubKey.id, // actorPubKeyId: pubKey.id,
}, // },
'Key ID mismatch' // 'Key ID mismatch'
); // );
return false; // return false;
} // }
if (!httpSignature.verifySignature(signature, pubKey.publicKeyPem)) { if (!httpSignature.verifySignature(signature, pubKey.publicKeyPem)) {
this.log.warn( this.log.warn(
{ {
actorId: actor.id, actorId: actor.id,
keyId: signature.keyId, keyId: signature.keyId,
actorPubKeyId: pubKey.id,
}, },
'Actor signature verification failed' 'Actor signature verification failed'
); );