OxideTalis/oxidetalis
OxideTalis/oxidetalis
1
Fork 1
Code Issues 10 Pull requests Projects 1 Releases Activity Actions

feat: Create signature data if there is no request body

Browse source 
The signature data is `Method+uri path` if there is no request body

Signed-off-by: Awiteb <a@4rs.nl>
This commit is contained in:
Awiteb 2024-07-04 16:11:23 +03:00
parent 77858ac8f4
commit 062e441d8a
Signed by: awiteb
GPG key ID: 3F6B55640AA6682F
1 changed files with 11 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
crates/oxidetalis/src/middlewares/signature.rs
View file

@ -42,20 +42,18 @@ pub async fn signature_check(
let mut write_err =
|message: &str, status_code| super::write_error(res, ctrl, message.to_owned(), status_code);
if req.body().is_end_stream() {
write_err(
"Request body is empty, the signature need a signed body",
UNAUTHORIZED,
);
return;
}
let json_body = match req.parse_json::<serde_json::Value>().await {
Ok(j) => j.to_string(),
Err(err) => {
write_err(&err.to_string(), UNAUTHORIZED);
return;
let data = if req.body().is_end_stream() {
format!("{}{}", req.method(), req.uri().path())
} else {
match req.parse_json::<serde_json::Value>().await {
Ok(j) => j.to_string(),
Err(err) => {
write_err(&err.to_string(), UNAUTHORIZED);
return;
}
}
};
let signature = match utils::extract_signature(req) {
Ok(s) => s,
Err(err) => {
@ -77,7 +75,7 @@ pub async fn signature_check(
&sender_public_key,
&depot.config().server.private_key,
&signature,
json_body.as_bytes(),
data.as_bytes(),
)
{
write_err("Invalid signature", UNAUTHORIZED);