From 273fcf972f7ca32fb0fe820b65f57cab2487e8af Mon Sep 17 00:00:00 2001 From: fr33domlover Date: Thu, 9 May 2019 21:26:33 +0000 Subject: [PATCH] When delivering activities, sign the Digest header Looks like I forgot to add it to the list of headers to sign --- src/Vervis/Foundation.hs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Vervis/Foundation.hs b/src/Vervis/Foundation.hs index c806ece..5b795ff 100644 --- a/src/Vervis/Foundation.hs +++ b/src/Vervis/Foundation.hs @@ -654,7 +654,7 @@ instance YesodRemoteActorStore App where instance YesodActivityPub App where sitePostSignedHeaders _ = - hRequestTarget :| [hHost, hDate, hActivityPubActor] + hRequestTarget :| [hHost, hDate, hDigest, hActivityPubActor] siteGetHttpSign = do (akey1, akey2, new1) <- liftIO . readTVarIO =<< asksSite appActorKeys renderUrl <- askUrlRender