7 commits

Author	SHA1	Message	Date
fr33domlover	02da508ed0	Allow actor publicKey to be a URI, and require the URI to match the Sig keyId	2019-02-04 10:07:25 +00:00
fr33domlover	c336d56036	Allow actor public key to be in a separate document	2019-02-03 23:39:56 +00:00
fr33domlover	21c8df1251	Actor public key specifies whether it's shared ... Shared key means the key is used for multiple actors. I'm not sure explicitly specifying this will be necessary, but I prefer to have it in place to help with debugging in case something unexpected comes from other servers, or my format overlaps with stuff used in other software and encodes a different meaning. Each public key can specify whether it's shared or personal, and this patch checks for that when verifying a request signature. It rejects shared keys, accepting valid sigs only from personal keys. Very soon I'll add shared key support.	2019-02-03 11:12:18 +00:00
fr33domlover	991296faa1	Move some JSON/AP codec utils to new Data.Aeson.Local module	2019-02-03 11:01:36 +00:00
fr33domlover	e6f987817e	Fix: HTTP signature wasn't being sent in AP POSTs	2019-02-03 10:59:35 +00:00
fr33domlover	04e26a911d	In httpGetAP, if we got an unexpected Content-Type, specify it in error message	2019-01-21 22:24:09 +00:00
fr33domlover	1f47ca39eb	Federation test outbox page with form for entering JSON	2019-01-21 15:54:57 +00:00