HttpSignature use - (Failing requests from Mastodon) #39
Assignees
Labels
question
Further information is requested
Comments
|
I'm running into this problem as well. |
|
Hi @daemionfox and @jorijn , could you please provide the following informations :
Thanks |
|
Hi @landrok Here's a Symfony controller that is able to reproduce the issue. <?php
namespace App\Controller;
use ActivityPhp\Server;
use ActivityPhp\Server\Http\HttpSignature;
use ActivityPhp\Type;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
class InboxController
{
public function __construct(private Server $server)
{
}
public function index(Request $request)
{
$httpSignature = new HttpSignature($this->server);
if (!$httpSignature->verify($request)) {
return new JsonResponse(['error' => 'Unauthorized'], 401);
}
// validation passed
return new JsonResponse('Hello World!');
}
}The server object is created by a factory method: public function createServer(): Server
{
return new Server([
'logger' => [],
'instance' => [
'host' => 'localhost',
'port' => 8000,
'types' => 'include'
],
'cache' => [
'enabled' => false
],
'http' => [],
'dialects' => [],
'ontologies' => [
'*'
],
]);
} |
|
Thanks for your quick return. At each step of the validation process, If the info level is not sufficient, you can activate the debug one. https://github.com/landrok/activitypub/blob/master/src/ActivityPhp/Server/Http/HttpSignature.php#L72 The goal is to identifiy which step fails. First, a Can you test with those different levels and provide logs if needed ? |
|
Sure. Here you go: I'm playing around with the idea of building an ActivityPub relay in PHP, so this request is the first follow request the Mastodon instance sends after adding it to the Relay list in the administration panel. |
5 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
So this is less a problem with the library and more of a problem with my use of it. But when trying to validate signatures coming from a mastodon Follow request, the httpsignature->verify fails every time.
I'm following the examples and I don't know where things are going sideways on this. Any information to help clear this up would be great.
Thanks
@[email protected]
The text was updated successfully, but these errors were encountered: