about summary refs log tree commit diff
path: root/app/controllers/concerns/signature_verification.rb
diff options
context:
space:
mode:
authorStarfall <us@starfall.systems>2021-03-04 23:55:42 -0600
committerStarfall <us@starfall.systems>2021-03-04 23:55:42 -0600
commitfe6381b9acc28cd610b032160de2952e1fdefc86 (patch)
treead1ba10427d5d792d3ba797479528f01e51404a5 /app/controllers/concerns/signature_verification.rb
parent033b1b5b900babc9b068ddad0ae644c5f15e9ffe (diff)
parentf4abf8e7829c6a5b952dea6fb9ad01b6b3601f95 (diff)
Merge remote-tracking branch 'glitchsoc/main' into main
Diffstat (limited to 'app/controllers/concerns/signature_verification.rb')
-rw-r--r--app/controllers/concerns/signature_verification.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/concerns/signature_verification.rb b/app/controllers/concerns/signature_verification.rb
index fc3978fbb..4dd0cac55 100644
--- a/app/controllers/concerns/signature_verification.rb
+++ b/app/controllers/concerns/signature_verification.rb
@@ -133,6 +133,7 @@ module SignatureVerification
 
   def verify_body_digest!
     return unless signed_headers.include?('digest')
+    raise SignatureVerificationError, 'Digest header missing' unless request.headers.key?('Digest')
 
     digests = request.headers['Digest'].split(',').map { |digest| digest.split('=', 2) }.map { |key, value| [key.downcase, value] }
     sha256  = digests.assoc('sha-256')