Class: Fediverse::Signature

Inherits:
Object
  • Object
show all
Defined in:
lib/fediverse/signature.rb

Class Method Summary collapse

Class Method Details

.sign(sender:, request:) ⇒ Object 



4
5
6
7
8
9
10
11
12
13
14
15
16
17
 
# File 'lib/fediverse/signature.rb', line 4

def sign(sender:, request:)
  private_key = OpenSSL::PKey::RSA.new sender.private_key, Rails.application.credentials.secret_key_base
  headers = '(request-target) host date digest'
  sig = Base64.strict_encode64(
    private_key.sign(
      OpenSSL::Digest.new('SHA256'), signature_payload(request: request, headers: headers)
    )
  )
  {
    keyId:     sender.key_id,
    headers:   headers,
    signature: sig,
  }.map { |k, v| "#{k}=\"#{v}\"" }.join(',')
end

.verify(sender:, request:) ⇒ Object 



19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
# File 'lib/fediverse/signature.rb', line 19

def verify(sender:, request:)
  raise 'Unsigned headers' unless request.headers['Signature']

  signature_header = request.headers['Signature'].split(',').to_h do |pair|
    /\A(?<key>[\w]+)="(?<value>.*)"\z/ =~ pair
    [key, value]
  end

  headers   = signature_header['headers']
  signature = Base64.decode64(signature_header['signature'])
  key       = OpenSSL::PKey::RSA.new(sender.public_key)

  comparison_string = signature_payload(request: request, headers: headers)

  key.verify(OpenSSL::Digest.new('SHA256'), signature, comparison_string)
end