Plume
/
Plume
5
12
Fork 10
Code Issues 144 Pull Requests 12 Releases 5 Wiki Activity
Labels Milestones
New Issue

#910 Request headers are not signed?

Open
opened 2 months ago by Ghost · 4 comments
Ghost commented 2 months ago

When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the Host header is not signed. The Plume logs show:

Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox)
Response: "b"Mastodon requires the Host header to be signed""
When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the `Host` header is not signed. The Plume logs show: ``` Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox) Response: "b"Mastodon requires the Host header to be signed"" ```
KitaitiMakoto commented 1 month ago
Owner

Thank you reporting. Which version do you use?

Plume v0.6.0 (or earler) doesn’t signature Host header. But latest main branch and Docker image does.

I’m aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?

Thank you reporting. Which version do you use? Plume v0.6.0 (or earler) doesn't signature Host header. But latest `main` branch and Docker image does. I'm aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?
KitaitiMakoto commented 1 month ago
Owner

Note: fediverse.blog logs the same error:

Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox)
Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox)

Its current revision is d0dd23a.

Note: fediverse.blog logs the same error: Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox) Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox) Its current revision is d0dd23a.
Ghost commented 1 month ago
Poster

I was on 0.6.0 when this issue occured. I currently don’t have resources to try a different version at the moment

I was on 0.6.0 when this issue occured. I currently don't have resources to try a different version at the moment
KitaitiMakoto commented 1 month ago
Owner

Okay, next release should include the fix.

Okay, next release should include the fix.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Apply labels
Clear labels
A: API
Related to the REST API A: Backend
Code running on the server A: Federation
Stuff related to Federation A: Front-End
Related to the front-end A: I18N
Translations, and related code A: Meta
More about project management or code than the project itself A: Security Build
The building, or installation process of Plume C: Bug
Something isn't working C: Discussion
We need to talk C: Enhancement
New feature or request C: Feature
This is a new feature Compatibility
Compatibility with different browsers, readers and OS Dependency
Related to an external package that Plume uses Design
UI/UX related issues and PRs Documentation Good first issue
Good for newcomers Help welcome
Extra attention is needed Mobile
Issues affecting only mobile UX Rendering
How elements're rendered out for the end user S: Blocked
Something else needs to be fixed first S: Duplicate
This issue or pull request already exists S: Incomplete
This PR is not complete yet S: Instance specific
Issues concern a limited number of instances S: Invalid
This doesn't seem right S: Needs Voting/Discussion
Need to be discussed by the community (on Loomio) S: Ready for review
This PR is ready to be reviewed Suggestion
Proposed ideas worth considering S: Voted on Loomio
This is issue has been created after a vote on Loomio S: Wontfix
This will not be worked on
No Label
A: API
A: Backend
A: Federation
A: Front-End
A: I18N
A: Meta
A: Security
Build
C: Bug
C: Discussion
C: Enhancement
C: Feature
Compatibility
Dependency
Design
Documentation
Good first issue
Help welcome
Mobile
Rendering
S: Blocked
S: Duplicate
S: Incomplete
S: Instance specific
S: Invalid
S: Needs Voting/Discussion
S: Ready for review
Suggestion
S: Voted on Loomio
S: Wontfix
Milestone
Set milestone
Clear milestone
No items
No Milestone
Assignees
Assign users
Clear assignees
No Assignees
2 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Cancel
Save
There is no content yet.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

No
Yes