Request headers are not signed? #910

Fermé
il y a 3 ans ouvert par Ghost · 5 commentaires
Ghost a commenté il y a 3 ans

When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the Host header is not signed. The Plume logs show:

Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox)
Response: "b"Mastodon requires the Host header to be signed""
When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the `Host` header is not signed. The Plume logs show: ``` Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox) Response: "b"Mastodon requires the Host header to be signed"" ```
Propriétaire

Thank you reporting. Which version do you use?

Plume v0.6.0 (or earler) doesn't signature Host header. But latest main branch and Docker image does.

I'm aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?

Thank you reporting. Which version do you use? Plume v0.6.0 (or earler) doesn't signature Host header. But latest `main` branch and Docker image does. I'm aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?
Propriétaire

Note: fediverse.blog logs the same error:

Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox)
Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox)

Its current revision is d0dd23a.

Note: fediverse.blog logs the same error: Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox) Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox) Its current revision is d0dd23a.
Ghost a commenté il y a 3 ans
Éditeur

I was on 0.6.0 when this issue occured. I currently don't have resources to try a different version at the moment

I was on 0.6.0 when this issue occured. I currently don't have resources to try a different version at the moment
Propriétaire

Okay, next release should include the fix.

Okay, next release should include the fix.
Propriétaire

@Ghost v0.7.0 which includes fix for this issue, has been released!

@Ghost v0.7.0 which includes fix for this issue, has been released!
KitaitiMakoto a fermé ce ticket il y a 2 ans
Connectez-vous pour rejoindre cette conversation.
Aucun jalon
Pas d'assignataires
2 participants
Notifications
Échéance
La date d’échéance est invalide ou hors plage. Veuillez utiliser le format 'aaaa-mm-dd'.

Aucune échéance n'a été définie.

Dépendances

No dependencies set.

Reference: Plume/Plume#910
Chargement…
Il n'existe pas encore de contenu.