Request headers are not signed? #910

Закрито
відкрито 3 роки тому користувачем Ghost · 5 коментарів
Ghost прокоментував(ла) 3 роки тому

When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the Host header is not signed. The Plume logs show:

Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox)
Response: "b"Mastodon requires the Host header to be signed""
When sending ActivityPub updates to a mastodon instance, the requests are rejected by Mastodon because the `Host` header is not signed. The Plume logs show: ``` Successfully sent activity to inbox (https://toot.kuba-orlik.name/inbox) Response: "b"Mastodon requires the Host header to be signed"" ```
KitaitiMakoto прокоментував(ла) 3 роки тому
Власник

Thank you reporting. Which version do you use?

Plume v0.6.0 (or earler) doesn't signature Host header. But latest main branch and Docker image does.

I'm aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?

Thank you reporting. Which version do you use? Plume v0.6.0 (or earler) doesn't signature Host header. But latest `main` branch and Docker image does. I'm aware I should release next version soon, but if you need the feature soon, can you try latest unstable version?
KitaitiMakoto прокоментував(ла) 3 роки тому
Власник

Note: fediverse.blog logs the same error:

Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox)
Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed""
Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox)

Its current revision is d0dd23a.

Note: fediverse.blog logs the same error: Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://computerfairi.es/inbox) Mar 28 17:46:36 fediverse.blog plume[12462]: Response: "b"Mastodon requires the Host header to be signed"" Mar 28 17:46:36 fediverse.blog plume[12462]: Successfully sent activity to inbox (https://toot.site/inbox) Its current revision is d0dd23a.
Ghost прокоментував(ла) 3 роки тому
Автор

I was on 0.6.0 when this issue occured. I currently don't have resources to try a different version at the moment

I was on 0.6.0 when this issue occured. I currently don't have resources to try a different version at the moment
KitaitiMakoto прокоментував(ла) 3 роки тому
Власник

Okay, next release should include the fix.

Okay, next release should include the fix.
KitaitiMakoto прокоментував(ла) 2 роки тому
Власник

@Ghost v0.7.0 which includes fix for this issue, has been released!

@Ghost v0.7.0 which includes fix for this issue, has been released!
KitaitiMakoto закрив цю задачу 2 роки тому
Підпишіться щоб приєднатися до обговорення.
Етап відсутній
Немає виконавця
2 учасників
Сповіщення
Дата завершення
Термін дії не дійсний або знаходиться за межами допустимого діапазону. Будь ласка використовуйте формат 'yyyy-mm-dd'.

Термін виконання не встановлений.

Залежності

No dependencies set.

Reference: Plume/Plume#910
Завантаження…
Тут ще немає жодного змісту.