Streams/streams
Streams/streams
1
0
Fork 0
mirror of https://codeberg.org/streams/streams.git synced 2024-09-19 16:15:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

provide only one of authorization or signature headers

Browse source
This commit is contained in:
Mike Macgirvin 2024-07-31 10:55:21 +10:00
parent 75148b984f
commit ce9c4ae520
2 changed files with 4 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/Web/HTTPHeaders.php
View file

@ -61,6 +61,7 @@ class HTTPHeaders
public function getAuthHeader()
{
logger('getAuthHeader: ' . print_r($_SERVER, true), LOGGER_DATA);
$candidates = [
'HTTP_AUTHORIZATION',
'REDIRECT_HTTP_AUTHORIZATION',

14
src/Web/HTTPSig.php
View file

@ -582,13 +582,7 @@ class HTTPSig
}
}
$authorisation = '';
if ($auth) {
$authorisation = 'Authorization: Signature ' . $headerval;
}
$sighead = 'Signature: ' . $headerval;
if ($head) {
foreach ($head as $k => $v) {
// strip the request-target virtual header from the output headers
@ -598,10 +592,8 @@ class HTTPSig
$return_headers[] = $k . ': ' . $v;
}
}
$return_headers[] = $sighead;
if ($authorisation) {
$return_headers[] = $authorisation;
}
$return_headers[] = (($auth) ? 'Authorization: Signature ' : 'Signature: ') . $headerval;
return $return_headers;
}