From: Eugen Rochko <eugen@zeonfederated.com>
Date: Thu, 17 May 2018 02:03:28 +0000 (+0200)
Subject: HTTP signatures spec no longer requires algorithms field (#7525)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=dfb6907e08350ca487e2978a85013f4525526bdf;p=mastodon.git

HTTP signatures spec no longer requires algorithms field (#7525)

Fix #7520
---

diff --git a/app/controllers/concerns/signature_verification.rb b/app/controllers/concerns/signature_verification.rb
index f289228d3..41aa1c8a6 100644
--- a/app/controllers/concerns/signature_verification.rb
+++ b/app/controllers/concerns/signature_verification.rb
@@ -107,9 +107,7 @@ module SignatureVerification
 
   def incompatible_signature?(signature_params)
     signature_params['keyId'].blank? ||
-      signature_params['signature'].blank? ||
-      signature_params['algorithm'].blank? ||
-      signature_params['algorithm'] != 'rsa-sha256'
+      signature_params['signature'].blank?
   end
 
   def account_from_key_id(key_id)