search

fediverse-devnet / feditest-tests-fediverse

The tests for the fediverse testsuite
MIT License
5 stars 4 forks source link

Test error handling on signature verification #28

Open julianlam opened 5 months ago

julianlam commented 5 months ago

As an extension of fediverse-devnet/feditest-tests-fediverse#10, test that a POST to a user or instance endpoint (though I believe the latter is not required) fails with a 4xx error if the signature header is not provided or does not verify correctly

jernst commented 2 months ago

This assumes that the handler processes the request synchronously, and doesn't just simply put it into a queue for later processing. I have no feel for which percentage of fediverse applications today might do that.