Closed BenLubar closed 3 years ago
This could also be accomplished by special-casing the Host
header in httpsig.
I like your approach. Also, thank you for debugging this. I believe I had encountered this but was not in a place to debug at the time. Gladly will merge. Also feel free to put in a reasonable request to the collective if you'd like to be compensated for your time.
Mastodon refuses to accept signatures without the
host
header, and due to how httpsig works, we need to explicitly set the host header before we sign the request.