Skip to content
Snippets Groups Projects
Commit 449bb588 authored by Eliot Berriot's avatar Eliot Berriot
Browse files

Merge branch 'request-target-header' into 'develop'

Ensure signature code doesn't crash on (request-target) signature

See merge request !960
parents 89bbb902 3224f072
No related branches found
No related tags found
No related merge requests found
......@@ -67,6 +67,9 @@ def verify_django(django_request, public_key):
expected = signature_headers.split(" ")
logger.debug("Signature expected headers: %s", expected)
for header in expected:
if header == "(request-target)":
# this one represent the request body, so not an actual HTTP header
continue
try:
headers[header]
except KeyError:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment