mirror of
1
Fork 0
gotosocial/internal/federation/dereferencing
kim 9cd27b412d
[security] harden account update logic (#3198)
* on account update, ensure that public key has not changed

* change expected error message

* also support the case of changing account keys when expired (not waiting for handshake)

* tweak account update hardening logic, add tests for updating account with pubkey expired

* add check for whether incoming data was via federator, accepting keys if so

* use freshest window for federated account updates + comment about it
2024-08-13 15:37:09 +00:00
..
account.go [security] harden account update logic (#3198) 2024-08-13 15:37:09 +00:00
account_test.go [security] harden account update logic (#3198) 2024-08-13 15:37:09 +00:00
announce.go [chore] Add interaction filter to complement existing visibility filter (#3111) 2024-07-24 12:27:42 +01:00
authenticate.go [security] harden account update logic (#3198) 2024-08-13 15:37:09 +00:00
collection.go [feature/performance] Store account stats in separate table (#2831) 2024-04-16 13:10:13 +02:00
dereferencer.go [chore] Add interaction filter to complement existing visibility filter (#3111) 2024-07-24 12:27:42 +01:00
dereferencer_test.go [chore] Add interaction filter to complement existing visibility filter (#3111) 2024-07-24 12:27:42 +01:00
emoji.go [bugfix] fix emoji recaching operations (#3167) 2024-08-03 19:05:38 +02:00
emoji_test.go [feature] support processing of (many) more media types (#3090) 2024-07-12 09:39:47 +00:00
finger.go [bugfix] relax missing preferred_username, instead using webfingered username (#3189) 2024-08-13 09:01:50 +00:00
handshake.go [chore/security] refactor AuthenticateFederatedRequest() to handle account deref + suspension checks (#2371) 2023-11-21 11:35:30 +01:00
instance.go [chore] de-interface{} the federator and dereferencer structs (#2285) 2023-10-23 10:58:13 +01:00
media.go [bugfix] fix emoji recaching operations (#3167) 2024-08-03 19:05:38 +02:00
status.go [bugfix] Use punycode for `host` part of `resource` query param when doing webfinger requests (#3133) 2024-07-26 13:11:07 +02:00
status_permitted.go [chore] replaces nested ifs with switch cases, removes defer 'onFail()' being passed to funcs (#3143) 2024-07-27 11:09:02 +02:00
status_test.go [chore] Add interaction policy gtsmodels (#3075) 2024-07-11 15:44:29 +01:00
thread.go [performance] update remaining worker pools to use queues (#2865) 2024-04-26 13:50:46 +01:00
util.go [chore] media and emoji refactoring (#3000) 2024-06-26 16:01:16 +01:00