From dfb6907e08350ca487e2978a85013f4525526bdf Mon Sep 17 00:00:00 2001
From: Eugen Rochko <eugen@zeonfederated.com>
Date: Thu, 17 May 2018 04:03:28 +0200
Subject: [PATCH] HTTP signatures spec no longer requires algorithms field
(#7525)
Fix #7520
---
app/controllers/concerns/signature_verification.rb | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/app/controllers/concerns/signature_verification.rb b/app/controllers/concerns/signature_verification.rb
index f289228d3c..41aa1c8a64 100644
--- a/app/controllers/concerns/signature_verification.rb
+++ b/app/controllers/concerns/signature_verification.rb
@@ -107,9 +107,7 @@ module SignatureVerification
def incompatible_signature?(signature_params)
signature_params['keyId'].blank? ||
- signature_params['signature'].blank? ||
- signature_params['algorithm'].blank? ||
- signature_params['algorithm'] != 'rsa-sha256'
+ signature_params['signature'].blank?
end
def account_from_key_id(key_id)
--
GitLab