Better error response to malformed headers (#35278)

This commit is contained in:
David Roetzel 2025-07-08 11:31:04 +02:00 committed by Claire
commit 333a17a478
4 changed files with 30 additions and 0 deletions

View file

@ -64,6 +64,9 @@ module SignatureVerification
return (@signed_request_actor = actor) if signed_request.verified?(actor)
fail_with! "Verification failed for #{actor.to_log_human_identifier} #{actor.uri}"
rescue Mastodon::MalformedHeaderError => e
@signature_verification_failure_code = 400
fail_with! e.message
rescue Mastodon::SignatureVerificationError => e
fail_with! e.message
rescue *Mastodon::HTTP_CONNECTION_ERRORS => e