diff --git a/backend/src/utils/http-signing.ts b/backend/src/utils/http-signing.ts index 2320d784a..84417f9a5 100644 --- a/backend/src/utils/http-signing.ts +++ b/backend/src/utils/http-signing.ts @@ -27,9 +27,6 @@ export async function signRequest(request: Request, key: CryptoKey, keyId: URL): await sign(request, { components: components, - parameters: { - created: Math.floor(Date.now() / 1000), - }, keyId: keyId.toString(), signer: mySigner, }) diff --git a/backend/src/utils/httpsigjs/parser.ts b/backend/src/utils/httpsigjs/parser.ts index fa39d2b7d..53d051aee 100644 --- a/backend/src/utils/httpsigjs/parser.ts +++ b/backend/src/utils/httpsigjs/parser.ts @@ -261,8 +261,8 @@ export function parseRequest(request: Request, options?: Options): ParsedSignatu if (!parsed.params.signature) throw new InvalidHeaderError('signature was not specified') - if (['date', 'x-date', '(created)'].every((hdr) => parsedHeaders.indexOf(hdr) < 0)) { - throw new MissingHeaderError('no signed date header') + if (['date', 'x-date', '(created)', 'digest'].every((hdr) => parsedHeaders.indexOf(hdr) < 0)) { + throw new MissingHeaderError('no signed date or digest header') } // Check the algorithm against the official list