HTTP signatures spec no longer requires algorithms field (#7525)

Fix #7520

HTTP signatures spec no longer requires algorithms field (#7525)
Fix #7520
dfb6907e · Eugen Rochko · GitHub · 6bed372a · dfb6907e
Unverified Commit dfb6907e authored 6 years ago by Eugen Rochko Committed by GitHub 6 years ago
--- a/app/controllers/concerns/signature_verification.rb
+++ b/app/controllers/concerns/signature_verification.rb
@@ -107,9 +107,7 @@ module SignatureVerification

  def incompatible_signature?(signature_params)
    signature_params['keyId'].blank? ||
-      signature_params['signature'].blank? ||
-      signature_params['algorithm'].blank? ||
-      signature_params['algorithm'] != 'rsa-sha256'
+      signature_params['signature'].blank?
  end

  def account_from_key_id(key_id)