mrtoth/baseimage-tutorial-framework
1
0
Fork 0
mirror of https://github.com/avatao-content/baseimage-tutorial-framework synced 2024-11-14 02:57:18 +00:00
Code Issues Releases Wiki Activity

Ignore message scope in message signatures

Browse Source
This commit is contained in:
Kristóf Tóth 2019-07-04 15:51:55 +02:00
parent 2c0aba2ffe
commit 80e42a4091
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/tfw/crypto.py
View File

@ -21,6 +21,7 @@ def message_checksum(message):
def sign_message(key, message): def sign_message(key, message):
message.pop('scope', None)
message.pop('signature', None) message.pop('signature', None)
signature = message_signature(key, message) signature = message_signature(key, message)
message['signature'] = b64encode(signature).decode() message['signature'] = b64encode(signature).decode()
@ -31,6 +32,7 @@ def message_signature(key, message):
def verify_message(key, message): def verify_message(key, message):
message.pop('scope', None)
message = deepcopy(message) message = deepcopy(message)
try: try:
signature_b64 = message.pop('signature') signature_b64 = message.pop('signature')