gotosocial/internal/federation
kim 9cd27b412d
[security] harden account update logic (#3198)
* on account update, ensure that public key has not changed

* change expected error message

* also support the case of changing account keys when expired (not waiting for handshake)

* tweak account update hardening logic, add tests for updating account with pubkey expired

* add check for whether incoming data was via federator, accepting keys if so

* use freshest window for federated account updates + comment about it
2024-08-13 15:37:09 +00:00
..
dereferencing [security] harden account update logic (#3198) 2024-08-13 15:37:09 +00:00
federatingdb [feature] Federate interaction policies + Accepts; enforce policies (#3138) 2024-07-26 12:04:28 +02:00
authenticate.go [chore] Try to parse public key as both Actor + bare key (#2710) 2024-04-02 11:30:10 +01:00
clock.go [chore] Improve copyright header handling (#1608) 2023-03-12 16:00:57 +01:00
commonbehavior.go [chore] de-interface{} the federator and dereferencer structs (#2285) 2023-10-23 10:58:13 +01:00
federatingactor.go [performance] massively improved ActivityPub delivery worker efficiency (#2812) 2024-04-11 11:45:35 +02:00
federatingactor_test.go [chore] Add interaction filter to complement existing visibility filter (#3111) 2024-07-24 12:27:42 +01:00
federatingprotocol.go [chore] add some more slice related utility functions + remove duplicated functions (#3149) 2024-07-30 11:29:32 +02:00
federatingprotocol_test.go [performance] massively improved ActivityPub delivery worker efficiency (#2812) 2024-04-11 11:45:35 +02:00
federator.go [chore] Add interaction filter to complement existing visibility filter (#3111) 2024-07-24 12:27:42 +01:00
federator_test.go [feature] Add experimental instance-federation-spam-filter option (#2685) 2024-02-27 12:22:05 +00:00
gone.go [chore] de-interface{} the federator and dereferencer structs (#2285) 2023-10-23 10:58:13 +01:00
transport.go [chore] de-interface{} the federator and dereferencer structs (#2285) 2023-10-23 10:58:13 +01:00