Add TODO
This commit is contained in:
parent
985f6bc14f
commit
032113492c
@ -33,6 +33,7 @@ class HttpSignatureService
|
|||||||
*/
|
*/
|
||||||
public function verify( Request $request, string $publicKey )
|
public function verify( Request $request, string $publicKey )
|
||||||
{
|
{
|
||||||
|
// TODO fail verification if date is > 300 seconds ago to prevent replay attacks
|
||||||
$params = array();
|
$params = array();
|
||||||
$headers = $request->headers;
|
$headers = $request->headers;
|
||||||
if ( $headers->has( 'signature' ) ) {
|
if ( $headers->has( 'signature' ) ) {
|
||||||
|
Loading…
Reference in New Issue
Block a user