This commit is contained in:
Jeremy Dormitzer 2019-01-14 11:29:32 -05:00
parent 985f6bc14f
commit 032113492c

View File

@ -33,6 +33,7 @@ class HttpSignatureService
*/ */
public function verify( Request $request, string $publicKey ) public function verify( Request $request, string $publicKey )
{ {
// TODO fail verification if date is > 300 seconds ago to prevent replay attacks
$params = array(); $params = array();
$headers = $request->headers; $headers = $request->headers;
if ( $headers->has( 'signature' ) ) { if ( $headers->has( 'signature' ) ) {