cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Monkey patch OAuth to allow http signatures on https requests

Browse source
This commit is contained in:
Tom Hughes 2018-01-04 22:34:22 +00:00
parent 88dd97ba01
commit ce9066797c
1 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
config/initializers/oauth.rb
View file

@ -47,6 +47,25 @@ module OpenStreetMap
end
end
end
module OAuthFilter
def oauth1_verify(request, options = {}, &block)
signature = OAuth::Signature.build(request, options, &block)
return false unless OauthNonce.remember(signature.request.nonce, signature.request.timestamp)
value = signature.verify
if request.ssl? && !value
http_request = request.dup
http_request.define_singleton_method(:scheme) { "http" }
http_request.define_singleton_method(:port) { 80 }
signature = OAuth::Signature.build(http_request, options, &block)
value = signature.verify
end
value
rescue OAuth::Signature::UnknownSignatureMethod
false
end
end
end
OAuth::Controllers::ProviderController.prepend(OpenStreetMap::ProviderController)
OAuth::Rack::OAuthFilter.prepend(OpenStreetMap::OAuthFilter)