summaryrefslogtreecommitdiff
path: root/internal/federation/dereferencing/authenticate.go
AgeCommit message (Collapse)AuthorFiles
2024-08-13[security] harden account update logic (#3198)Libravatar kim1
* on account update, ensure that public key has not changed * change expected error message * also support the case of changing account keys when expired (not waiting for handshake) * tweak account update hardening logic, add tests for updating account with pubkey expired * add check for whether incoming data was via federator, accepting keys if so * use freshest window for federated account updates + comment about it