composer update macgirvin/http-message-signer

This commit is contained in:
Mario Vavti
2025-06-26 10:54:42 +02:00
parent 7782183ae3
commit 0a98a49eeb
7 changed files with 29 additions and 33 deletions

12
composer.lock generated
View File

@@ -1081,16 +1081,16 @@
},
{
"name": "macgirvin/http-message-signer",
"version": "v0.1.6",
"version": "v0.1.7",
"source": {
"type": "git",
"url": "https://github.com/macgirvin/HTTP-Message-Signer.git",
"reference": "31774b2a8e103dfcdb56b0c570336ec62487dc6f"
"reference": "44db674fb750b4e4909cf1aeb3a18a4c68d938ca"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/macgirvin/HTTP-Message-Signer/zipball/31774b2a8e103dfcdb56b0c570336ec62487dc6f",
"reference": "31774b2a8e103dfcdb56b0c570336ec62487dc6f",
"url": "https://api.github.com/repos/macgirvin/HTTP-Message-Signer/zipball/44db674fb750b4e4909cf1aeb3a18a4c68d938ca",
"reference": "44db674fb750b4e4909cf1aeb3a18a4c68d938ca",
"shasum": ""
},
"require": {
@@ -1116,9 +1116,9 @@
"description": "RFC 9421 HTTP Message Signer and Verifier for PSR-7 requests",
"support": {
"issues": "https://github.com/macgirvin/HTTP-Message-Signer/issues",
"source": "https://github.com/macgirvin/HTTP-Message-Signer/tree/v0.1.6"
"source": "https://github.com/macgirvin/HTTP-Message-Signer/tree/v0.1.7"
},
"time": "2025-06-20T23:11:42+00:00"
"time": "2025-06-25T03:19:43+00:00"
},
{
"name": "michelf/php-markdown",

View File

@@ -1746,14 +1746,12 @@ return array(
'Zotlabs\\Module\\Branchtopic' => $baseDir . '/Zotlabs/Module/Branchtopic.php',
'Zotlabs\\Module\\Cal' => $baseDir . '/Zotlabs/Module/Cal.php',
'Zotlabs\\Module\\Cdav' => $baseDir . '/Zotlabs/Module/Cdav.php',
'Zotlabs\\Module\\Ceditor' => $baseDir . '/Zotlabs/Module/Ceditor.php',
'Zotlabs\\Module\\Changeaddr' => $baseDir . '/Zotlabs/Module/Changeaddr.php',
'Zotlabs\\Module\\Channel' => $baseDir . '/Zotlabs/Module/Channel.php',
'Zotlabs\\Module\\Channel_calendar' => $baseDir . '/Zotlabs/Module/Channel_calendar.php',
'Zotlabs\\Module\\Chanview' => $baseDir . '/Zotlabs/Module/Chanview.php',
'Zotlabs\\Module\\Chat' => $baseDir . '/Zotlabs/Module/Chat.php',
'Zotlabs\\Module\\Chatsvc' => $baseDir . '/Zotlabs/Module/Chatsvc.php',
'Zotlabs\\Module\\Cleditor' => $baseDir . '/Zotlabs/Module/Cleditor.php',
'Zotlabs\\Module\\Cloud' => $baseDir . '/Zotlabs/Module/Cloud.php',
'Zotlabs\\Module\\Cloud_tiles' => $baseDir . '/Zotlabs/Module/Cloud_tiles.php',
'Zotlabs\\Module\\Common' => $baseDir . '/Zotlabs/Module/Common.php',

View File

@@ -2052,14 +2052,12 @@ class ComposerStaticInit7b34d7e50a62201ec5d5e526a5b8b35d
'Zotlabs\\Module\\Branchtopic' => __DIR__ . '/../..' . '/Zotlabs/Module/Branchtopic.php',
'Zotlabs\\Module\\Cal' => __DIR__ . '/../..' . '/Zotlabs/Module/Cal.php',
'Zotlabs\\Module\\Cdav' => __DIR__ . '/../..' . '/Zotlabs/Module/Cdav.php',
'Zotlabs\\Module\\Ceditor' => __DIR__ . '/../..' . '/Zotlabs/Module/Ceditor.php',
'Zotlabs\\Module\\Changeaddr' => __DIR__ . '/../..' . '/Zotlabs/Module/Changeaddr.php',
'Zotlabs\\Module\\Channel' => __DIR__ . '/../..' . '/Zotlabs/Module/Channel.php',
'Zotlabs\\Module\\Channel_calendar' => __DIR__ . '/../..' . '/Zotlabs/Module/Channel_calendar.php',
'Zotlabs\\Module\\Chanview' => __DIR__ . '/../..' . '/Zotlabs/Module/Chanview.php',
'Zotlabs\\Module\\Chat' => __DIR__ . '/../..' . '/Zotlabs/Module/Chat.php',
'Zotlabs\\Module\\Chatsvc' => __DIR__ . '/../..' . '/Zotlabs/Module/Chatsvc.php',
'Zotlabs\\Module\\Cleditor' => __DIR__ . '/../..' . '/Zotlabs/Module/Cleditor.php',
'Zotlabs\\Module\\Cloud' => __DIR__ . '/../..' . '/Zotlabs/Module/Cloud.php',
'Zotlabs\\Module\\Cloud_tiles' => __DIR__ . '/../..' . '/Zotlabs/Module/Cloud_tiles.php',
'Zotlabs\\Module\\Common' => __DIR__ . '/../..' . '/Zotlabs/Module/Common.php',

View File

@@ -1112,17 +1112,17 @@
},
{
"name": "macgirvin/http-message-signer",
"version": "v0.1.6",
"version_normalized": "0.1.6.0",
"version": "v0.1.7",
"version_normalized": "0.1.7.0",
"source": {
"type": "git",
"url": "https://github.com/macgirvin/HTTP-Message-Signer.git",
"reference": "31774b2a8e103dfcdb56b0c570336ec62487dc6f"
"reference": "44db674fb750b4e4909cf1aeb3a18a4c68d938ca"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/macgirvin/HTTP-Message-Signer/zipball/31774b2a8e103dfcdb56b0c570336ec62487dc6f",
"reference": "31774b2a8e103dfcdb56b0c570336ec62487dc6f",
"url": "https://api.github.com/repos/macgirvin/HTTP-Message-Signer/zipball/44db674fb750b4e4909cf1aeb3a18a4c68d938ca",
"reference": "44db674fb750b4e4909cf1aeb3a18a4c68d938ca",
"shasum": ""
},
"require": {
@@ -1135,7 +1135,7 @@
"require-dev": {
"phpunit/phpunit": "^10.0"
},
"time": "2025-06-20T23:11:42+00:00",
"time": "2025-06-25T03:19:43+00:00",
"type": "library",
"installation-source": "dist",
"autoload": {
@@ -1150,7 +1150,7 @@
"description": "RFC 9421 HTTP Message Signer and Verifier for PSR-7 requests",
"support": {
"issues": "https://github.com/macgirvin/HTTP-Message-Signer/issues",
"source": "https://github.com/macgirvin/HTTP-Message-Signer/tree/v0.1.6"
"source": "https://github.com/macgirvin/HTTP-Message-Signer/tree/v0.1.7"
},
"install-path": "../macgirvin/http-message-signer"
},

View File

@@ -1,9 +1,9 @@
<?php return array(
'root' => array(
'name' => 'zotlabs/hubzilla',
'pretty_version' => 'dev-10.2RC',
'version' => 'dev-10.2RC',
'reference' => 'e6bd5ef52009e2f7e1673806fb998d542eed4990',
'pretty_version' => 'dev-10.4RC',
'version' => 'dev-10.4RC',
'reference' => '7782183ae356db31dbef2dcf785ddc79c00335c1',
'type' => 'application',
'install_path' => __DIR__ . '/../../',
'aliases' => array(),
@@ -146,9 +146,9 @@
'dev_requirement' => false,
),
'macgirvin/http-message-signer' => array(
'pretty_version' => 'v0.1.6',
'version' => '0.1.6.0',
'reference' => '31774b2a8e103dfcdb56b0c570336ec62487dc6f',
'pretty_version' => 'v0.1.7',
'version' => '0.1.7.0',
'reference' => '44db674fb750b4e4909cf1aeb3a18a4c68d938ca',
'type' => 'library',
'install_path' => __DIR__ . '/../macgirvin/http-message-signer',
'aliases' => array(),
@@ -476,9 +476,9 @@
'dev_requirement' => false,
),
'zotlabs/hubzilla' => array(
'pretty_version' => 'dev-10.2RC',
'version' => 'dev-10.2RC',
'reference' => 'e6bd5ef52009e2f7e1673806fb998d542eed4990',
'pretty_version' => 'dev-10.4RC',
'version' => 'dev-10.4RC',
'reference' => '7782183ae356db31dbef2dcf785ddc79c00335c1',
'type' => 'application',
'install_path' => __DIR__ . '/../../',
'aliases' => array(),

View File

@@ -54,8 +54,8 @@ $request = new Request(
'GET',
'https://api.example.com/resource?bat&baz=3',
[
'Host' => ['api.example.com'],
'Date' => [gmdate('D, d M Y H:i:s T')],
'Host' => 'api.example.com',
'Date' => gmdate('D, d M Y H:i:s T'),
...additional headers
]
);
@@ -102,14 +102,14 @@ Using the 'sf' parameter on a component will treat a signature component as a St
However, parsing Structured Fields by adding the 'sf' parameter is likely to fail unless you know what `type` it is. A built-in table contains the type definition for a number of known stuctured header types. This list is probably incomplete. A method `addStructuredFieldTypes()` is available to add the type information so it can be successfullly parsed. This takes an array with key of the lowercase header name and a value; which is one of 'list', 'innerlist', 'parameters, 'dictionary', 'item'. If the header name is in the list and the 'sf' modifier is used, the header will be parsed as the Structured Field type indicated.
If a Structured Field is declared as type 'dictionary'; it is suitable for use with the RFC9421 `key` parameter. Using this parameter will fail if the Structured Field type is unknown or has not been registered.
If a Structured Field is declared as type 'dictionary'; it is suitable for use with the RFC9421 `key` parameter. Using this parameter will fail if the Structured Field type is unknown or has not been registered.
The signRequest() and verifyRequest() methods both use an instance of MessageInterface. In nearly all cases, this will be the RequestInterface. However, when signing responses, the default will be the ResponseInterface, and if components are required from the RequestInterface, the :req parameter must be added to the field definition.
To sign or verify an HTTP Response, use a ResponseInterface as the provided `$interface`, and provide the RequestInterface in `$originalRequest`. This is optional will allow the `req` modifier to work correctly when signing Responses.
To sign or verify an HTTP Response, use a ResponseInterface as the provided `$interface`, and provide the RequestInterface in `$originalRequest`. This is optional but will allow the `req` modifier to work correctly when signing Responses.
## Known issues
Currently not implemented is the special handling of the `cookie` and `set-cookie` headers when using the `sf` modifier.
Currently not implemented is the special handling of the `cookie` and `set-cookie` headers when using the `sf` modifier. For further information please see https://httpwg.org/http-extensions/draft-ietf-httpbis-retrofit.html and https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-20 (or later). It is planned to implement this once RFC6265bis is finalised as a new RFC.
Also not currently implemented are some of the many signature algorithms; as we're currently focused primarily on rsa-sha256 and ed25519.

View File

@@ -240,12 +240,12 @@ class HttpMessageSigner
}
$parameters = $this->extractParameters($members);
if ($parameters['expires']) {
if (isset($parameters['expires'])) {
$expires = (int) $parameters['expires'];
if ($expires < time()) {
return false;
}
if ($parameters['created']) {
if (isset($parameters['created'])) {
$created = (int) $parameters['created'];
if ($created >= $expires) {
return false;