for now only attempt RFC9421 verification if we have the request

This commit is contained in:
Mario
2025-07-06 21:22:32 +00:00
parent d396043faf
commit 8a4273a2f5

View File

@@ -110,7 +110,7 @@ class HTTPSig {
return $result;
}
if (array_key_exists('signature-input', $headers) && array_key_exists('signature', $headers)) {
if (App::$request && array_key_exists('signature-input', $headers) && array_key_exists('signature', $headers)) {
$found = preg_match('/keyid="(.*?)"/', $headers['signature-input'], $matches);
$keyId = ($found) ? $matches[1] : '';