HTTP signature when sending activites

src/activity_pub/actor.rs

@@ -5,6 +5,7 @@ use serde_json;
 use BASE_URL;
 use activity_pub::{activity_pub, ActivityPub, context, ap_url};
 use activity_pub::activity::Activity;
+use activity_pub::request;
 use activity_pub::sign::*;
 use models::instance::Instance;
 
@@ -85,8 +86,12 @@ pub trait Actor: Sized {
         let mut act = act.serialize();
         act["@context"] = context();
         let signed = act.sign(sender, conn);
+        
         let res = Client::new()
             .post(&self.compute_inbox(conn)[..])
+            .headers(request::headers())
+            .header(request::signature(sender, request::headers, conn))
+            .header(request::digest(signed.to_string()))
             .body(signed.to_string())
             .send();
         match res {

src/activity_pub/mod.rs

@@ -8,6 +8,7 @@ pub mod actor;
 pub mod inbox;
 pub mod object;
 pub mod outbox;
+pub mod request;
 pub mod sign;
 pub mod webfinger;
 

src/activity_pub/request.rs

@@ -0,0 +1,48 @@
+use base64;
+use diesel::PgConnection;
+use hex;
+use openssl::hash::{Hasher, MessageDigest};
+use openssl::sha::sha256;
+use reqwest::header::{Date, Headers, UserAgent};
+use std::time::SystemTime;
+
+use activity_pub::sign::Signer;
+
+const USER_AGENT: &'static str = "Plume/0.1.0";
+
+header! {
+    (Signature, "Signature") => [String]
+}
+
+header! {
+    (Digest, "Digest") => [String]
+}
+
+pub fn headers() -> Headers {
+    let mut headers = Headers::new();
+    headers.set(UserAgent::new(USER_AGENT));
+    headers.set(Date(SystemTime::now().into()));
+    headers
+}
+
+pub fn signature<S: Signer>(signer: S, headers: Headers, conn: &PgConnection) -> Signature {
+    let signed_string = headers.iter().map(|h| format!("{}: {}", h.name().to_lowercase(), h.value_string())).collect::<Vec<String>>().join("\n");
+    let signed_headers = headers.iter().map(|h| h.name().to_string()).collect::<Vec<String>>().join(" ").to_lowercase();
+    
+    let data = signer.sign(signed_string);
+    let sign = hex::encode(sha256(&data[..]));
+
+    Signature(format!(
+        "keyId=\"{key_id}\",algorithm=\"rsa-sha256\",headers=\"#{signed_headers}\",signature=\"#{signature}\"",
+        key_id = signer.get_key_id(conn),
+        signed_headers = signed_headers,
+        signature = sign
+    ))
+}
+
+pub fn digest(body: String) -> Digest {
+    let mut hasher = Hasher::new(MessageDigest::sha256()).unwrap();
+    hasher.update(&body.into_bytes()[..]);
+    let res = base64::encode(&hasher.finish().unwrap());
+    Digest(format!("SHA-256={}", res))
+}

src/main.rs

@@ -7,6 +7,8 @@ extern crate chrono;
 extern crate heck;
 extern crate hex;
 #[macro_use]
+extern crate hyper;
+#[macro_use]
 extern crate diesel;
 extern crate dotenv;
 #[macro_use]