stakey/vspd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sign error responses.

Browse Source
This commit is contained in:
jholdstock 2020-06-05 16:05:36 +01:00 committed by David Hill
parent 0318eded95
commit 9f02063c86
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
webapi/webapi.go
View File

@ -215,5 +215,16 @@ func sendJSONResponse(resp interface{}, c *gin.Context) {
}
func sendErrorResponse(errMsg string, code int, c *gin.Context) {
c.AbortWithStatusJSON(code, gin.H{"error": errMsg})
resp := gin.H{"error": errMsg}
// Try to sign the error response. If it fails, send it without a signature.
dec, err := json.Marshal(resp)
if err != nil {
log.Warnf("Sending error response without signature: %v", err)
} else {
sig := ed25519.Sign(signPrivKey, dec)
c.Writer.Header().Set("VSP-Server-Signature", hex.EncodeToString(sig))
}
c.AbortWithStatusJSON(code, resp)
}