public override SignatureVerificationFailure VerifySync(HttpRequestForSigning signedRequest, Signature signature, Client client)
{
if (
signature.Headers.Contains(HeaderName.PredefinedHeaderNames.Expires) &&
AlgorithmNamesThatDoNotAllowExpiresHeader.Contains(client.SignatureAlgorithm.Name, StringComparer.OrdinalIgnoreCase))
{
return(SignatureVerificationFailure.InvalidExpiresHeader(
$"It is not allowed to take the {HeaderName.PredefinedHeaderNames.Expires} into account, when the signature algorithm is {client.SignatureAlgorithm.Name}."));
}
if (!signature.Expires.HasValue)
{
return(SignatureVerificationFailure.InvalidExpiresHeader($"The signature does not contain a value for the {nameof(signature.Expires)} property, but it is required."));
}
var expiresHeaderValues = signedRequest.Headers.GetValues(HeaderName.PredefinedHeaderNames.Expires);
if (expiresHeaderValues != StringValues.Empty && signature.Headers.Contains(HeaderName.PredefinedHeaderNames.Expires))
{
if (!long.TryParse(expiresHeaderValues.First(), out var parsedExpiresValue))
{
return(SignatureVerificationFailure.InvalidExpiresHeader(
$"The request does not contain a valid value for the {HeaderName.PredefinedHeaderNames.Expires} header."));
}
var expiresHeaderValue = DateTimeOffset.FromUnixTimeSeconds(parsedExpiresValue);
if (expiresHeaderValue != signature.Expires.Value)
{
return(SignatureVerificationFailure.InvalidExpiresHeader(
$"The signature expiration time does not match the value of the {HeaderName.PredefinedHeaderNames.Expires} request header."));
}
}
return(null);
}
public override SignatureVerificationFailure VerifySync(HttpRequestForSigning signedRequest, Signature signature, Client client)
{
if (
signature.Headers.Contains(HeaderName.PredefinedHeaderNames.Expires) &&
AlgorithmNamesThatDoNotAllowExpiresValue.Any(alg => signature.Algorithm.StartsWith(alg, StringComparison.OrdinalIgnoreCase)))
{
return(SignatureVerificationFailure.InvalidExpiresHeader(
$"It is not allowed to take the {HeaderName.PredefinedHeaderNames.Expires} into account, when the signature algorithm is {signature.Algorithm}."));
}
return(null);
}