Verify that the remote user is who they say they
This commit is contained in:
parent
1b48ca2f85
commit
373a378452
2 changed files with 4 additions and 0 deletions
|
@ -26,6 +26,9 @@ def get_or_create_remote_user(actor):
|
|||
response.raise_for_status()
|
||||
data = response.json()
|
||||
|
||||
# make sure our actor is who they say they are
|
||||
assert actor == data['id']
|
||||
|
||||
actor_parts = urlparse(actor)
|
||||
with transaction.atomic():
|
||||
user = create_remote_user(data)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue