Throw exception on algorithm signature parameter and dervice algorith…

…m mismatch
archamoney · Aug 26, 2020 · c5163f8 · c5163f8
1 parent f97f6c0
commit c5163f8
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/httpsig/verify.py b/httpsig/verify.py
@@ -90,6 +90,11 @@ def __init__(self, headers, secret, required_headers=None, method=None,
         self.path = path
         self.host = host
 
+        if 'algorithm' in self.auth_dict and self.auth_dict['algorithm'] != self.algorithm:
+            raise HttpSigException(
+                "Algorithm mismath, signature parameter algorithm was: {}, but algorithm dervice from key is: {}".format(
+                    self.auth_dict['algorithm'], self.algorithm))
+
         if self.auth_dict['algorithm'] != DEFAULT_ALGORITHM:
             print("Algorithm: {} is deprecated please update to {}".format(self.auth_dict['algorithm'], DEFAULT_ALGORITHM))
         elif self.auth_dict['algorithm'] == DEFAULT_ALGORITHM and sign_algorithm is None: