This commit is contained in:
Kieran 2023-06-17 18:49:02 +01:00
parent de1aec64d2
commit 1412eb89c2
No known key found for this signature in database
GPG Key ID: DE71CEB3925BE941

2
98.md
View File

@ -46,7 +46,7 @@ Example event:
Servers MUST perform the following checks in order to validate the event:
1. The `kind` MUST be `27235`.
2. The `created_at` MUST be within a reasonable time window (suggestion 60 seconds).
3. The `url` tag MUST be exactly the same as the absolute request URL (including query parameters).
3. The `u` tag MUST be exactly the same as the absolute request URL (including query parameters).
4. The `method` tag MUST be the same HTTP method used for the requested resource.
When the request contains a body (as in POST/PUT/PATCH methods) clients SHOULD include a SHA256 hash of the request body in a `payload` tag as hex (`["payload", "<sha256-hex>"]`), servers MAY check this to validate that the requested payload is authorized.