~cloutier/bird.makeup

48ec3bc5ff87e0cca791f5f9f1ecd4c279ce4b96 — Vincent Cloutier a month ago 69eebcc 
added tests for Crypto Service
patch browse .tar.gz 
4 files changed, 208 insertions(+), 69 deletions(-)

M src/BirdsiteLive.Domain/ActivityPubService.cs
M src/BirdsiteLive.Domain/CryptoService.cs
M src/BirdsiteLive.Domain/UserService.cs
A src/Tests/BirdsiteLive.Domain.Tests/CryptoServiceTest.cs

M src/BirdsiteLive.Domain/ActivityPubService.cs => src/BirdsiteLive.Domain/ActivityPubService.cs +1 -1
@@ 124,7 124,7 @@ namespace BirdsiteLive.Domain
            var date = DateTime.UtcNow.ToUniversalTime();
            var httpDate = date.ToString("r");

            var digest = _cryptoService.ComputeSha256Hash(json);
            var digest = CryptoService.ComputeSha256Hash(json);

            var signature = await _cryptoService.SignAndGetSignatureHeader(date, actorUrl, targetHost, digest, usedInbox);



M src/BirdsiteLive.Domain/CryptoService.cs => src/BirdsiteLive.Domain/CryptoService.cs +67 -2
@@ 1,7 1,12 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Security.Cryptography;
using System.Text;
using System.Threading.Tasks;
using BirdsiteLive.ActivityPub;
using BirdsiteLive.Common.Regexes;
using BirdsiteLive.Cryptography;
using BirdsiteLive.Domain.Factories;

namespace BirdsiteLive.Domain


@@ 12,7 17,7 @@ namespace BirdsiteLive.Domain
        Task<string> SignAndGetSignatureHeader(DateTime date, string actor, string host, string digest, string inbox);
        Task<string> SignString(string toSign);
        
        string ComputeSha256Hash(string data);
        static abstract string ComputeSha256Hash(string data);
    }

    public class CryptoService : ICryptoService


@@ 59,7 64,7 @@ namespace BirdsiteLive.Domain
            return Convert.ToBase64String(signature);
        }

        public string ComputeSha256Hash(string data)
        public static string ComputeSha256Hash(string data)
        {
            // Create a SHA256   
            using (SHA256 sha256Hash = SHA256.Create())


@@ 69,5 74,65 @@ namespace BirdsiteLive.Domain
                return Convert.ToBase64String(bytes);
            }
        }
        public static SignatureValidationResult ValidateSignature(Actor remoteActor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders, string body)
        {

            //Check Date Validity
            //var date = requestHeaders["date"];
            //var d = DateTime.Parse(date).ToUniversalTime();
            //var now = DateTime.UtcNow;
            //var delta = Math.Abs((d - now).TotalSeconds);
            //if (delta > 30) return new SignatureValidationResult { SignatureIsValidated = false };
            
            
            //Check Digest
            var digest = requestHeaders["digest"];
            var digestHash = digest.Split(new [] {"SHA-256="},StringSplitOptions.RemoveEmptyEntries).LastOrDefault();
            var calculatedDigestHash = ComputeSha256Hash(body);
            if (digestHash != calculatedDigestHash) return new SignatureValidationResult { SignatureIsValidated = false };
            

            //Check Signature
            var signatures = rawSig.Split(',');
            var signature_header = new Dictionary<string, string>();
            foreach (var signature in signatures)
            {
                var m = HeaderRegexes.HeaderSignature.Match(signature);
                signature_header.Add(m.Groups[1].ToString(), m.Groups[2].ToString());
            }

            var key_id = signature_header["keyId"];
            var headers = signature_header["headers"];
            var algorithm = signature_header["algorithm"];
            var sig = Convert.FromBase64String(signature_header["signature"]);

            // Prepare Key data
            var toDecode = remoteActor.publicKey.publicKeyPem.Trim().Remove(0, remoteActor.publicKey.publicKeyPem.IndexOf('\n'));
            toDecode = toDecode.Remove(toDecode.LastIndexOf('\n')).Replace("\n", "");
            var signKey = ASN1.ToRSA(Convert.FromBase64String(toDecode));

            var toSign = new StringBuilder();
            foreach (var headerKey in headers.Split(' '))
            {
                if (headerKey == "(request-target)") toSign.Append($"(request-target): {method.ToLower()} {path}{queryString}\n");
                else toSign.Append($"{headerKey}: {string.Join(", ", requestHeaders[headerKey])}\n");
            }
            toSign.Remove(toSign.Length - 1, 1);

            // Import key
            var key = new RSACryptoServiceProvider();
            var rsaKeyInfo = key.ExportParameters(false);
            rsaKeyInfo.Modulus = Convert.FromBase64String(toDecode);
            key.ImportParameters(rsaKeyInfo);

            // Trust and Verify
            var result = signKey.VerifyData(Encoding.UTF8.GetBytes(toSign.ToString()), sig, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);

            return new SignatureValidationResult()
            {
                SignatureIsValidated = result,
                User = remoteActor
            };
        }
    }
}
\ No newline at end of file


M src/BirdsiteLive.Domain/UserService.cs => src/BirdsiteLive.Domain/UserService.cs +2 -66
@@ 319,72 319,8 @@ namespace BirdsiteLive.Domain
        private async Task<SignatureValidationResult> ValidateSignature(string localActor, string actor, string rawSig, string method, string path, string queryString, Dictionary<string, string> requestHeaders, string body)
        {
            var remoteUser2 = await _activityPubService.GetUser(localActor, actor);
            return new SignatureValidationResult()
            {
                SignatureIsValidated = true,
                User = remoteUser2
            };

            //Check Date Validity
            var date = requestHeaders["date"];
            var d = DateTime.Parse(date).ToUniversalTime();
            var now = DateTime.UtcNow;
            var delta = Math.Abs((d - now).TotalSeconds);
            if (delta > 30) return new SignatureValidationResult { SignatureIsValidated = false };
            
            //Check Digest
            var digest = requestHeaders["digest"];
            var digestHash = digest.Split(new [] {"SHA-256="},StringSplitOptions.RemoveEmptyEntries).LastOrDefault();
            var calculatedDigestHash = _cryptoService.ComputeSha256Hash(body);
            if (digestHash != calculatedDigestHash) return new SignatureValidationResult { SignatureIsValidated = false };

            //Check Signature
            var signatures = rawSig.Split(',');
            var signature_header = new Dictionary<string, string>();
            foreach (var signature in signatures)
            {
                var m = HeaderRegexes.HeaderSignature.Match(signature);
                signature_header.Add(m.Groups[1].ToString(), m.Groups[2].ToString());
            }

            var key_id = signature_header["keyId"];
            var headers = signature_header["headers"];
            var algorithm = signature_header["algorithm"];
            var sig = Convert.FromBase64String(signature_header["signature"]);

            // Retrieve User
            var remoteUser = await _activityPubService.GetUser(null, actor);

	                Console.WriteLine(remoteUser.publicKey.publicKeyPem);

            // Prepare Key data
            var toDecode = remoteUser.publicKey.publicKeyPem.Trim().Remove(0, remoteUser.publicKey.publicKeyPem.IndexOf('\n'));
            toDecode = toDecode.Remove(toDecode.LastIndexOf('\n')).Replace("\n", "");
            var signKey = ASN1.ToRSA(Convert.FromBase64String(toDecode));

            var toSign = new StringBuilder();
            foreach (var headerKey in headers.Split(' '))
            {
                if (headerKey == "(request-target)") toSign.Append($"(request-target): {method.ToLower()} {path}{queryString}\n");
                else toSign.Append($"{headerKey}: {string.Join(", ", requestHeaders[headerKey])}\n");
            }
            toSign.Remove(toSign.Length - 1, 1);

	    Console.WriteLine(Convert.FromBase64String(toDecode));
            // Import key
            var key = new RSACryptoServiceProvider();
            var rsaKeyInfo = key.ExportParameters(false);
            rsaKeyInfo.Modulus = Convert.FromBase64String(toDecode);
            key.ImportParameters(rsaKeyInfo);

            // Trust and Verify
            var result = signKey.VerifyData(Encoding.UTF8.GetBytes(toSign.ToString()), sig, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);

            return new SignatureValidationResult()
            {
                SignatureIsValidated = result,
                User = remoteUser
            };
            return CryptoService.ValidateSignature(remoteUser2, rawSig, method, path, queryString, requestHeaders,
                body);
        }
    }



A src/Tests/BirdsiteLive.Domain.Tests/CryptoServiceTest.cs => src/Tests/BirdsiteLive.Domain.Tests/CryptoServiceTest.cs +138 -0
@@ 0,0 1,138 @@
using System;
using System.Collections.Generic;
using System.Text.Json;
using System.Text.RegularExpressions;
using BirdsiteLive.ActivityPub;
using BirdsiteLive.Common.Interfaces;
using BirdsiteLive.Common.Settings;
using BirdsiteLive.Cryptography;
using BirdsiteLive.Domain.Factories;
using BirdsiteLive.Domain.Statistics;
using BirdsiteLive.Domain.Tools;
using Microsoft.Extensions.Logging;
using Microsoft.VisualBasic;
using Microsoft.VisualStudio.TestTools.UnitTesting;
using Moq;

namespace BirdsiteLive.Domain.Tests;

[TestClass]
public class CryptoServiceTest
{
    private readonly InstanceSettings _settings;
    private readonly CryptoService _cryptoService;
    
    public CryptoServiceTest()
    {
        _settings = new InstanceSettings
        {
            Domain = "domain.name"
        };
        var keyFactory = new Mock<IMagicKeyFactory>();
        keyFactory.Setup(_ => _.GetMagicKey()).ReturnsAsync(new MagicKey(
            """{"D":"Oar5IoCLbM2K82c2M3ljJJUAf7KFr6beFtlhFOj+4q1WnIReXylvoe3XBkotQ13jb1RQ5dNKQhI3oMUpHbLbG8mScHv48QtT6OR1HaDVDYwEdiSGN0JsmtBRigbMJyn2AX0OlwkxJe3xi6oo3eCV5CSjU/hiW9JXA9dKD3NP1VgLIGHRNgNcIxkOfVWDN01ECYu4t2OXnZCuyqunZ0lharUJ6e8lralqkZFoP6bMevsrTc3+hYXcjfYZkevet1yUxJqNfw7RWPKNbabheTtsAuS0jhXig8XoJKY8AIffVjchGgIUI4vq4nJMN2rUxz68CF/nFOuD8feER1byABSN4Q==", "P": "7pf+7JzVFRHCSFsaXsm+CnBR/pfwTv8GVp9kpmL7Baru9h7MHnxYJ0N/RTMpMyZvDVx0Sjobp+gLrKLiYD22QfxFAlTVjoDohKUsQugydA0wrDNJ5BBmWWxkapTInGutZYwWTkefWRC/hjyZlAvUhgW9ctSas8+/LEeuyA6ql6M=","Q":"2IaktklUUgI3gbk+7jXNOClm6rc6cjoetk4sS85EjoUJZs59uOAdpfmm0uIqNP0gKy4opxnsQFxybaEHwzuYWH+ZySNS9uRRjYKfDAU6OYCYEOFKlh6jjHUCdcd8VDFNSvA0MT5DZ8tpX2MjjahuGdlfXQZm1UKYB+h1g25caSc=","DP":"JEg83eJjjNasgrBH7E4ldhTqgxq70md5oUaP2bWHkq8Rs5+vTpt+FEpxWiaTh1G65X8/t+HqPrhMvi3u2s/HnXUtUVNxPkBgG3u6pVoGAhvXYPhTrjjIN6UCCCsj7pV5Qs3wvmqp0rN3TIR+nkLGSLMqwgGOnPVkjuk/rPB+BJ0=", "DQ": "wH2CdKNgGL/rxKGAtpiR5nm4CrX1eZL9tqhsbL/k5qaSoxizX+Wttd3pVtTFHPJi5MBWV6eOBfGpsJhVpFSYrSRS/SMwIFj9v0X+Stti1bfieC8w9aArWTS0iSxc9SQXSKWeYKCvn9iPxsMF2mt/5e7+/l4wkSpwqacYwU0dTkU=", "Modulus": "yc28Klfkn//jJKnZpzK4yDsfAv5u6mjzLJwMcW30IWk3k+N/cmH3MDDlC7en04kdYOKWLHSS0+G7XaxehZOj55GG+N7GjEBeUlls1jLHAP+zCyrtPh9UDmSOhYbrTdXAExHTcGn3rVCyYURopzk+gZ7GtNCEYIPrvpUhqgLVXE0FPTeBiyGq92VOmIEdDqQ9HdHgDnzd49oXsMxaqqSh6aJBIv8JgvDUR0OJD7xVrqd5ZvsoDcaKmkNfYL/TsFuQVH5DWC0emTlIgfYp246mUDoh1Z/3vvSglZjATXMx+zjnLbVQB8zcZSSdJSOLlpBPs8CeRjWZqMBFH1hdvML01Q==", "Exponent": "AQAB", "InverseQ": "G/edCYzS5R54fU2GDys37nkoq2rlHUG+uas3fJMKRr+2OMU6sBy26p76enXWEP2gtlqmugFvm4QeKYBUgxwNCPdfof+vNb1yh8wLiqWyG636+MYJK9NkUkAIpUjyVvI4rFWQX4+1cu7pqEqetfP0LafS+4Z+FPhBJK6Iz3YvJng="}"""));
        _cryptoService = new CryptoService(keyFactory.Object);
    }
    
    [TestMethod]
    public void ValidDelete()
    {
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Inbox: {"@context":"https://www.w3.org/ns/activitystreams","id":"https://red.niboe.info/users/JotaLuis#delete","type":"Delete","actor":"https://red.niboe.info/users/JotaLuis","to":["https://www.w3.org/ns/activitystreams#Public"],"object":"https://red.niboe.info/users/JotaLuis","signature":{"type":"RsaSignature2017","creator":"https://red.niboe.info/users/JotaLuis#main-key","created":"2024-08-05T07:02:03Z","signatureValue":"FmHVziXqvga1RL2UWXT70cohfl1pDfhFAGNjIBPhUU2lRbHGiNWIvHxQil4oTxtLOam2kb8iWQDqOTl1DkeHgOU2LVd73BzxppCL83lGzyVQSkV2UjoF31ME5LSxEYbAuPy+jtZ7te1TL6OEk3ZSZkr+BEbLy02cqzYRGCVqfD5OsDsNusp18AcNEiA+4tFUtHs79wU1Dq8YWYPdj+tK0J3whaHLTcf5e7yckkkQe0fJtUlBaUXnN09OFzYK6+GoBXZteoQKrxVSNmQpa87Ofc1urxsjZQk7blj40nqXR4FO5ZkdIq6/QDg313D/t2b3OLo/IIj5ZGt2NN3/fq3J8A=="}}
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Signature: keyId="https://red.niboe.info/users/JotaLuis#main-key",algorithm="rsa-sha256",headers="(request-target) host date digest content-type",signature="1tCzRmNA3Cmu1Wh+tdVc0FWrvuNKziAEtFaxZWZqUdN/4H0/uqRoN0M/nmqTKb5v3awZjDd1TH6a7Ht69O6ZHSRAF//OHLXhm7TKL+I+7M063v1n3j+mTzgDV3YMx3SGs5kG0V69jxto7KNxWuuhFReEoQY0o6GGL2Jgk5fBfhOpx+ltl5YXQy+discZP0LnFccOjp03nH3AOHpnYNHpxKvL/nPXqYm53p/tmTmT9/xr7dOFl4uMEY83KY5RDEETS8C5Y5YnXFZAb7I1WvwCKYpSD6M3YYMkB/uHcizLPEo5y7adxsEtd5p27RrZ6Sj96cM3pI0sOMHGhT9ZSmCc6w=="
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Date: Mon, 05 Aug 2024 20:13:26 GMT
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Digest: SHA-256=KM5J2Alu2SYGDBkhkln2p4zVYwjyGfvTxiRCibC/y6Q=
        //     kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Host: kilogram.makeup
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Host: application/activity+json


        var actorJson =
            "{\n\t\"@context\": [\n\t\t\"https://www.w3.org/ns/activitystreams\",\n\t\t\"https://w3id.org/security/v1\",\n\t\t{\n\t\t\t\"manuallyApprovesFollowers\": \"as:manuallyApprovesFollowers\",\n\t\t\t\"toot\": \"http://joinmastodon.org/ns#\",\n\t\t\t\"featured\": {\n\t\t\t\t\"@id\": \"toot:featured\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"featuredTags\": {\n\t\t\t\t\"@id\": \"toot:featuredTags\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"alsoKnownAs\": {\n\t\t\t\t\"@id\": \"as:alsoKnownAs\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"movedTo\": {\n\t\t\t\t\"@id\": \"as:movedTo\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"schema\": \"http://schema.org#\",\n\t\t\t\"PropertyValue\": \"schema:PropertyValue\",\n\t\t\t\"value\": \"schema:value\",\n\t\t\t\"IdentityProof\": \"toot:IdentityProof\",\n\t\t\t\"discoverable\": \"toot:discoverable\",\n\t\t\t\"Device\": \"toot:Device\",\n\t\t\t\"Ed25519Signature\": \"toot:Ed25519Signature\",\n\t\t\t\"Ed25519Key\": \"toot:Ed25519Key\",\n\t\t\t\"Curve25519Key\": \"toot:Curve25519Key\",\n\t\t\t\"EncryptedMessage\": \"toot:EncryptedMessage\",\n\t\t\t\"publicKeyBase64\": \"toot:publicKeyBase64\",\n\t\t\t\"deviceId\": \"toot:deviceId\",\n\t\t\t\"claim\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:claim\"\n\t\t\t},\n\t\t\t\"fingerprintKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:fingerprintKey\"\n\t\t\t},\n\t\t\t\"identityKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:identityKey\"\n\t\t\t},\n\t\t\t\"devices\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:devices\"\n\t\t\t},\n\t\t\t\"messageFranking\": \"toot:messageFranking\",\n\t\t\t\"messageType\": \"toot:messageType\",\n\t\t\t\"cipherText\": \"toot:cipherText\",\n\t\t\t\"suspended\": \"toot:suspended\"\n\t\t}\n\t],\n\t\"id\": \"https://red.niboe.info/users/JotaLuis\",\n\t\"type\": \"Person\",\n\t\"following\": \"https://red.niboe.info/users/JotaLuis/following\",\n\t\"followers\": \"https://red.niboe.info/users/JotaLuis/followers\",\n\t\"inbox\": \"https://red.niboe.info/users/JotaLuis/inbox\",\n\t\"outbox\": \"https://red.niboe.info/users/JotaLuis/outbox\",\n\t\"featured\": \"https://red.niboe.info/users/JotaLuis/collections/featured\",\n\t\"featuredTags\": \"https://red.niboe.info/users/JotaLuis/collections/tags\",\n\t\"preferredUsername\": \"JotaLuis\",\n\t\"name\": \"\",\n\t\"summary\": \"\",\n\t\"url\": \"https://red.niboe.info/@JotaLuis\",\n\t\"manuallyApprovesFollowers\": false,\n\t\"discoverable\": false,\n\t\"published\": \"2022-10-02T00:00:00Z\",\n\t\"devices\": \"https://red.niboe.info/users/JotaLuis/collections/devices\",\n\t\"suspended\": true,\n\t\"publicKey\": {\n\t\t\"id\": \"https://red.niboe.info/users/JotaLuis#main-key\",\n\t\t\"owner\": \"https://red.niboe.info/users/JotaLuis\",\n\t\t\"publicKeyPem\": \"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T/I+q10jmoD8XFhVeqb\\neIl8uu740rQhxK7v5InHn9ItBjM0+La7SjvvE+WPWMtnbYnEX+JKERutz7AhLyjw\\nAGoMrAoRL+3zKi3WvTfSawYkkaAt8eYHz2+VkPXXCDF8ez2QEes+vNEpnUfNHwrW\\nWlMI2SWaajAws9uvXMsPnw2MQk4qWc3iocE11uaJ29kK69zrX+eQQ9iWMjv9LMaN\\numo2o0tApAsyX6RBs9si3NRiWIx5atK+bnK7CgN7Gczz5VYl0ALBqtYNNCSuVz9O\\no1fAT+dG3A8Y4riyWDMaWhCe+GUTrpP9KxOr4lmDZ4Hgjqt4n5Owx4Q+qpzuMS6u\\nSwIDAQAB\\n-----END PUBLIC KEY-----\\n\"\n\t},\n\t\"tag\": [],\n\t\"attachment\": [],\n\t\"endpoints\": {\n\t\t\"sharedInbox\": \"https://red.niboe.info/inbox\"\n\t}\n}";
        
        var remote = JsonSerializer.Deserialize<Actor>(actorJson);
        var rawSig =
            "keyId=\"https://red.niboe.info/users/JotaLuis#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date digest content-type\",signature=\"1tCzRmNA3Cmu1Wh+tdVc0FWrvuNKziAEtFaxZWZqUdN/4H0/uqRoN0M/nmqTKb5v3awZjDd1TH6a7Ht69O6ZHSRAF//OHLXhm7TKL+I+7M063v1n3j+mTzgDV3YMx3SGs5kG0V69jxto7KNxWuuhFReEoQY0o6GGL2Jgk5fBfhOpx+ltl5YXQy+discZP0LnFccOjp03nH3AOHpnYNHpxKvL/nPXqYm53p/tmTmT9/xr7dOFl4uMEY83KY5RDEETS8C5Y5YnXFZAb7I1WvwCKYpSD6M3YYMkB/uHcizLPEo5y7adxsEtd5p27RrZ6Sj96cM3pI0sOMHGhT9ZSmCc6w==\"";
        var method = "POST";
        var path = "/inbox";
        var queryString = "";
        var body = "{\"@context\":\"https://www.w3.org/ns/activitystreams\",\"id\":\"https://red.niboe.info/users/JotaLuis#delete\",\"type\":\"Delete\",\"actor\":\"https://red.niboe.info/users/JotaLuis\",\"to\":[\"https://www.w3.org/ns/activitystreams#Public\"],\"object\":\"https://red.niboe.info/users/JotaLuis\",\"signature\":{\"type\":\"RsaSignature2017\",\"creator\":\"https://red.niboe.info/users/JotaLuis#main-key\",\"created\":\"2024-08-05T07:02:03Z\",\"signatureValue\":\"FmHVziXqvga1RL2UWXT70cohfl1pDfhFAGNjIBPhUU2lRbHGiNWIvHxQil4oTxtLOam2kb8iWQDqOTl1DkeHgOU2LVd73BzxppCL83lGzyVQSkV2UjoF31ME5LSxEYbAuPy+jtZ7te1TL6OEk3ZSZkr+BEbLy02cqzYRGCVqfD5OsDsNusp18AcNEiA+4tFUtHs79wU1Dq8YWYPdj+tK0J3whaHLTcf5e7yckkkQe0fJtUlBaUXnN09OFzYK6+GoBXZteoQKrxVSNmQpa87Ofc1urxsjZQk7blj40nqXR4FO5ZkdIq6/QDg313D/t2b3OLo/IIj5ZGt2NN3/fq3J8A==\"}}";
        var headers = new Dictionary<string, string>()
        {
            { "date", "Mon, 05 Aug 2024 20:13:26 GMT" },
            { "digest", "SHA-256=KM5J2Alu2SYGDBkhkln2p4zVYwjyGfvTxiRCibC/y6Q=" },
            { "host", "kilogram.makeup"},
            { "content-type", "application/activity+json"}
        };

        var res = CryptoService.ValidateSignature(remote, rawSig, method, path, queryString, headers, body);
        Assert.IsTrue(res.SignatureIsValidated);
    }
    [TestMethod]
    public void BadHost()
    {
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Inbox: {"@context":"https://www.w3.org/ns/activitystreams","id":"https://red.niboe.info/users/JotaLuis#delete","type":"Delete","actor":"https://red.niboe.info/users/JotaLuis","to":["https://www.w3.org/ns/activitystreams#Public"],"object":"https://red.niboe.info/users/JotaLuis","signature":{"type":"RsaSignature2017","creator":"https://red.niboe.info/users/JotaLuis#main-key","created":"2024-08-05T07:02:03Z","signatureValue":"FmHVziXqvga1RL2UWXT70cohfl1pDfhFAGNjIBPhUU2lRbHGiNWIvHxQil4oTxtLOam2kb8iWQDqOTl1DkeHgOU2LVd73BzxppCL83lGzyVQSkV2UjoF31ME5LSxEYbAuPy+jtZ7te1TL6OEk3ZSZkr+BEbLy02cqzYRGCVqfD5OsDsNusp18AcNEiA+4tFUtHs79wU1Dq8YWYPdj+tK0J3whaHLTcf5e7yckkkQe0fJtUlBaUXnN09OFzYK6+GoBXZteoQKrxVSNmQpa87Ofc1urxsjZQk7blj40nqXR4FO5ZkdIq6/QDg313D/t2b3OLo/IIj5ZGt2NN3/fq3J8A=="}}
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Signature: keyId="https://red.niboe.info/users/JotaLuis#main-key",algorithm="rsa-sha256",headers="(request-target) host date digest content-type",signature="1tCzRmNA3Cmu1Wh+tdVc0FWrvuNKziAEtFaxZWZqUdN/4H0/uqRoN0M/nmqTKb5v3awZjDd1TH6a7Ht69O6ZHSRAF//OHLXhm7TKL+I+7M063v1n3j+mTzgDV3YMx3SGs5kG0V69jxto7KNxWuuhFReEoQY0o6GGL2Jgk5fBfhOpx+ltl5YXQy+discZP0LnFccOjp03nH3AOHpnYNHpxKvL/nPXqYm53p/tmTmT9/xr7dOFl4uMEY83KY5RDEETS8C5Y5YnXFZAb7I1WvwCKYpSD6M3YYMkB/uHcizLPEo5y7adxsEtd5p27RrZ6Sj96cM3pI0sOMHGhT9ZSmCc6w=="
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Date: Mon, 05 Aug 2024 20:13:26 GMT
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Digest: SHA-256=KM5J2Alu2SYGDBkhkln2p4zVYwjyGfvTxiRCibC/y6Q=
        //     kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Host: kilogram.makeup
        // kilomakeup | trce: BirdsiteLive.Controllers.InboxController[0]
        // kilomakeup |       Host: application/activity+json


        var actorJson =
            "{\n\t\"@context\": [\n\t\t\"https://www.w3.org/ns/activitystreams\",\n\t\t\"https://w3id.org/security/v1\",\n\t\t{\n\t\t\t\"manuallyApprovesFollowers\": \"as:manuallyApprovesFollowers\",\n\t\t\t\"toot\": \"http://joinmastodon.org/ns#\",\n\t\t\t\"featured\": {\n\t\t\t\t\"@id\": \"toot:featured\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"featuredTags\": {\n\t\t\t\t\"@id\": \"toot:featuredTags\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"alsoKnownAs\": {\n\t\t\t\t\"@id\": \"as:alsoKnownAs\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"movedTo\": {\n\t\t\t\t\"@id\": \"as:movedTo\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"schema\": \"http://schema.org#\",\n\t\t\t\"PropertyValue\": \"schema:PropertyValue\",\n\t\t\t\"value\": \"schema:value\",\n\t\t\t\"IdentityProof\": \"toot:IdentityProof\",\n\t\t\t\"discoverable\": \"toot:discoverable\",\n\t\t\t\"Device\": \"toot:Device\",\n\t\t\t\"Ed25519Signature\": \"toot:Ed25519Signature\",\n\t\t\t\"Ed25519Key\": \"toot:Ed25519Key\",\n\t\t\t\"Curve25519Key\": \"toot:Curve25519Key\",\n\t\t\t\"EncryptedMessage\": \"toot:EncryptedMessage\",\n\t\t\t\"publicKeyBase64\": \"toot:publicKeyBase64\",\n\t\t\t\"deviceId\": \"toot:deviceId\",\n\t\t\t\"claim\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:claim\"\n\t\t\t},\n\t\t\t\"fingerprintKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:fingerprintKey\"\n\t\t\t},\n\t\t\t\"identityKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:identityKey\"\n\t\t\t},\n\t\t\t\"devices\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:devices\"\n\t\t\t},\n\t\t\t\"messageFranking\": \"toot:messageFranking\",\n\t\t\t\"messageType\": \"toot:messageType\",\n\t\t\t\"cipherText\": \"toot:cipherText\",\n\t\t\t\"suspended\": \"toot:suspended\"\n\t\t}\n\t],\n\t\"id\": \"https://red.niboe.info/users/JotaLuis\",\n\t\"type\": \"Person\",\n\t\"following\": \"https://red.niboe.info/users/JotaLuis/following\",\n\t\"followers\": \"https://red.niboe.info/users/JotaLuis/followers\",\n\t\"inbox\": \"https://red.niboe.info/users/JotaLuis/inbox\",\n\t\"outbox\": \"https://red.niboe.info/users/JotaLuis/outbox\",\n\t\"featured\": \"https://red.niboe.info/users/JotaLuis/collections/featured\",\n\t\"featuredTags\": \"https://red.niboe.info/users/JotaLuis/collections/tags\",\n\t\"preferredUsername\": \"JotaLuis\",\n\t\"name\": \"\",\n\t\"summary\": \"\",\n\t\"url\": \"https://red.niboe.info/@JotaLuis\",\n\t\"manuallyApprovesFollowers\": false,\n\t\"discoverable\": false,\n\t\"published\": \"2022-10-02T00:00:00Z\",\n\t\"devices\": \"https://red.niboe.info/users/JotaLuis/collections/devices\",\n\t\"suspended\": true,\n\t\"publicKey\": {\n\t\t\"id\": \"https://red.niboe.info/users/JotaLuis#main-key\",\n\t\t\"owner\": \"https://red.niboe.info/users/JotaLuis\",\n\t\t\"publicKeyPem\": \"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T/I+q10jmoD8XFhVeqb\\neIl8uu740rQhxK7v5InHn9ItBjM0+La7SjvvE+WPWMtnbYnEX+JKERutz7AhLyjw\\nAGoMrAoRL+3zKi3WvTfSawYkkaAt8eYHz2+VkPXXCDF8ez2QEes+vNEpnUfNHwrW\\nWlMI2SWaajAws9uvXMsPnw2MQk4qWc3iocE11uaJ29kK69zrX+eQQ9iWMjv9LMaN\\numo2o0tApAsyX6RBs9si3NRiWIx5atK+bnK7CgN7Gczz5VYl0ALBqtYNNCSuVz9O\\no1fAT+dG3A8Y4riyWDMaWhCe+GUTrpP9KxOr4lmDZ4Hgjqt4n5Owx4Q+qpzuMS6u\\nSwIDAQAB\\n-----END PUBLIC KEY-----\\n\"\n\t},\n\t\"tag\": [],\n\t\"attachment\": [],\n\t\"endpoints\": {\n\t\t\"sharedInbox\": \"https://red.niboe.info/inbox\"\n\t}\n}";
        
        var remote = JsonSerializer.Deserialize<Actor>(actorJson);
        var rawSig =
            "keyId=\"https://red.niboe.info/users/JotaLuis#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date digest content-type\",signature=\"1tCzRmNA3Cmu1Wh+tdVc0FWrvuNKziAEtFaxZWZqUdN/4H0/uqRoN0M/nmqTKb5v3awZjDd1TH6a7Ht69O6ZHSRAF//OHLXhm7TKL+I+7M063v1n3j+mTzgDV3YMx3SGs5kG0V69jxto7KNxWuuhFReEoQY0o6GGL2Jgk5fBfhOpx+ltl5YXQy+discZP0LnFccOjp03nH3AOHpnYNHpxKvL/nPXqYm53p/tmTmT9/xr7dOFl4uMEY83KY5RDEETS8C5Y5YnXFZAb7I1WvwCKYpSD6M3YYMkB/uHcizLPEo5y7adxsEtd5p27RrZ6Sj96cM3pI0sOMHGhT9ZSmCc6w==\"";
        var method = "POST";
        var path = "/inbox";
        var queryString = "";
        var body = "{\"@context\":\"https://www.w3.org/ns/activitystreams\",\"id\":\"https://red.niboe.info/users/JotaLuis#delete\",\"type\":\"Delete\",\"actor\":\"https://red.niboe.info/users/JotaLuis\",\"to\":[\"https://www.w3.org/ns/activitystreams#Public\"],\"object\":\"https://red.niboe.info/users/JotaLuis\",\"signature\":{\"type\":\"RsaSignature2017\",\"creator\":\"https://red.niboe.info/users/JotaLuis#main-key\",\"created\":\"2024-08-05T07:02:03Z\",\"signatureValue\":\"FmHVziXqvga1RL2UWXT70cohfl1pDfhFAGNjIBPhUU2lRbHGiNWIvHxQil4oTxtLOam2kb8iWQDqOTl1DkeHgOU2LVd73BzxppCL83lGzyVQSkV2UjoF31ME5LSxEYbAuPy+jtZ7te1TL6OEk3ZSZkr+BEbLy02cqzYRGCVqfD5OsDsNusp18AcNEiA+4tFUtHs79wU1Dq8YWYPdj+tK0J3whaHLTcf5e7yckkkQe0fJtUlBaUXnN09OFzYK6+GoBXZteoQKrxVSNmQpa87Ofc1urxsjZQk7blj40nqXR4FO5ZkdIq6/QDg313D/t2b3OLo/IIj5ZGt2NN3/fq3J8A==\"}}";
        var headers = new Dictionary<string, string>()
        {
            { "date", "Mon, 05 Aug 2024 20:13:26 GMT" },
            { "digest", "SHA-256=KM5J2Alu2SYGDBkhkln2p4zVYwjyGfvTxiRCibC/y6Q=" },
            { "host", "fake.bad"},
            { "content-type", "application/activity+json"}
        };

        var res = CryptoService.ValidateSignature(remote, rawSig, method, path, queryString, headers, body);
        Assert.IsFalse(res.SignatureIsValidated);
    }
    
    [TestMethod]
    public void BadDigest()
    {
        var actorJson =
            "{\n\t\"@context\": [\n\t\t\"https://www.w3.org/ns/activitystreams\",\n\t\t\"https://w3id.org/security/v1\",\n\t\t{\n\t\t\t\"manuallyApprovesFollowers\": \"as:manuallyApprovesFollowers\",\n\t\t\t\"toot\": \"http://joinmastodon.org/ns#\",\n\t\t\t\"featured\": {\n\t\t\t\t\"@id\": \"toot:featured\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"featuredTags\": {\n\t\t\t\t\"@id\": \"toot:featuredTags\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"alsoKnownAs\": {\n\t\t\t\t\"@id\": \"as:alsoKnownAs\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"movedTo\": {\n\t\t\t\t\"@id\": \"as:movedTo\",\n\t\t\t\t\"@type\": \"@id\"\n\t\t\t},\n\t\t\t\"schema\": \"http://schema.org#\",\n\t\t\t\"PropertyValue\": \"schema:PropertyValue\",\n\t\t\t\"value\": \"schema:value\",\n\t\t\t\"IdentityProof\": \"toot:IdentityProof\",\n\t\t\t\"discoverable\": \"toot:discoverable\",\n\t\t\t\"Device\": \"toot:Device\",\n\t\t\t\"Ed25519Signature\": \"toot:Ed25519Signature\",\n\t\t\t\"Ed25519Key\": \"toot:Ed25519Key\",\n\t\t\t\"Curve25519Key\": \"toot:Curve25519Key\",\n\t\t\t\"EncryptedMessage\": \"toot:EncryptedMessage\",\n\t\t\t\"publicKeyBase64\": \"toot:publicKeyBase64\",\n\t\t\t\"deviceId\": \"toot:deviceId\",\n\t\t\t\"claim\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:claim\"\n\t\t\t},\n\t\t\t\"fingerprintKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:fingerprintKey\"\n\t\t\t},\n\t\t\t\"identityKey\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:identityKey\"\n\t\t\t},\n\t\t\t\"devices\": {\n\t\t\t\t\"@type\": \"@id\",\n\t\t\t\t\"@id\": \"toot:devices\"\n\t\t\t},\n\t\t\t\"messageFranking\": \"toot:messageFranking\",\n\t\t\t\"messageType\": \"toot:messageType\",\n\t\t\t\"cipherText\": \"toot:cipherText\",\n\t\t\t\"suspended\": \"toot:suspended\"\n\t\t}\n\t],\n\t\"id\": \"https://red.niboe.info/users/JotaLuis\",\n\t\"type\": \"Person\",\n\t\"following\": \"https://red.niboe.info/users/JotaLuis/following\",\n\t\"followers\": \"https://red.niboe.info/users/JotaLuis/followers\",\n\t\"inbox\": \"https://red.niboe.info/users/JotaLuis/inbox\",\n\t\"outbox\": \"https://red.niboe.info/users/JotaLuis/outbox\",\n\t\"featured\": \"https://red.niboe.info/users/JotaLuis/collections/featured\",\n\t\"featuredTags\": \"https://red.niboe.info/users/JotaLuis/collections/tags\",\n\t\"preferredUsername\": \"JotaLuis\",\n\t\"name\": \"\",\n\t\"summary\": \"\",\n\t\"url\": \"https://red.niboe.info/@JotaLuis\",\n\t\"manuallyApprovesFollowers\": false,\n\t\"discoverable\": false,\n\t\"published\": \"2022-10-02T00:00:00Z\",\n\t\"devices\": \"https://red.niboe.info/users/JotaLuis/collections/devices\",\n\t\"suspended\": true,\n\t\"publicKey\": {\n\t\t\"id\": \"https://red.niboe.info/users/JotaLuis#main-key\",\n\t\t\"owner\": \"https://red.niboe.info/users/JotaLuis\",\n\t\t\"publicKeyPem\": \"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T/I+q10jmoD8XFhVeqb\\neIl8uu740rQhxK7v5InHn9ItBjM0+La7SjvvE+WPWMtnbYnEX+JKERutz7AhLyjw\\nAGoMrAoRL+3zKi3WvTfSawYkkaAt8eYHz2+VkPXXCDF8ez2QEes+vNEpnUfNHwrW\\nWlMI2SWaajAws9uvXMsPnw2MQk4qWc3iocE11uaJ29kK69zrX+eQQ9iWMjv9LMaN\\numo2o0tApAsyX6RBs9si3NRiWIx5atK+bnK7CgN7Gczz5VYl0ALBqtYNNCSuVz9O\\no1fAT+dG3A8Y4riyWDMaWhCe+GUTrpP9KxOr4lmDZ4Hgjqt4n5Owx4Q+qpzuMS6u\\nSwIDAQAB\\n-----END PUBLIC KEY-----\\n\"\n\t},\n\t\"tag\": [],\n\t\"attachment\": [],\n\t\"endpoints\": {\n\t\t\"sharedInbox\": \"https://red.niboe.info/inbox\"\n\t}\n}";
        
        var remote = JsonSerializer.Deserialize<Actor>(actorJson);
        var rawSig =
            "keyId=\"https://red.niboe.info/users/JotaLuis#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date digest content-type\",signature=\"1tCzRmNA3Cmu1Wh+tdVc0FWrvuNKziAEtFaxZWZqUdN/4H0/uqRoN0M/nmqTKb5v3awZjDd1TH6a7Ht69O6ZHSRAF//OHLXhm7TKL+I+7M063v1n3j+mTzgDV3YMx3SGs5kG0V69jxto7KNxWuuhFReEoQY0o6GGL2Jgk5fBfhOpx+ltl5YXQy+discZP0LnFccOjp03nH3AOHpnYNHpxKvL/nPXqYm53p/tmTmT9/xr7dOFl4uMEY83KY5RDEETS8C5Y5YnXFZAb7I1WvwCKYpSD6M3YYMkB/uHcizLPEo5y7adxsEtd5p27RrZ6Sj96cM3pI0sOMHGhT9ZSmCc6w==\"";
        var method = "POST";
        var path = "/inbox";
        var queryString = "";
        var body = "{\"@context\":\"https://www.w3.org/ns/activitystreams\",\"id\":\"https://red.niboe.info/users/JotaLuis#delete\",\"type\":\"Delete\",\"actor\":\"https://red.niboe.info/users/JotaLuis\",\"to\":[\"https://www.w3.org/ns/activitystreams#Public\"],\"object\":\"https://red.niboe.info/users/JotaLuis\",\"signature\":{\"type\":\"RsaSignature2017\",\"creator\":\"https://red.niboe.info/users/JotaLuis#main-key\",\"created\":\"2024-08-05T07:02:03Z\",\"signatureValue\":\"FmHVziXqvga1RL2UWXT70cohfl1pDfhFAGNjIBPhUU2lRbHGiNWIvHxQil4oTxtLOam2kb8iWQDqOTl1DkeHgOU2LVd73BzxppCL83lGzyVQSkV2UjoF31ME5LSxEYbAuPy+jtZ7te1TL6OEk3ZSZkr+BEbLy02cqzYRGCVqfD5OsDsNusp18AcNEiA+4tFUtHs79wU1Dq8YWYPdj+tK0J3whaHLTcf5e7yckkkQe0fJtUlBaUXnN09OFzYK6+GoBXZteoQKrxVSNmQpa87Ofc1urxsjZQk7blj40nqXR4FO5ZkdIq6/QDg313D/t2b3OLo/IIj5ZGt2NN3/fq3J8A==\"}}";
        var headers = new Dictionary<string, string>()
        {
            { "date", "Mon, 05 Aug 2024 20:13:26 GMT" },
            { "digest", "SHA-256=KM5J2Alu2SYGDBkhkln2p4zVYwjygfvTxiRCibC/y6Q=" },
            { "host", "kilogram.makeup"},
            { "content-type", "application/activity+json"}
        };

        var res = CryptoService.ValidateSignature(remote, rawSig, method, path, queryString, headers, body);
        Assert.IsFalse(res.SignatureIsValidated);
    }
}
\ No newline at end of file