NodeBB / NodeBB / 29587702051 / 4

85%

master: 85%

push

github

fix(activitypub): use raw body buffer for digest verification

The HTTP Digest header is calculated over the exact raw bytes of the
request body. JSON.stringify(req.body) can differ in whitespace and key
ordering, causing digest mismatches.

Capture the raw buffer via bodyParser.json() verify callback and use it
for digest calculation in ActivityPub.verify().

Assisted-by: unsloth/Qwen3.6-35B-A3B-GGUF

13211 of 18283 branches covered (72.26%)

27735 of 32683 relevant lines covered (84.86%)

702.83 hits per line