diff --git a/src/main/java/ctbrec/recorder/server/AbstractCtbrecServlet.java b/src/main/java/ctbrec/recorder/server/AbstractCtbrecServlet.java index 1c0085b6..ebca073e 100644 --- a/src/main/java/ctbrec/recorder/server/AbstractCtbrecServlet.java +++ b/src/main/java/ctbrec/recorder/server/AbstractCtbrecServlet.java @@ -19,6 +19,8 @@ public abstract class AbstractCtbrecServlet extends HttpServlet { String reqParamHmac = req.getParameter("hmac"); String httpHeaderHmac = req.getHeader("CTBREC-HMAC"); String hmac = null; + String url = req.getRequestURI(); + if(reqParamHmac != null) { hmac = reqParamHmac; } @@ -27,7 +29,8 @@ public abstract class AbstractCtbrecServlet extends HttpServlet { } byte[] key = Config.getInstance().getSettings().key; - authenticated = Hmac.validate(body, key, hmac); + String msg = reqParamHmac != null ? url : body; + authenticated = Hmac.validate(msg, key, hmac); } else { authenticated = true; }