ActivityPub: handle all exceptions in signature verification

1 files changed, 2 insertions, 3 deletions

diff --git a/src/main/java/com/juick/ActivityPubManager.java b/src/main/java/com/juick/ActivityPubManager.java
index 33cc458b..f234969b 100644
--- a/src/main/java/com/juick/ActivityPubManager.java
+++ b/src/main/java/com/juick/ActivityPubManager.java
@@ -462,8 +462,8 @@ public class ActivityPubManager implements ActivityListener, NotificationListene
                 }
             }
             if (key != null) {
-                Verifier verifier = new Verifier(key, signature);
                 try {
+                    Verifier verifier = new Verifier(key, signature);
                     boolean result = verifier.verify(method.toLowerCase(), path, headers);
                     if (result) {
                         if (!user.isAnonymous()) {
@@ -481,8 +481,7 @@ public class ActivityPubManager implements ActivityListener, NotificationListene
                             }
                         }
                     }
-                } catch (NoSuchAlgorithmException | SignatureException | MissingRequiredHeaderException
-                         | IOException e) {
+                } catch (Exception e) {
                     logger.warn("Verification error for {}: {}", signature.getKeyId(), e.getMessage());
                 }
             }