pleroma: do not auth remote media

HTTP/HttpFields.cs

@@ -1,7 +1,7 @@
 namespace Uwaa.HTTP;
 
 /// <summary>
-/// General purpose implementation of <see cref="IHttpFields"/>.
+/// Fields of a HTTP request/response header.
 /// </summary>
 public record HttpFields
 {

HTTP/Routing/StaticEndpoint.cs

@@ -9,7 +9,7 @@ public class StaticEndpoint : RouterBase
         Response = response;
     }
 
-    public override HttpMethod Method => HttpMethod.GET;
+    public override HttpMethod Method => HttpMethod.Any;
 
     public override int Arguments => 0;
 

Pleroma/Pleroma.cs

@@ -669,7 +669,11 @@ public class Pleroma
     /// </summary>
     public async Task<Stream> DownloadStream(Attachment attachment)
     {
-        HttpResponseMessage res = await HttpClient.GetAsync(attachment.URL);
+        using HttpClient client = new HttpClient();
+        if (HttpClient.BaseAddress != null && new Uri(attachment.URL).Host == HttpClient.BaseAddress.Host)
+            client.DefaultRequestHeaders.Authorization = HttpClient.DefaultRequestHeaders.Authorization;
+
+        HttpResponseMessage res = await client.GetAsync(attachment.URL);
         res.EnsureSuccessStatusCode();
         return await res.Content.ReadAsStreamAsync();
     }