pixelfed/app/Http/Controllers/FederationController.php

267 lines
9 KiB
PHP
Raw Normal View History

2018-05-28 23:50:14 +00:00
<?php
namespace App\Http\Controllers;
2018-08-28 03:07:36 +00:00
use App\Jobs\InboxPipeline\InboxWorker;
use App\Jobs\RemoteFollowPipeline\RemoteFollowPipeline;
2018-06-01 02:38:11 +00:00
use App\Profile;
2018-08-28 03:07:36 +00:00
use App\Transformer\ActivityPub\ProfileOutbox;
2018-06-01 02:38:11 +00:00
use App\Util\Lexer\Nickname;
use App\Util\Webfinger\Webfinger;
2018-08-28 03:07:36 +00:00
use Auth;
use Cache;
use Carbon\Carbon;
use Illuminate\Http\Request;
use League\Fractal;
use App\Util\ActivityPub\Helpers;
2018-12-17 05:38:43 +00:00
use App\Util\ActivityPub\HttpSignature;
2018-05-28 23:50:14 +00:00
class FederationController extends Controller
{
public function authCheck()
{
2018-08-28 03:07:36 +00:00
if (!Auth::check()) {
return abort(403);
}
2018-07-24 03:20:46 +00:00
}
public function authorizeFollow(Request $request)
{
2018-08-28 03:07:36 +00:00
$this->authCheck();
$this->validate($request, [
'acct' => 'required|string|min:3|max:255',
2018-07-24 03:20:46 +00:00
]);
2018-08-28 03:07:36 +00:00
$acct = $request->input('acct');
$nickname = Nickname::normalizeProfileUrl($acct);
return view('federation.authorizefollow', compact('acct', 'nickname'));
2018-05-28 23:50:14 +00:00
}
public function remoteFollow()
{
2018-08-28 03:07:36 +00:00
$this->authCheck();
return view('federation.remotefollow');
2018-05-28 23:50:14 +00:00
}
2018-06-01 02:38:11 +00:00
public function remoteFollowStore(Request $request)
{
2018-08-28 03:07:36 +00:00
$this->authCheck();
$this->validate($request, [
2018-12-24 21:36:25 +00:00
'url' => 'required|string',
]);
2018-06-01 02:38:11 +00:00
2018-08-28 03:07:36 +00:00
if (config('pixelfed.remote_follow_enabled') !== true) {
abort(403);
}
2018-06-01 02:38:11 +00:00
2018-08-28 03:07:36 +00:00
$follower = Auth::user()->profile;
$url = $request->input('url');
2018-06-01 02:38:11 +00:00
2018-08-28 03:07:36 +00:00
RemoteFollowPipeline::dispatch($follower, $url);
2018-06-01 02:38:11 +00:00
2018-08-28 03:07:36 +00:00
return redirect()->back();
2018-06-01 02:38:11 +00:00
}
2018-05-28 23:50:14 +00:00
public function nodeinfoWellKnown()
{
2018-08-28 03:07:36 +00:00
$res = [
2018-05-28 23:50:14 +00:00
'links' => [
[
'href' => config('pixelfed.nodeinfo.url'),
2018-08-28 03:07:36 +00:00
'rel' => 'http://nodeinfo.diaspora.software/ns/schema/2.0',
],
],
2018-05-28 23:50:14 +00:00
];
2018-08-28 03:07:36 +00:00
return response()->json($res);
2018-05-28 23:50:14 +00:00
}
public function nodeinfo()
{
2018-08-28 03:07:36 +00:00
$res = Cache::remember('api:nodeinfo', 60, function () {
return [
2018-07-24 03:20:46 +00:00
'metadata' => [
'nodeName' => config('app.name'),
'software' => [
'homepage' => 'https://pixelfed.org',
2018-08-28 03:07:36 +00:00
'github' => 'https://github.com/pixelfed',
'follow' => 'https://mastodon.social/@pixelfed',
2018-07-24 03:20:46 +00:00
],
],
'openRegistrations' => config('pixelfed.open_registration'),
2018-08-28 03:07:36 +00:00
'protocols' => [
'activitypub',
2018-07-24 03:20:46 +00:00
],
'services' => [
2018-08-28 03:07:36 +00:00
'inbound' => [],
'outbound' => [],
2018-07-24 03:20:46 +00:00
],
2018-05-28 23:50:14 +00:00
'software' => [
2018-08-28 03:07:36 +00:00
'name' => 'pixelfed',
'version' => config('pixelfed.version'),
2018-05-28 23:50:14 +00:00
],
2018-07-24 03:20:46 +00:00
'usage' => [
2018-08-28 03:07:36 +00:00
'localPosts' => \App\Status::whereLocal(true)->whereHas('media')->count(),
2018-07-24 03:20:46 +00:00
'localComments' => \App\Status::whereLocal(true)->whereNotNull('in_reply_to_id')->count(),
2018-08-28 03:07:36 +00:00
'users' => [
'total' => \App\User::count(),
2018-10-23 00:05:05 +00:00
'activeHalfyear' => \App\AccountLog::select('user_id')->whereAction('auth.login')->where('updated_at', '>',Carbon::now()->subMonths(6)->toDateTimeString())->groupBy('user_id')->get()->count(),
'activeMonth' => \App\AccountLog::select('user_id')->whereAction('auth.login')->where('updated_at', '>',Carbon::now()->subMonths(1)->toDateTimeString())->groupBy('user_id')->get()->count(),
2018-08-28 03:07:36 +00:00
],
2018-05-28 23:50:14 +00:00
],
2018-08-28 03:07:36 +00:00
'version' => '2.0',
2018-07-24 03:20:46 +00:00
];
2018-08-28 03:07:36 +00:00
});
2018-06-01 02:38:11 +00:00
2018-12-17 05:38:43 +00:00
return response()->json($res, 200, [
'Access-Control-Allow-Origin' => '*'
]);
2018-08-28 03:07:36 +00:00
}
2018-06-01 02:38:11 +00:00
public function webfinger(Request $request)
{
2018-08-28 03:07:36 +00:00
$this->validate($request, ['resource'=>'required|string|min:3|max:255']);
2018-12-24 21:36:25 +00:00
$resource = $request->input('resource');
$hash = hash('sha256', $resource);
$parsed = Nickname::normalizeProfileUrl($resource);
$username = $parsed['username'];
$profile = Profile::whereUsername($username)->firstOrFail();
if($profile->status != null) {
return ProfileController::accountCheck($profile);
}
$webfinger = (new Webfinger($profile))->generate();
2018-08-28 03:07:36 +00:00
return response()->json($webfinger, 200, [], JSON_PRETTY_PRINT);
2018-06-01 02:38:11 +00:00
}
public function hostMeta(Request $request)
{
$path = route('well-known.webfinger');
$xml = <<<XML
<?xml version="1.0" encoding="UTF-8"?>
<XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0">
<Link rel="lrdd" type="application/xrd+xml" template="{$path}?resource={uri}"/>
</XRD>
XML;
return response($xml)->header('Content-Type', 'application/xrd+xml');
}
2018-06-01 02:38:11 +00:00
public function userOutbox(Request $request, $username)
{
2018-08-28 03:07:36 +00:00
if (config('pixelfed.activitypub_enabled') == false) {
abort(403);
}
2018-12-24 21:36:25 +00:00
$profile = Profile::whereNull('remote_url')->whereUsername($username)->firstOrFail();
if($profile->status != null) {
return ProfileController::accountCheck($profile);
}
if($profile->is_private) {
2018-09-02 05:55:55 +00:00
return response()->json(['error'=>'403', 'msg' => 'private profile'], 403);
}
2018-12-24 21:36:25 +00:00
$timeline = $profile->statuses()->whereVisibility('public')->orderBy('created_at', 'desc')->paginate(10);
2018-08-28 03:07:36 +00:00
$fractal = new Fractal\Manager();
2018-12-24 21:36:25 +00:00
$resource = new Fractal\Resource\Item($profile, new ProfileOutbox());
2018-08-28 03:07:36 +00:00
$res = $fractal->createData($resource)->toArray();
return response(json_encode($res['data']))->header('Content-Type', 'application/activity+json');
2018-06-01 02:38:11 +00:00
}
2018-07-24 03:20:46 +00:00
public function userInbox(Request $request, $username)
{
if (config('pixelfed.activitypub_enabled') == false) {
abort(403);
}
$profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();
2018-12-24 21:36:25 +00:00
if($profile->status != null) {
return ProfileController::accountCheck($profile);
}
$body = $request->getContent();
$bodyDecoded = json_decode($body, true, 8);
$signature = $request->header('signature');
if(!$signature) {
abort(400, 'Missing signature header');
}
$signatureData = HttpSignature::parseSignatureHeader($signature);
$keyId = Helpers::validateUrl($signatureData['keyId']);
$id = Helpers::validateUrl($bodyDecoded['id']);
$keyDomain = parse_url($keyId, PHP_URL_HOST);
$idDomain = parse_url($id, PHP_URL_HOST);
2018-12-26 01:06:12 +00:00
if(isset($bodyDecoded['object'])
&& is_array($bodyDecoded['object'])
&& isset($bodyDecoded['object']['attributedTo'])
) {
2018-12-26 01:07:32 +00:00
if(parse_url($bodyDecoded['object']['attributedTo'], PHP_URL_HOST) !== $keyDomain) {
2018-12-26 01:06:12 +00:00
abort(400, 'Invalid request');
}
}
if(!$keyDomain || !$idDomain || $keyDomain !== $idDomain) {
abort(400, 'Invalid request');
}
$actor = Profile::whereKeyId($keyId)->first();
if(!$actor) {
$actor = Helpers::profileFirstOrNew($bodyDecoded['actor']);
}
$pkey = openssl_pkey_get_public($actor->public_key);
$inboxPath = "/users/{$profile->username}/inbox";
list($verified, $headers) = HTTPSignature::verify($pkey, $signatureData, $request->headers->all(), $inboxPath, $body);
if($verified !== 1) {
abort(400, 'Invalid signature.');
}
InboxWorker::dispatch($request->headers->all(), $profile, $bodyDecoded);
2018-12-15 08:16:22 +00:00
return;
}
public function userFollowing(Request $request, $username)
{
if (config('pixelfed.activitypub_enabled') == false) {
abort(403);
}
2018-12-15 08:16:22 +00:00
$profile = Profile::whereNull('remote_url')
->whereUsername($username)
->whereIsPrivate(false)
->firstOrFail();
2018-12-24 21:36:25 +00:00
if($profile->status != null) {
return ProfileController::accountCheck($profile);
}
$obj = [
'@context' => 'https://www.w3.org/ns/activitystreams',
'id' => $request->getUri(),
'type' => 'OrderedCollectionPage',
'totalItems' => $profile->following()->count(),
'orderedItems' => $profile->following->map(function($f) {
return $f->permalink();
})
];
return response()->json($obj);
}
public function userFollowers(Request $request, $username)
{
if (config('pixelfed.activitypub_enabled') == false) {
abort(403);
}
2018-12-15 08:16:22 +00:00
$profile = Profile::whereNull('remote_url')
->whereUsername($username)
->whereIsPrivate(false)
->firstOrFail();
2018-12-24 21:36:25 +00:00
if($profile->status != null) {
return ProfileController::accountCheck($profile);
}
$obj = [
'@context' => 'https://www.w3.org/ns/activitystreams',
'id' => $request->getUri(),
'type' => 'OrderedCollectionPage',
'totalItems' => $profile->followers()->count(),
'orderedItems' => $profile->followers->map(function($f) {
return $f->permalink();
})
];
return response()->json($obj);
2018-07-24 03:20:46 +00:00
}
2018-05-28 23:50:14 +00:00
}