json(Nodeinfo::wellKnown(), 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function nodeinfo() { abort_if(!config('federation.nodeinfo.enabled'), 404); return response()->json(Nodeinfo::get(), 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function webfinger(Request $request) { if (!config('federation.webfinger.enabled') || !$request->has('resource') || !$request->filled('resource') ) { return response('', 400); } $resource = $request->input('resource'); $domain = config('pixelfed.domain.app'); if(config('federation.activitypub.sharedInbox') && $resource == 'acct:' . $domain . '@' . $domain) { $res = [ 'subject' => 'acct:' . $domain . '@' . $domain, 'aliases' => [ 'https://' . $domain . '/i/actor' ], 'links' => [ [ 'rel' => 'http://webfinger.net/rel/profile-page', 'type' => 'text/html', 'href' => 'https://' . $domain . '/site/kb/instance-actor' ], [ 'rel' => 'self', 'type' => 'application/activity+json', 'href' => 'https://' . $domain . '/i/actor' ] ] ]; return response()->json($res, 200, [], JSON_UNESCAPED_SLASHES); } $hash = hash('sha256', $resource); $key = 'federation:webfinger:sha256:' . $hash; if($cached = Cache::get($key)) { return response()->json($cached, 200, [], JSON_UNESCAPED_SLASHES); } if(strpos($resource, $domain) == false) { return response('', 400); } $parsed = Nickname::normalizeProfileUrl($resource); if(empty($parsed) || $parsed['domain'] !== $domain) { return response('', 400); } $username = $parsed['username']; $profile = Profile::whereNull('domain')->whereUsername($username)->first(); if(!$profile || $profile->status !== null) { return response('', 400); } $webfinger = (new Webfinger($profile))->generate(); Cache::put($key, $webfinger, 1209600); return response()->json($webfinger, 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function hostMeta(Request $request) { abort_if(!config('federation.webfinger.enabled'), 404); $path = route('well-known.webfinger'); $xml = ''; return response($xml)->header('Content-Type', 'application/xrd+xml'); } public function userOutbox(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); abort_if(!config('federation.activitypub.outbox'), 404); // $profile = Profile::whereNull('domain') // ->whereNull('status') // ->whereIsPrivate(false) // ->whereUsername($username) // ->firstOrFail(); // $key = 'ap:outbox:latest_10:pid:' . $profile->id; // $ttl = now()->addMinutes(15); // $res = Cache::remember($key, $ttl, function() use($profile) { // return Outbox::get($profile); // }); $res = []; return response(json_encode($res, JSON_UNESCAPED_SLASHES))->header('Content-Type', 'application/ld+json; profile="http://www.w3.org/ns/activitystreams"'); } public function userInbox(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); abort_if(!config('federation.activitypub.inbox'), 404); $headers = $request->headers->all(); $payload = $request->getContent(); if(!$payload || empty($payload)) { return; } $obj = json_decode($payload, true, 8); if(!isset($obj['id'])) { return; } $domain = parse_url($obj['id'], PHP_URL_HOST); if(in_array($domain, InstanceService::getBannedDomains())) { return; } if(isset($obj['type']) && $obj['type'] === 'Delete') { $lockKey = 'pf:ap:del-lock:' . hash('sha256', $obj['id']); if( isset($obj['actor']) && isset($obj['object']) && isset($obj['id']) && is_string($obj['id']) && is_string($obj['actor']) && is_string($obj['object']) && $obj['actor'] == $obj['object'] ) { if(Cache::get($lockKey) !== null) { return; } else { Cache::put($lockKey, 1, 3600); usleep(5000); } } dispatch(new DeleteWorker($headers, $payload))->onQueue('delete'); } else { $lockKey = 'pf:ap:user-inbox:activity:' . hash('sha256', $obj['id']); if(Cache::get($lockKey) !== null) { return; } Cache::put($lockKey, 1, 3600); usleep(5000); dispatch(new InboxValidator($username, $headers, $payload))->onQueue('high'); } return; } public function sharedInbox(Request $request) { abort_if(!config_cache('federation.activitypub.enabled'), 404); abort_if(!config('federation.activitypub.sharedInbox'), 404); $headers = $request->headers->all(); $payload = $request->getContent(); if(!$payload || empty($payload)) { return; } $obj = json_decode($payload, true, 8); if(!isset($obj['id'])) { return; } $domain = parse_url($obj['id'], PHP_URL_HOST); if(in_array($domain, InstanceService::getBannedDomains())) { return; } if(isset($obj['type']) && $obj['type'] === 'Delete') { $lockKey = 'pf:ap:del-lock:' . hash('sha256', $obj['id']); if( isset($obj['actor']) && isset($obj['object']) && isset($obj['id']) && is_string($obj['id']) && is_string($obj['actor']) && is_string($obj['object']) && $obj['actor'] == $obj['object'] ) { if(Cache::get($lockKey) !== null) { return; } } Cache::put($lockKey, 1, 3600); dispatch(new DeleteWorker($headers, $payload))->onQueue('delete'); } else { dispatch(new InboxWorker($headers, $payload))->onQueue('high'); } return; } public function userFollowing(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); $obj = [ '@context' => 'https://www.w3.org/ns/activitystreams', 'id' => $request->getUri(), 'type' => 'OrderedCollectionPage', 'totalItems' => 0, 'orderedItems' => [] ]; return response()->json($obj); } public function userFollowers(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); $obj = [ '@context' => 'https://www.w3.org/ns/activitystreams', 'id' => $request->getUri(), 'type' => 'OrderedCollectionPage', 'totalItems' => 0, 'orderedItems' => [] ]; return response()->json($obj); } }