json(Nodeinfo::wellKnown(), 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function nodeinfo() { abort_if(!config('federation.nodeinfo.enabled'), 404); return response()->json(Nodeinfo::get(), 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function webfinger(Request $request) { if (!config('federation.webfinger.enabled') || !$request->has('resource') || !$request->filled('resource') ) { return response('', 400); } $resource = $request->input('resource'); $domain = config('pixelfed.domain.app'); if(config('federation.activitypub.sharedInbox') && $resource == 'acct:' . $domain . '@' . $domain) { $res = [ 'subject' => 'acct:' . $domain . '@' . $domain, 'aliases' => [ 'https://' . $domain . '/i/actor' ], 'links' => [ [ 'rel' => 'http://webfinger.net/rel/profile-page', 'type' => 'text/html', 'href' => 'https://' . $domain . '/site/kb/instance-actor' ], [ 'rel' => 'self', 'type' => 'application/activity+json', 'href' => 'https://' . $domain . '/i/actor' ] ] ]; return response()->json($res, 200, [], JSON_UNESCAPED_SLASHES); } $hash = hash('sha256', $resource); $key = 'federation:webfinger:sha256:' . $hash; if($cached = Cache::get($key)) { return response()->json($cached, 200, [], JSON_UNESCAPED_SLASHES); } if(strpos($resource, $domain) == false) { return response('', 400); } $parsed = Nickname::normalizeProfileUrl($resource); if(empty($parsed) || $parsed['domain'] !== $domain) { return response('', 400); } $username = $parsed['username']; $profile = Profile::whereNull('domain')->whereUsername($username)->first(); if(!$profile || $profile->status !== null) { return response('', 400); } $webfinger = (new Webfinger($profile))->generate(); Cache::put($key, $webfinger, 1209600); return response()->json($webfinger, 200, [], JSON_UNESCAPED_SLASHES) ->header('Access-Control-Allow-Origin','*'); } public function hostMeta(Request $request) { abort_if(!config('federation.webfinger.enabled'), 404); $path = route('well-known.webfinger'); $xml = ''; return response($xml)->header('Content-Type', 'application/xrd+xml'); } public function userOutbox(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); if(!$request->wantsJson()) { return redirect('/' . $username); } $res = [ '@context' => 'https://www.w3.org/ns/activitystreams', 'id' => 'https://' . config('pixelfed.domain.app') . '/users/' . $username . '/outbox', 'type' => 'OrderedCollection', 'totalItems' => 0, 'orderedItems' => [] ]; return response(json_encode($res, JSON_UNESCAPED_SLASHES))->header('Content-Type', 'application/ld+json; profile="https://www.w3.org/ns/activitystreams"'); } public function userInbox(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); abort_if(!config('federation.activitypub.inbox'), 404); $headers = $request->headers->all(); $payload = $request->getContent(); if(!$payload || empty($payload)) { return; } $obj = json_decode($payload, true, 8); if(!isset($obj['id'])) { return; } $domain = parse_url($obj['id'], PHP_URL_HOST); if(in_array($domain, InstanceService::getBannedDomains())) { return; } if(isset($obj['type']) && $obj['type'] === 'Delete') { $lockKey = 'pf:ap:del-lock:' . hash('sha256', $obj['id']); if( isset($obj['actor']) && isset($obj['object']) && isset($obj['id']) && is_string($obj['id']) && is_string($obj['actor']) && is_string($obj['object']) && $obj['actor'] == $obj['object'] ) { if(Cache::get($lockKey) !== null) { return; } else { Cache::put($lockKey, 1, 43200); usleep(5000); } } dispatch(new DeleteWorker($headers, $payload))->onQueue('delete'); } else if( isset($obj['type']) && in_array($obj['type'], ['Follow', 'Accept'])) { dispatch(new InboxValidator($username, $headers, $payload))->onQueue('follow'); } else { $lockKey = 'pf:ap:user-inbox:activity:' . hash('sha256', $obj['id']); if(Cache::get($lockKey) !== null) { return; } Cache::put($lockKey, 1, 43200); usleep(5000); dispatch(new InboxValidator($username, $headers, $payload))->onQueue('high'); } return; } public function sharedInbox(Request $request) { abort_if(!config_cache('federation.activitypub.enabled'), 404); abort_if(!config('federation.activitypub.sharedInbox'), 404); $headers = $request->headers->all(); $payload = $request->getContent(); if(!$payload || empty($payload)) { return; } $obj = json_decode($payload, true, 8); if(!isset($obj['id'])) { return; } $domain = parse_url($obj['id'], PHP_URL_HOST); if(in_array($domain, InstanceService::getBannedDomains())) { return; } if(isset($obj['type']) && $obj['type'] === 'Delete') { $lockKey = 'pf:ap:del-lock:' . hash('sha256', $obj['id']); if( isset($obj['actor']) && isset($obj['object']) && isset($obj['id']) && is_string($obj['id']) && is_string($obj['actor']) && is_string($obj['object']) && $obj['actor'] == $obj['object'] ) { if(Cache::get($lockKey) !== null) { return; } } Cache::put($lockKey, 1, 43200); dispatch(new DeleteWorker($headers, $payload))->onQueue('delete'); } else if( isset($obj['type']) && in_array($obj['type'], ['Follow', 'Accept'])) { dispatch(new InboxWorker($headers, $payload))->onQueue('follow'); } else { dispatch(new InboxWorker($headers, $payload))->onQueue('shared'); } return; } public function userFollowing(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); $obj = [ '@context' => 'https://www.w3.org/ns/activitystreams', 'id' => $request->getUri(), 'type' => 'OrderedCollectionPage', 'totalItems' => 0, 'orderedItems' => [] ]; return response()->json($obj); } public function userFollowers(Request $request, $username) { abort_if(!config_cache('federation.activitypub.enabled'), 404); $obj = [ '@context' => 'https://www.w3.org/ns/activitystreams', 'id' => $request->getUri(), 'type' => 'OrderedCollectionPage', 'totalItems' => 0, 'orderedItems' => [] ]; return response()->json($obj); } }