YunoHost-Apps/pixelfed_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/pixelfed_ynh.git synced 2024-09-03 20:06:04 +02:00
Code Issues Activity Actions

Update AP helpers

Browse source
This commit is contained in:
Daniel Supernault 2018-12-21 12:57:43 -07:00
parent b96e71c0ae
commit e4a7aa00a5
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7
1 changed files with 12 additions and 58 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

70
app/Util/ActivityPub/Helpers.php
View file

@ -22,6 +22,7 @@ use App\Jobs\ImageOptimizePipeline\{ImageOptimize,ImageThumbnail};
use App\Jobs\StatusPipeline\NewStatusPipeline; use App\Jobs\StatusPipeline\NewStatusPipeline;
use App\Util\HttpSignatures\{GuzzleHttpSignatures, KeyStore, Context, Verifier}; use App\Util\HttpSignatures\{GuzzleHttpSignatures, KeyStore, Context, Verifier};
use Symfony\Bridge\PsrHttpMessage\Factory\DiactorosFactory; use Symfony\Bridge\PsrHttpMessage\Factory\DiactorosFactory;
use App\Util\ActivityPub\HttpSignature;
class Helpers { class Helpers {
@ -215,13 +216,14 @@ class Helpers {
} else { } else {
$reply_to = null; $reply_to = null;
} }
$ts = is_array($res['published']) ? $res['published'][0] : $res['published'];
$status = new Status; $status = new Status;
$status->profile_id = $profile->id; $status->profile_id = $profile->id;
$status->url = $url; $status->url = $url;
$status->uri = $url;
$status->caption = strip_tags($res['content']); $status->caption = strip_tags($res['content']);
$status->rendered = Purify::clean($res['content']); $status->rendered = Purify::clean($res['content']);
$status->created_at = Carbon::parse($res['published']); $status->created_at = Carbon::parse($ts);
$status->in_reply_to_id = $reply_to; $status->in_reply_to_id = $reply_to;
$status->local = false; $status->local = false;
$status->save(); $status->save();
@ -307,72 +309,24 @@ class Helpers {
public static function sendSignedObject($senderProfile, $url, $body) public static function sendSignedObject($senderProfile, $url, $body)
{ {
$profile = $senderProfile; $payload = json_encode($body);
$keyId = $profile->keyId(); $headers = HttpSignature::sign($senderProfile, $url, $body);
$date = new \DateTime('UTC'); $ch = curl_init($url);
$date = $date->format('D, d M Y H:i:s \G\M\T'); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$host = parse_url($url, PHP_URL_HOST); curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$path = parse_url($url, PHP_URL_PATH); curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
$headers = [ curl_setopt($ch, CURLOPT_HEADER, true);
'date' => $date, $response = curl_exec($ch);
'host' => $host,
'content-type' => 'application/activity+json',
];
$context = new Context([
'keys' => [$profile->keyId() => $profile->private_key],
'algorithm' => 'rsa-sha256',
'headers' => ['(request-target)', 'date', 'host', 'content-type'],
]);
$handlerStack = GuzzleHttpSignatures::defaultHandlerFromContext($context);
$client = new Client(['handler' => $handlerStack]);
$response = $client->request('POST', $url, ['headers' => $headers, 'json' => $body]);
return; return;
} }
private static function _headersToSigningString($headers) { private static function _headersToSigningString($headers) {
return implode("\n", array_map(function($k, $v){
return strtolower($k).': '.$v;
}, array_keys($headers), $headers));
} }
public static function validateSignature($request, $payload = null) public static function validateSignature($request, $payload = null)
{ {
$date = Carbon::parse($request['date']);
$min = Carbon::now()->subHours(13);
$max = Carbon::now()->addHours(13);
if($date->gt($min) == false || $date->lt($max) == false) {
return false;
}
$json = json_encode($payload);
$digest = base64_encode(hash('sha256', $json, true));
$parts = explode(',', $request['signature']);
$signatureData = [];
foreach($parts as $part) {
if(preg_match('/(.+)="(.+)"/', $part, $match)) {
$signatureData[$match[1]] = $match[2];
}
}
$actor = $payload['actor'];
$profile = self::profileFirstOrNew($actor, true);
if(!$profile) {
return false;
}
$publicKey = $profile->public_key;
$path = $request['path'];
$host = $request['host'];
$signingString = "(request-target): post {$path}".PHP_EOL.
"host: {$host}".PHP_EOL.
"date: {$request['date']}".PHP_EOL.
"digest: {$request['digest']}".PHP_EOL.
"content-type: {$request['contentType']}";
$verified = openssl_verify($signingString, base64_decode($signatureData['signature']), $publicKey, OPENSSL_ALGO_SHA256);
return (bool) $verified;
} }
public static function fetchPublicKey() public static function fetchPublicKey()