2020-04-09 19:04:31 +00:00
|
|
|
pub mod activities;
|
2019-12-19 21:59:13 +00:00
|
|
|
pub mod community;
|
2020-04-15 18:12:25 +00:00
|
|
|
pub mod community_inbox;
|
2020-04-10 11:37:35 +00:00
|
|
|
pub mod fetcher;
|
2019-12-19 21:59:13 +00:00
|
|
|
pub mod post;
|
2020-04-10 13:50:40 +00:00
|
|
|
pub mod signatures;
|
2019-12-19 21:59:13 +00:00
|
|
|
pub mod user;
|
2020-04-15 18:12:25 +00:00
|
|
|
pub mod user_inbox;
|
2020-04-24 14:04:36 +00:00
|
|
|
|
|
|
|
use activitystreams::{
|
|
|
|
context, public, BaseBox,
|
|
|
|
actor::{
|
|
|
|
Actor,
|
|
|
|
Person,
|
|
|
|
Group,
|
|
|
|
properties::ApActorProperties,
|
|
|
|
},
|
|
|
|
activity::{Accept, Create, Follow, Update},
|
|
|
|
object::{
|
|
|
|
Page,
|
|
|
|
properties::ObjectProperties,
|
|
|
|
},
|
|
|
|
ext::{
|
|
|
|
Ext,
|
|
|
|
Extensible,
|
|
|
|
Extension,
|
|
|
|
},
|
|
|
|
collection::{
|
|
|
|
UnorderedCollection,
|
|
|
|
OrderedCollection,
|
|
|
|
},
|
|
|
|
};
|
2020-03-16 17:30:25 +00:00
|
|
|
use actix_web::body::Body;
|
2020-04-24 14:04:36 +00:00
|
|
|
use actix_web::{web, Result, HttpRequest, HttpResponse};
|
|
|
|
use actix_web::web::Path;
|
2020-03-12 00:01:25 +00:00
|
|
|
use url::Url;
|
2020-04-24 14:04:36 +00:00
|
|
|
use failure::Error;
|
|
|
|
use failure::_core::fmt::Debug;
|
|
|
|
use log::debug;
|
|
|
|
use isahc::prelude::*;
|
|
|
|
use diesel::result::Error::NotFound;
|
|
|
|
use diesel::PgConnection;
|
|
|
|
use http::request::Builder;
|
|
|
|
use http_signature_normalization::Config;
|
|
|
|
use openssl::hash::MessageDigest;
|
|
|
|
use openssl::sign::{Signer, Verifier};
|
|
|
|
use openssl::{pkey::PKey, rsa::Rsa};
|
|
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
use std::collections::BTreeMap;
|
|
|
|
use std::time::Duration;
|
|
|
|
|
|
|
|
use crate::routes::{DbPoolParam, ChatServerParam};
|
|
|
|
use crate::routes::nodeinfo::{NodeInfo, NodeInfoWellKnown};
|
|
|
|
use crate::{convert_datetime, naive_now, Settings};
|
|
|
|
use crate::db::community::{Community, CommunityForm, CommunityFollower, CommunityFollowerForm};
|
|
|
|
use crate::db::community_view::{CommunityFollowerView, CommunityView};
|
|
|
|
use crate::db::post::{Post, PostForm};
|
|
|
|
use crate::db::post_view::PostView;
|
|
|
|
use crate::db::user::{UserForm, User_};
|
|
|
|
use crate::db::user_view::UserView;
|
|
|
|
// TODO check on unpooled connection
|
|
|
|
use crate::db::{Crud, Followable, SearchType, establish_unpooled_connection};
|
|
|
|
use crate::api::site::SearchResponse;
|
|
|
|
|
|
|
|
use signatures::{PublicKey, PublicKeyExtension, sign};
|
|
|
|
use activities::accept_follow;
|
|
|
|
use signatures::verify;
|
|
|
|
use fetcher::{fetch_remote_object, get_or_fetch_and_upsert_remote_user, get_or_fetch_and_upsert_remote_community};
|
2019-12-19 21:59:13 +00:00
|
|
|
|
2020-04-10 13:50:40 +00:00
|
|
|
type GroupExt = Ext<Ext<Group, ApActorProperties>, PublicKeyExtension>;
|
|
|
|
type PersonExt = Ext<Ext<Person, ApActorProperties>, PublicKeyExtension>;
|
2020-04-03 05:02:43 +00:00
|
|
|
|
2020-04-21 20:45:01 +00:00
|
|
|
pub static APUB_JSON_CONTENT_TYPE: &str = "application/activity+json";
|
2020-04-07 15:29:23 +00:00
|
|
|
|
2020-04-08 16:22:44 +00:00
|
|
|
pub enum EndpointType {
|
|
|
|
Community,
|
|
|
|
User,
|
|
|
|
Post,
|
|
|
|
Comment,
|
|
|
|
}
|
|
|
|
|
2020-04-17 15:33:55 +00:00
|
|
|
/// Convert the data to json and turn it into an HTTP Response with the correct ActivityPub
|
|
|
|
/// headers.
|
|
|
|
fn create_apub_response<T>(data: &T) -> HttpResponse<Body>
|
2020-03-19 01:16:17 +00:00
|
|
|
where
|
2020-04-17 15:33:55 +00:00
|
|
|
T: Serialize,
|
2020-03-19 01:16:17 +00:00
|
|
|
{
|
2020-03-16 17:30:25 +00:00
|
|
|
HttpResponse::Ok()
|
2020-04-07 15:29:23 +00:00
|
|
|
.content_type(APUB_JSON_CONTENT_TYPE)
|
2020-04-17 15:33:55 +00:00
|
|
|
.json(data)
|
2019-12-19 21:59:13 +00:00
|
|
|
}
|
|
|
|
|
2020-04-17 15:33:55 +00:00
|
|
|
/// Generates the ActivityPub ID for a given object type and name.
|
|
|
|
///
|
|
|
|
/// TODO: we will probably need to change apub endpoint urls so that html and activity+json content
|
|
|
|
/// types are handled at the same endpoint, so that you can copy the url into mastodon search
|
|
|
|
/// and have it fetch the object.
|
2020-04-03 04:12:05 +00:00
|
|
|
pub fn make_apub_endpoint(endpoint_type: EndpointType, name: &str) -> Url {
|
2020-03-16 18:19:04 +00:00
|
|
|
let point = match endpoint_type {
|
2020-04-07 15:34:44 +00:00
|
|
|
EndpointType::Community => "c",
|
|
|
|
EndpointType::User => "u",
|
2020-04-21 20:45:01 +00:00
|
|
|
EndpointType::Post => "post",
|
2020-04-14 19:12:19 +00:00
|
|
|
// TODO I have to change this else my update advanced_migrations crashes the
|
|
|
|
// server if a comment exists.
|
|
|
|
EndpointType::Comment => "comment",
|
2020-03-16 18:19:04 +00:00
|
|
|
};
|
|
|
|
|
2020-03-12 00:01:25 +00:00
|
|
|
Url::parse(&format!(
|
2020-04-21 20:45:01 +00:00
|
|
|
"{}://{}/{}/{}",
|
2020-02-29 17:38:47 +00:00
|
|
|
get_apub_protocol_string(),
|
2019-12-19 21:59:13 +00:00
|
|
|
Settings::get().hostname,
|
|
|
|
point,
|
2020-03-16 18:19:04 +00:00
|
|
|
name
|
2020-03-12 00:01:25 +00:00
|
|
|
))
|
|
|
|
.unwrap()
|
2019-12-19 21:59:13 +00:00
|
|
|
}
|
2020-02-29 17:38:47 +00:00
|
|
|
|
2020-03-18 15:08:08 +00:00
|
|
|
pub fn get_apub_protocol_string() -> &'static str {
|
2020-03-18 21:09:00 +00:00
|
|
|
if Settings::get().federation.tls_enabled {
|
|
|
|
"https"
|
|
|
|
} else {
|
|
|
|
"http"
|
|
|
|
}
|
2020-02-29 17:38:47 +00:00
|
|
|
}
|
2020-04-03 04:12:05 +00:00
|
|
|
|
2020-04-17 17:34:18 +00:00
|
|
|
// Checks if the ID has a valid format, correct scheme, and is in the whitelist.
|
2020-04-18 18:54:20 +00:00
|
|
|
fn is_apub_id_valid(apub_id: &Url) -> bool {
|
|
|
|
if apub_id.scheme() != get_apub_protocol_string() {
|
2020-04-17 17:34:18 +00:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
let whitelist: Vec<String> = Settings::get()
|
|
|
|
.federation
|
|
|
|
.instance_whitelist
|
|
|
|
.split(',')
|
|
|
|
.map(|d| d.to_string())
|
|
|
|
.collect();
|
2020-04-18 18:54:20 +00:00
|
|
|
match apub_id.domain() {
|
2020-04-17 17:34:18 +00:00
|
|
|
Some(d) => whitelist.contains(&d.to_owned()),
|
|
|
|
None => false,
|
|
|
|
}
|
|
|
|
}
|