mirror of
https://git.pleroma.social/pleroma/pleroma.git
synced 2025-04-26 04:34:46 +00:00
fc450fdefc
An instance block with authenticated fetch being required can cause this as we couldn't get the user to find their public key to verify the signature. Commonly observed if someone boosts/Announces a post from an instance that blocked you.
77 lines
2.5 KiB
Elixir
77 lines
2.5 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2022 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Workers.ReceiverWorker do
|
|
alias Pleroma.Signature
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.Federator
|
|
|
|
use Oban.Worker, queue: :federator_incoming, max_attempts: 5
|
|
|
|
@impl true
|
|
|
|
def perform(%Job{
|
|
args: %{
|
|
"op" => "incoming_ap_doc",
|
|
"method" => method,
|
|
"params" => params,
|
|
"req_headers" => req_headers,
|
|
"request_path" => request_path,
|
|
"query_string" => query_string
|
|
}
|
|
}) do
|
|
# Oban's serialization converts our tuple headers to lists.
|
|
# Revert it for the signature validation.
|
|
req_headers = Enum.into(req_headers, [], &List.to_tuple(&1))
|
|
|
|
conn_data = %Plug.Conn{
|
|
method: method,
|
|
params: params,
|
|
req_headers: req_headers,
|
|
request_path: request_path,
|
|
query_string: query_string
|
|
}
|
|
|
|
with {:ok, %User{} = _actor} <- User.get_or_fetch_by_ap_id(conn_data.params["actor"]),
|
|
{:ok, _public_key} <- Signature.refetch_public_key(conn_data),
|
|
{:signature, true} <- {:signature, Signature.validate_signature(conn_data)},
|
|
{:ok, res} <- Federator.perform(:incoming_ap_doc, params) do
|
|
{:ok, res}
|
|
else
|
|
e -> process_errors(e)
|
|
end
|
|
end
|
|
|
|
def perform(%Job{args: %{"op" => "incoming_ap_doc", "params" => params}}) do
|
|
with {:ok, res} <- Federator.perform(:incoming_ap_doc, params) do
|
|
{:ok, res}
|
|
else
|
|
e -> process_errors(e)
|
|
end
|
|
end
|
|
|
|
@impl true
|
|
def timeout(%_{args: %{"timeout" => timeout}}), do: timeout
|
|
|
|
def timeout(_job), do: :timer.seconds(5)
|
|
|
|
defp process_errors({:error, {:error, _} = error}), do: process_errors(error)
|
|
|
|
defp process_errors(errors) do
|
|
case errors do
|
|
{:error, :origin_containment_failed} -> {:cancel, :origin_containment_failed}
|
|
{:error, :already_present} -> {:cancel, :already_present}
|
|
{:error, {:validate_object, _} = reason} -> {:cancel, reason}
|
|
{:error, {:validate, {:error, _changeset} = reason}} -> {:cancel, reason}
|
|
{:error, {:reject, _} = reason} -> {:cancel, reason}
|
|
{:signature, false} -> {:cancel, :invalid_signature}
|
|
{:error, "Object has been deleted"} = reason -> {:cancel, reason}
|
|
{:error, {:side_effects, {:error, :no_object_actor}} = reason} -> {:cancel, reason}
|
|
{:error, :not_found} = reason -> {:cancel, reason}
|
|
{:error, :forbidden} = reason -> {:cancel, reason}
|
|
{:error, _} = e -> e
|
|
e -> {:error, e}
|
|
end
|
|
end
|
|
end
|