forked from mirrors/gotosocial
87cf621e21
Remote instances are now dereferenced when they post to an inbox on a GtS instance.
Dereferencing will be done first by checking the /api/v1/instance endpoint of an instance.
If that doesn't work, /.well-known/nodeinfo will be checked.
If that doesn't work, only a minimal representation of the instance will be stored.
A new field was added to the Instance database model. To create it:
alter table instances add column contact_account_username text;
106 lines
5.1 KiB
Go
106 lines
5.1 KiB
Go
/*
|
|
GoToSocial
|
|
Copyright (C) 2021 GoToSocial Authors admin@gotosocial.org
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU Affero General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU Affero General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Affero General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package federation
|
|
|
|
import (
|
|
"net/http"
|
|
"net/url"
|
|
"sync"
|
|
|
|
"github.com/go-fed/activity/pub"
|
|
"github.com/sirupsen/logrus"
|
|
"github.com/superseriousbusiness/gotosocial/internal/config"
|
|
"github.com/superseriousbusiness/gotosocial/internal/db"
|
|
"github.com/superseriousbusiness/gotosocial/internal/federation/federatingdb"
|
|
"github.com/superseriousbusiness/gotosocial/internal/gtsmodel"
|
|
"github.com/superseriousbusiness/gotosocial/internal/transport"
|
|
"github.com/superseriousbusiness/gotosocial/internal/typeutils"
|
|
)
|
|
|
|
// Federator wraps various interfaces and functions to manage activitypub federation from gotosocial
|
|
type Federator interface {
|
|
// FederatingActor returns the underlying pub.FederatingActor, which can be used to send activities, and serve actors at inboxes/outboxes.
|
|
FederatingActor() pub.FederatingActor
|
|
// FederatingDB returns the underlying FederatingDB interface.
|
|
FederatingDB() federatingdb.DB
|
|
// AuthenticateFederatedRequest can be used to check the authenticity of incoming http-signed requests for federating resources.
|
|
// The given username will be used to create a transport for making outgoing requests. See the implementation for more detailed comments.
|
|
AuthenticateFederatedRequest(username string, r *http.Request) (*url.URL, error)
|
|
// FingerRemoteAccount performs a webfinger lookup for a remote account, using the .well-known path. It will return the ActivityPub URI for that
|
|
// account, or an error if it doesn't exist or can't be retrieved.
|
|
FingerRemoteAccount(requestingUsername string, targetUsername string, targetDomain string) (*url.URL, error)
|
|
// DereferenceRemoteAccount can be used to get the representation of a remote account, based on the account ID (which is a URI).
|
|
// The given username will be used to create a transport for making outgoing requests. See the implementation for more detailed comments.
|
|
DereferenceRemoteAccount(username string, remoteAccountID *url.URL) (typeutils.Accountable, error)
|
|
// DereferenceRemoteStatus can be used to get the representation of a remote status, based on its ID (which is a URI).
|
|
// The given username will be used to create a transport for making outgoing requests. See the implementation for more detailed comments.
|
|
DereferenceRemoteStatus(username string, remoteStatusID *url.URL) (typeutils.Statusable, error)
|
|
// DereferenceRemoteInstance takes the URL of a remote instance, and a username (optional) to spin up a transport with. It then
|
|
// does its damnedest to get some kind of information back about the instance, trying /api/v1/instance, then /.well-known/nodeinfo
|
|
DereferenceRemoteInstance(username string, remoteInstanceURI *url.URL) (*gtsmodel.Instance, error)
|
|
// GetTransportForUser returns a new transport initialized with the key credentials belonging to the given username.
|
|
// This can be used for making signed http requests.
|
|
//
|
|
// If username is an empty string, our instance user's credentials will be used instead.
|
|
GetTransportForUser(username string) (transport.Transport, error)
|
|
// Handshaking returns true if the given username is currently in the process of dereferencing the remoteAccountID.
|
|
Handshaking(username string, remoteAccountID *url.URL) bool
|
|
pub.CommonBehavior
|
|
pub.FederatingProtocol
|
|
}
|
|
|
|
type federator struct {
|
|
config *config.Config
|
|
db db.DB
|
|
federatingDB federatingdb.DB
|
|
clock pub.Clock
|
|
typeConverter typeutils.TypeConverter
|
|
transportController transport.Controller
|
|
actor pub.FederatingActor
|
|
log *logrus.Logger
|
|
handshakes map[string][]*url.URL
|
|
handshakeSync *sync.Mutex // mutex to lock/unlock when checking or updating the handshakes map
|
|
}
|
|
|
|
// NewFederator returns a new federator
|
|
func NewFederator(db db.DB, federatingDB federatingdb.DB, transportController transport.Controller, config *config.Config, log *logrus.Logger, typeConverter typeutils.TypeConverter) Federator {
|
|
|
|
clock := &Clock{}
|
|
f := &federator{
|
|
config: config,
|
|
db: db,
|
|
federatingDB: federatingDB,
|
|
clock: &Clock{},
|
|
typeConverter: typeConverter,
|
|
transportController: transportController,
|
|
log: log,
|
|
handshakeSync: &sync.Mutex{},
|
|
}
|
|
actor := newFederatingActor(f, f, federatingDB, clock)
|
|
f.actor = actor
|
|
return f
|
|
}
|
|
|
|
func (f *federator) FederatingActor() pub.FederatingActor {
|
|
return f.actor
|
|
}
|
|
|
|
func (f *federator) FederatingDB() federatingdb.DB {
|
|
return f.federatingDB
|
|
}
|