2bf2eac765
- Add instance actor - Add private mode, which uses an allowlist - Add Secure Mode, restricts access to blocked instances
366 lines
8.8 KiB
TypeScript
366 lines
8.8 KiB
TypeScript
import Router from '@koa/router';
|
|
import json from 'koa-json-body';
|
|
import httpSignature from '@peertube/http-signature';
|
|
|
|
import { renderActivity } from '@/remote/activitypub/renderer/index.js';
|
|
import renderNote from '@/remote/activitypub/renderer/note.js';
|
|
import renderKey from '@/remote/activitypub/renderer/key.js';
|
|
import { renderPerson } from '@/remote/activitypub/renderer/person.js';
|
|
import renderEmoji from '@/remote/activitypub/renderer/emoji.js';
|
|
import Outbox, { packActivity } from './activitypub/outbox.js';
|
|
import Followers from './activitypub/followers.js';
|
|
import Following from './activitypub/following.js';
|
|
import Featured from './activitypub/featured.js';
|
|
import { inbox as processInbox } from '@/queue/index.js';
|
|
import { isSelfHost, toPuny } from '@/misc/convert-host.js';
|
|
import { Notes, Users, Emojis, NoteReactions } from '@/models/index.js';
|
|
import { ILocalUser, User } from '@/models/entities/user.js';
|
|
import { In, IsNull, Not } from 'typeorm';
|
|
import { renderLike } from '@/remote/activitypub/renderer/like.js';
|
|
import { getUserKeypair } from '@/misc/keypair-store.js';
|
|
import checkFetch from '@/remote/activitypub/check-fetch.js';
|
|
import { getInstanceActor } from '@/services/instance-actor.js';
|
|
import { fetchMeta } from '@/misc/fetch-meta.js';
|
|
import renderFollow from '@/remote/activitypub/renderer/follow.js';
|
|
|
|
// Init router
|
|
const router = new Router();
|
|
|
|
//#region Routing
|
|
|
|
function inbox(ctx: Router.RouterContext) {
|
|
let signature;
|
|
|
|
try {
|
|
signature = httpSignature.parseRequest(ctx.req, { 'headers': [] });
|
|
} catch (e) {
|
|
ctx.status = 401;
|
|
return;
|
|
}
|
|
|
|
processInbox(ctx.request.body, signature);
|
|
|
|
ctx.status = 202;
|
|
}
|
|
|
|
const ACTIVITY_JSON = 'application/activity+json; charset=utf-8';
|
|
const LD_JSON = 'application/ld+json; profile="https://www.w3.org/ns/activitystreams"; charset=utf-8';
|
|
|
|
function isActivityPubReq(ctx: Router.RouterContext) {
|
|
ctx.response.vary('Accept');
|
|
const accepted = ctx.accepts('html', ACTIVITY_JSON, LD_JSON);
|
|
return typeof accepted === 'string' && !accepted.match(/html/);
|
|
}
|
|
|
|
export function setResponseType(ctx: Router.RouterContext) {
|
|
const accept = ctx.accepts(ACTIVITY_JSON, LD_JSON);
|
|
if (accept === LD_JSON) {
|
|
ctx.response.type = LD_JSON;
|
|
} else {
|
|
ctx.response.type = ACTIVITY_JSON;
|
|
}
|
|
}
|
|
|
|
// inbox
|
|
router.post('/inbox', json(), inbox);
|
|
router.post('/users/:user/inbox', json(), inbox);
|
|
|
|
// note
|
|
router.get('/notes/:note', async (ctx, next) => {
|
|
if (!isActivityPubReq(ctx)) return await next();
|
|
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const note = await Notes.findOneBy({
|
|
id: ctx.params.note,
|
|
visibility: In(['public' as const, 'home' as const]),
|
|
localOnly: false,
|
|
});
|
|
|
|
if (note == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
// リモートだったらリダイレクト
|
|
if (note.userHost != null) {
|
|
if (note.uri == null || isSelfHost(note.userHost)) {
|
|
ctx.status = 500;
|
|
return;
|
|
}
|
|
ctx.redirect(note.uri);
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(await renderNote(note, false));
|
|
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
});
|
|
|
|
// note activity
|
|
router.get('/notes/:note/activity', async ctx => {
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const note = await Notes.findOneBy({
|
|
id: ctx.params.note,
|
|
userHost: IsNull(),
|
|
visibility: In(['public' as const, 'home' as const]),
|
|
localOnly: false,
|
|
});
|
|
|
|
if (note == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(await packActivity(note));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
});
|
|
|
|
// outbox
|
|
router.get('/users/:user/outbox', Outbox);
|
|
|
|
// followers
|
|
router.get('/users/:user/followers', Followers);
|
|
|
|
// following
|
|
router.get('/users/:user/following', Following);
|
|
|
|
// featured
|
|
router.get('/users/:user/collections/featured', Featured);
|
|
|
|
// publickey
|
|
router.get('/users/:user/publickey', async ctx => {
|
|
const instanceActor = await getInstanceActor();
|
|
if (ctx.params.user === instanceActor.id) {
|
|
ctx.body = renderActivity(renderKey(instanceActor, await getUserKeypair(instanceActor.id)));
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
setResponseType(ctx);
|
|
return;
|
|
}
|
|
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const userId = ctx.params.user;
|
|
|
|
const user = await Users.findOneBy({
|
|
id: userId,
|
|
host: IsNull(),
|
|
});
|
|
|
|
if (user == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
const keypair = await getUserKeypair(user.id);
|
|
|
|
if (Users.isLocalUser(user)) {
|
|
ctx.body = renderActivity(renderKey(user, keypair));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
} else {
|
|
ctx.status = 400;
|
|
}
|
|
});
|
|
|
|
// user
|
|
async function userInfo(ctx: Router.RouterContext, user: User | null) {
|
|
if (user == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(await renderPerson(user as ILocalUser));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
}
|
|
|
|
router.get('/users/:user', async (ctx, next) => {
|
|
if (!isActivityPubReq(ctx)) return await next();
|
|
|
|
const instanceActor = await getInstanceActor();
|
|
if (ctx.params.user === instanceActor.id) {
|
|
await userInfo(ctx, instanceActor);
|
|
return;
|
|
}
|
|
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const userId = ctx.params.user;
|
|
|
|
const user = await Users.findOneBy({
|
|
id: userId,
|
|
host: IsNull(),
|
|
isSuspended: false,
|
|
});
|
|
|
|
await userInfo(ctx, user);
|
|
});
|
|
|
|
router.get('/@:user', async (ctx, next) => {
|
|
if (!isActivityPubReq(ctx)) return await next();
|
|
|
|
if (ctx.params.user === 'instance.actor') {
|
|
const instanceActor = await getInstanceActor();
|
|
await userInfo(ctx, instanceActor);
|
|
return;
|
|
}
|
|
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const user = await Users.findOneBy({
|
|
usernameLower: ctx.params.user.toLowerCase(),
|
|
host: IsNull(),
|
|
isSuspended: false,
|
|
});
|
|
|
|
await userInfo(ctx, user);
|
|
});
|
|
|
|
router.get('/actor', async (ctx, next) => {
|
|
const instanceActor = await getInstanceActor();
|
|
await userInfo(ctx, instanceActor);
|
|
});
|
|
//#endregion
|
|
|
|
// emoji
|
|
router.get('/emojis/:emoji', async ctx => {
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const emoji = await Emojis.findOneBy({
|
|
host: IsNull(),
|
|
name: ctx.params.emoji,
|
|
});
|
|
|
|
if (emoji == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(await renderEmoji(emoji));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
});
|
|
|
|
// like
|
|
router.get('/likes/:like', async ctx => {
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
|
|
const reaction = await NoteReactions.findOneBy({ id: ctx.params.like });
|
|
|
|
if (reaction == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
const note = await Notes.findOneBy({ id: reaction.noteId });
|
|
|
|
if (note == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(await renderLike(reaction, note));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
});
|
|
|
|
// follow
|
|
router.get('/follows/:follower/:followee', async ctx => {
|
|
const verify = await checkFetch(ctx.req);
|
|
if (verify != 200) {
|
|
ctx.status = verify;
|
|
return;
|
|
}
|
|
// This may be used before the follow is completed, so we do not
|
|
// check if the following exists.
|
|
|
|
const [follower, followee] = await Promise.all([
|
|
Users.findOneBy({
|
|
id: ctx.params.follower,
|
|
host: IsNull(),
|
|
}),
|
|
Users.findOneBy({
|
|
id: ctx.params.followee,
|
|
host: Not(IsNull()),
|
|
}),
|
|
]);
|
|
|
|
if (follower == null || followee == null) {
|
|
ctx.status = 404;
|
|
return;
|
|
}
|
|
|
|
ctx.body = renderActivity(renderFollow(follower, followee));
|
|
const meta = await fetchMeta();
|
|
if (meta.secureMode || meta.privateMode) {
|
|
ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
|
|
} else {
|
|
ctx.set('Cache-Control', 'public, max-age=180');
|
|
}
|
|
setResponseType(ctx);
|
|
});
|
|
|
|
export default router;
|