123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184 |
- # frozen_string_literal: true
- class ActivityPub::ProcessAccountService < BaseService
- include JsonLdHelper
- # Should be called with confirmed valid JSON
- # and WebFinger-resolved username and domain
- def call(username, domain, json)
- return if json['inbox'].blank? || unsupported_uri_scheme?(json['id'])
- @json = json
- @uri = @json['id']
- @username = username
- @domain = domain
- @collections = {}
- RedisLock.acquire(lock_options) do |lock|
- if lock.acquired?
- @account = Account.find_by(uri: @uri)
- @old_public_key = @account&.public_key
- @old_protocol = @account&.protocol
- create_account if @account.nil?
- update_account
- end
- end
- after_protocol_change! if protocol_changed?
- after_key_change! if key_changed?
- @account
- rescue Oj::ParseError
- nil
- end
- private
- def create_account
- @account = Account.new
- @account.protocol = :activitypub
- @account.username = @username
- @account.domain = @domain
- @account.uri = @uri
- @account.suspended = true if auto_suspend?
- @account.silenced = true if auto_silence?
- @account.private_key = nil
- end
- def update_account
- @account.last_webfingered_at = Time.now.utc
- @account.protocol = :activitypub
- set_immediate_attributes!
- set_fetchable_attributes!
- @account.save_with_optional_media!
- end
- def set_immediate_attributes!
- @account.inbox_url = @json['inbox'] || ''
- @account.outbox_url = @json['outbox'] || ''
- @account.shared_inbox_url = (@json['endpoints'].is_a?(Hash) ? @json['endpoints']['sharedInbox'] : @json['sharedInbox']) || ''
- @account.followers_url = @json['followers'] || ''
- @account.url = url || @uri
- @account.display_name = @json['name'] || ''
- @account.note = @json['summary'] || ''
- @account.locked = @json['manuallyApprovesFollowers'] || false
- end
- def set_fetchable_attributes!
- @account.avatar_remote_url = image_url('icon') unless skip_download?
- @account.header_remote_url = image_url('image') unless skip_download?
- @account.public_key = public_key || ''
- @account.statuses_count = outbox_total_items if outbox_total_items.present?
- @account.following_count = following_total_items if following_total_items.present?
- @account.followers_count = followers_total_items if followers_total_items.present?
- @account.moved_to_account = @json['movedTo'].present? ? moved_account : nil
- end
- def after_protocol_change!
- ActivityPub::PostUpgradeWorker.perform_async(@account.domain)
- end
- def after_key_change!
- RefollowWorker.perform_async(@account.id)
- end
- def image_url(key)
- value = first_of_value(@json[key])
- return if value.nil?
- return value['url'] if value.is_a?(Hash)
- image = fetch_resource_without_id_validation(value)
- image['url'] if image
- end
- def public_key
- value = first_of_value(@json['publicKey'])
- return if value.nil?
- return value['publicKeyPem'] if value.is_a?(Hash)
- key = fetch_resource_without_id_validation(value)
- key['publicKeyPem'] if key
- end
- def url
- return if @json['url'].blank?
- url_candidate = url_to_href(@json['url'], 'text/html')
- if unsupported_uri_scheme?(url_candidate) || mismatching_origin?(url_candidate)
- nil
- else
- url_candidate
- end
- end
- def mismatching_origin?(url)
- needle = Addressable::URI.parse(url).host
- haystack = Addressable::URI.parse(@uri).host
- !haystack.casecmp(needle).zero?
- end
- def outbox_total_items
- collection_total_items('outbox')
- end
- def following_total_items
- collection_total_items('following')
- end
- def followers_total_items
- collection_total_items('followers')
- end
- def collection_total_items(type)
- return if @json[type].blank?
- return @collections[type] if @collections.key?(type)
- collection = fetch_resource_without_id_validation(@json[type])
- @collections[type] = collection.is_a?(Hash) && collection['totalItems'].present? && collection['totalItems'].is_a?(Numeric) ? collection['totalItems'] : nil
- rescue HTTP::Error, OpenSSL::SSL::SSLError
- @collections[type] = nil
- end
- def moved_account
- account = ActivityPub::TagManager.instance.uri_to_resource(@json['movedTo'], Account)
- account ||= ActivityPub::FetchRemoteAccountService.new.call(@json['movedTo'], id: true)
- account
- end
- def skip_download?
- @account.suspended? || domain_block&.reject_media?
- end
- def auto_suspend?
- domain_block&.suspend?
- end
- def auto_silence?
- domain_block&.silence?
- end
- def domain_block
- return @domain_block if defined?(@domain_block)
- @domain_block = DomainBlock.find_by(domain: @domain)
- end
- def key_changed?
- !@old_public_key.nil? && @old_public_key != @account.public_key
- end
- def protocol_changed?
- !@old_protocol.nil? && @old_protocol != @account.protocol
- end
- def lock_options
- { redis: Redis.current, key: "process_account:#{@uri}" }
- end
- end
|