323 lines
8.7 KiB
PHP
323 lines
8.7 KiB
PHP
|
<?php
|
||
|
|
namespace Activitypub;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Returns the ActivityPub default JSON-context
|
||
|
|
*
|
||
|
|
* @return array the activitypub context
|
||
|
|
*/
|
||
|
|
function get_context() {
|
||
|
|
$context = array(
|
||
|
|
'https://www.w3.org/ns/activitystreams',
|
||
|
|
'https://w3id.org/security/v1',
|
||
|
|
array(
|
||
|
|
'manuallyApprovesFollowers' => 'as:manuallyApprovesFollowers',
|
||
|
|
'PropertyValue' => 'schema:PropertyValue',
|
||
|
|
'schema' => 'http://schema.org#',
|
||
|
|
'pt' => 'https://joinpeertube.org/ns#',
|
||
|
|
'toot' => 'http://joinmastodon.org/ns#',
|
||
|
|
'value' => 'schema:value',
|
||
|
|
'Hashtag' => 'as:Hashtag',
|
||
|
|
'featured' => array(
|
||
|
|
'@id' => 'toot:featured',
|
||
|
|
'@type' => '@id',
|
||
|
|
),
|
||
|
|
'featuredTags' => array(
|
||
|
|
'@id' => 'toot:featuredTags',
|
||
|
|
'@type' => '@id',
|
||
|
|
),
|
||
|
|
),
|
||
|
|
);
|
||
|
|
|
||
|
|
return \apply_filters( 'activitypub_json_context', $context );
|
||
|
|
}
|
||
|
|
|
||
|
|
function safe_remote_post( $url, $body, $user_id ) {
|
||
|
|
$date = \gmdate( 'D, d M Y H:i:s T' );
|
||
|
|
$digest = \Activitypub\Signature::generate_digest( $body );
|
||
|
|
$signature = \Activitypub\Signature::generate_signature( $user_id, 'post', $url, $date, $digest );
|
||
|
|
|
||
|
|
$wp_version = \get_bloginfo( 'version' );
|
||
|
|
$user_agent = \apply_filters( 'http_headers_useragent', 'WordPress/' . $wp_version . '; ' . \get_bloginfo( 'url' ) );
|
||
|
|
$args = array(
|
||
|
|
'timeout' => 100,
|
||
|
|
'limit_response_size' => 1048576,
|
||
|
|
'redirection' => 3,
|
||
|
|
'user-agent' => "$user_agent; ActivityPub",
|
||
|
|
'headers' => array(
|
||
|
|
'Accept' => 'application/activity+json',
|
||
|
|
'Content-Type' => 'application/activity+json',
|
||
|
|
'Digest' => "SHA-256=$digest",
|
||
|
|
'Signature' => $signature,
|
||
|
|
'Date' => $date,
|
||
|
|
),
|
||
|
|
'body' => $body,
|
||
|
|
);
|
||
|
|
|
||
|
|
$response = \wp_safe_remote_post( $url, $args );
|
||
|
|
|
||
|
|
\do_action( 'activitypub_safe_remote_post_response', $response, $url, $body, $user_id );
|
||
|
|
|
||
|
|
return $response;
|
||
|
|
}
|
||
|
|
|
||
|
|
function safe_remote_get( $url, $user_id ) {
|
||
|
|
$date = \gmdate( 'D, d M Y H:i:s T' );
|
||
|
|
$signature = \Activitypub\Signature::generate_signature( $user_id, 'get', $url, $date );
|
||
|
|
|
||
|
|
$wp_version = \get_bloginfo( 'version' );
|
||
|
|
$user_agent = \apply_filters( 'http_headers_useragent', 'WordPress/' . $wp_version . '; ' . \get_bloginfo( 'url' ) );
|
||
|
|
$args = array(
|
||
|
|
'timeout' => apply_filters( 'activitypub_remote_get_timeout', 100 ),
|
||
|
|
'limit_response_size' => 1048576,
|
||
|
|
'redirection' => 3,
|
||
|
|
'user-agent' => "$user_agent; ActivityPub",
|
||
|
|
'headers' => array(
|
||
|
|
'Accept' => 'application/activity+json',
|
||
|
|
'Content-Type' => 'application/activity+json',
|
||
|
|
'Signature' => $signature,
|
||
|
|
'Date' => $date,
|
||
|
|
),
|
||
|
|
);
|
||
|
|
|
||
|
|
$response = \wp_safe_remote_get( $url, $args );
|
||
|
|
|
||
|
|
\do_action( 'activitypub_safe_remote_get_response', $response, $url, $user_id );
|
||
|
|
|
||
|
|
return $response;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Returns a users WebFinger "resource"
|
||
|
|
*
|
||
|
|
* @param int $user_id
|
||
|
|
*
|
||
|
|
* @return string The user-resource
|
||
|
|
*/
|
||
|
|
function get_webfinger_resource( $user_id ) {
|
||
|
|
return \Activitypub\Webfinger::get_user_resource( $user_id );
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* [get_metadata_by_actor description]
|
||
|
|
*
|
||
|
|
* @param string $actor
|
||
|
|
*
|
||
|
|
* @return array
|
||
|
|
*/
|
||
|
|
function get_remote_metadata_by_actor( $actor ) {
|
||
|
|
$pre = apply_filters( 'pre_get_remote_metadata_by_actor', false, $actor );
|
||
|
|
if ( $pre ) {
|
||
|
|
return $pre;
|
||
|
|
}
|
||
|
|
if ( preg_match( '/^@?' . ACTIVITYPUB_USERNAME_REGEXP . '$/i', $actor ) ) {
|
||
|
|
$actor = Webfinger::resolve( $actor );
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( ! $actor ) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( is_wp_error( $actor ) ) {
|
||
|
|
return $actor;
|
||
|
|
}
|
||
|
|
|
||
|
|
$transient_key = 'activitypub_' . $actor;
|
||
|
|
$metadata = \get_transient( $transient_key );
|
||
|
|
|
||
|
|
if ( $metadata ) {
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( ! \wp_http_validate_url( $actor ) ) {
|
||
|
|
$metadata = new \WP_Error( 'activitypub_no_valid_actor_url', \__( 'The "actor" is no valid URL', 'activitypub' ), $actor );
|
||
|
|
\set_transient( $transient_key, $metadata, HOUR_IN_SECONDS ); // Cache the error for a shorter period.
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
$user = \get_users(
|
||
|
|
array(
|
||
|
|
'number' => 1,
|
||
|
|
'capability__in' => array( 'publish_posts' ),
|
||
|
|
'fields' => 'ID',
|
||
|
|
)
|
||
|
|
);
|
||
|
|
|
||
|
|
// we just need any user to generate a request signature
|
||
|
|
$user_id = \reset( $user );
|
||
|
|
$short_timeout = function() {
|
||
|
|
return 3;
|
||
|
|
};
|
||
|
|
add_filter( 'activitypub_remote_get_timeout', $short_timeout );
|
||
|
|
$response = \Activitypub\safe_remote_get( $actor, $user_id );
|
||
|
|
remove_filter( 'activitypub_remote_get_timeout', $short_timeout );
|
||
|
|
if ( \is_wp_error( $response ) ) {
|
||
|
|
\set_transient( $transient_key, $response, HOUR_IN_SECONDS ); // Cache the error for a shorter period.
|
||
|
|
return $response;
|
||
|
|
}
|
||
|
|
|
||
|
|
$metadata = \wp_remote_retrieve_body( $response );
|
||
|
|
$metadata = \json_decode( $metadata, true );
|
||
|
|
|
||
|
|
if ( ! $metadata ) {
|
||
|
|
$metadata = new \WP_Error( 'activitypub_invalid_json', \__( 'No valid JSON data', 'activitypub' ), $actor );
|
||
|
|
\set_transient( $transient_key, $metadata, HOUR_IN_SECONDS ); // Cache the error for a shorter period.
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
\set_transient( $transient_key, $metadata, WEEK_IN_SECONDS );
|
||
|
|
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* [get_inbox_by_actor description]
|
||
|
|
* @param [type] $actor [description]
|
||
|
|
* @return [type] [description]
|
||
|
|
*/
|
||
|
|
function get_inbox_by_actor( $actor ) {
|
||
|
|
$metadata = \Activitypub\get_remote_metadata_by_actor( $actor );
|
||
|
|
|
||
|
|
if ( \is_wp_error( $metadata ) ) {
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( isset( $metadata['endpoints'] ) && isset( $metadata['endpoints']['sharedInbox'] ) ) {
|
||
|
|
return $metadata['endpoints']['sharedInbox'];
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( \array_key_exists( 'inbox', $metadata ) ) {
|
||
|
|
return $metadata['inbox'];
|
||
|
|
}
|
||
|
|
|
||
|
|
return new \WP_Error( 'activitypub_no_inbox', \__( 'No "Inbox" found', 'activitypub' ), $metadata );
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* [get_inbox_by_actor description]
|
||
|
|
* @param [type] $actor [description]
|
||
|
|
* @return [type] [description]
|
||
|
|
*/
|
||
|
|
function get_publickey_by_actor( $actor, $key_id ) {
|
||
|
|
$metadata = \Activitypub\get_remote_metadata_by_actor( $actor );
|
||
|
|
|
||
|
|
if ( \is_wp_error( $metadata ) ) {
|
||
|
|
return $metadata;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (
|
||
|
|
isset( $metadata['publicKey'] ) &&
|
||
|
|
isset( $metadata['publicKey']['id'] ) &&
|
||
|
|
isset( $metadata['publicKey']['owner'] ) &&
|
||
|
|
isset( $metadata['publicKey']['publicKeyPem'] ) &&
|
||
|
|
$key_id === $metadata['publicKey']['id'] &&
|
||
|
|
$actor === $metadata['publicKey']['owner']
|
||
|
|
) {
|
||
|
|
return $metadata['publicKey']['publicKeyPem'];
|
||
|
|
}
|
||
|
|
|
||
|
|
return new \WP_Error( 'activitypub_no_public_key', \__( 'No "Public-Key" found', 'activitypub' ), $metadata );
|
||
|
|
}
|
||
|
|
|
||
|
|
function get_follower_inboxes( $user_id ) {
|
||
|
|
$followers = \Activitypub\Peer\Followers::get_followers( $user_id );
|
||
|
|
$inboxes = array();
|
||
|
|
|
||
|
|
foreach ( $followers as $follower ) {
|
||
|
|
$inbox = \Activitypub\get_inbox_by_actor( $follower );
|
||
|
|
if ( ! $inbox || \is_wp_error( $inbox ) ) {
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
// init array if empty
|
||
|
|
if ( ! isset( $inboxes[ $inbox ] ) ) {
|
||
|
|
$inboxes[ $inbox ] = array();
|
||
|
|
}
|
||
|
|
$inboxes[ $inbox ][] = $follower;
|
||
|
|
}
|
||
|
|
|
||
|
|
return $inboxes;
|
||
|
|
}
|
||
|
|
|
||
|
|
function get_identifier_settings( $user_id ) {
|
||
|
|
?>
|
||
|
|
<table class="form-table">
|
||
|
|
<tbody>
|
||
|
|
<tr>
|
||
|
|
<th scope="row">
|
||
|
|
<label><?php \esc_html_e( 'Profile identifier', 'activitypub' ); ?></label>
|
||
|
|
</th>
|
||
|
|
<td>
|
||
|
|
<p><code><?php echo \esc_html( \Activitypub\get_webfinger_resource( $user_id ) ); ?></code> or <code><?php echo \esc_url( \get_author_posts_url( $user_id ) ); ?></code></p>
|
||
|
|
<?php // translators: the webfinger resource ?>
|
||
|
|
<p class="description"><?php \printf( \esc_html__( 'Try to follow "@%s" by searching for it on Mastodon,Friendica & Co.', 'activitypub' ), \esc_html( \Activitypub\get_webfinger_resource( $user_id ) ) ); ?></p>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
<?php
|
||
|
|
}
|
||
|
|
|
||
|
|
function get_followers( $user_id ) {
|
||
|
|
$followers = \Activitypub\Peer\Followers::get_followers( $user_id );
|
||
|
|
|
||
|
|
if ( ! $followers ) {
|
||
|
|
return array();
|
||
|
|
}
|
||
|
|
|
||
|
|
return $followers;
|
||
|
|
}
|
||
|
|
|
||
|
|
function count_followers( $user_id ) {
|
||
|
|
$followers = \Activitypub\get_followers( $user_id );
|
||
|
|
|
||
|
|
return \count( $followers );
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Examine a url and try to determine the author ID it represents.
|
||
|
|
*
|
||
|
|
* Checks are supposedly from the hosted site blog.
|
||
|
|
*
|
||
|
|
* @param string $url Permalink to check.
|
||
|
|
*
|
||
|
|
* @return int User ID, or 0 on failure.
|
||
|
|
*/
|
||
|
|
function url_to_authorid( $url ) {
|
||
|
|
global $wp_rewrite;
|
||
|
|
|
||
|
|
// check if url hase the same host
|
||
|
|
if ( \wp_parse_url( \site_url(), \PHP_URL_HOST ) !== \wp_parse_url( $url, \PHP_URL_HOST ) ) {
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
// first, check to see if there is a 'author=N' to match against
|
||
|
|
if ( \preg_match( '/[?&]author=(\d+)/i', $url, $values ) ) {
|
||
|
|
$id = \absint( $values[1] );
|
||
|
|
if ( $id ) {
|
||
|
|
return $id;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// check to see if we are using rewrite rules
|
||
|
|
$rewrite = $wp_rewrite->wp_rewrite_rules();
|
||
|
|
|
||
|
|
// not using rewrite rules, and 'author=N' method failed, so we're out of options
|
||
|
|
if ( empty( $rewrite ) ) {
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
// generate rewrite rule for the author url
|
||
|
|
$author_rewrite = $wp_rewrite->get_author_permastruct();
|
||
|
|
$author_regexp = \str_replace( '%author%', '', $author_rewrite );
|
||
|
|
|
||
|
|
// match the rewrite rule with the passed url
|
||
|
|
if ( \preg_match( '/https?:\/\/(.+)' . \preg_quote( $author_regexp, '/' ) . '([^\/]+)/i', $url, $match ) ) {
|
||
|
|
$user = \get_user_by( 'slug', $match[2] );
|
||
|
|
if ( $user ) {
|
||
|
|
return $user->ID;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return 0;
|
||
|
|
}
|