Files
laipower/wp-content/plugins/activitypub/includes/collection/class-followers.php

705 lines
20 KiB
PHP

<?php
/**
* Followers collection file.
*
* @package Activitypub
*/
namespace Activitypub\Collection;
use Activitypub\Signature;
use Activitypub\Tombstone;
use function Activitypub\get_remote_metadata_by_actor;
use function Activitypub\get_rest_url_by_path;
/**
* ActivityPub Followers Collection.
*
* @author Matt Wiebe
* @author Matthias Pfefferle
*/
class Followers {
/**
* Cache key for the followers inbox.
*
* @var string
*/
const CACHE_KEY_INBOXES = 'follower_inboxes_%s';
/**
* Meta key for the followers user ID.
*
* @var string
*/
const FOLLOWER_META_KEY = '_activitypub_following';
/**
* Add new Follower.
*
* @param int $user_id The ID of the WordPress User.
* @param string $actor The Actor URL.
*
* @return int|\WP_Error The Follower ID or an WP_Error.
*/
public static function add( $user_id, $actor ) {
$meta = get_remote_metadata_by_actor( $actor );
if ( Tombstone::exists( $meta ) ) {
return $meta;
}
if ( empty( $meta ) || ! \is_array( $meta ) || \is_wp_error( $meta ) ) {
return new \WP_Error( 'activitypub_invalid_follower', __( 'Invalid Follower', 'activitypub' ), array( 'status' => 400 ) );
}
$post_id = Remote_Actors::upsert( $meta );
if ( \is_wp_error( $post_id ) ) {
return $post_id;
}
$post_meta = \get_post_meta( $post_id, self::FOLLOWER_META_KEY, false );
if ( \is_array( $post_meta ) && ! \in_array( (string) $user_id, $post_meta, true ) ) {
\add_post_meta( $post_id, self::FOLLOWER_META_KEY, $user_id );
\wp_cache_delete( \sprintf( self::CACHE_KEY_INBOXES, $user_id ), 'activitypub' );
\wp_cache_delete( Remote_Actors::CACHE_KEY_INBOXES, 'activitypub' );
}
return $post_id;
}
/**
* Add new Follower.
*
* @deprecated 7.6.0 Use {@see Followers::add()}.
*
* @param int $user_id The ID of the WordPress User.
* @param string $actor The Actor URL.
*
* @return int|\WP_Error The Follower ID or an WP_Error.
*/
public static function add_follower( $user_id, $actor ) {
\_deprecated_function( __METHOD__, '7.6.0', 'Activitypub\Collection\Followers::add' );
return self::add( $user_id, $actor );
}
/**
* Remove a Follower.
*
* @param \WP_Post|int $post_or_id The ID of the remote Actor.
* @param int $user_id The ID of the WordPress User.
*
* @return bool True on success, false on failure.
*/
public static function remove( $post_or_id, $user_id ) {
$post = \get_post( $post_or_id );
if ( ! $post ) {
return false;
}
\wp_cache_delete( \sprintf( self::CACHE_KEY_INBOXES, $user_id ), 'activitypub' );
\wp_cache_delete( Remote_Actors::CACHE_KEY_INBOXES, 'activitypub' );
/**
* Fires before a Follower is removed.
*
* @param \WP_Post $post The remote Actor object.
* @param int $user_id The ID of the WordPress User.
* @param \Activitypub\Activity\Actor $actor The remote Actor object.
*/
\do_action( 'activitypub_followers_pre_remove_follower', $post, $user_id, Remote_Actors::get_actor( $post ) );
return \delete_post_meta( $post->ID, self::FOLLOWER_META_KEY, $user_id );
}
/**
* Remove a Follower.
*
* @deprecated 7.1.0 Use {@see Followers::remove()}.
*
* @param int $user_id The ID of the WordPress User.
* @param string $actor The Actor URL.
*
* @return bool True on success, false on failure.
*/
public static function remove_follower( $user_id, $actor ) {
\_deprecated_function( __METHOD__, '7.1.0', 'Activitypub\Collection\Followers::remove' );
$remote_actor = self::get_by_uri( $user_id, $actor );
if ( \is_wp_error( $remote_actor ) ) {
return false;
}
return self::remove( $remote_actor->ID, $user_id );
}
/**
* Get a Follower by URI.
*
* @param int $user_id The ID of the WordPress User.
* @param string $actor The Actor URL.
*
* @return \WP_Post|\WP_Error The Follower object or WP_Error on failure.
*/
public static function get_by_uri( $user_id, $actor ) {
global $wpdb;
// phpcs:ignore WordPress.DB.DirectDatabaseQuery
$id = $wpdb->get_var(
$wpdb->prepare(
"SELECT DISTINCT p.ID FROM $wpdb->posts p INNER JOIN $wpdb->postmeta pm ON p.ID = pm.post_id WHERE p.post_type = %s AND pm.meta_key = %s AND pm.meta_value = %d AND p.guid = %s",
array(
\esc_sql( Remote_Actors::POST_TYPE ),
\esc_sql( self::FOLLOWER_META_KEY ),
\esc_sql( $user_id ),
\esc_sql( $actor ),
)
)
);
if ( ! $id ) {
return new \WP_Error(
'activitypub_follower_not_found',
\__( 'Follower not found', 'activitypub' ),
array( 'status' => 404 )
);
}
return \get_post( $id );
}
/**
* Get a Follower.
*
* @deprecated 7.6.0 Use {@see Followers::get_by_uri()}
*
* @param int $user_id The ID of the WordPress User.
* @param string $actor The Actor URL.
*
* @return \WP_Post|\WP_Error The Follower object or WP_Error on failure.
*/
public static function get_follower( $user_id, $actor ) {
_deprecated_function( __METHOD__, '7.6.0', 'Activitypub\Collection\Followers::get_by_uri' );
return self::get_by_uri( $user_id, $actor );
}
/**
* Get a Follower by Actor independent of the User.
*
* @deprecated 7.4.0 Use {@see Remote_Actors::get_by_uri()}.
*
* @param string $actor The Actor URL.
*
* @return \WP_Post|\WP_Error The Follower object or WP_Error on failure.
*/
public static function get_follower_by_actor( $actor ) {
\_deprecated_function( __METHOD__, '7.4.0', 'Activitypub\Collection\Remote_Actors::get_by_uri' );
return Remote_Actors::get_by_uri( $actor );
}
/**
* Get many followers.
*
* @param int|null $user_id The ID of the WordPress User.
* @param int $number Maximum number of results to return.
* @param int $page Page number.
* @param array $args The WP_Query arguments.
*
* @return \WP_Post[] List of `Follower` objects.
*/
public static function get_many( $user_id, $number = -1, $page = null, $args = array() ) {
$data = self::query( $user_id, $number, $page, $args );
return $data['followers'];
}
/**
* Get the Followers of a given user.
*
* @deprecated 7.6.0 Use {@see Followers::get_many()}
*
* @param int|null $user_id The ID of the WordPress User.
* @param int $number Maximum number of results to return.
* @param int $page Page number.
* @param array $args The WP_Query arguments.
*
* @return \WP_Post[] List of `Follower` objects.
*/
public static function get_followers( $user_id, $number = -1, $page = null, $args = array() ) {
_deprecated_function( __METHOD__, '7.6.0', 'Activitypub\Collection\Followers::get_many' );
return self::get_many( $user_id, $number, $page, $args );
}
/**
* Get the Followers of a given user, along with a total count for pagination purposes.
*
* @deprecated 7.6.0 Use {@see Followers::query()}.
*
* @param int|null $user_id The ID of the WordPress User.
* @param int $number Maximum number of results to return.
* @param int $page Page number.
* @param array $args The WP_Query arguments.
*
* @return array {
* Data about the followers.
*
* @type \WP_Post[] $followers List of `Follower` objects.
* @type int $total Total number of followers.
* }
*/
public static function get_followers_with_count( $user_id, $number = -1, $page = null, $args = array() ) {
\_deprecated_function( __METHOD__, '7.6.0', 'Activitypub\Collection\Followers::query' );
return self::query( $user_id, $number, $page, $args );
}
/**
* Query followers with pagination info.
*
* @param int|null $user_id The ID of the WordPress User.
* @param int $number Maximum number of results to return.
* @param int $page Page number.
* @param array $args The WP_Query arguments.
*
* @return array {
* Data about the followers.
*
* @type \WP_Post[] $followers List of `Follower` objects.
* @type int $total Total number of followers.
* }
*/
public static function query( $user_id, $number = -1, $page = null, $args = array() ) {
$defaults = array(
'post_type' => Remote_Actors::POST_TYPE,
'posts_per_page' => $number,
'paged' => $page,
'orderby' => 'ID',
'order' => 'DESC',
// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query
'meta_query' => array(
'relation' => 'OR',
array(
'key' => self::FOLLOWER_META_KEY,
'value' => $user_id,
),
// for backwards compatibility.
array(
'key' => '_activitypub_user_id',
'value' => $user_id,
),
),
);
$args = \wp_parse_args( $args, $defaults );
$query = new \WP_Query( $args );
$total = $query->found_posts;
$followers = \array_filter( $query->posts );
return \compact( 'followers', 'total' );
}
/**
* Count the total number of followers.
*
* @param int $user_id The ID of the WordPress User.
*
* @return int The number of Followers
*/
public static function count( $user_id ) {
return self::query( $user_id, 1 )['total'];
}
/**
* Count followers gained in a date range.
*
* @param int $user_id The ID of the WordPress User.
* @param string $start Start date (Y-m-d H:i:s).
* @param string $end End date (Y-m-d H:i:s).
*
* @return int The number of new followers in the date range.
*/
public static function count_in_range( $user_id, $start, $end ) {
$result = self::query(
$user_id,
1, // We only need the count.
null,
array(
'date_query' => array(
array(
'after' => $start,
'before' => $end,
'inclusive' => true,
),
),
)
);
return $result['total'];
}
/**
* Count the total number of followers.
*
* @deprecated 7.6.0 Use {@see Followers::count()}.
*
* @param int $user_id The ID of the WordPress User.
*
* @return int The number of Followers
*/
public static function count_followers( $user_id ) {
\_deprecated_function( __METHOD__, '7.6.0', 'Activitypub\Collection\Followers::count' );
return self::count( $user_id );
}
/**
* Returns all Inboxes for an Actor's Followers.
*
* @param int $user_id The ID of the WordPress User.
*
* @return array The list of Inboxes.
*/
public static function get_inboxes( $user_id ) {
$cache_key = \sprintf( self::CACHE_KEY_INBOXES, $user_id );
$inboxes = \wp_cache_get( $cache_key, 'activitypub' );
if ( $inboxes ) {
return $inboxes;
}
// Get all Followers of an ID of the WordPress User.
$posts = new \WP_Query(
array(
'nopaging' => true,
'post_type' => Remote_Actors::POST_TYPE,
'fields' => 'ids',
// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query
'meta_query' => array(
'relation' => 'AND',
array(
'key' => '_activitypub_inbox',
'compare' => 'EXISTS',
),
array(
'key' => self::FOLLOWER_META_KEY,
'value' => $user_id,
),
array(
'key' => '_activitypub_inbox',
'value' => '',
'compare' => '!=',
),
),
)
);
if ( ! $posts->posts ) {
return array();
}
global $wpdb;
// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
$results = $wpdb->get_col(
$wpdb->prepare(
"SELECT DISTINCT meta_value FROM {$wpdb->postmeta}
WHERE post_id IN (" . \implode( ', ', \array_fill( 0, \absint( $posts->post_count ), '%d' ) ) . ")
AND meta_key = '_activitypub_inbox'
AND meta_value IS NOT NULL",
$posts->posts
)
);
$inboxes = \array_filter( $results );
\wp_cache_set( $cache_key, $inboxes, 'activitypub' );
return $inboxes;
}
/**
* Get all Inboxes for a given Activity.
*
* @param string $json The ActivityPub Activity JSON.
* @param int $actor_id The WordPress Actor ID.
* @param int $batch_size Optional. The batch size. Default 50.
* @param int $offset Optional. The offset. Default 0.
*
* @return array The list of Inboxes.
*/
public static function get_inboxes_for_activity( $json, $actor_id, $batch_size = 50, $offset = 0 ) {
$activity = \json_decode( $json, true );
// Only if this is a Delete. Create handles its own "Announce" in dual user mode.
if ( 'Delete' === ( $activity['type'] ?? null ) ) {
$inboxes = Remote_Actors::get_inboxes();
} else {
$inboxes = self::get_inboxes( $actor_id );
}
return \array_slice( $inboxes, $offset, $batch_size );
}
/**
* Maybe add Inboxes of the Blog User.
*
* @deprecated 7.3.0
*
* @param string $json The ActivityPub Activity JSON.
* @param int $actor_id The WordPress Actor ID.
*
* @return bool True if the Inboxes of the Blog User should be added, false otherwise.
*/
public static function maybe_add_inboxes_of_blog_user( $json, $actor_id ) {
\_deprecated_function( __METHOD__, '7.3.0' );
// Only if we're in both Blog and User modes.
if ( ACTIVITYPUB_ACTOR_AND_BLOG_MODE !== \get_option( 'activitypub_actor_mode', ACTIVITYPUB_ACTOR_MODE ) ) {
return false;
}
// Only if this isn't the Blog Actor.
if ( Actors::BLOG_USER_ID === $actor_id ) {
return false;
}
$activity = \json_decode( $json, true );
// Only if this is an Update or Delete. Create handles its own "Announce" in dual user mode.
if ( ! \in_array( $activity['type'] ?? null, array( 'Update', 'Delete' ), true ) ) {
return false;
}
return true;
}
/**
* Get all Followers.
*
* @deprecated 7.1.0 Use {@see Actors::get_all()}.
*
* @return \WP_Post[] The list of Followers.
*/
public static function get_all_followers() {
_deprecated_function( __METHOD__, '7.1.0', 'Activitypub\Collection\Actors::get_all' );
$args = array(
'nopaging' => true,
// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query
'meta_query' => array(
'relation' => 'AND',
array(
'key' => '_activitypub_inbox',
'compare' => 'EXISTS',
),
),
);
return self::get_many( null, null, null, $args );
}
/**
* Get all Followers that have not been updated for a given time.
*
* @deprecated 7.0.0 Use {@see Remote_Actors::get_outdated()}.
*
* @param int $number Optional. Limits the result. Default 50.
* @param int $older_than Optional. The time in seconds. Default 86400 (1 day).
*
* @return \WP_Post[] The list of Actors.
*/
public static function get_outdated_followers( $number = 50, $older_than = 86400 ) {
_deprecated_function( __METHOD__, '7.0.0', 'Activitypub\Collection\Remote_Actors::get_outdated' );
return Remote_Actors::get_outdated( $number, $older_than );
}
/**
* Get all Followers that had errors.
*
* @deprecated 7.0.0 Use {@see Remote_Actors::get_faulty()}.
*
* @param int $number Optional. The number of Followers to return. Default 20.
*
* @return \WP_Post[] The list of Actors.
*/
public static function get_faulty_followers( $number = 20 ) {
_deprecated_function( __METHOD__, '7.0.0', 'Activitypub\Collection\Remote_Actors::get_faulty' );
return Remote_Actors::get_faulty( $number );
}
/**
* This function is used to store errors that occur when
* sending an ActivityPub message to a Follower.
*
* The error will be stored in post meta.
*
* @deprecated 7.0.0 Use {@see Remote_Actors::add_error()}.
*
* @param int $post_id The ID of the WordPress Custom-Post-Type.
* @param mixed $error The error message. Can be a string or a WP_Error.
*
* @return int|false The meta ID on success, false on failure.
*/
public static function add_error( $post_id, $error ) {
\_deprecated_function( __METHOD__, '7.0.0', 'Activitypub\Collection\Remote_Actors::add_error' );
return Remote_Actors::add_error( $post_id, $error );
}
/**
* Clear the errors for a Follower.
*
* @deprecated 7.0.0 Use {@see Remote_Actors::clear_errors()}.
*
* @param int $post_id The ID of the WordPress Custom-Post-Type.
*
* @return bool True on success, false on failure.
*/
public static function clear_errors( $post_id ) {
\_deprecated_function( __METHOD__, '7.0.0', 'Activitypub\Collection\Remote_Actors::clear_errors' );
return Remote_Actors::clear_errors( $post_id );
}
/**
* Check the status of a given following.
*
* @param int $post_id The ID of the Post.
* @param int $user_id The ID of the WordPress User.
*
* @return bool The status of the following.
*/
public static function follows( $post_id, $user_id ) {
$all_meta = \get_post_meta( $post_id );
$following = $all_meta[ self::FOLLOWER_META_KEY ] ?? array();
return \in_array( (string) $user_id, $following, true );
}
/**
* Remove blocked actors from follower lists.
*
* Called via activitypub_add_user_block hook.
*
* @param string $value The blocked actor URI.
* @param string $type The block type (actor, domain, keyword).
* @param int $user_id The user ID.
*/
public static function remove_blocked_actors( $value, $type, $user_id ) {
if ( 'actor' !== $type ) {
return;
}
$actor_id = Actors::get_id_by_various( $value );
if ( \is_wp_error( $actor_id ) ) {
return;
}
self::remove( $actor_id, $user_id );
}
/**
* Compute the partial follower collection digest for a specific instance.
*
* Implements FEP-8fcf: Followers collection synchronization.
* This is a convenience wrapper that filters followers by authority and then
* computes the digest using the standard FEP-8fcf algorithm.
*
* The digest is created by XORing together the individual SHA256 digests
* of each follower's ID.
*
* @see https://codeberg.org/fediverse/fep/src/branch/main/fep/8fcf/fep-8fcf.md
* @see Signature::get_collection_digest() for the core digest algorithm
*
* @param int $user_id The user ID whose followers to compute.
* @param string $authority The URI authority (scheme + host) to filter by.
*
* @return string|false The hex-encoded digest, or false if no followers.
*/
public static function compute_partial_digest( $user_id, $authority ) {
// Get followers filtered by authority.
$followers = self::get_by_authority( $user_id, $authority );
$follower_ids = \wp_list_pluck( $followers, 'guid' );
// Delegate to the core digest computation algorithm.
return Signature::get_collection_digest( $follower_ids );
}
/**
* Get partial followers collection for a specific instance.
*
* Returns only followers whose ID shares the specified URI authority.
* Used for FEP-8fcf synchronization.
*
* @param int $user_id The user ID whose followers to get.
* @param string $authority The URI authority (scheme + host) to filter by.
*
* @return \WP_Post[] Array of WP_Post objects.
*/
public static function get_by_authority( $user_id, $authority ) {
$posts = new \WP_Query(
array(
'post_type' => Remote_Actors::POST_TYPE,
'posts_per_page' => -1,
'orderby' => 'ID',
'order' => 'DESC',
// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query
'meta_query' => array(
'relation' => 'AND',
array(
'key' => self::FOLLOWER_META_KEY,
'value' => $user_id,
),
array(
'key' => '_activitypub_inbox',
'compare' => 'LIKE',
'value' => $authority,
),
),
)
);
return $posts->posts ?? array();
}
/**
* Generate the Collection-Synchronization header value for FEP-8fcf.
*
* @param int $user_id The user ID whose followers collection to sync.
* @param string $authority The authority of the receiving instance.
*
* @return string|false The header value, or false if cannot generate.
*/
public static function generate_sync_header( $user_id, $authority ) {
$followers = self::get_by_authority( $user_id, $authority );
$followers = \wp_list_pluck( $followers, 'guid' );
// Compute the digest for this specific authority.
$digest = Signature::get_collection_digest( $followers );
if ( ! $digest ) {
return false;
}
// Build the collection ID (followers collection URL).
$collection_id = get_rest_url_by_path( sprintf( 'actors/%d/followers', $user_id ) );
// Build the partial followers URL.
$url = get_rest_url_by_path(
sprintf(
'actors/%d/followers/sync?authority=%s',
$user_id,
rawurlencode( $authority )
)
);
// Format as per FEP-8fcf (similar to HTTP Signatures format).
return sprintf(
'collectionId="%s", url="%s", digest="%s"',
$collection_id,
$url,
$digest
);
}
}