summaryrefslogtreecommitdiff
path: root/helpers.rb
blob: 212c406bc606c2d1b7fa732dd8e9c4ff90557a99 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# frozen_string_literal: true

require 'English'

helpers do
  def curl(ext, url)
    p url
    response = `/run/current-system/sw/bin/curl --fail-with-body -sSL #{ext} #{url}`
    if $CHILD_STATUS.success?
      response
    else
      p response
      nil
    end
  end

  def fetch(url, accept = 'application/activity+json')
    uri = URI(url)
    httpdate = Time.now.utc.httpdate
    keypair = OpenSSL::PKey::RSA.new(File.read('private.pem'))
    string = "(request-target): get #{uri.request_uri}\nhost: #{uri.host}\ndate: #{httpdate}"
    signature = Base64.strict_encode64(keypair.sign(OpenSSL::Digest.new('SHA256'), string))
    signed_header = "keyId=\"#{ACTOR}#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date\",signature=\"#{signature}\""

    response = curl(
      "-H 'Accept: #{accept}' -H 'Host: #{uri.host}' -H 'Date: #{httpdate}' -H 'Signature: #{signed_header}' ", url
    )
    # response = curl("-H 'Accept: #{accept}'", url)
    response ? JSON.parse(response) : nil
  end

  # https://github.com/mastodon/mastodon/blob/main/app/lib/request.rb
  # , url
  def outbox(type, object, recipients, add_recipients = false)
    activity = {
      '@context' => 'https://www.w3.org/ns/activitystreams',
      'type' => type,
      'actor' => ACTOR,
      'object' => object
    }

    now = Time.now
    date = now.strftime('%Y-%m-%dT%H:%M:%S.%N')
    httpdate = now.utc.httpdate
    basename = "#{date}.json"
    activity['id'] = File.join(OUTBOX_URL, basename)
    activity['published'] = httpdate
    if activity['object'] && activity['object']['type'] && !activity['object']['id']
      rel_path = File.join activity['object']['type'].downcase, basename
      activity['object']['published'] = httpdate
      activity['object']['id'] = File.join(OUTBOX_URL, rel_path)
      File.open(File.join(OUTBOX_DIR, rel_path), 'w+') { |f| f.puts activity.to_json }
    end
    File.open(File.join(OUTBOX_DIR, basename), 'w+') { |f| f.puts activity.to_json }

    keypair = OpenSSL::PKey::RSA.new(File.read('private.pem'))
    body = activity.to_json
    sha256 = OpenSSL::Digest.new('SHA256')
    digest = "SHA-256=#{sha256.base64digest(body)}"

    # assumes that recipient collections have been expanded by sender
    # put all recipients into 'to', avoid 'cc' 'bto' 'bcc' 'audience' !!
    activity['to'] = recipients if add_recipients
    inboxes = []
    # inboxes = if recipients.include? 'https://www.w3.org/ns/activitystreams#Public'
    # people.collect { |p| p[2] }.uniq # cached sharedInboxes
    # else
    # []
    # end
    recipients.uniq.each do |url|
      next if [ACTOR, 'https://www.w3.org/ns/activitystreams#Public'].include? url

      p 'FETCH', url
      actor = fetch url
      p actor
      next unless actor && actor['inbox']

      inbox = actor['endpoints']['sharedInbox']
      inboxes << (inbox || actor['inbox'])
    end
    inboxes.compact.uniq.each do |inbox|
      uri = URI(inbox)
      string = "(request-target): post #{uri.request_uri}\nhost: #{uri.host}\ndate: #{httpdate}\ndigest: #{digest}\ncontent-type: application/activity+json"
      signature = Base64.strict_encode64(keypair.sign(OpenSSL::Digest.new('SHA256'), string))
      signed_header = "keyId=\"#{ACTOR}#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date digest content-type\",signature=\"#{signature}\""

      curl(
        "-X POST -H 'Content-Type: application/activity+json' -H 'Host: #{uri.host}' -H 'Date: #{httpdate}' -H 'Digest: #{digest}' -H 'Signature: #{signed_header}' -d '#{body}'", inbox
      )
    end
  end

  def mention(actor)
    person = people.select { |p| p[1] == actor }
    if person.empty?
      a = fetch(actor)
      return nil unless a

      mention = "#{a['preferredUsername']}@#{URI(actor).host}"
      cache mention, actor, a
      mention
    else
      person[0][0]
    end
  end

  def actor(mention)
    mention = mention.sub(/^@/, '').chomp
    actors = people.select { |p| p[0] == mention }
    if actors.empty?
      _, server = mention.split('@')
      a = fetch("https://#{server}/.well-known/webfinger?resource=acct:#{mention}", 'application/jrd+json')
      return nil unless a

      actor = a['links'].select do |l|
        l['rel'] == 'self'
      end[0]['href']
      cache mention, actor, a
      actor
    else
      actors[0][1]
    end
  end

  def people
    File.read('cache/people.tsv').split("\n").collect { |l| l.chomp.split("\t") }
  end

  def cache(mention, actor, a)
    sharedInbox = a['endpoints']['sharedInbox'] if a['endpoints'] && a['endpoints']['sharedInbox']
    File.open('cache/people.tsv', 'a') { |f| f.puts "#{mention}\t#{actor}\t#{sharedInbox}" }
  end
end