inbox_handler: - Call stronger validation method for Delete Activity objects - Take into account mixed object in handle_delete Activitypub_delete: - Add validation method for Delete Activity objects
		
			
				
	
	
		
			347 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			347 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
// This file is part of GNU social - https://www.gnu.org/software/social
 | 
						|
//
 | 
						|
// GNU social is free software: you can redistribute it and/or modify
 | 
						|
// it under the terms of the GNU Affero General Public License as published by
 | 
						|
// the Free Software Foundation, either version 3 of the License, or
 | 
						|
// (at your option) any later version.
 | 
						|
//
 | 
						|
// GNU social is distributed in the hope that it will be useful,
 | 
						|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
// GNU Affero General Public License for more details.
 | 
						|
//
 | 
						|
// You should have received a copy of the GNU Affero General Public License
 | 
						|
// along with GNU social.  If not, see <http://www.gnu.org/licenses/>.
 | 
						|
 | 
						|
/**
 | 
						|
 * ActivityPub implementation for GNU social
 | 
						|
 *
 | 
						|
 * @package   GNUsocial
 | 
						|
 * @author    Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
 * @copyright 2018-2019 Free Software Foundation, Inc http://www.fsf.org
 | 
						|
 * @license   https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later
 | 
						|
 * @link      http://www.gnu.org/software/social/
 | 
						|
 */
 | 
						|
 | 
						|
defined('GNUSOCIAL') || die();
 | 
						|
 | 
						|
/**
 | 
						|
 * ActivityPub Inbox Handler
 | 
						|
 *
 | 
						|
 * @category  Plugin
 | 
						|
 * @package   GNUsocial
 | 
						|
 * @author    Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
 * @license   https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later
 | 
						|
 */
 | 
						|
class Activitypub_inbox_handler
 | 
						|
{
 | 
						|
    private $activity;
 | 
						|
    private $actor;
 | 
						|
    private $object;
 | 
						|
 | 
						|
    /**
 | 
						|
     * Create a Inbox Handler to receive something from someone.
 | 
						|
     *
 | 
						|
     * @param array $activity Activity we are receiving
 | 
						|
     * @param Profile $actor_profile Actor originating the activity
 | 
						|
     * @throws Exception
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    public function __construct($activity, $actor_profile = null)
 | 
						|
    {
 | 
						|
        $this->activity = $activity;
 | 
						|
        $this->object = $activity['object'];
 | 
						|
 | 
						|
        // Validate Activity
 | 
						|
        $this->validate_activity();
 | 
						|
 | 
						|
        // Get Actor's Profile
 | 
						|
        if (!is_null($actor_profile)) {
 | 
						|
            $this->actor = $actor_profile;
 | 
						|
        } else {
 | 
						|
            $this->actor = ActivityPub_explorer::get_profile_from_url($this->activity['actor']);
 | 
						|
        }
 | 
						|
 | 
						|
        // Handle the Activity
 | 
						|
        $this->process();
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Validates if a given Activity is valid. Throws exception if not.
 | 
						|
     *
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     * @throws Exception
 | 
						|
     */
 | 
						|
    private function validate_activity()
 | 
						|
    {
 | 
						|
        // Activity validation
 | 
						|
        // Validate data
 | 
						|
        if (!(isset($this->activity['type']))) {
 | 
						|
            throw new Exception('Activity Validation Failed: Type was not specified.');
 | 
						|
        }
 | 
						|
        if (!isset($this->activity['actor'])) {
 | 
						|
            throw new Exception('Activity Validation Failed: Actor was not specified.');
 | 
						|
        }
 | 
						|
        if (!isset($this->activity['object'])) {
 | 
						|
            throw new Exception('Activity Validation Failed: Object was not specified.');
 | 
						|
        }
 | 
						|
 | 
						|
        // Object validation
 | 
						|
        switch ($this->activity['type']) {
 | 
						|
            case 'Accept':
 | 
						|
                Activitypub_accept::validate_object($this->object);
 | 
						|
                break;
 | 
						|
            case 'Create':
 | 
						|
                Activitypub_create::validate_object($this->object);
 | 
						|
                break;
 | 
						|
            case 'Delete':
 | 
						|
                Activitypub_delete::validate_object($this->object);
 | 
						|
                break;
 | 
						|
            case 'Follow':
 | 
						|
            case 'Like':
 | 
						|
            case 'Announce':
 | 
						|
                if (!filter_var($this->object, FILTER_VALIDATE_URL)) {
 | 
						|
                    throw new Exception('Object is not a valid Object URI for Activity.');
 | 
						|
                }
 | 
						|
                break;
 | 
						|
            case 'Undo':
 | 
						|
                Activitypub_undo::validate_object($this->object);
 | 
						|
                break;
 | 
						|
            default:
 | 
						|
                throw new Exception('Unknown Activity Type.');
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Sends the Activity to proper handler in order to be processed.
 | 
						|
     *
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function process()
 | 
						|
    {
 | 
						|
        switch ($this->activity['type']) {
 | 
						|
            case 'Accept':
 | 
						|
                $this->handle_accept($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
            case 'Create':
 | 
						|
                $this->handle_create($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
            case 'Delete':
 | 
						|
                $this->handle_delete($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
            case 'Follow':
 | 
						|
                $this->handle_follow($this->actor, $this->activity);
 | 
						|
                break;
 | 
						|
            case 'Like':
 | 
						|
                $this->handle_like($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
            case 'Undo':
 | 
						|
                $this->handle_undo($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
            case 'Announce':
 | 
						|
                $this->handle_announce($this->actor, $this->object);
 | 
						|
                break;
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles an Accept Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws HTTP_Request2_Exception
 | 
						|
     * @throws NoProfileException
 | 
						|
     * @throws ServerException
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_accept($actor, $object)
 | 
						|
    {
 | 
						|
        switch ($object['type']) {
 | 
						|
            case 'Follow':
 | 
						|
                $this->handle_accept_follow($actor, $object);
 | 
						|
                break;
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles an Accept Follow Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws HTTP_Request2_Exception
 | 
						|
     * @throws NoProfileException
 | 
						|
     * @throws ServerException
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_accept_follow($actor, $object)
 | 
						|
    {
 | 
						|
        // Get valid Object profile
 | 
						|
        // Note that, since this an accept_follow, the $object
 | 
						|
        // profile is actually the actor that followed someone
 | 
						|
        $object_profile = new Activitypub_explorer;
 | 
						|
        $object_profile = $object_profile->lookup($object['object'])[0];
 | 
						|
 | 
						|
        Activitypub_profile::subscribeCacheUpdate($object_profile, $actor);
 | 
						|
 | 
						|
        $pending_list = new Activitypub_pending_follow_requests($object_profile->getID(), $actor->getID());
 | 
						|
        $pending_list->remove();
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Create Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws Exception
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_create($actor, $object)
 | 
						|
    {
 | 
						|
        switch ($object['type']) {
 | 
						|
            case 'Note':
 | 
						|
                Activitypub_notice::create_notice($object, $actor);
 | 
						|
                break;
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Delete Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array|string $object Activity's object
 | 
						|
     * @throws AuthorizationException
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_delete(Profile $actor, $object)
 | 
						|
    {
 | 
						|
        if (is_array($object)) {
 | 
						|
            $object = $object['id'];
 | 
						|
        }
 | 
						|
 | 
						|
        // some moderator could already have deleted the
 | 
						|
        // notice, so we test it first
 | 
						|
        try {
 | 
						|
            $found = Deleted_notice::getByUri($object);
 | 
						|
            $deleted = ($found instanceof Deleted_notice);
 | 
						|
        } catch (NoResultException $e) {
 | 
						|
            $deleted = false;
 | 
						|
        }
 | 
						|
 | 
						|
        if (!$deleted) {
 | 
						|
            $notice = ActivityPubPlugin::grab_notice_from_url($object);
 | 
						|
            $notice->deleteAs($actor);
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Follow Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $activity Activity
 | 
						|
     * @throws AlreadyFulfilledException
 | 
						|
     * @throws HTTP_Request2_Exception
 | 
						|
     * @throws NoProfileException
 | 
						|
     * @throws ServerException
 | 
						|
     * @throws \GuzzleHttp\Exception\GuzzleException
 | 
						|
     * @throws \HttpSignatures\Exception
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_follow($actor, $activity)
 | 
						|
    {
 | 
						|
        Activitypub_follow::follow($actor, $activity['object'], $activity['id']);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Like Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws Exception
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_like($actor, $object)
 | 
						|
    {
 | 
						|
        $notice = ActivityPubPlugin::grab_notice_from_url($object);
 | 
						|
        Fave::addNew($actor, $notice);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Undo Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws AlreadyFulfilledException
 | 
						|
     * @throws HTTP_Request2_Exception
 | 
						|
     * @throws NoProfileException
 | 
						|
     * @throws ServerException
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_undo($actor, $object)
 | 
						|
    {
 | 
						|
        switch ($object['type']) {
 | 
						|
            case 'Follow':
 | 
						|
                $this->handle_undo_follow($actor, $object['object']);
 | 
						|
                break;
 | 
						|
            case 'Like':
 | 
						|
                $this->handle_undo_like($actor, $object['object']);
 | 
						|
                break;
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Undo Like Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws AlreadyFulfilledException
 | 
						|
     * @throws ServerException
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     */
 | 
						|
    private function handle_undo_like($actor, $object)
 | 
						|
    {
 | 
						|
        $notice = ActivityPubPlugin::grab_notice_from_url($object);
 | 
						|
        Fave::removeEntry($actor, $notice);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Undo Follow Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws AlreadyFulfilledException
 | 
						|
     * @throws HTTP_Request2_Exception
 | 
						|
     * @throws NoProfileException
 | 
						|
     * @throws ServerException
 | 
						|
     */
 | 
						|
    private function handle_undo_follow($actor, $object)
 | 
						|
    {
 | 
						|
        // Get Object profile
 | 
						|
        $object_profile = new Activitypub_explorer;
 | 
						|
        $object_profile = $object_profile->lookup($object)[0];
 | 
						|
 | 
						|
        if (Subscription::exists($actor, $object_profile)) {
 | 
						|
            Subscription::cancel($actor, $object_profile);
 | 
						|
            // You are no longer following this person.
 | 
						|
            Activitypub_profile::unsubscribeCacheUpdate($actor, $object_profile);
 | 
						|
        } else {
 | 
						|
            // 409: You are not following this person already.
 | 
						|
        }
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Handles a Announce Activity received by our inbox.
 | 
						|
     *
 | 
						|
     * @author Diogo Cordeiro <diogo@fc.up.pt>
 | 
						|
     * @param Profile $actor Actor
 | 
						|
     * @param array $object Activity
 | 
						|
     * @throws Exception
 | 
						|
     */
 | 
						|
    private function handle_announce($actor, $object)
 | 
						|
    {
 | 
						|
        $object_notice = ActivityPubPlugin::grab_notice_from_url($object);
 | 
						|
        $object_notice->repeat($actor, 'ActivityPub');
 | 
						|
    }
 | 
						|
}
 |