signature.ex 2.07 KB
Newer Older
1
# Pleroma: A lightweight social networking server
feld's avatar
feld committed
2
# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
3
4
5
6
7
# SPDX-License-Identifier: AGPL-3.0-only

defmodule Pleroma.Signature do
  @behaviour HTTPSignatures.Adapter

8
  alias Pleroma.EctoType.ActivityPub.ObjectValidators
9
  alias Pleroma.Keys
10
11
  alias Pleroma.User
  alias Pleroma.Web.ActivityPub.ActivityPub
12

13
  def key_id_to_actor_id(key_id) do
14
15
16
17
18
    uri =
      URI.parse(key_id)
      |> Map.put(:fragment, nil)

    uri =
Thomas Sileo's avatar
Thomas Sileo committed
19
      if not is_nil(uri.path) and String.ends_with?(uri.path, "/publickey") do
20
21
22
23
24
        Map.put(uri, :path, String.replace(uri.path, "/publickey", ""))
      else
        uri
      end

25
26
    maybe_ap_id = URI.to_string(uri)

27
    case ObjectValidators.ObjectID.cast(maybe_ap_id) do
28
29
30
31
32
33
34
35
36
      {:ok, ap_id} ->
        {:ok, ap_id}

      _ ->
        case Pleroma.Web.WebFinger.finger(maybe_ap_id) do
          %{"ap_id" => ap_id} -> {:ok, ap_id}
          _ -> {:error, maybe_ap_id}
        end
    end
37
  end
38
39

  def fetch_public_key(conn) do
40
    with %{"keyId" => kid} <- HTTPSignatures.signature_for_conn(conn),
41
         {:ok, actor_id} <- key_id_to_actor_id(kid),
rinpatch's avatar
rinpatch committed
42
         {:ok, public_key} <- User.get_public_key_for_ap_id(actor_id) do
43
44
45
46
47
48
49
50
      {:ok, public_key}
    else
      e ->
        {:error, e}
    end
  end

  def refetch_public_key(conn) do
51
    with %{"keyId" => kid} <- HTTPSignatures.signature_for_conn(conn),
52
         {:ok, actor_id} <- key_id_to_actor_id(kid),
rinpatch's avatar
rinpatch committed
53
54
         {:ok, _user} <- ActivityPub.make_user_from_ap_id(actor_id),
         {:ok, public_key} <- User.get_public_key_for_ap_id(actor_id) do
55
56
57
58
59
60
61
62
      {:ok, public_key}
    else
      e ->
        {:error, e}
    end
  end

  def sign(%User{} = user, headers) do
rinpatch's avatar
rinpatch committed
63
    with {:ok, %{keys: keys}} <- User.ensure_keys_present(user),
64
         {:ok, private_key, _} <- Keys.keys_from_pem(keys) do
65
66
67
      HTTPSignatures.sign(private_key, user.ap_id <> "#main-key", headers)
    end
  end
Maksim's avatar
Maksim committed
68
69
70
71
72
73

  def signed_date, do: signed_date(NaiveDateTime.utc_now())

  def signed_date(%NaiveDateTime{} = date) do
    Timex.format!(date, "{WDshort}, {0D} {Mshort} {YYYY} {h24}:{m}:{s} GMT")
  end
74
end