mirror/pixelfed
1
0
Fork 1
mirror of https://github.com/pixelfed/pixelfed.git synced 2024-12-23 00:05:29 +00:00
Code Issues Releases Wiki Activity

Update FederationController, add inbox logic

Browse source
This commit is contained in:
Daniel Supernault 2018-12-17 23:27:07 -07:00
parent 75c7fcd182
commit 0144a5fdf6
No known key found for this signature in database
GPG key ID: 0DEF1C662C9033F7
1 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
app/Http/Controllers/FederationController.php
View file

@ -170,6 +170,29 @@ XML;
public function userInbox(Request $request, $username)
{
if (config('pixelfed.activitypub_enabled') == false) {
abort(403);
}
$profile = Profile::whereNull('domain')->whereUsername($username)->firstOrFail();
$body = $request->getContent();
$bodyDecoded = json_decode($body, true);
$signature = $request->header('signature');
if(!$signature) {
abort(400, 'Missing signature header');
}
$signatureData = HttpSignature::parseSignatureHeader($signature);
$actor = Profile::whereKeyId($signatureData['keyId'])->first();
if(!$actor) {
$actor = Helpers::profileFirstOrNew($bodyDecoded['actor']);
}
$pkey = openssl_pkey_get_public($actor->public_key);
$inboxPath = "/users/{$profile->username}/inbox";
list($verified, $headers) = HTTPSignature::verify($pkey, $signatureData, $request->headers->all(), $inboxPath, $body);
if($verified !== 1) {
abort(400, 'Invalid signature.');
}
InboxWorker::dispatch($request->headers->all(), $profile, $bodyDecoded);
return;
}