mirror of
https://github.com/mastodon/mastodon.git
synced 2024-11-26 23:39:37 +00:00
00840f4f2e
* Add handling of Linked Data Signatures in payloads * Add a way to sign JSON, fix canonicalization of signature options * Fix signatureValue encoding, send out signed JSON when distributing * Add missing security context
38 lines
1.4 KiB
Ruby
38 lines
1.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class AuthorizeFollowService < BaseService
|
|
def call(source_account, target_account, options = {})
|
|
if options[:skip_follow_request]
|
|
follow_request = FollowRequest.new(account: source_account, target_account: target_account)
|
|
else
|
|
follow_request = FollowRequest.find_by!(account: source_account, target_account: target_account)
|
|
follow_request.authorize!
|
|
end
|
|
|
|
create_notification(follow_request) unless source_account.local?
|
|
follow_request
|
|
end
|
|
|
|
private
|
|
|
|
def create_notification(follow_request)
|
|
if follow_request.account.ostatus?
|
|
NotificationWorker.perform_async(build_xml(follow_request), follow_request.target_account_id, follow_request.account_id)
|
|
elsif follow_request.account.activitypub?
|
|
ActivityPub::DeliveryWorker.perform_async(build_json(follow_request), follow_request.target_account_id, follow_request.account.inbox_url)
|
|
end
|
|
end
|
|
|
|
def build_json(follow_request)
|
|
Oj.dump(ActivityPub::LinkedDataSignature.new(ActiveModelSerializers::SerializableResource.new(
|
|
follow_request,
|
|
serializer: ActivityPub::AcceptFollowSerializer,
|
|
adapter: ActivityPub::Adapter
|
|
).as_json).sign!(follow_request.target_account))
|
|
end
|
|
|
|
def build_xml(follow_request)
|
|
OStatus::AtomSerializer.render(OStatus::AtomSerializer.new.authorize_follow_request_salmon(follow_request))
|
|
end
|
|
end
|