forked from fedi/mastodon
72bb3e03fd
- Tries to avoid performing HTTP request if the keyId is an actor URI - Likewise if the URI is a fragment URI on top of actor URI - Resolves public key, returns owner if the owner links back to the key
48 lines
1.1 KiB
Ruby
48 lines
1.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class ActivityPub::FetchRemoteKeyService < BaseService
|
|
include JsonLdHelper
|
|
|
|
# Returns account that owns the key
|
|
def call(uri, prefetched_json = nil)
|
|
@json = body_to_json(prefetched_json) || fetch_resource(uri)
|
|
|
|
return unless supported_context?(@json) && expected_type?
|
|
return find_account(uri, @json) if person?
|
|
|
|
@owner = fetch_resource(owner_uri)
|
|
|
|
return unless supported_context?(@owner) && confirmed_owner?
|
|
|
|
find_account(owner_uri, @owner)
|
|
end
|
|
|
|
private
|
|
|
|
def find_account(uri, prefetched_json)
|
|
account = ActivityPub::TagManager.instance.uri_to_resource(uri, Account)
|
|
account ||= ActivityPub::FetchRemoteAccountService.new.call(uri, prefetched_json)
|
|
account
|
|
end
|
|
|
|
def expected_type?
|
|
person? || public_key?
|
|
end
|
|
|
|
def person?
|
|
@json['type'] == 'Person'
|
|
end
|
|
|
|
def public_key?
|
|
@json['publicKeyPem'].present? && @json['owner'].present?
|
|
end
|
|
|
|
def owner_uri
|
|
@owner_uri ||= value_or_id(@json['owner'])
|
|
end
|
|
|
|
def confirmed_owner?
|
|
@owner['type'] == 'Person' && value_or_id(@owner['publicKey']) == @json['id']
|
|
end
|
|
end
|