forked from fedi/mastodon
cd9b2ab2f7
* Fix #2672 - Connect signed PuSH subscription requests to instance domain Resolves #2739 * Fix return of locate_subscription * Fix tests
72 lines
1.7 KiB
Ruby
72 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Pubsubhubbub::SubscribeService < BaseService
|
|
URL_PATTERN = /\A#{URI.regexp(%w(http https))}\z/
|
|
|
|
attr_reader :account, :callback, :secret,
|
|
:lease_seconds, :domain
|
|
|
|
def call(account, callback, secret, lease_seconds, verified_domain = nil)
|
|
@account = account
|
|
@callback = Addressable::URI.parse(callback).normalize.to_s
|
|
@secret = secret
|
|
@lease_seconds = lease_seconds
|
|
@domain = verified_domain
|
|
|
|
process_subscribe
|
|
end
|
|
|
|
private
|
|
|
|
def process_subscribe
|
|
case subscribe_status
|
|
when :invalid_topic
|
|
['Invalid topic URL', 422]
|
|
when :invalid_callback
|
|
['Invalid callback URL', 422]
|
|
when :callback_not_allowed
|
|
['Callback URL not allowed', 403]
|
|
when :valid
|
|
confirm_subscription
|
|
['', 202]
|
|
end
|
|
end
|
|
|
|
def subscribe_status
|
|
if account.nil?
|
|
:invalid_topic
|
|
elsif !valid_callback?
|
|
:invalid_callback
|
|
elsif blocked_domain?
|
|
:callback_not_allowed
|
|
else
|
|
:valid
|
|
end
|
|
end
|
|
|
|
def confirm_subscription
|
|
subscription = locate_subscription
|
|
Pubsubhubbub::ConfirmationWorker.perform_async(subscription.id, 'subscribe', secret, lease_seconds)
|
|
end
|
|
|
|
def valid_callback?
|
|
callback.present? && callback =~ URL_PATTERN
|
|
end
|
|
|
|
def blocked_domain?
|
|
DomainBlock.blocked? Addressable::URI.parse(callback).host
|
|
end
|
|
|
|
def locate_subscription
|
|
subscription = Subscription.find_by(account: account, callback_url: callback)
|
|
|
|
if subscription.nil?
|
|
subscription = Subscription.new(account: account, callback_url: callback)
|
|
end
|
|
|
|
subscription.domain = domain
|
|
subscription.save!
|
|
subscription
|
|
end
|
|
end
|