1 defmodule Pleroma.Web.MediaProxy do
2 @base64_opts [padding: false]
8 def url(url = "/" <> _), do: url
11 config = Application.get_env(:pleroma, :media_proxy, [])
13 if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url()) do
16 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
17 base64 = Base.url_encode64(url, @base64_opts)
18 sig = :crypto.hmac(:sha, secret, base64)
19 sig64 = sig |> Base.url_encode64(@base64_opts)
20 filename = if path = URI.parse(url).path, do: "/" <> Path.basename(path), else: ""
22 Keyword.get(config, :base_url, Pleroma.Web.base_url()) <>
23 "/proxy/#{sig64}/#{base64}#{filename}"
27 def decode_url(sig, url) do
28 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
29 sig = Base.url_decode64!(sig, @base64_opts)
30 local_sig = :crypto.hmac(:sha, secret, url)
32 if local_sig == sig do
33 {:ok, Base.url_decode64!(url, @base64_opts)}
35 {:error, :invalid_signature}