1 defmodule Pleroma.Web.MediaProxy do
2 @base64_opts [padding: false]
7 config = Application.get_env(:pleroma, :media_proxy, [])
8 if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url) do
11 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
12 base64 = Base.url_encode64(url, @base64_opts)
13 sig = :crypto.hmac(:sha, secret, base64)
14 sig64 = sig |> Base.url_encode64(@base64_opts)
15 Keyword.get(config, :base_url, Pleroma.Web.base_url) <> "/proxy/#{sig64}/#{base64}"
19 def decode_url(sig, url) do
20 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
21 sig = Base.url_decode64!(sig, @base64_opts)
22 local_sig = :crypto.hmac(:sha, secret, url)
23 if local_sig == sig do
24 {:ok, Base.url_decode64!(url, @base64_opts)}
26 {:error, :invalid_signature}