1 defmodule Pleroma.Web.MediaProxy do
2 @base64_opts [padding: false]
6 def url(url = "/" <> _), do: url
9 config = Application.get_env(:pleroma, :media_proxy, [])
11 if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url()) do
14 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
15 base64 = Base.url_encode64(url, @base64_opts)
16 sig = :crypto.hmac(:sha, secret, base64)
17 sig64 = sig |> Base.url_encode64(@base64_opts)
18 Keyword.get(config, :base_url, Pleroma.Web.base_url()) <> "/proxy/#{sig64}/#{base64}"
22 def decode_url(sig, url) do
23 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
24 sig = Base.url_decode64!(sig, @base64_opts)
25 local_sig = :crypto.hmac(:sha, secret, url)
27 if local_sig == sig do
28 {:ok, Base.url_decode64!(url, @base64_opts)}
30 {:error, :invalid_signature}