1 defmodule Pleroma.Web.MediaProxy do
2 @base64_opts [padding: false]
6 def url(url = "/" <> _), do: url
9 config = Application.get_env(:pleroma, :media_proxy, [])
11 if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url()) do
14 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
15 base64 = Base.url_encode64(url, @base64_opts)
16 sig = :crypto.hmac(:sha, secret, base64)
17 sig64 = sig |> Base.url_encode64(@base64_opts)
18 filename = Path.basename(url)
20 Keyword.get(config, :base_url, Pleroma.Web.base_url()) <>
21 "/proxy/#{sig64}/#{base64}/#{filename}"
25 def decode_url(sig, url) do
26 secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base]
27 sig = Base.url_decode64!(sig, @base64_opts)
28 local_sig = :crypto.hmac(:sha, secret, url)
30 if local_sig == sig do
31 {:ok, Base.url_decode64!(url, @base64_opts)}
33 {:error, :invalid_signature}