+
+ defp only_permit_user_routes(%{path_info: ["users", _]} = conn) do
+ conn
+ |> assign(:limited_ap, true)
+ end
+
+ defp only_permit_user_routes(conn) do
+ conn
+ |> assign(:valid_signature, false)
+ end
+
+ defp key_id_from_conn(conn) do
+ with %{"keyId" => key_id} <- HTTPSignatures.signature_for_conn(conn),
+ {:ok, ap_id} <- Signature.key_id_to_actor_id(key_id) do
+ ap_id
+ else
+ _ ->
+ nil
+ end
+ end
+
+ defp user_from_key_id(conn) do
+ with key_actor_id when is_binary(key_actor_id) <- key_id_from_conn(conn),
+ {:ok, %User{} = user} <- User.get_or_fetch_by_ap_id(key_actor_id) do
+ user
+ else
+ _ ->
+ nil
+ end
+ end
+
+ defp should_federate?(%User{ap_id: ap_id}), do: should_federate?(ap_id)
+
+ defp should_federate?(ap_id) do
+ if Pleroma.Config.get([:activitypub, :authorized_fetch_mode], false) do
+ Pleroma.Web.ActivityPub.Publisher.should_federate?(ap_id)
+ else
+ true
+ end
+ end