defmodule Pleroma.Web.Websub.WebsubController do
use Pleroma.Web, :controller
- alias Pleroma.Web.Websub.WebsubServerSubscription
alias Pleroma.{Repo, User}
- alias Pleroma.Web.OStatus
alias Pleroma.Web.Websub
+ alias Pleroma.Web.Websub.WebsubClientSubscription
+ require Logger
+
+ @ostatus Application.get_env(:pleroma, :ostatus)
+
def websub_subscription_request(conn, %{"nickname" => nickname} = params) do
user = User.get_cached_by_nickname(nickname)
- with {:ok, topic} <- valid_topic(params, user),
- {:ok, lease_time} <- lease_time(params),
- secret <- params["hub.secret"]
+ with {:ok, _websub} <- Websub.incoming_subscription_request(user, params)
do
- data = %{
- state: "requested",
- topic: topic,
- secret: secret,
- callback: params["hub.callback"]
- }
-
- change = Ecto.Changeset.change(%WebsubServerSubscription{}, data)
- websub = Repo.insert!(change)
-
- change = Ecto.Changeset.change(websub, %{valid_until: NaiveDateTime.add(websub.inserted_at, lease_time)})
- websub = Repo.update!(change)
-
- # Just spawn that for now, maybe pool later.
- spawn(fn -> Websub.verify(websub) end)
-
conn
|> send_resp(202, "Accepted")
else {:error, reason} ->
end
end
- defp lease_time(%{"hub.lease_seconds" => lease_seconds}) do
- {:ok, String.to_integer(lease_seconds)}
- end
-
- defp lease_time(_) do
- {:ok, 60 * 60 * 24 * 3} # three days
+ def websub_subscription_confirmation(conn, %{"id" => id, "hub.mode" => "subscribe", "hub.challenge" => challenge, "hub.topic" => topic}) do
+ with %WebsubClientSubscription{} = websub <- Repo.get_by(WebsubClientSubscription, id: id, topic: topic) do
+ change = Ecto.Changeset.change(websub, %{state: "accepted"})
+ {:ok, _websub} = Repo.update(change)
+ conn
+ |> send_resp(200, challenge)
+ else _e ->
+ conn
+ |> send_resp(500, "Error")
+ end
end
- defp valid_topic(%{"hub.topic" => topic}, user) do
- if topic == OStatus.feed_path(user) do
- {:ok, topic}
- else
- {:error, "Wrong topic requested, expected #{OStatus.feed_path(user)}, got #{topic}"}
+ def websub_incoming(conn, %{"id" => id}) do
+ with "sha1=" <> signature <- hd(get_req_header(conn, "x-hub-signature")),
+ signature <- String.upcase(signature),
+ %WebsubClientSubscription{} = websub <- Repo.get(WebsubClientSubscription, id),
+ {:ok, body, _conn} = read_body(conn),
+ ^signature <- Websub.sign(websub.secret, body) do
+ @ostatus.handle_incoming(body)
+ conn
+ |> send_resp(200, "OK")
+ else _e ->
+ Logger.debug("Can't handle incoming subscription post")
+ conn
+ |> send_resp(500, "Error")
end
end
end