1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 # Code based on CreateChatMessageValidator
7 # - doesn't embed, will only get the object id
8 defmodule Pleroma.Web.ActivityPub.ObjectValidators.CreateGenericValidator do
11 alias Pleroma.EctoType.ActivityPub.ObjectValidators
13 alias Pleroma.Web.ActivityPub.ObjectValidators.CommonFixes
14 alias Pleroma.Web.ActivityPub.ObjectValidators.CommonValidations
21 field(:id, ObjectValidators.ObjectID, primary_key: true)
22 field(:actor, ObjectValidators.ObjectID)
24 field(:to, ObjectValidators.Recipients, default: [])
25 field(:cc, ObjectValidators.Recipients, default: [])
26 field(:object, ObjectValidators.ObjectID)
27 field(:expires_at, ObjectValidators.DateTime)
29 # Should be moved to object, done for CommonAPI.Utils.make_context
30 field(:context, :string)
33 def cast_data(data, meta \\ []) do
34 data = fix(data, meta)
40 def cast_and_apply(data) do
43 |> apply_action(:insert)
46 def cast_and_validate(data, meta \\ []) do
49 |> validate_data(meta)
52 def changeset(struct, data) do
54 |> cast(data, __schema__(:fields))
57 defp fix_context(data, meta) do
58 if object = meta[:object_data] do
59 Map.put_new(data, "context", object["context"])
65 defp fix_addressing(data, meta) do
66 if object = meta[:object_data] do
68 |> Map.put_new("to", object["to"] || [])
69 |> Map.put_new("cc", object["cc"] || [])
75 defp fix(data, meta) do
78 |> fix_addressing(meta)
79 |> CommonFixes.fix_actor()
82 def validate_data(cng, meta \\ []) do
84 |> validate_required([:actor, :type, :object])
85 |> validate_inclusion(:type, ["Create"])
86 |> CommonValidations.validate_actor_presence()
87 |> CommonValidations.validate_any_presence([:to, :cc])
88 |> validate_actors_match(meta)
89 |> validate_context_match(meta)
90 |> validate_object_nonexistence()
91 |> validate_object_containment()
94 def validate_object_containment(cng) do
95 actor = get_field(cng, :actor)
98 |> validate_change(:object, fn :object, object_id ->
99 %URI{host: object_id_host} = URI.parse(object_id)
100 %URI{host: actor_host} = URI.parse(actor)
102 if object_id_host == actor_host do
105 [{:object, "The host of the object id doesn't match with the host of the actor"}]
110 def validate_object_nonexistence(cng) do
112 |> validate_change(:object, fn :object, object_id ->
113 if Object.get_cached_by_ap_id(object_id) do
114 [{:object, "The object to create already exists"}]
121 def validate_actors_match(cng, meta) do
122 attributed_to = meta[:object_data]["attributedTo"] || meta[:object_data]["actor"]
125 |> validate_change(:actor, fn :actor, actor ->
126 if actor == attributed_to do
129 [{:actor, "Actor doesn't match with object attributedTo"}]
134 def validate_context_match(cng, %{object_data: %{"context" => object_context}}) do
136 |> validate_change(:context, fn :context, context ->
137 if context == object_context do
140 [{:context, "context field not matching between Create and object (#{object_context})"}]
145 def validate_context_match(cng, _), do: cng