1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Object.FetcherTest do
10 alias Pleroma.Object.Fetcher
17 %{method: :get, url: "https://mastodon.example.org/users/userisgone"} ->
18 %Tesla.Env{status: 410}
20 %{method: :get, url: "https://mastodon.example.org/users/userisgone404"} ->
21 %Tesla.Env{status: 404}
26 "https://patch.cx/media/03ca3c8b4ac3ddd08bf0f84be7885f2f88de0f709112131a22d83650819e36c2.json"
30 headers: [{"content-type", "application/json"}],
31 body: File.read!("test/fixtures/spoofed-object.json")
35 apply(HttpRequestMock, :request, [env])
41 describe "error cases" do
44 %{method: :get, url: "https://social.sakamoto.gq/notice/9wTkLEnuq47B25EehM"} ->
47 body: File.read!("test/fixtures/fetch_mocks/9wTkLEnuq47B25EehM.json"),
48 headers: HttpRequestMock.activitypub_object_headers()
51 %{method: :get, url: "https://social.sakamoto.gq/users/eal"} ->
54 body: File.read!("test/fixtures/fetch_mocks/eal.json"),
55 headers: HttpRequestMock.activitypub_object_headers()
58 %{method: :get, url: "https://busshi.moe/users/tuxcrafting/statuses/104410921027210069"} ->
61 body: File.read!("test/fixtures/fetch_mocks/104410921027210069.json"),
62 headers: HttpRequestMock.activitypub_object_headers()
65 %{method: :get, url: "https://busshi.moe/users/tuxcrafting"} ->
72 url: "https://stereophonic.space/objects/02997b83-3ea7-4b63-94af-ef3aa2d4ed17"
82 @tag capture_log: true
83 test "it works when fetching the OP actor errors out" do
84 # Here we simulate a case where the author of the OP can't be read
86 Fetcher.fetch_object_from_id(
87 "https://social.sakamoto.gq/notice/9wTkLEnuq47B25EehM"
92 describe "max thread distance restriction" do
93 @ap_id "http://mastodon.example.org/@admin/99541947525187367"
94 setup do: clear_config([:instance, :federation_incoming_replies_max_depth])
96 test "it returns thread depth exceeded error if thread depth is exceeded" do
97 clear_config([:instance, :federation_incoming_replies_max_depth], 0)
99 assert {:error, "Max thread distance exceeded."} =
100 Fetcher.fetch_object_from_id(@ap_id, depth: 1)
103 test "it fetches object if max thread depth is restricted to 0 and depth is not specified" do
104 clear_config([:instance, :federation_incoming_replies_max_depth], 0)
106 assert {:ok, _} = Fetcher.fetch_object_from_id(@ap_id)
109 test "it fetches object if requested depth does not exceed max thread depth" do
110 clear_config([:instance, :federation_incoming_replies_max_depth], 10)
112 assert {:ok, _} = Fetcher.fetch_object_from_id(@ap_id, depth: 10)
116 describe "actor origin containment" do
117 test "it rejects objects with a bogus origin" do
118 {:error, _} = Fetcher.fetch_object_from_id("https://info.pleroma.site/activity.json")
121 test "it rejects objects when attributedTo is wrong (variant 1)" do
122 {:error, _} = Fetcher.fetch_object_from_id("https://info.pleroma.site/activity2.json")
125 test "it rejects objects when attributedTo is wrong (variant 2)" do
126 {:error, _} = Fetcher.fetch_object_from_id("https://info.pleroma.site/activity3.json")
130 describe "fetching an object" do
131 test "it fetches an object" do
133 Fetcher.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367")
135 assert activity = Activity.get_create_by_object_ap_id(object.data["id"])
136 assert activity.data["id"]
138 {:ok, object_again} =
139 Fetcher.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367")
141 assert [attachment] = object.data["attachment"]
142 assert is_list(attachment["url"])
144 assert object == object_again
147 test "Return MRF reason when fetched status is rejected by one" do
148 clear_config([:mrf_keyword, :reject], ["yeah"])
149 clear_config([:mrf, :policies], [Pleroma.Web.ActivityPub.MRF.KeywordPolicy])
151 assert {:reject, "[KeywordPolicy] Matches with rejected keyword"} ==
152 Fetcher.fetch_object_from_id(
153 "http://mastodon.example.org/@admin/99541947525187367"
157 test "it does not fetch a spoofed object uploaded on an instance as an attachment" do
159 Fetcher.fetch_object_from_id(
160 "https://patch.cx/media/03ca3c8b4ac3ddd08bf0f84be7885f2f88de0f709112131a22d83650819e36c2.json"
165 describe "implementation quirks" do
166 test "it can fetch plume articles" do
168 Fetcher.fetch_object_from_id(
169 "https://baptiste.gelez.xyz/~/PlumeDevelopment/this-month-in-plume-june-2018/"
175 test "it can fetch peertube videos" do
177 Fetcher.fetch_object_from_id(
178 "https://peertube.moe/videos/watch/df5f464b-be8d-46fb-ad81-2d4c2d1630e3"
184 test "it can fetch Mobilizon events" do
186 Fetcher.fetch_object_from_id(
187 "https://mobilizon.org/events/252d5816-00a3-4a89-a66f-15bf65c33e39"
193 test "it can fetch wedistribute articles" do
195 Fetcher.fetch_object_from_id("https://wedistribute.org/wp-json/pterotype/v1/object/85810")
200 test "all objects with fake directions are rejected by the object fetcher" do
202 Fetcher.fetch_and_contain_remote_object_from_id(
203 "https://info.pleroma.site/activity4.json"
207 test "handle HTTP 410 Gone response" do
208 assert {:error, "Object has been deleted"} ==
209 Fetcher.fetch_and_contain_remote_object_from_id(
210 "https://mastodon.example.org/users/userisgone"
214 test "handle HTTP 404 response" do
215 assert {:error, "Object has been deleted"} ==
216 Fetcher.fetch_and_contain_remote_object_from_id(
217 "https://mastodon.example.org/users/userisgone404"
221 test "it can fetch pleroma polls with attachments" do
223 Fetcher.fetch_object_from_id("https://patch.cx/objects/tesla_mock/poll_attachment")
229 describe "pruning" do
230 test "it can refetch pruned objects" do
231 object_id = "http://mastodon.example.org/@admin/99541947525187367"
233 {:ok, object} = Fetcher.fetch_object_from_id(object_id)
237 {:ok, _object} = Object.prune(object)
239 refute Object.get_by_ap_id(object_id)
241 {:ok, %Object{} = object_two} = Fetcher.fetch_object_from_id(object_id)
243 assert object.data["id"] == object_two.data["id"]
244 assert object.id != object_two.id
248 describe "signed fetches" do
249 setup do: clear_config([:activitypub, :sign_object_fetches])
251 test_with_mock "it signs fetches when configured to do so",
255 clear_config([:activitypub, :sign_object_fetches], true)
257 Fetcher.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367")
259 assert called(Pleroma.Signature.sign(:_, :_))
262 test_with_mock "it doesn't sign fetches when not configured to do so",
266 clear_config([:activitypub, :sign_object_fetches], false)
268 Fetcher.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367")
270 refute called(Pleroma.Signature.sign(:_, :_))