src/Model/APContact.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2010-2021, the Friendica project
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Model;
  23
  24 use Friendica\Content\Text\HTML;
  25 use Friendica\Core\Cache\Duration;
  26 use Friendica\Core\Logger;
  27 use Friendica\Core\System;
  28 use Friendica\Database\DBA;
  29 use Friendica\Database\DBStructure;
  30 use Friendica\DI;
  31 use Friendica\Network\Probe;
  32 use Friendica\Protocol\ActivityNamespace;
  33 use Friendica\Protocol\ActivityPub;
  34 use Friendica\Util\Crypto;
  35 use Friendica\Util\DateTimeFormat;
  36 use Friendica\Util\HTTPSignature;
  37 use Friendica\Util\JsonLD;
  38 use Friendica\Util\Network;
  39
  40 class APContact
  41 {
  42         /**
  43          * Fetch webfinger data
  44          *
  45          * @param string $addr Address
  46          * @return array webfinger data
  47          */
  48         private static function fetchWebfingerData(string $addr)
  49         {
  50                 $addr_parts = explode('@', $addr);
  51                 if (count($addr_parts) != 2) {
  52                         return [];
  53                 }
  54
  55                 $data = ['addr' => $addr];
  56                 $template = 'https://' . $addr_parts[1] . '/.well-known/webfinger?resource=acct:' . urlencode($addr);
  57                 $webfinger = Probe::webfinger(str_replace('{uri}', urlencode($addr), $template), 'application/jrd+json');
  58                 if (empty($webfinger['links'])) {
  59                         $template = 'http://' . $addr_parts[1] . '/.well-known/webfinger?resource=acct:' . urlencode($addr);
  60                         $webfinger = Probe::webfinger(str_replace('{uri}', urlencode($addr), $template), 'application/jrd+json');
  61                         if (empty($webfinger['links'])) {
  62                                 return [];
  63                         }
  64                         $data['baseurl'] = 'http://' . $addr_parts[1];
  65                 } else {
  66                         $data['baseurl'] = 'https://' . $addr_parts[1];
  67                 }
  68
  69                 foreach ($webfinger['links'] as $link) {
  70                         if (empty($link['rel'])) {
  71                                 continue;
  72                         }
  73
  74                         if (!empty($link['template']) && ($link['rel'] == ActivityNamespace::OSTATUSSUB)) {
  75                                 $data['subscribe'] = $link['template'];
  76                         }
  77
  78                         if (!empty($link['href']) && !empty($link['type']) && ($link['rel'] == 'self') && ($link['type'] == 'application/activity+json')) {
  79                                 $data['url'] = $link['href'];
  80                         }
  81
  82                         if (!empty($link['href']) && !empty($link['type']) && ($link['rel'] == 'http://webfinger.net/rel/profile-page') && ($link['type'] == 'text/html')) {
  83                                 $data['alias'] = $link['href'];
  84                         }
  85                 }
  86
  87                 if (!empty($data['url']) && !empty($data['alias']) && ($data['url'] == $data['alias'])) {
  88                         unset($data['alias']);
  89                 }
  90
  91                 return $data;
  92         }
  93
  94         /**
  95          * Fetches a profile from a given url
  96          *
  97          * @param string  $url    profile url
  98          * @param boolean $update true = always update, false = never update, null = update when not found or outdated
  99          * @return array profile array
 100          * @throws \Friendica\Network\HTTPException\InternalServerErrorException
 101          * @throws \ImagickException
 102          */
 103         public static function getByURL($url, $update = null)
 104         {
 105                 if (empty($url)) {
 106                         return [];
 107                 }
 108
 109                 $fetched_contact = false;
 110
 111                 if (empty($update)) {
 112                         if (is_null($update)) {
 113                                 $ref_update = DateTimeFormat::utc('now - 1 month');
 114                         } else {
 115                                 $ref_update = DBA::NULL_DATETIME;
 116                         }
 117
 118                         $apcontact = DBA::selectFirst('apcontact', [], ['url' => $url]);
 119                         if (!DBA::isResult($apcontact)) {
 120                                 $apcontact = DBA::selectFirst('apcontact', [], ['alias' => $url]);
 121                         }
 122
 123                         if (!DBA::isResult($apcontact)) {
 124                                 $apcontact = DBA::selectFirst('apcontact', [], ['addr' => $url]);
 125                         }
 126
 127                         if (DBA::isResult($apcontact) && ($apcontact['updated'] > $ref_update) && !empty($apcontact['pubkey']) && !empty($apcontact['uri-id'])) {
 128                                 return $apcontact;
 129                         }
 130
 131                         if (!is_null($update)) {
 132                                 return DBA::isResult($apcontact) ? $apcontact : [];
 133                         }
 134
 135                         if (DBA::isResult($apcontact)) {
 136                                 $fetched_contact = $apcontact;
 137                         }
 138                 }
 139
 140                 $apcontact = [];
 141
 142                 $webfinger = empty(parse_url($url, PHP_URL_SCHEME));
 143                 if ($webfinger) {
 144                         $apcontact = self::fetchWebfingerData($url);
 145                         if (empty($apcontact['url'])) {
 146                                 return $fetched_contact;
 147                         }
 148                         $url = $apcontact['url'];
 149                 }
 150
 151                 $curlResult = HTTPSignature::fetchRaw($url);
 152                 $failed = empty($curlResult) || empty($curlResult->getBody()) ||
 153                         (!$curlResult->isSuccess() && ($curlResult->getReturnCode() != 410));
 154
 155                 if (!$failed) {
 156                         $data = json_decode($curlResult->getBody(), true);
 157                         $failed = empty($data) || !is_array($data);
 158                 }
 159
 160                 if (!$failed && ($curlResult->getReturnCode() == 410)) {
 161                         $data = ['@context' => ActivityPub::CONTEXT, 'id' => $url, 'type' => 'Tombstone'];
 162                 }
 163
 164                 if ($failed) {
 165                         self::markForArchival($fetched_contact ?: []);
 166                         return $fetched_contact;
 167                 }
 168
 169                 $compacted = JsonLD::compact($data);
 170                 if (empty($compacted['@id'])) {
 171                         return $fetched_contact;
 172                 }
 173
 174                 // Detect multiple fast repeating request to the same address
 175                 // See https://github.com/friendica/friendica/issues/9303
 176                 $cachekey = 'apcontact:getByURL:' . $url;
 177                 $result = DI::cache()->get($cachekey);
 178                 if (!is_null($result)) {
 179                         Logger::notice('Multiple requests for the address', ['url' => $url, 'update' => $update, 'callstack' => System::callstack(20), 'result' => $result]);
 180                 } else {
 181                         DI::cache()->set($cachekey, System::callstack(20), Duration::FIVE_MINUTES);
 182                 }
 183
 184                 $apcontact['url'] = $compacted['@id'];
 185                 $apcontact['uuid'] = JsonLD::fetchElement($compacted, 'diaspora:guid', '@value');
 186                 $apcontact['type'] = str_replace('as:', '', JsonLD::fetchElement($compacted, '@type'));
 187                 $apcontact['following'] = JsonLD::fetchElement($compacted, 'as:following', '@id');
 188                 $apcontact['followers'] = JsonLD::fetchElement($compacted, 'as:followers', '@id');
 189                 $apcontact['inbox'] = JsonLD::fetchElement($compacted, 'ldp:inbox', '@id');
 190                 self::unarchiveInbox($apcontact['inbox'], false);
 191
 192                 $apcontact['outbox'] = JsonLD::fetchElement($compacted, 'as:outbox', '@id');
 193
 194                 $apcontact['sharedinbox'] = '';
 195                 if (!empty($compacted['as:endpoints'])) {
 196                         $apcontact['sharedinbox'] = JsonLD::fetchElement($compacted['as:endpoints'], 'as:sharedInbox', '@id');
 197                         self::unarchiveInbox($apcontact['sharedinbox'], true);
 198                 }
 199
 200                 $apcontact['nick'] = JsonLD::fetchElement($compacted, 'as:preferredUsername', '@value') ?? '';
 201                 $apcontact['name'] = JsonLD::fetchElement($compacted, 'as:name', '@value');
 202
 203                 if (empty($apcontact['name'])) {
 204                         $apcontact['name'] = $apcontact['nick'];
 205                 }
 206
 207                 $apcontact['about'] = HTML::toBBCode(JsonLD::fetchElement($compacted, 'as:summary', '@value'));
 208
 209                 $apcontact['photo'] = JsonLD::fetchElement($compacted, 'as:icon', '@id');
 210                 if (is_array($apcontact['photo']) || !empty($compacted['as:icon']['as:url']['@id'])) {
 211                         $apcontact['photo'] = JsonLD::fetchElement($compacted['as:icon'], 'as:url', '@id');
 212                 }
 213
 214                 $apcontact['header'] = JsonLD::fetchElement($compacted, 'as:image', '@id');
 215                 if (is_array($apcontact['header']) || !empty($compacted['as:image']['as:url']['@id'])) {
 216                         $apcontact['header'] = JsonLD::fetchElement($compacted['as:image'], 'as:url', '@id');
 217                 }
 218
 219                 if (empty($apcontact['alias'])) {
 220                         $apcontact['alias'] = JsonLD::fetchElement($compacted, 'as:url', '@id');
 221                         if (is_array($apcontact['alias'])) {
 222                                 $apcontact['alias'] = JsonLD::fetchElement($compacted['as:url'], 'as:href', '@id');
 223                         }
 224                 }
 225
 226                 // Quit if none of the basic values are set
 227                 if (empty($apcontact['url']) || empty($apcontact['type']) || (($apcontact['type'] != 'Tombstone') && empty($apcontact['inbox']))) {
 228                         return $fetched_contact;
 229                 } elseif ($apcontact['type'] == 'Tombstone') {
 230                         // The "inbox" field must have a content
 231                         $apcontact['inbox'] = '';
 232                 }
 233
 234                 // Quit if this doesn't seem to be an account at all
 235                 if (!in_array($apcontact['type'], ActivityPub::ACCOUNT_TYPES)) {
 236                         return $fetched_contact;
 237                 }
 238
 239                 $parts = parse_url($apcontact['url']);
 240                 unset($parts['scheme']);
 241                 unset($parts['path']);
 242
 243                 if (empty($apcontact['addr'])) {
 244                         if (!empty($apcontact['nick']) && is_array($parts)) {
 245                                 $apcontact['addr'] = $apcontact['nick'] . '@' . str_replace('//', '', Network::unparseURL($parts));
 246                         } else {
 247                                 $apcontact['addr'] = '';
 248                         }
 249                 }
 250
 251                 $apcontact['pubkey'] = null;
 252                 if (!empty($compacted['w3id:publicKey'])) {
 253                         $apcontact['pubkey'] = trim(JsonLD::fetchElement($compacted['w3id:publicKey'], 'w3id:publicKeyPem', '@value'));
 254                         if (strstr($apcontact['pubkey'], 'RSA ')) {
 255                                 $apcontact['pubkey'] = Crypto::rsaToPem($apcontact['pubkey']);
 256                         }
 257                 }
 258
 259                 $apcontact['manually-approve'] = (int)JsonLD::fetchElement($compacted, 'as:manuallyApprovesFollowers');
 260
 261                 if (!empty($compacted['as:generator'])) {
 262                         $apcontact['baseurl'] = JsonLD::fetchElement($compacted['as:generator'], 'as:url', '@id');
 263                         $apcontact['generator'] = JsonLD::fetchElement($compacted['as:generator'], 'as:name', '@value');
 264                 }
 265
 266                 if (!empty($apcontact['following'])) {
 267                         $following = ActivityPub::fetchContent($apcontact['following']);
 268                         if (!empty($following['totalItems'])) {
 269                                 // Mastodon seriously allows for this condition?
 270                                 // Jul 14 2021 - See https://mastodon.social/@BLUW for a negative following count
 271                                 if ($following['totalItems'] < 0) {
 272                                         $following['totalItems'] = 0;
 273                                 }
 274                                 $apcontact['following_count'] = $following['totalItems'];
 275                         }
 276                 }
 277
 278                 if (!empty($apcontact['followers'])) {
 279                         $followers = ActivityPub::fetchContent($apcontact['followers']);
 280                         if (!empty($followers['totalItems'])) {
 281                                 // Mastodon seriously allows for this condition?
 282                                 // Jul 14 2021 - See https://mastodon.online/@goes11 for a negative followers count
 283                                 if ($followers['totalItems'] < 0) {
 284                                         $followers['totalItems'] = 0;
 285                                 }
 286                                 $apcontact['followers_count'] = $followers['totalItems'];
 287                         }
 288                 }
 289
 290                 if (!empty($apcontact['outbox'])) {
 291                         $outbox = ActivityPub::fetchContent($apcontact['outbox']);
 292                         if (!empty($outbox['totalItems'])) {
 293                                 $apcontact['statuses_count'] = $outbox['totalItems'];
 294                         }
 295                 }
 296
 297                 $apcontact['discoverable'] = JsonLD::fetchElement($compacted, 'toot:discoverable', '@value');
 298
 299                 // To-Do
 300
 301                 // Unhandled
 302                 // tag, attachment, image, nomadicLocations, signature, featured, movedTo, liked
 303
 304                 // Unhandled from Misskey
 305                 // sharedInbox, isCat
 306
 307                 // Unhandled from Kroeg
 308                 // kroeg:blocks, updated
 309
 310                 // When the photo is too large, try to shorten it by removing parts
 311                 if (strlen($apcontact['photo']) > 255) {
 312                         $parts = parse_url($apcontact['photo']);
 313                         unset($parts['fragment']);
 314                         $apcontact['photo'] = Network::unparseURL($parts);
 315
 316                         if (strlen($apcontact['photo']) > 255) {
 317                                 unset($parts['query']);
 318                                 $apcontact['photo'] = Network::unparseURL($parts);
 319                         }
 320
 321                         if (strlen($apcontact['photo']) > 255) {
 322                                 $apcontact['photo'] = substr($apcontact['photo'], 0, 255);
 323                         }
 324                 }
 325
 326                 if (!$webfinger && !empty($apcontact['addr'])) {
 327                         $data = self::fetchWebfingerData($apcontact['addr']);
 328                         if (!empty($data)) {
 329                                 $apcontact['baseurl'] = $data['baseurl'];
 330
 331                                 if (empty($apcontact['alias']) && !empty($data['alias'])) {
 332                                         $apcontact['alias'] = $data['alias'];
 333                                 }
 334                                 if (!empty($data['subscribe'])) {
 335                                         $apcontact['subscribe'] = $data['subscribe'];
 336                                 }
 337                         } else {
 338                                 $apcontact['addr'] = null;
 339                         }
 340                 }
 341
 342                 if (empty($apcontact['baseurl'])) {
 343                         $apcontact['baseurl'] = null;
 344                 }
 345
 346                 if (empty($apcontact['subscribe'])) {
 347                         $apcontact['subscribe'] = null;
 348                 }
 349
 350                 if (!empty($apcontact['baseurl']) && empty($fetched_contact['gsid'])) {
 351                         $apcontact['gsid'] = GServer::getID($apcontact['baseurl']);
 352                 } elseif (!empty($fetched_contact['gsid'])) {
 353                         $apcontact['gsid'] = $fetched_contact['gsid'];
 354                 } else {
 355                         $apcontact['gsid'] = null;
 356                 }
 357
 358                 if ($apcontact['url'] == $apcontact['alias']) {
 359                         $apcontact['alias'] = null;
 360                 }
 361
 362                 if (empty($apcontact['uuid'])) {
 363                         $apcontact['uri-id'] = ItemURI::getIdByURI($apcontact['url']);
 364                 } else {
 365                         $apcontact['uri-id'] = ItemURI::insert(['uri' => $apcontact['url'], 'guid' => $apcontact['uuid']]);
 366                 }
 367
 368                 $apcontact['updated'] = DateTimeFormat::utcNow();
 369
 370                 // We delete the old entry when the URL is changed
 371                 if ($url != $apcontact['url']) {
 372                         Logger::info('Delete changed profile url', ['old' => $url, 'new' => $apcontact['url']]);
 373                         DBA::delete('apcontact', ['url' => $url]);
 374                 }
 375
 376                 // Limit the length on incoming fields
 377                 $apcontact = DBStructure::getFieldsForTable('apcontact', $apcontact);
 378
 379                 if (DBA::exists('apcontact', ['url' => $apcontact['url']])) {
 380                         DBA::update('apcontact', $apcontact, ['url' => $apcontact['url']]);
 381                 } else {
 382                         DBA::replace('apcontact', $apcontact);
 383                 }
 384
 385                 Logger::info('Updated profile', ['url' => $url]);
 386
 387                 return DBA::selectFirst('apcontact', [], ['url' => $apcontact['url']]) ?: [];
 388         }
 389
 390         /**
 391          * Mark the given AP Contact as "to archive"
 392          *
 393          * @param array $apcontact
 394          * @return void
 395          */
 396         public static function markForArchival(array $apcontact)
 397         {
 398                 if (!empty($apcontact['inbox'])) {
 399                         Logger::info('Set inbox status to failure', ['inbox' => $apcontact['inbox']]);
 400                         HTTPSignature::setInboxStatus($apcontact['inbox'], false);
 401                 }
 402
 403                 if (!empty($apcontact['sharedinbox'])) {
 404                         // Check if there are any available inboxes
 405                         $available = DBA::exists('apcontact', ["`sharedinbox` = ? AnD `inbox` IN (SELECT `url` FROM `inbox-status` WHERE `success` > `failure`)",
 406                                 $apcontact['sharedinbox']]);
 407                         if (!$available) {
 408                                 // If all known personal inboxes are failing then set their shared inbox to failure as well
 409                                 Logger::info('Set shared inbox status to failure', ['sharedinbox' => $apcontact['sharedinbox']]);
 410                                 HTTPSignature::setInboxStatus($apcontact['sharedinbox'], false, true);
 411                         }
 412                 }
 413         }
 414
 415         /**
 416          * Unmark the given AP Contact as "to archive"
 417          *
 418          * @param array $apcontact
 419          * @return void
 420          */
 421         public static function unmarkForArchival(array $apcontact)
 422         {
 423                 if (!empty($apcontact['inbox'])) {
 424                         Logger::info('Set inbox status to success', ['inbox' => $apcontact['inbox']]);
 425                         HTTPSignature::setInboxStatus($apcontact['inbox'], true);
 426                 }
 427                 if (!empty($apcontact['sharedinbox'])) {
 428                         Logger::info('Set shared inbox status to success', ['sharedinbox' => $apcontact['sharedinbox']]);
 429                         HTTPSignature::setInboxStatus($apcontact['sharedinbox'], true, true);
 430                 }
 431         }
 432
 433         /**
 434          * Unarchive inboxes
 435          *
 436          * @param string  $url    inbox url
 437          * @param boolean $shared Shared Inbox
 438          */
 439         private static function unarchiveInbox($url, $shared)
 440         {
 441                 if (empty($url)) {
 442                         return;
 443                 }
 444
 445                 HTTPSignature::setInboxStatus($url, true, $shared);
 446         }
 447 }