]> git.mxchange.org Git - friendica.git/blob - src/Module/ActivityPub/Objects.php
head fixings
[friendica.git] / src / Module / ActivityPub / Objects.php
1 <?php
2 /**
3  * @copyright Copyright (C) 2010-2022, the Friendica project
4  *
5  * @license GNU AGPL version 3 or any later version
6  *
7  * This program is free software: you can redistribute it and/or modify
8  * it under the terms of the GNU Affero General Public License as
9  * published by the Free Software Foundation, either version 3 of the
10  * License, or (at your option) any later version.
11  *
12  * This program is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15  * GNU Affero General Public License for more details.
16  *
17  * You should have received a copy of the GNU Affero General Public License
18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
19  *
20  */
21
22 namespace Friendica\Module\ActivityPub;
23
24 use Friendica\BaseModule;
25 use Friendica\Core\Logger;
26 use Friendica\Core\System;
27 use Friendica\Database\DBA;
28 use Friendica\DI;
29 use Friendica\Model\Contact;
30 use Friendica\Model\Item;
31 use Friendica\Model\Post;
32 use Friendica\Network\HTTPException;
33 use Friendica\Protocol\ActivityPub;
34 use Friendica\Security\PermissionSet\Repository\PermissionSet;
35 use Friendica\Util\HTTPSignature;
36 use Friendica\Util\Network;
37 use Friendica\Util\Strings;
38
39 /**
40  * ActivityPub Objects
41  */
42 class Objects extends BaseModule
43 {
44         protected function rawContent(array $request = [])
45         {
46                 if (empty($this->parameters['guid'])) {
47                         throw new HTTPException\BadRequestException();
48                 }
49
50                 if (!ActivityPub::isRequest()) {
51                         DI::baseUrl()->redirect(str_replace('objects/', 'display/', DI::args()->getQueryString()));
52                 }
53
54                 $itemuri = DBA::selectFirst('item-uri', ['id'], ['guid' => $this->parameters['guid']]);
55
56                 if (DBA::isResult($itemuri)) {
57                         Logger::info('Provided GUID found.', ['guid' => $this->parameters['guid'], 'uri-id' => $itemuri['id']]);
58                 } else {
59                         // The item URI does not always contain the GUID. This means that we have to search the URL instead
60                         $url = DI::baseUrl()->get() . '/' . DI::args()->getQueryString();
61                         $nurl = Strings::normaliseLink($url);
62                         $ssl_url = str_replace('http://', 'https://', $nurl);
63
64                         $itemuri = DBA::selectFirst('item-uri', ['guid', 'id'], ['uri' => [$url, $nurl, $ssl_url]]);
65                         if (DBA::isResult($itemuri)) {
66                                 Logger::info('URL found.', ['url' => $url, 'guid' => $itemuri['guid'], 'uri-id' => $itemuri['id']]);
67                         } else {
68                                 Logger::info('URL not found.', ['url' => $url]);
69                                 throw new HTTPException\NotFoundException();
70                         }
71                 }
72
73                 $item = Post::selectFirst([], ['uri-id' => $itemuri['id'], 'origin' => true]);
74                 if (!DBA::isResult($item)) {
75                         throw new HTTPException\NotFoundException();
76                 }
77
78                 $validated = in_array($item['private'], [Item::PUBLIC, Item::UNLISTED]);
79
80                 if (!$validated) {
81                         $requester = HTTPSignature::getSigner('', $_SERVER);
82                         if (!empty($requester)) {
83                                 $receivers = Item::enumeratePermissions($item, false);
84                                 $receivers[] = $item['contact-id'];
85
86                                 $validated = in_array(Contact::getIdForURL($requester, $item['uid']), $receivers);
87                                 if (!$validated) {
88                                         $validated = in_array(Contact::getIdForURL($requester), $receivers);
89                                 }
90                         }
91                 }
92
93                 if (!$validated) {
94                         throw new HTTPException\NotFoundException();
95                 }
96
97                 $etag          = md5($this->parameters['guid'] . '-' . $item['changed']);
98                 $last_modified = $item['changed'];
99                 Network::checkEtagModified($etag, $last_modified);
100
101                 if (empty($this->parameters['activity']) && ($item['gravity'] != GRAVITY_ACTIVITY)) {
102                         $activity = ActivityPub\Transmitter::createActivityFromItem($item['id'], true);
103                         if (empty($activity['type'])) {
104                                 throw new HTTPException\NotFoundException();
105                         }
106
107                         $activity['type'] = $activity['type'] == 'Update' ? 'Create' : $activity['type'];
108
109                         // Only display "Create" activity objects here, no reshares or anything else
110                         if (empty($activity['object']) || ($activity['type'] != 'Create')) {
111                                 throw new HTTPException\NotFoundException();
112                         }
113
114                         $data = ['@context' => ActivityPub::CONTEXT];
115                         $data = array_merge($data, $activity['object']);
116                 } elseif (empty($this->parameters['activity']) || in_array($this->parameters['activity'],
117                         ['Create', 'Announce', 'Update', 'Like', 'Dislike', 'Accept', 'Reject',
118                         'TentativeAccept', 'Follow', 'Add'])) {
119                         $data = ActivityPub\Transmitter::createActivityFromItem($item['id']);
120                         if (empty($data)) {
121                                 throw new HTTPException\NotFoundException();
122                         }
123                         if (!empty($this->parameters['activity']) && ($this->parameters['activity'] != 'Create')) {
124                                 $data['type'] = $this->parameters['activity'];
125                                 $data['id'] = str_replace('/Create', '/' . $this->parameters['activity'], $data['id']);
126                         }
127                 } else {
128                         throw new HTTPException\NotFoundException();
129                 }
130
131                 // Relaxed CORS header for public items
132                 header('Access-Control-Allow-Origin: *');
133                 System::jsonExit($data, 'application/activity+json');
134         }
135 }