src/Module/Xrd.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2010-2021, the Friendica project
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 namespace Friendica\Module;
  23
  24 use Friendica\BaseModule;
  25 use Friendica\Core\Hook;
  26 use Friendica\Core\Renderer;
  27 use Friendica\Core\System;
  28 use Friendica\DI;
  29 use Friendica\Model\Contact;
  30 use Friendica\Model\Photo;
  31 use Friendica\Model\User;
  32 use Friendica\Protocol\ActivityNamespace;
  33 use Friendica\Protocol\Salmon;
  34 use Friendica\Util\Strings;
  35
  36 /**
  37  * Prints responses to /.well-known/webfinger  or /xrd requests
  38  */
  39 class Xrd extends BaseModule
  40 {
  41         public static function rawContent(array $parameters = [])
  42         {
  43                 // @TODO: Replace with parameter from router
  44                 if (DI::args()->getArgv()[0] == 'xrd') {
  45                         if (empty($_GET['uri'])) {
  46                                 return;
  47                         }
  48
  49                         $uri = urldecode(Strings::escapeTags(trim($_GET['uri'])));
  50                         if (($_SERVER['HTTP_ACCEPT'] ?? '') == 'application/jrd+json') {
  51                                 $mode = 'json';
  52                         } else {
  53                                 $mode = 'xml';
  54                         }
  55                 } else {
  56                         if (empty($_GET['resource'])) {
  57                                 return;
  58                         }
  59
  60                         $uri = urldecode(Strings::escapeTags(trim($_GET['resource'])));
  61                         if (($_SERVER['HTTP_ACCEPT'] ?? '') == 'application/xrd+xml') {
  62                                 $mode = 'xml';
  63                         } else {
  64                                 $mode = 'json';
  65                         }
  66                 }
  67
  68                 if (substr($uri, 0, 4) === 'http') {
  69                         $name = ltrim(basename($uri), '~');
  70                 } else {
  71                         $local = str_replace('acct:', '', $uri);
  72                         if (substr($local, 0, 2) == '//') {
  73                                 $local = substr($local, 2);
  74                         }
  75
  76                         $name = substr($local, 0, strpos($local, '@'));
  77                 }
  78
  79                 if ($name == User::getActorName()) {
  80                         $owner = User::getSystemAccount();
  81                         if (empty($owner)) {
  82                                 throw new \Friendica\Network\HTTPException\NotFoundException();
  83                         }
  84                         self::printSystemJSON($owner);
  85                 } else {
  86                         $user = User::getByNickname($name);
  87                         if (empty($user)) {
  88                                 throw new \Friendica\Network\HTTPException\NotFoundException();
  89                         }
  90
  91                         $owner = User::getOwnerDataById($user['uid']);
  92                         if (empty($owner)) {
  93                                 DI::logger()->warning('No owner data for user id', ['uri' => $uri, 'name' => $name, 'user' => $user]);
  94                                 throw new \Friendica\Network\HTTPException\NotFoundException();
  95                         }
  96
  97                         $alias = str_replace('/profile/', '/~', $owner['url']);
  98
  99                         $avatar = Photo::selectFirst(['type'], ['uid' => $owner['uid'], 'profile' => true]);
 100                 }
 101
 102                 if (empty($avatar)) {
 103                         $avatar = ['type' => 'image/jpeg'];
 104                 }
 105
 106                 if ($mode == 'xml') {
 107                         self::printXML($alias, DI::baseUrl()->get(), $user, $owner, $avatar);
 108                 } else {
 109                         self::printJSON($alias, DI::baseUrl()->get(), $owner, $avatar);
 110                 }
 111         }
 112
 113         private static function printSystemJSON(array $owner)
 114         {
 115                 $json = [
 116                         'subject' => 'acct:' . $owner['addr'],
 117                         'aliases' => [$owner['url']],
 118                         'links'   => [
 119                                 [
 120                                         'rel'  => 'http://webfinger.net/rel/profile-page',
 121                                         'type' => 'text/html',
 122                                         'href' => $owner['url'],
 123                                 ],
 124                                 [
 125                                         'rel'  => 'self',
 126                                         'type' => 'application/activity+json',
 127                                         'href' => $owner['url'],
 128                                 ],
 129                                 [
 130                                         'rel'      => 'http://ostatus.org/schema/1.0/subscribe',
 131                                         'template' => DI::baseUrl()->get() . '/follow?url={uri}',
 132                                 ],
 133                         ]
 134                 ];
 135                 header('Access-Control-Allow-Origin: *');
 136                 System::jsonExit($json, 'application/jrd+json; charset=utf-8');
 137         }
 138
 139         private static function printJSON($alias, $baseURL, $owner, $avatar)
 140         {
 141                 $salmon_key = Salmon::salmonKey($owner['spubkey']);
 142
 143                 header('Access-Control-Allow-Origin: *');
 144                 header('Content-type: application/json; charset=utf-8');
 145
 146                 $json = [
 147                         'subject' => 'acct:' . $owner['addr'],
 148                         'aliases' => [
 149                                 $alias,
 150                                 $owner['url'],
 151                         ],
 152                         'links'   => [
 153                                 [
 154                                         'rel'  => ActivityNamespace::DFRN ,
 155                                         'href' => $owner['url'],
 156                                 ],
 157                                 [
 158                                         'rel'  => ActivityNamespace::FEED,
 159                                         'type' => 'application/atom+xml',
 160                                         'href' => $owner['poll'],
 161                                 ],
 162                                 [
 163                                         'rel'  => 'http://webfinger.net/rel/profile-page',
 164                                         'type' => 'text/html',
 165                                         'href' => $owner['url'],
 166                                 ],
 167                                 [
 168                                         'rel'  => 'self',
 169                                         'type' => 'application/activity+json',
 170                                         'href' => $owner['url'],
 171                                 ],
 172                                 [
 173                                         'rel'  => 'http://microformats.org/profile/hcard',
 174                                         'type' => 'text/html',
 175                                         'href' => $baseURL . '/hcard/' . $owner['nickname'],
 176                                 ],
 177                                 [
 178                                         'rel'  => ActivityNamespace::POCO,
 179                                         'href' => $owner['poco'],
 180                                 ],
 181                                 [
 182                                         'rel'  => 'http://webfinger.net/rel/avatar',
 183                                         'type' => $avatar['type'],
 184                                         'href' => Contact::getAvatarUrlForUrl($owner['url'], $owner['uid']),
 185                                 ],
 186                                 [
 187                                         'rel'  => 'http://joindiaspora.com/seed_location',
 188                                         'type' => 'text/html',
 189                                         'href' => $baseURL,
 190                                 ],
 191                                 [
 192                                         'rel'  => 'salmon',
 193                                         'href' => $baseURL . '/salmon/' . $owner['nickname'],
 194                                 ],
 195                                 [
 196                                         'rel'  => 'http://salmon-protocol.org/ns/salmon-replies',
 197                                         'href' => $baseURL . '/salmon/' . $owner['nickname'],
 198                                 ],
 199                                 [
 200                                         'rel'  => 'http://salmon-protocol.org/ns/salmon-mention',
 201                                         'href' => $baseURL . '/salmon/' . $owner['nickname'] . '/mention',
 202                                 ],
 203                                 [
 204                                         'rel'      => 'http://ostatus.org/schema/1.0/subscribe',
 205                                         'template' => $baseURL . '/follow?url={uri}',
 206                                 ],
 207                                 [
 208                                         'rel'  => 'magic-public-key',
 209                                         'href' => 'data:application/magic-public-key,' . $salmon_key,
 210                                 ],
 211                                 [
 212                                         'rel'  => 'http://purl.org/openwebauth/v1',
 213                                         'type' => 'application/x-zot+json',
 214                                         'href' => $baseURL . '/owa',
 215                                 ],
 216                         ],
 217                 ];
 218
 219                 echo json_encode($json);
 220                 exit();
 221         }
 222
 223         private static function printXML($alias, $baseURL, $user, $owner, $avatar)
 224         {
 225                 $salmon_key = Salmon::salmonKey($owner['spubkey']);
 226
 227                 header('Access-Control-Allow-Origin: *');
 228                 header('Content-type: text/xml');
 229
 230                 $tpl = Renderer::getMarkupTemplate('xrd_person.tpl');
 231
 232                 $o = Renderer::replaceMacros($tpl, [
 233                         '$nick'        => $owner['nickname'],
 234                         '$accturi'     => 'acct:' . $owner['addr'],
 235                         '$alias'       => $alias,
 236                         '$profile_url' => $owner['url'],
 237                         '$hcard_url'   => $baseURL . '/hcard/' . $owner['nickname'],
 238                         '$atom'        => $owner['poll'],
 239                         '$poco_url'    => $owner['poco'],
 240                         '$photo'       => Contact::getAvatarUrlForUrl($owner['url'], $owner['uid']),
 241                         '$type'        => $avatar['type'],
 242                         '$salmon'      => $baseURL . '/salmon/' . $owner['nickname'],
 243                         '$salmen'      => $baseURL . '/salmon/' . $owner['nickname'] . '/mention',
 244                         '$subscribe'   => $baseURL . '/follow?url={uri}',
 245                         '$openwebauth' => $baseURL . '/owa',
 246                         '$modexp'      => 'data:application/magic-public-key,' . $salmon_key
 247                 ]);
 248
 249                 $arr = ['user' => $user, 'xml' => $o];
 250                 Hook::callAll('personal_xrd', $arr);
 251
 252                 echo $arr['xml'];
 253                 exit();
 254         }
 255 }