<?php
+/**
+ * @file mod/xrd.php
+ */
+
+use Friendica\App;
+use Friendica\Core\Hook;
+use Friendica\Core\Renderer;
+use Friendica\Core\System;
+use Friendica\Database\DBA;
+use Friendica\Protocol\Salmon;
+use Friendica\Util\Strings;
+
+function xrd_init(App $a)
+{
+ if ($a->argv[0] == 'xrd') {
+ if (empty($_GET['uri'])) {
+ System::httpExit(404);
+ }
+
+ $uri = urldecode(Strings::escapeTags(trim($_GET['uri'])));
+ if (defaults($_SERVER, 'HTTP_ACCEPT', '') == 'application/jrd+json') {
+ $mode = 'json';
+ } else {
+ $mode = 'xml';
+ }
+ } else {
+ if (empty($_GET['resource'])) {
+ System::httpExit(404);
+ }
+
+ $uri = urldecode(Strings::escapeTags(trim($_GET['resource'])));
+ if (defaults($_SERVER, 'HTTP_ACCEPT', '') == 'application/xrd+xml') {
+ $mode = 'xml';
+ } else {
+ $mode = 'json';
+ }
+ }
-require_once('include/crypto.php');
-
-function xrd_init(&$a) {
-
- $uri = urldecode(notags(trim($_GET['uri'])));
-
- if(substr($uri,0,4) === 'http') {
- $acct = false;
- $name = basename($uri);
+ if (substr($uri, 0, 4) === 'http') {
+ $name = ltrim(basename($uri), '~');
} else {
- $acct = true;
$local = str_replace('acct:', '', $uri);
- if(substr($local,0,2) == '//')
- $local = substr($local,2);
+ if (substr($local, 0, 2) == '//') {
+ $local = substr($local, 2);
+ }
- $name = substr($local,0,strpos($local,'@'));
+ $name = substr($local, 0, strpos($local, '@'));
}
- $r = q("SELECT * FROM `user` WHERE `nickname` = '%s' LIMIT 1",
- dbesc($name)
- );
- if(! count($r))
- killme();
+ $user = DBA::selectFirst('user', [], ['nickname' => $name]);
+ if (!DBA::isResult($user)) {
+ System::httpExit(404);
+ }
- $salmon_key = salmon_key($r[0]['spubkey']);
+ $profile_url = System::baseUrl().'/profile/'.$user['nickname'];
- header('Access-Control-Allow-Origin: *');
- header("Content-type: text/xml");
+ $alias = str_replace('/profile/', '/~', $profile_url);
- $tpl = get_markup_template('xrd_diaspora.tpl');
- $dspr = replace_macros($tpl,array(
- '$baseurl' => $a->get_baseurl(),
- '$dspr_guid' => $r[0]['guid'],
- '$dspr_key' => base64_encode(pemtorsa($r[0]['pubkey']))
- ));
+ $addr = 'acct:'.$user['nickname'].'@'.$a->getHostName();
+ if ($a->getURLPath()) {
+ $addr .= '/'.$a->getURLPath();
+ }
- $tpl = get_markup_template('xrd_person.tpl');
+ if ($mode == 'xml') {
+ xrd_xml($addr, $alias, $profile_url, $user);
+ } else {
+ xrd_json($addr, $alias, $profile_url, $user);
+ }
+}
- $profile_url = $a->get_baseurl().'/profile/'.$r[0]['nickname'];
+function xrd_json($uri, $alias, $profile_url, $r)
+{
+ $salmon_key = Salmon::salmonKey($r['spubkey']);
- if ($acct)
- $alias = $profile_url;
- else {
- $alias = 'acct:'.$r[0]['nickname'].'@'.$a->get_hostname();
+ header('Access-Control-Allow-Origin: *');
+ header("Content-type: application/json; charset=utf-8");
+
+ $json = ['subject' => $uri,
+ 'aliases' => [$alias, $profile_url],
+ 'links' => [
+ ['rel' => NAMESPACE_DFRN, 'href' => $profile_url],
+ ['rel' => NAMESPACE_FEED, 'type' => 'application/atom+xml', 'href' => System::baseUrl().'/dfrn_poll/'.$r['nickname']],
+ ['rel' => 'http://webfinger.net/rel/profile-page', 'type' => 'text/html', 'href' => $profile_url],
+ ['rel' => 'self', 'type' => 'application/activity+json', 'href' => $profile_url],
+ ['rel' => 'http://microformats.org/profile/hcard', 'type' => 'text/html', 'href' => System::baseUrl().'/hcard/'.$r['nickname']],
+ ['rel' => NAMESPACE_POCO, 'href' => System::baseUrl().'/poco/'.$r['nickname']],
+ ['rel' => 'http://webfinger.net/rel/avatar', 'type' => 'image/jpeg', 'href' => System::baseUrl().'/photo/profile/'.$r['uid'].'.jpg'],
+ ['rel' => 'http://joindiaspora.com/seed_location', 'type' => 'text/html', 'href' => System::baseUrl()],
+ ['rel' => 'salmon', 'href' => System::baseUrl().'/salmon/'.$r['nickname']],
+ ['rel' => 'http://salmon-protocol.org/ns/salmon-replies', 'href' => System::baseUrl().'/salmon/'.$r['nickname']],
+ ['rel' => 'http://salmon-protocol.org/ns/salmon-mention', 'href' => System::baseUrl().'/salmon/'.$r['nickname'].'/mention'],
+ ['rel' => 'http://ostatus.org/schema/1.0/subscribe', 'template' => System::baseUrl().'/follow?url={uri}'],
+ ['rel' => 'magic-public-key', 'href' => 'data:application/magic-public-key,'.$salmon_key],
+ ['rel' => 'http://purl.org/openwebauth/v1', 'type' => 'application/x-zot+json', 'href' => System::baseUrl().'/owa']
+ ]
+ ];
+
+ echo json_encode($json);
+ exit();
+}
- if ($a->get_path())
- $alias .= '/'.$a->get_path();
- }
+function xrd_xml($uri, $alias, $profile_url, $r)
+{
+ $salmon_key = Salmon::salmonKey($r['spubkey']);
- $o = replace_macros($tpl, array(
- '$nick' => $r[0]['nickname'],
+ header('Access-Control-Allow-Origin: *');
+ header("Content-type: text/xml");
+
+ $tpl = Renderer::getMarkupTemplate('xrd_person.tpl');
+
+ $o = Renderer::replaceMacros($tpl, [
+ '$nick' => $r['nickname'],
'$accturi' => $uri,
'$alias' => $alias,
'$profile_url' => $profile_url,
- '$hcard_url' => $a->get_baseurl() . '/hcard/' . $r[0]['nickname'],
- '$atom' => $a->get_baseurl() . '/dfrn_poll/' . $r[0]['nickname'],
- '$zot_post' => $a->get_baseurl() . '/post/' . $r[0]['nickname'],
- '$poco_url' => $a->get_baseurl() . '/poco/' . $r[0]['nickname'],
- '$photo' => $a->get_baseurl() . '/photo/profile/' . $r[0]['uid'] . '.jpg',
- '$dspr' => $dspr,
- '$salmon' => $a->get_baseurl() . '/salmon/' . $r[0]['nickname'],
- '$salmen' => $a->get_baseurl() . '/salmon/' . $r[0]['nickname'] . '/mention',
- '$subscribe' => $a->get_baseurl() . '/follow?url={uri}',
- '$modexp' => 'data:application/magic-public-key,' . $salmon_key,
- '$bigkey' => salmon_key($r[0]['pubkey'])
- ));
-
-
- $arr = array('user' => $r[0], 'xml' => $o);
- call_hooks('personal_xrd', $arr);
+ '$hcard_url' => System::baseUrl() . '/hcard/' . $r['nickname'],
+ '$atom' => System::baseUrl() . '/dfrn_poll/' . $r['nickname'],
+ '$poco_url' => System::baseUrl() . '/poco/' . $r['nickname'],
+ '$photo' => System::baseUrl() . '/photo/profile/' . $r['uid'] . '.jpg',
+ '$baseurl' => System::baseUrl(),
+ '$salmon' => System::baseUrl() . '/salmon/' . $r['nickname'],
+ '$salmen' => System::baseUrl() . '/salmon/' . $r['nickname'] . '/mention',
+ '$subscribe' => System::baseUrl() . '/follow?url={uri}',
+ '$openwebauth' => System::baseUrl() . '/owa',
+ '$modexp' => 'data:application/magic-public-key,' . $salmon_key]
+ );
- echo $arr['xml'];
- killme();
+ $arr = ['user' => $r, 'xml' => $o];
+ Hook::callAll('personal_xrd', $arr);
+ echo $arr['xml'];
+ exit();
}