X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=include%2Fsalmon.php;h=3d525f51ad36d0a2d55349937c140e404f8b56ea;hb=05a52b2660a879a97d511b180e26fe12310d0464;hp=92ec571b38f6e9b44cd4b85719cd3d4561dd7de6;hpb=d850badf2b5717afe39a5fd96dabd29aa013910a;p=friendica.git diff --git a/include/salmon.php b/include/salmon.php old mode 100644 new mode 100755 index 92ec571b38..3d525f51ad --- a/include/salmon.php +++ b/include/salmon.php @@ -1,93 +1,17 @@ asnData[1]->asnData[0]->asnData[0]->asnData; - $e = $r[0]->asnData[1]->asnData[0]->asnData[1]->asnData; - - - return 'RSA' . '.' . $m . '.' . $e ; -} - - -function base64url_encode($s) { - return strtr(base64_encode($s),'+/','-_'); -} - -function base64url_decode($s) { - return base64_decode(strtr($s,'-_','+/')); -} function get_salmon_key($uri,$keyhash) { $ret = array(); - $debugging = get_config('system','debugging'); - if($debugging) - file_put_contents('salmon.out', "\n" . 'Fetch key' . "\n", FILE_APPEND); - - if(strstr($uri,'@')) { - $arr = webfinger($uri); - if($debugging) - file_put_contents('salmon.out', "\n" . 'Fetch key from webfinger' . "\n", FILE_APPEND); - } - else { - $html = fetch_url($uri); - $a = get_app(); - $h = $a->get_curl_headers(); - if($debugging) - file_put_contents('salmon.out', "\n" . 'Fetch key via HTTP header: ' . $h . "\n", FILE_APPEND); - - $l = explode("\n",$h); - if(count($l)) { - foreach($l as $line) { - // TODO alter the following regex to support multiple relations (space separated) - if((stristr($line,'link:')) && preg_match('/<([^>].*)>.*rel\=[\'\"]lrdd[\'\"]/',$line,$matches)) { - $link = $matches[1]; - if($debugging) - file_put_contents('salmon.out', "\n" . 'Fetch key via HTML Link: ' . $link . "\n", FILE_APPEND); - break; - } - } - } - - if(! isset($link)) { + logger('Fetching salmon key'); - // parse the page of the supplied URL looking for rel links + $arr = lrdd($uri); - require_once('library/HTML5/Parser.php'); - $dom = HTML5_Parser::parse($html); - - if(! $dom) - return ''; - - $items = $dom->getElementsByTagName('link'); - - foreach($items as $item) { - $x = $item->getAttribute('rel'); - if($x == "lrdd") { - $link = $item->getAttribute('href'); - if($debugging) - file_put_contents('salmon.out', "\n" . 'Fetch key via HTML body' . $link . "\n", FILE_APPEND); - break; - } - } - } - - if(! isset($link)) - return ''; - - $arr = fetch_xrd_links($link); - } - - if($arr) { + if(is_array($arr)) { foreach($arr as $a) { if($a['@attributes']['rel'] === 'magic-public-key') { $ret[] = $a['@attributes']['href']; @@ -114,8 +38,8 @@ function get_salmon_key($uri,$keyhash) { } } - if($debugging) - file_put_contents('salmon.out', "\n" . 'Key located: ' . print_r($ret,true) . "\n", FILE_APPEND); + + logger('Key located: ' . print_r($ret,true)); if(count($ret) == 1) { @@ -140,4 +64,132 @@ function get_salmon_key($uri,$keyhash) { - \ No newline at end of file +function slapper($owner,$url,$slap) { + + logger('slapper called. Data: ' . $slap); + + // does contact have a salmon endpoint? + + if(! strlen($url)) + return; + + + if(! $owner['sprvkey']) { + logger(sprintf("slapper: user '%s' (%d) does not have a salmon private key. Send failed.", + $owner['username'],$owner['uid'])); + return; + } + + // add all namespaces to item + +$namespaces = <<< EOT + > +EOT; + + $slap = str_replace('',$namespaces,$slap); + + // create a magic envelope + + $data = base64url_encode($slap); + $data_type = 'application/atom+xml'; + $encoding = 'base64url'; + $algorithm = 'RSA-SHA256'; + $keyhash = base64url_encode(hash('sha256',salmon_key($owner['spubkey'])),true); + + // precomputed base64url encoding of data_type, encoding, algorithm concatenated with periods + + $precomputed = '.YXBwbGljYXRpb24vYXRvbSt4bWw=.YmFzZTY0dXJs.UlNBLVNIQTI1Ng=='; + + $signature = base64url_encode(rsa_sign(str_replace('=','',$data . $precomputed),$owner['sprvkey'])); + + $signature2 = base64url_encode(rsa_sign($data . $precomputed,$owner['sprvkey'])); + + $signature3 = base64url_encode(rsa_sign($data,$owner['sprvkey'])); + + $salmon_tpl = get_markup_template('magicsig.tpl'); + + $salmon = replace_macros($salmon_tpl,array( + '$data' => $data, + '$encoding' => $encoding, + '$algorithm' => $algorithm, + '$keyhash' => $keyhash, + '$signature' => $signature + )); + + // slap them + post_url($url,$salmon, array( + 'Content-type: application/magic-envelope+xml', + 'Content-length: ' . strlen($salmon) + )); + + $a = get_app(); + $return_code = $a->get_curl_code(); + + // check for success, e.g. 2xx + + if($return_code > 299) { + + logger('slapper: compliant salmon failed. Falling back to status.net hack2'); + + // Entirely likely that their salmon implementation is + // non-compliant. Let's try once more, this time only signing + // the data, without stripping '=' chars + + $salmon = replace_macros($salmon_tpl,array( + '$data' => $data, + '$encoding' => $encoding, + '$algorithm' => $algorithm, + '$keyhash' => $keyhash, + '$signature' => $signature2 + )); + + // slap them + post_url($url,$salmon, array( + 'Content-type: application/magic-envelope+xml', + 'Content-length: ' . strlen($salmon) + )); + $return_code = $a->get_curl_code(); + + + if($return_code > 299) { + + logger('slapper: compliant salmon failed. Falling back to status.net hack3'); + + // Entirely likely that their salmon implementation is + // non-compliant. Let's try once more, this time only signing + // the data, without the precomputed blob + + $salmon = replace_macros($salmon_tpl,array( + '$data' => $data, + '$encoding' => $encoding, + '$algorithm' => $algorithm, + '$keyhash' => $keyhash, + '$signature' => $signature3 + )); + + // slap them + post_url($url,$salmon, array( + 'Content-type: application/magic-envelope+xml', + 'Content-length: ' . strlen($salmon) + )); + $return_code = $a->get_curl_code(); + } + } + logger('slapper returned ' . $return_code); + if(! $return_code) + return(-1); + if(($return_code == 503) && (stristr($a->get_curl_headers(),'retry-after'))) + return(-1); + + return ((($return_code >= 200) && ($return_code < 300)) ? 0 : 1); +} +