1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-10 11:25:56 -05:00
forgejo/services/federation/federation_service.go

283 lines
8.7 KiB
Go
Raw Normal View History

// Copyright 2024 The Forgejo Authors. All rights reserved.
// SPDX-License-Identifier: MIT
2024-03-28 10:00:55 -04:00
package federation
import (
2024-03-23 10:27:45 -04:00
"context"
"fmt"
"net/http"
"net/url"
"strings"
2024-03-28 10:00:55 -04:00
"time"
2024-02-08 09:31:02 -05:00
"code.gitea.io/gitea/models/forgefed"
"code.gitea.io/gitea/models/repo"
2024-02-08 09:31:02 -05:00
"code.gitea.io/gitea/models/user"
"code.gitea.io/gitea/modules/activitypub"
2024-02-09 10:24:51 -05:00
"code.gitea.io/gitea/modules/auth/password"
"code.gitea.io/gitea/modules/log"
"code.gitea.io/gitea/modules/setting"
"code.gitea.io/gitea/modules/validation"
2024-02-08 09:31:02 -05:00
"github.com/google/uuid"
)
2024-03-28 10:00:55 -04:00
// ProcessLikeActivity receives a ForgeLike activity and does the following:
2024-03-21 09:41:11 -04:00
// Validation of the activity
// Creation of a (remote) federationHost if not existing
// Creation of a forgefed Person if not existing
// Validation of incoming RepositoryID against Local RepositoryID
// Star the repo if it wasn't already stared
// Do some mitigation against out of order attacks
2024-03-28 10:00:55 -04:00
func ProcessLikeActivity(ctx context.Context, form any, repositoryID int64) (int, string, error) {
2024-02-08 09:31:02 -05:00
activity := form.(*forgefed.ForgeLike)
if res, err := validation.IsValid(activity); !res {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Invalid activity", err
}
2024-02-08 09:16:37 -05:00
log.Info("Activity validated:%v", activity)
// parse actorID (person)
actorURI := activity.Actor.GetID().String()
2024-03-26 11:53:02 -04:00
log.Info("actorURI was: %v", actorURI)
2024-04-04 09:08:02 -04:00
federationHost, err := GetFederationHostForURI(ctx, actorURI)
if err != nil {
2024-03-22 15:14:20 -04:00
return http.StatusInternalServerError, "Wrong FederationHost", err
}
if !activity.IsNewer(federationHost.LatestActivity) {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Activity out of order.", fmt.Errorf("Activity already processed")
}
actorID, err := forgefed.NewPersonID(actorURI, string(federationHost.NodeInfo.SoftwareName))
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Invalid PersonID", err
}
2024-02-08 09:16:37 -05:00
log.Info("Actor accepted:%v", actorID)
// parse objectID (repository)
2024-02-08 09:31:02 -05:00
objectID, err := forgefed.NewRepositoryID(activity.Object.GetID().String(), string(forgefed.ForgejoSourceType))
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Invalid objectId", err
}
2024-02-09 10:44:03 -05:00
if objectID.ID != fmt.Sprint(repositoryID) {
return http.StatusNotAcceptable, "Invalid objectId", err
}
2024-02-08 09:16:37 -05:00
log.Info("Object accepted:%v", objectID)
// Check if user already exists
2024-02-08 09:31:02 -05:00
user, _, err := user.FindFederatedUser(ctx, actorID.ID, federationHost.ID)
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusInternalServerError, "Searching for user failed", err
}
if user != nil {
2024-02-08 09:16:37 -05:00
log.Info("Found local federatedUser: %v", user)
} else {
user, _, err = CreateUserFromAP(ctx, actorID, federationHost.ID)
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusInternalServerError, "Error creating federatedUser", err
}
2024-02-08 09:16:37 -05:00
log.Info("Created federatedUser from ap: %v", user)
}
2024-02-08 09:16:37 -05:00
log.Info("Got user:%v", user.Name)
// execute the activity if the repo was not stared already
2024-02-09 10:44:03 -05:00
alreadyStared := repo.IsStaring(ctx, user.ID, repositoryID)
if !alreadyStared {
err = repo.StarRepo(ctx, user.ID, repositoryID, true)
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Error staring", err
}
}
federationHost.LatestActivity = activity.StartTime
2024-02-08 09:31:02 -05:00
err = forgefed.UpdateFederationHost(ctx, federationHost)
if err != nil {
2024-02-09 10:44:03 -05:00
return http.StatusNotAcceptable, "Error updating federatedHost", err
}
2024-02-09 10:44:03 -05:00
return 0, "", nil
}
2024-03-23 10:27:45 -04:00
func CreateFederationHostFromAP(ctx context.Context, actorID forgefed.ActorID) (*forgefed.FederationHost, error) {
2024-02-08 09:31:02 -05:00
actionsUser := user.NewActionsUser()
client, err := activitypub.NewClient(ctx, actionsUser, "no idea where to get key material.")
if err != nil {
return nil, err
}
body, err := client.GetBody(actorID.AsWellKnownNodeInfoURI())
if err != nil {
return nil, err
}
2024-02-08 09:31:02 -05:00
nodeInfoWellKnown, err := forgefed.NewNodeInfoWellKnown(body)
if err != nil {
return nil, err
}
body, err = client.GetBody(nodeInfoWellKnown.Href)
if err != nil {
return nil, err
}
2024-02-08 09:31:02 -05:00
nodeInfo, err := forgefed.NewNodeInfo(body)
if err != nil {
return nil, err
}
2024-02-08 09:31:02 -05:00
result, err := forgefed.NewFederationHost(nodeInfo, actorID.Host)
if err != nil {
return nil, err
}
2024-02-08 09:31:02 -05:00
err = forgefed.CreateFederationHost(ctx, &result)
if err != nil {
return nil, err
}
return &result, nil
}
2024-04-04 09:08:02 -04:00
func GetFederationHostForURI(ctx context.Context, actorURI string) (*forgefed.FederationHost, error) {
2024-03-22 15:14:20 -04:00
// parse actorID (person)
2024-03-26 11:53:02 -04:00
log.Info("Input was: %v", actorURI)
2024-03-22 15:14:20 -04:00
rawActorID, err := forgefed.NewActorID(actorURI)
if err != nil {
return nil, err
}
federationHost, err := forgefed.FindFederationHostByFqdn(ctx, rawActorID.Host)
if err != nil {
return nil, err
}
if federationHost == nil {
result, err := CreateFederationHostFromAP(ctx, rawActorID)
if err != nil {
return nil, err
}
federationHost = result
}
return federationHost, nil
}
2024-03-23 10:27:45 -04:00
func CreateUserFromAP(ctx context.Context, personID forgefed.PersonID, federationHostID int64) (*user.User, *user.FederatedUser, error) {
// ToDo: Do we get a publicKeyId from server, repo or owner or repo?
2024-02-08 09:31:02 -05:00
actionsUser := user.NewActionsUser()
client, err := activitypub.NewClient(ctx, actionsUser, "no idea where to get key material.")
if err != nil {
return nil, nil, err
}
body, err := client.GetBody(personID.AsURI())
if err != nil {
return nil, nil, err
}
2024-02-08 09:31:02 -05:00
person := forgefed.ForgePerson{}
err = person.UnmarshalJSON(body)
if err != nil {
return nil, nil, err
}
if res, err := validation.IsValid(person); !res {
return nil, nil, err
}
2024-02-08 09:16:37 -05:00
log.Info("Fetched valid person:%q", person)
localFqdn, err := url.ParseRequestURI(setting.AppURL)
if err != nil {
return nil, nil, err
}
email := fmt.Sprintf("f%v@%v", uuid.New().String(), localFqdn.Hostname())
loginName := personID.AsLoginName()
name := fmt.Sprintf("%v%v", person.PreferredUsername.String(), personID.HostSuffix())
fullName := person.Name.String()
if len(person.Name) == 0 {
fullName = name
}
2024-02-09 10:24:51 -05:00
password, err := password.Generate(32)
if err != nil {
return nil, nil, err
}
2024-02-08 09:31:02 -05:00
newUser := user.User{
LowerName: strings.ToLower(person.PreferredUsername.String()),
Name: name,
FullName: fullName,
Email: email,
EmailNotificationsPreference: "disabled",
Passwd: password,
MustChangePassword: false,
LoginName: loginName,
2024-02-08 09:31:02 -05:00
Type: user.UserTypeRemoteUser,
IsAdmin: false,
}
2024-02-08 09:31:02 -05:00
federatedUser := user.FederatedUser{
ExternalID: personID.ID,
FederationHostID: federationHostID,
}
2024-02-08 09:31:02 -05:00
err = user.CreateFederatedUser(ctx, &newUser, &federatedUser)
if err != nil {
return nil, nil, err
}
2024-02-08 09:16:37 -05:00
log.Info("Created federatedUser:%q", federatedUser)
2024-02-08 09:31:02 -05:00
return &newUser, &federatedUser, nil
}
2024-03-22 12:42:38 -04:00
2024-04-03 06:26:33 -04:00
// Create or update a list of FollowingRepo structs
2024-04-04 09:08:02 -04:00
func StoreFollowingRepoList(ctx context.Context, localRepoID int64, followingRepoList []string) (int, string, error) {
2024-04-03 06:26:33 -04:00
followingRepos := make([]*repo.FollowingRepo, 0, len(followingRepoList))
for _, uri := range followingRepoList {
2024-04-04 09:08:02 -04:00
federationHost, err := GetFederationHostForURI(ctx, uri)
2024-03-22 12:42:38 -04:00
if err != nil {
2024-03-22 15:14:20 -04:00
return http.StatusInternalServerError, "Wrong FederationHost", err
2024-03-22 12:42:38 -04:00
}
followingRepoID, err := forgefed.NewRepositoryID(uri, string(federationHost.NodeInfo.SoftwareName))
2024-03-22 12:42:38 -04:00
if err != nil {
2024-03-22 15:14:20 -04:00
return http.StatusNotAcceptable, "Invalid federated repo", err
2024-03-22 12:42:38 -04:00
}
2024-04-04 09:08:02 -04:00
followingRepo, err := repo.NewFollowingRepo(localRepoID, followingRepoID.ID, federationHost.ID, uri)
2024-03-22 12:42:38 -04:00
if err != nil {
2024-03-22 15:14:20 -04:00
return http.StatusNotAcceptable, "Invalid federated repo", err
2024-03-22 12:42:38 -04:00
}
2024-04-03 06:26:33 -04:00
followingRepos = append(followingRepos, &followingRepo)
2024-03-22 12:42:38 -04:00
}
2024-04-04 09:08:02 -04:00
if err := repo.StoreFollowingRepos(ctx, localRepoID, followingRepos); err != nil {
return 0, "", err
}
2024-03-22 15:14:20 -04:00
return 0, "", nil
2024-03-22 12:42:38 -04:00
}
2024-03-28 10:00:55 -04:00
2024-04-04 09:08:02 -04:00
func DeleteFollowingRepos(ctx context.Context, localRepoID int64) error {
return repo.StoreFollowingRepos(ctx, localRepoID, []*repo.FollowingRepo{})
}
2024-03-28 10:00:55 -04:00
func SendLikeActivities(ctx context.Context, doer user.User, repoID int64) error {
2024-04-03 06:08:44 -04:00
followingRepos, err := repo.FindFollowingReposByRepoID(ctx, repoID)
log.Info("Federated Repos is: %v", followingRepos)
2024-03-28 10:00:55 -04:00
if err != nil {
return err
}
likeActivityList := make([]forgefed.ForgeLike, 0)
2024-04-03 06:26:33 -04:00
for _, followingRepo := range followingRepos {
2024-04-05 11:06:57 -04:00
log.Info("Found following repo: %v", followingRepo)
2024-04-04 09:08:02 -04:00
target := followingRepo.URI
2024-03-28 10:00:55 -04:00
likeActivity, err := forgefed.NewForgeLike(doer.APAPIURL(), target, time.Now())
if err != nil {
return err
}
likeActivityList = append(likeActivityList, likeActivity)
}
apclient, err := activitypub.NewClient(ctx, &doer, doer.APAPIURL())
if err != nil {
return err
}
2024-04-06 04:59:36 -04:00
for i, activity := range likeActivityList {
activity.StartTime = activity.StartTime.Add(time.Duration(i) * time.Second)
json, err := activity.MarshalJSON()
2024-03-28 10:00:55 -04:00
if err != nil {
return err
}
2024-03-28 10:00:55 -04:00
2024-04-04 09:08:02 -04:00
_, err = apclient.Post(json, fmt.Sprintf("%v/inbox/", activity.Object))
if err != nil {
log.Error("error %v while sending activity: %q", err, activity)
}
}
return nil
}