119 lines
4.2 KiB
Rust
119 lines
4.2 KiB
Rust
use base64::Engine;
|
|
use openssl::{hash::MessageDigest, pkey::{PKey, Private}, sign::Signer};
|
|
use reqwest::{header::{ACCEPT, CONTENT_TYPE, USER_AGENT}, Method, Response};
|
|
use sea_orm::{DatabaseConnection, EntityTrait, IntoActiveModel};
|
|
|
|
use crate::{model, VERSION};
|
|
|
|
use super::Context;
|
|
|
|
|
|
pub struct Fetcher {
|
|
db: DatabaseConnection,
|
|
key: PKey<Private>, // TODO store pre-parsed
|
|
domain: String, // TODO merge directly with Context so we don't need to copy this
|
|
}
|
|
|
|
impl Fetcher {
|
|
pub fn new(db: DatabaseConnection, domain: String, key: String) -> Self {
|
|
Fetcher { db, domain, key: PKey::private_key_from_pem(key.as_bytes()).unwrap() }
|
|
}
|
|
|
|
pub async fn request(
|
|
method: reqwest::Method,
|
|
url: &str,
|
|
payload: Option<&str>,
|
|
from: &str,
|
|
key: &PKey<Private>,
|
|
domain: &str,
|
|
) -> reqwest::Result<Response> {
|
|
let host = Context::server(url);
|
|
let date = chrono::Utc::now().format("%a, %d %b %Y %H:%M:%S GMT").to_string(); // lmao @ "GMT"
|
|
let path = url.replace("https://", "").replace("http://", "").replace(&host, "");
|
|
// let mut headers : BTreeMap<String, String> = [
|
|
// ("Host".to_string(), host.clone()),
|
|
// ("Date".to_string(), date.clone()),
|
|
// ].into();
|
|
|
|
let mut client = reqwest::Client::new()
|
|
.request(method.clone(), url)
|
|
.header(ACCEPT, "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"")
|
|
.header(CONTENT_TYPE, "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"")
|
|
.header(USER_AGENT, format!("upub+{VERSION} ({domain})"))
|
|
.header("Host", host.clone())
|
|
.header("Date", date.clone());
|
|
|
|
let mut to_sign_raw = format!("(request-target): {} {path}\nhost: {host}\ndate: {date}", method.to_string().to_lowercase());
|
|
let mut headers_to_inspect = "(request-target) host date";
|
|
|
|
if let Some(payload) = payload {
|
|
let digest = format!("sha-256={}", base64::prelude::BASE64_STANDARD.encode(openssl::sha::sha256(payload.as_bytes())));
|
|
to_sign_raw = format!("(request-target): {} {path}\nhost: {host}\ndate: {date}\ndigest: {digest}", method.to_string().to_lowercase());
|
|
headers_to_inspect = "(request-target) host date digest";
|
|
client = client
|
|
.header("Digest", digest)
|
|
.body(payload.to_string());
|
|
}
|
|
|
|
let signature_header = {
|
|
let mut signer = Signer::new(MessageDigest::sha256(), key).unwrap();
|
|
signer.update(to_sign_raw.as_bytes()).unwrap();
|
|
let signature = base64::prelude::BASE64_STANDARD.encode(signer.sign_to_vec().unwrap());
|
|
format!("keyId=\"{from}#main-key\",algorithm=\"rsa-sha256\",headers=\"{headers_to_inspect}\",signature=\"{signature}\"")
|
|
};
|
|
|
|
client
|
|
.header("Signature", signature_header)
|
|
.send()
|
|
.await?
|
|
.error_for_status()
|
|
}
|
|
|
|
pub async fn user(&self, id: &str) -> crate::Result<model::user::Model> {
|
|
if let Some(x) = model::user::Entity::find_by_id(id).one(&self.db).await? {
|
|
return Ok(x); // already in db, easy
|
|
}
|
|
|
|
let user = Self::request(
|
|
Method::GET, id, None, &format!("https://{}", self.domain), &self.key, &self.domain,
|
|
).await?.json::<serde_json::Value>().await?;
|
|
let user_model = model::user::Model::new(&user)?;
|
|
|
|
model::user::Entity::insert(user_model.clone().into_active_model())
|
|
.exec(&self.db).await?;
|
|
|
|
Ok(user_model)
|
|
}
|
|
|
|
pub async fn activity(&self, id: &str) -> crate::Result<model::activity::Model> {
|
|
if let Some(x) = model::activity::Entity::find_by_id(id).one(&self.db).await? {
|
|
return Ok(x); // already in db, easy
|
|
}
|
|
|
|
let activity = Self::request(
|
|
Method::GET, id, None, &format!("https://{}", self.domain), &self.key, &self.domain,
|
|
).await?.json::<serde_json::Value>().await?;
|
|
let activity_model = model::activity::Model::new(&activity)?;
|
|
|
|
model::activity::Entity::insert(activity_model.clone().into_active_model())
|
|
.exec(&self.db).await?;
|
|
|
|
Ok(activity_model)
|
|
}
|
|
|
|
pub async fn object(&self, id: &str) -> crate::Result<model::object::Model> {
|
|
if let Some(x) = model::object::Entity::find_by_id(id).one(&self.db).await? {
|
|
return Ok(x); // already in db, easy
|
|
}
|
|
|
|
let object = Self::request(
|
|
Method::GET, id, None, &format!("https://{}", self.domain), &self.key, &self.domain,
|
|
).await?.json::<serde_json::Value>().await?;
|
|
let object_model = model::object::Model::new(&object)?;
|
|
|
|
model::object::Entity::insert(object_model.clone().into_active_model())
|
|
.exec(&self.db).await?;
|
|
|
|
Ok(object_model)
|
|
}
|
|
}
|