import * as bq from 'bee-queue'; import * as debug from 'debug'; const httpSignature = require('http-signature'); import parseAcct from '../../../misc/acct/parse'; import User, { IRemoteUser } from '../../../models/user'; import perform from '../../../remote/activitypub/perform'; import { resolvePerson } from '../../../remote/activitypub/models/person'; import { toUnicode } from 'punycode'; import { URL } from 'url'; const log = debug('misskey:queue:inbox'); // ユーザーのinboxにアクティビティが届いた時の処理 export default async (job: bq.Job, done: any): Promise => { const signature = job.data.signature; const activity = job.data.activity; //#region Log const info = Object.assign({}, activity); delete info['@context']; delete info['signature']; log(info); //#endregion const keyIdLower = signature.keyId.toLowerCase(); let user: IRemoteUser; if (keyIdLower.startsWith('acct:')) { const { username, host } = parseAcct(keyIdLower.slice('acct:'.length)); if (host === null) { console.warn(`request was made by local user: @${username}`); done(); return; } // アクティビティ内のホストの検証 try { ValidateActivity(activity, host); } catch (e) { console.warn(e); done(); return; } user = await User.findOne({ usernameLower: username, host: host.toLowerCase() }) as IRemoteUser; // アクティビティを送信してきたユーザーがまだMisskeyサーバーに登録されていなかったら登録する if (user === null) { user = await resolvePerson(activity.actor) as IRemoteUser; } } else { // アクティビティ内のホストの検証 const host = toUnicode(new URL(signature.keyId).hostname.toLowerCase()); try { ValidateActivity(activity, host); } catch (e) { console.warn(e); done(); return; } user = await User.findOne({ host: { $ne: null }, 'publicKey.id': signature.keyId }) as IRemoteUser; // アクティビティを送信してきたユーザーがまだMisskeyサーバーに登録されていなかったら登録する if (user === null) { user = await resolvePerson(activity.actor) as IRemoteUser; } } if (user === null) { done(new Error('failed to resolve user')); return; } if (!httpSignature.verifySignature(signature, user.publicKey.publicKeyPem)) { console.warn('signature verification failed'); done(); return; } // アクティビティを処理 try { await perform(user, activity); done(); } catch (e) { done(e); } }; /** * Validate host in activity * @param activity Activity * @param host Expect host */ function ValidateActivity(activity: any, host: string) { // id (if exists) if (typeof activity.id === 'string') { const uriHost = toUnicode(new URL(activity.id).hostname.toLowerCase()); if (host !== uriHost) throw new Error('activity.id has different host'); } // actor (if exists) if (typeof activity.actor === 'string') { const uriHost = toUnicode(new URL(activity.actor).hostname.toLowerCase()); if (host !== uriHost) throw new Error('activity.actor has different host'); } // For Create activity if (activity.type === 'Create' && activity.object) { // object.id (if exists) if (typeof activity.object.id === 'string') { const uriHost = toUnicode(new URL(activity.object.id).hostname.toLowerCase()); if (host !== uriHost) throw new Error('activity.object.id has different host'); } // object.attributedTo (if exists) if (typeof activity.object.attributedTo === 'string') { const uriHost = toUnicode(new URL(activity.object.attributedTo).hostname.toLowerCase()); if (host !== uriHost) throw new Error('activity.object.attributedTo has different host'); } } }