Commit graph

51 commits

Author SHA1 Message Date
Gabe Kangas
77e2a44713
feat: move config into services 2023-12-19 18:33:18 -08:00
Gabe Kangas
db67603550
feat: first pass migrating all the handlers to the new architecture 2023-12-19 18:29:21 -08:00
Gabe Kangas
551440f3b6
feat: refactor web server + router. First step in #1749 2023-12-19 18:26:35 -08:00
Gabe Kangas
a6dbc37a84
fix: add additional validation before making remote requests (#3398) 2023-10-28 08:15:01 -07:00
Gabe Kangas
e166e009aa
fix: verify object and actor exists in Like request. Closes #3223 (#3232) 2023-08-03 20:34:50 -07:00
janWilejan
42c176f783
Url gets its own paragraph in notification post (#3196)
Co-authored-by: janWilejan <>
2023-07-21 14:34:07 -07:00
Gabe Kangas
d0376cdc75
fix: limit the different worker pools to available CPU cores. Should resolve #3189 2023-07-18 20:26:44 -07:00
Jerin Thomas
1ed51859b0
Extending webfinger response (issue:2851) (#3053)
* Extending webfinger response #2851
1. Added Logo
 - rel: avatar as there wasn't any appropriate value in [Link relations registry](https://www.iana.org/assignments/link-relations/)
 - type: default value image/png or else it is determined file type extension
2. Added Stream
 - rel: stream as there wasn't appropriate value in [Link relations registry](https://www.iana.org/assignments/link-relations/)
 - type: video/H264 based on [IANA media types](https://www.iana.org/assignments/media-types/media-types.xhtml#video)

Changes after review:

1. Updated the rel type for avatar based on webfinger rel.
2. Updated the rel type for stream link and href value that closely associates to it.

* adding period after comments

* updating typo
2023-05-31 11:36:41 -07:00
Gabe Kangas
85e7af3d5f
Update to Go 1.20 + run better align (#2927)
* chore(go): update go version to 1.20. Closes #2185

* chore(go): run better align against project

To optimize struct field order. Closes #2870

* chore(go): update CI jobs to use Go 1.20

* fix(go): linter warnings for Go 1.20 update
2023-05-30 10:31:43 -07:00
Gabe Kangas
a3e890ff7a
Fix linter errors to reflect update to Go 1.20 2023-05-28 12:38:51 -07:00
Gabe Kangas
f40135dbf2
fix: disable redirects to guard against possible SSRFs 2023-04-24 17:46:58 -07:00
Gabe Kangas
3f3cb13405
Add followers insert/query test 2023-03-17 21:11:00 -07:00
Meisam
a7080a1fc1
validate response of federation APIs (#2408)
* validate json responses

* update deps

* tmp disable header check

* log all the webfinger fails

refactor and filter more malformed requests

* don't set incorrect serverURL strings

* test failing through admin api

* fix server url in fedi tests

* check response.text

* validate json/xml response of all apis

test Content-Type of api response and cleanup

* improve logs

* fix rebase

* cleanup json parser in api tests

* mark the api tests performed by admin

* Separate check for reading and format of serverURL

* test /federation/user/ with wrong username in ci
2022-12-10 21:10:10 -08:00
Meisam
43560cc65b
fix webfinger responses according to the specs (#2397)
* webfinger query with no resource should get 400

* check valid webfinger query

* test webfinger query

... without acct: or with wrong server

* add test for invalid user query from webfinger

* reorder the tests to decouple from state

cleanup
2022-12-07 16:26:06 -08:00
Gabe Kangas
0ecaf11a25
Merge remote-tracking branch 'origin/develop' into webv2 2022-11-29 16:37:29 -08:00
Gabe Kangas
12838949f8
Update tests to reflect new defaults 2022-11-22 12:44:21 -08:00
Gabe Kangas
3a401991cf
Explicitly set AP post as public. Closes #2112 2022-11-14 20:16:45 -08:00
John Regan
9978882b6b
activitypub: ensure Undo request has valid type (#2317) 2022-11-11 11:13:55 -08:00
Gabe Kangas
c3722256fb
Explicitly set AP post as public. Closes #2112 2022-10-28 23:25:26 -07:00
Gabe Kangas
d12f25f556
Merge branch 'develop' into webv2 2022-08-09 14:14:45 -07:00
Gabe Kangas
0a48492462
Remove unused query 2022-08-04 13:25:02 -07:00
Gabe Kangas
b2b77f5eb9
Fix creating table indexes 2022-08-03 10:31:14 -07:00
Gabe Kangas
643b54037b
Do not log inactionable error. Closes #1992 2022-08-02 12:44:24 -07:00
Gabe Kangas
506d1fa4cf
Merge remote-tracking branch 'origin/develop' into webv2 2022-07-11 21:21:07 -07:00
Gabe Kangas
2d44f86035
Add additional information to key verification error 2022-07-06 21:46:03 -07:00
Gabe Kangas
18a184eeb7
Use bundled images instead of old webroot files 2022-06-20 22:10:55 -07:00
tobi
05a134c64e
[bugfix] Fix http signatures trying to derive actor (#1956)
* add GetResolvedPublicKeyFromIRI

* verify public key using key not actor w/key

* try most common algos first

* try stated algo first

* make sure not to try an algo twice

* return errors per algorithm

* linting
2022-06-18 15:29:10 -07:00
Gabe Kangas
0f4aab24a8
Tweaks for sig verify error message 2022-06-11 15:17:43 -07:00
Andreas Nedbal
fd271b1f81
Remove doubled paragraphs around stream title in AP outbox (#1927) 2022-05-25 13:51:36 -07:00
Meisam
32ac156588
rm empty strings from services in nodeinfo (#1924) 2022-05-24 09:57:38 -07:00
Meisam
10cdf3d9b8
Add “services” and “metadata” to NodeInfo/2.0 (#1922)
* add services to nodeinfo/2.0

* add metadata to Nodeinfo/2.0
2022-05-23 19:35:29 -07:00
Meisam
d0ea430f98
fix the server name (#1907)
the name should match ^[a-z0-9-]+$
2022-05-15 20:07:34 -07:00
Gabe Kangas
b378728eba
Add mediaType to federated attachments + fix image description. For #1840 2022-04-27 16:35:36 -07:00
Gabe Kangas
a082cf3a77
Fediverse-based authentication (#1846)
* Able to authenticate user against IndieAuth. For #1273

* WIP server indieauth endpoint. For https://github.com/owncast/owncast/issues/1272

* Add migration to remove access tokens from user

* Add authenticated bool to user for display purposes

* Add indieauth modal and auth flair to display names. For #1273

* Validate URLs and display errors

* Renames, cleanups

* Handle relative auth endpoint paths. Add error handling for missing redirects.

* Disallow using display names in use by registered users. Closes #1810

* Verify code verifier via code challenge on callback

* Use relative path to authorization_endpoint

* Post-rebase fixes

* Use a timestamp instead of a bool for authenticated

* Propertly handle and display error in modal

* Use auth'ed timestamp to derive authenticated flag to display in chat

* Fediverse chat auth via OTP

* Increase validity time just in case

* Add fediverse auth into auth modal

* Text, validation, cleanup updates for fedi auth

* Fix typo

* Remove unused images

* Remove unused file

* Add chat display name to auth modal text
2022-04-22 17:23:14 -07:00
Gabe Kangas
e46f8e2a66
Troubleshoot misskey follows
Store the original follow request object and use it for approvals.
Closes #1690
2022-04-08 13:33:30 -07:00
Gabe Kangas
9b2ef76773
Move CreateSignedRequest to the activitypub/crypto package 2022-04-07 13:44:36 -07:00
Gabe Kangas
4e415f7257
CC->TO because Mastodon cares for visibility 2022-03-18 13:01:11 -07:00
Gabe Kangas
d1e39c4c1e
Force uniqueness with previews and logos on the fediverse. Closes #1777 and closes #1776 2022-03-17 13:22:44 -07:00
Gabe Kangas
5e6bc50b59
Handle pagination for the federated actions & followers responses (#1731)
* Add pagination for admin social list

* Use Paginated API for followers tab on frontend
2022-03-06 17:18:51 -08:00
Gabe Kangas
6796998124
Remove unnecessary var data in log messages. Closes #1640 2022-02-25 15:22:52 -08:00
Gabe Kangas
b084d68fb1
Clean up and consolidate AP actor resolution logic
- Consolidate Person, Service and Application to adhere to a single
  interface type.
- Add additional error checking around actor properties.
- Remove redundant IRI->Actor resolution callbacks and use only the ones
  in the ResolveIRI method.
2022-02-10 11:49:21 -08:00
Gabe Kangas
65f0673dba
Add a sanity check to make sure the actor IRI exists 2022-01-30 13:14:56 -08:00
Gabe Kangas
4e76fff0d0
Add support for resolving Application actors and fix error handling with failed resolution. Fixes #1710 2022-01-30 11:44:17 -08:00
Gabe Kangas
bd14b70679
Fix janky hashtag detection. Closes #1686 2022-01-20 20:01:05 -08:00
Gabe Kangas
bb3bbc0eaf
Demote error level 2022-01-20 17:33:42 -08:00
Gabe Kangas
a471707a54
Fix misskey-specific error of existing-but-null avatar. Closes #1689 2022-01-20 14:56:04 -08:00
Gabe Kangas
9a875722b1
Add server URL to profile data. Closes https://github.com/owncast/owncast/issues/1675 2022-01-17 20:01:58 -08:00
Gabe Kangas
01d83064da
Make acct webfinger prefix optional. Closes #1662" 2022-01-12 19:56:55 -08:00
Gabe Kangas
9eecf1c902
Handle create requests but immediately throw an error that we ignore them 2022-01-12 18:42:33 -08:00
Gabe Kangas
24a57f9076
Small cleanup 2022-01-12 15:16:24 -08:00