71 lines
1.6 KiB
Ruby
71 lines
1.6 KiB
Ruby
|
# frozen_string_literal: true
|
||
|
|
|
||
|
|
class Request
|
||
|
|
REQUEST_TARGET = '(request-target)'
|
||
|
|
|
||
|
|
include RoutingHelper
|
||
|
|
|
||
|
|
def initialize(verb, url, options = {})
|
||
|
|
@verb = verb
|
||
|
|
@url = Addressable::URI.parse(url).normalize
|
||
|
|
@options = options
|
||
|
|
@headers = {}
|
||
|
|
|
||
|
|
set_common_headers!
|
||
|
|
end
|
||
|
|
|
||
|
|
def on_behalf_of(account)
|
||
|
|
raise ArgumentError unless account.local?
|
||
|
|
@account = account
|
||
|
|
end
|
||
|
|
|
||
|
|
def add_headers(new_headers)
|
||
|
|
@headers.merge!(new_headers)
|
||
|
|
end
|
||
|
|
|
||
|
|
def perform
|
||
|
|
http_client.headers(headers).public_send(@verb, @url.to_s, @options)
|
||
|
|
end
|
||
|
|
|
||
|
|
def headers
|
||
|
|
(@account ? @headers.merge('Signature' => signature) : @headers).without(REQUEST_TARGET)
|
||
|
|
end
|
||
|
|
|
||
|
|
private
|
||
|
|
|
||
|
|
def set_common_headers!
|
||
|
|
@headers[REQUEST_TARGET] = "#{@verb} #{@url.path}"
|
||
|
|
@headers['User-Agent'] = user_agent
|
||
|
|
@headers['Host'] = @url.host
|
||
|
|
@headers['Date'] = Time.now.utc.httpdate
|
||
|
|
end
|
||
|
|
|
||
|
|
def signature
|
||
|
|
key_id = @account.to_webfinger_s
|
||
|
|
algorithm = 'rsa-sha256'
|
||
|
|
signature = Base64.strict_encode64(@account.keypair.sign(OpenSSL::Digest::SHA256.new, signed_string))
|
||
|
|
|
||
|
|
"keyId=\"#{key_id}\",algorithm=\"#{algorithm}\",headers=\"#{signed_headers}\",signature=\"#{signature}\""
|
||
|
|
end
|
||
|
|
|
||
|
|
def signed_string
|
||
|
|
@headers.map { |key, value| "#{key.downcase}: #{value}" }.join("\n")
|
||
|
|
end
|
||
|
|
|
||
|
|
def signed_headers
|
||
|
|
@headers.keys.join(' ').downcase
|
||
|
|
end
|
||
|
|
|
||
|
|
def user_agent
|
||
|
|
@user_agent ||= "#{HTTP::Request::USER_AGENT} (Mastodon/#{Mastodon::Version}; +#{root_url})"
|
||
|
|
end
|
||
|
|
|
||
|
|
def timeout
|
||
|
|
{ write: 10, connect: 10, read: 10 }
|
||
|
|
end
|
||
|
|
|
||
|
|
def http_client
|
||
|
|
HTTP.timeout(:per_operation, timeout).follow
|
||
|
|
end
|
||
|
|
end
|