142 lines
4.6 KiB
TypeScript
142 lines
4.6 KiB
TypeScript
import validator from 'validator'
|
|
import { CONSTRAINTS_FIELDS } from '../../../initializers/constants'
|
|
import { exists, isArray, isDateValid } from '../misc'
|
|
import { isActivityPubUrlValid, isBaseActivityValid, setValidAttributedTo } from './misc'
|
|
import { isHostValid } from '../servers'
|
|
import { peertubeTruncate } from '@server/helpers/core-utils'
|
|
|
|
function isActorEndpointsObjectValid (endpointObject: any) {
|
|
if (endpointObject?.sharedInbox) {
|
|
return isActivityPubUrlValid(endpointObject.sharedInbox)
|
|
}
|
|
|
|
// Shared inbox is optional
|
|
return true
|
|
}
|
|
|
|
function isActorPublicKeyObjectValid (publicKeyObject: any) {
|
|
return isActivityPubUrlValid(publicKeyObject.id) &&
|
|
isActivityPubUrlValid(publicKeyObject.owner) &&
|
|
isActorPublicKeyValid(publicKeyObject.publicKeyPem)
|
|
}
|
|
|
|
function isActorTypeValid (type: string) {
|
|
return type === 'Person' || type === 'Application' || type === 'Group' || type === 'Service' || type === 'Organization'
|
|
}
|
|
|
|
function isActorPublicKeyValid (publicKey: string) {
|
|
return exists(publicKey) &&
|
|
typeof publicKey === 'string' &&
|
|
publicKey.startsWith('-----BEGIN PUBLIC KEY-----') &&
|
|
publicKey.includes('-----END PUBLIC KEY-----') &&
|
|
validator.isLength(publicKey, CONSTRAINTS_FIELDS.ACTORS.PUBLIC_KEY)
|
|
}
|
|
|
|
const actorNameAlphabet = '[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\\-_.:]'
|
|
const actorNameRegExp = new RegExp(`^${actorNameAlphabet}+$`)
|
|
function isActorPreferredUsernameValid (preferredUsername: string) {
|
|
return exists(preferredUsername) && validator.matches(preferredUsername, actorNameRegExp)
|
|
}
|
|
|
|
function isActorPrivateKeyValid (privateKey: string) {
|
|
return exists(privateKey) &&
|
|
typeof privateKey === 'string' &&
|
|
privateKey.startsWith('-----BEGIN RSA PRIVATE KEY-----') &&
|
|
// Sometimes there is a \n at the end, so just assert the string contains the end mark
|
|
privateKey.includes('-----END RSA PRIVATE KEY-----') &&
|
|
validator.isLength(privateKey, CONSTRAINTS_FIELDS.ACTORS.PRIVATE_KEY)
|
|
}
|
|
|
|
function isActorFollowingCountValid (value: string) {
|
|
return exists(value) && validator.isInt('' + value, { min: 0 })
|
|
}
|
|
|
|
function isActorFollowersCountValid (value: string) {
|
|
return exists(value) && validator.isInt('' + value, { min: 0 })
|
|
}
|
|
|
|
function isActorDeleteActivityValid (activity: any) {
|
|
return isBaseActivityValid(activity, 'Delete')
|
|
}
|
|
|
|
function sanitizeAndCheckActorObject (actor: any) {
|
|
normalizeActor(actor)
|
|
|
|
return exists(actor) &&
|
|
isActivityPubUrlValid(actor.id) &&
|
|
isActorTypeValid(actor.type) &&
|
|
isActivityPubUrlValid(actor.inbox) &&
|
|
isActorPreferredUsernameValid(actor.preferredUsername) &&
|
|
isActivityPubUrlValid(actor.url) &&
|
|
isActorPublicKeyObjectValid(actor.publicKey) &&
|
|
isActorEndpointsObjectValid(actor.endpoints) &&
|
|
|
|
(!actor.outbox || isActivityPubUrlValid(actor.outbox)) &&
|
|
(!actor.following || isActivityPubUrlValid(actor.following)) &&
|
|
(!actor.followers || isActivityPubUrlValid(actor.followers)) &&
|
|
|
|
setValidAttributedTo(actor) &&
|
|
setValidDescription(actor) &&
|
|
// If this is a group (a channel), it should be attributed to an account
|
|
// In PeerTube we use this to attach a video channel to a specific account
|
|
(actor.type !== 'Group' || actor.attributedTo.length !== 0)
|
|
}
|
|
|
|
function normalizeActor (actor: any) {
|
|
if (!actor) return
|
|
|
|
if (!actor.url) {
|
|
actor.url = actor.id
|
|
} else if (typeof actor.url !== 'string') {
|
|
actor.url = actor.url.href || actor.url.url
|
|
}
|
|
|
|
if (!isDateValid(actor.published)) actor.published = undefined
|
|
|
|
if (actor.summary && typeof actor.summary === 'string') {
|
|
actor.summary = peertubeTruncate(actor.summary, { length: CONSTRAINTS_FIELDS.USERS.DESCRIPTION.max })
|
|
|
|
if (actor.summary.length < CONSTRAINTS_FIELDS.USERS.DESCRIPTION.min) {
|
|
actor.summary = null
|
|
}
|
|
}
|
|
}
|
|
|
|
function isValidActorHandle (handle: string) {
|
|
if (!exists(handle)) return false
|
|
|
|
const parts = handle.split('@')
|
|
if (parts.length !== 2) return false
|
|
|
|
return isHostValid(parts[1])
|
|
}
|
|
|
|
function areValidActorHandles (handles: string[]) {
|
|
return isArray(handles) && handles.every(h => isValidActorHandle(h))
|
|
}
|
|
|
|
function setValidDescription (obj: any) {
|
|
if (!obj.summary) obj.summary = null
|
|
|
|
return true
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
export {
|
|
normalizeActor,
|
|
actorNameAlphabet,
|
|
areValidActorHandles,
|
|
isActorEndpointsObjectValid,
|
|
isActorPublicKeyObjectValid,
|
|
isActorTypeValid,
|
|
isActorPublicKeyValid,
|
|
isActorPreferredUsernameValid,
|
|
isActorPrivateKeyValid,
|
|
isActorFollowingCountValid,
|
|
isActorFollowersCountValid,
|
|
isActorDeleteActivityValid,
|
|
sanitizeAndCheckActorObject,
|
|
isValidActorHandle
|
|
}
|