forked from asonix/mastodon
Fix #2196 - Respond with 201 when Salmon accepted, 400 when unverified Fix #2629 - Correctly handle confirm_domain? for local accounts Unify rules for extracting author acct from XML, prefer <email>, fall back to <name> + <uri> (see also #2017, #2172)
26 lines
471 B
Ruby
26 lines
471 B
Ruby
# frozen_string_literal: true
|
|
|
|
class VerifySalmonService < BaseService
|
|
include AuthorExtractor
|
|
|
|
def call(payload)
|
|
body = salmon.unpack(payload)
|
|
|
|
xml = Nokogiri::XML(body)
|
|
xml.encoding = 'utf-8'
|
|
|
|
account = author_from_xml(xml.at_xpath('/xmlns:entry', xmlns: TagManager::XMLNS))
|
|
|
|
if account.nil?
|
|
false
|
|
else
|
|
salmon.verify(payload, account.keypair)
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def salmon
|
|
@salmon ||= OStatus2::Salmon.new
|
|
end
|
|
end
|