akkoma/lib/pleroma/signature.ex
2025-02-14 22:10:25 +01:00

46 lines
1.4 KiB
Elixir

# Pleroma: A lightweight social networking server
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
# SPDX-License-Identifier: AGPL-3.0-only
defmodule Pleroma.Signature do
@behaviour HTTPSignatures.Adapter
alias Pleroma.User
alias Pleroma.User.SigningKey
require Logger
def fetch_public_key(conn) do
with %{"keyId" => kid} <- HTTPSignatures.signature_for_conn(conn),
{:ok, %SigningKey{} = sk} <- SigningKey.get_or_fetch_by_key_id(kid),
{:ok, decoded_key} <- SigningKey.public_key_decoded(sk) do
{:ok, decoded_key}
else
e ->
{:error, e}
end
end
def refetch_public_key(conn) do
with %{"keyId" => kid} <- HTTPSignatures.signature_for_conn(conn),
# TODO: force a refetch of stale keys (perhaps with a backoff time based on updated_at)
{:ok, %SigningKey{} = sk} <- SigningKey.get_or_fetch_by_key_id(kid),
{:ok, decoded_key} <- SigningKey.public_key_decoded(sk) do
{:ok, decoded_key}
else
e ->
{:error, e}
end
end
def sign(%User{} = user, headers) do
with {:ok, private_key} <- SigningKey.private_key(user) do
HTTPSignatures.sign(private_key, SigningKey.local_key_id(user.ap_id), headers)
end
end
def signed_date, do: signed_date(NaiveDateTime.utc_now())
def signed_date(%NaiveDateTime{} = date) do
Timex.lformat!(date, "{WDshort}, {0D} {Mshort} {YYYY} {h24}:{m}:{s} GMT", "en")
end
end