aboutsummaryrefslogblamecommitdiffhomepage
path: root/server/middlewares/validators/activitypub/activity.ts
blob: cc6acd4b1aa401a60b9d518b5aef798c0a4a9829 (plain) (tree)
1
2
3
4
5
6
7
8
9
                                  

                                                                                             
                                                                       
                                                                                     
 

                                                                                                               
 

                                                                         
                                                      
   
 
                                            
                                                
                                                                           
                                                                      
                                                        
   


               





                                                                              
import * as express from 'express'
import { isRootActivityValid } from '../../../helpers/custom-validators/activitypub/activity'
import { logger } from '../../../helpers/logger'
import { getServerActor } from '@server/models/application/application'
import { HttpStatusCode } from '../../../../shared/core-utils/miscs/http-error-codes'

async function activityPubValidator (req: express.Request, res: express.Response, next: express.NextFunction) {
  logger.debug('Checking activity pub parameters')

  if (!isRootActivityValid(req.body)) {
    logger.warn('Incorrect activity parameters.', { activity: req.body })
    return res.fail({ message: 'Incorrect activity' })
  }

  const serverActor = await getServerActor()
  const remoteActor = res.locals.signature.actor
  if (serverActor.id === remoteActor.id || remoteActor.serverId === null) {
    logger.error('Receiving request in INBOX by ourselves!', req.body)
    return res.status(HttpStatusCode.CONFLICT_409).end()
  }

  return next()
}

// ---------------------------------------------------------------------------

export {
  activityPubValidator
}