1 files changed, 84 insertions, 0 deletions

diff --git a/server/server/controllers/activitypub/inbox.ts b/server/server/controllers/activitypub/inbox.ts
new file mode 100644
index 000000000..6473cea06
--- /dev/null
+++ b/server/server/controllers/activitypub/inbox.ts
@@ -0,0 +1,84 @@
+import express from 'express'
+import { Activity, ActivityPubCollection, ActivityPubOrderedCollection, HttpStatusCode, RootActivity } from '@peertube/peertube-models'
+import { InboxManager } from '@server/lib/activitypub/inbox-manager.js'
+import { isActivityValid } from '../../helpers/custom-validators/activitypub/activity.js'
+import { logger } from '../../helpers/logger.js'
+import {
+  activityPubRateLimiter,
+  asyncMiddleware,
+  checkSignature,
+  ensureIsLocalChannel,
+  localAccountValidator,
+  signatureValidator,
+  videoChannelsNameWithHostValidator
+} from '../../middlewares/index.js'
+import { activityPubValidator } from '../../middlewares/validators/activitypub/activity.js'
+
+const inboxRouter = express.Router()
+
+inboxRouter.post('/inbox',
+  activityPubRateLimiter,
+  signatureValidator,
+  asyncMiddleware(checkSignature),
+  asyncMiddleware(activityPubValidator),
+  inboxController
+)
+
+inboxRouter.post('/accounts/:name/inbox',
+  activityPubRateLimiter,
+  signatureValidator,
+  asyncMiddleware(checkSignature),
+  asyncMiddleware(localAccountValidator),
+  asyncMiddleware(activityPubValidator),
+  inboxController
+)
+
+inboxRouter.post('/video-channels/:nameWithHost/inbox',
+  activityPubRateLimiter,
+  signatureValidator,
+  asyncMiddleware(checkSignature),
+  asyncMiddleware(videoChannelsNameWithHostValidator),
+  ensureIsLocalChannel,
+  asyncMiddleware(activityPubValidator),
+  inboxController
+)
+
+// ---------------------------------------------------------------------------
+
+export {
+  inboxRouter
+}
+
+// ---------------------------------------------------------------------------
+
+function inboxController (req: express.Request, res: express.Response) {
+  const rootActivity: RootActivity = req.body
+  let activities: Activity[]
+
+  if ([ 'Collection', 'CollectionPage' ].includes(rootActivity.type)) {
+    activities = (rootActivity as ActivityPubCollection).items
+  } else if ([ 'OrderedCollection', 'OrderedCollectionPage' ].includes(rootActivity.type)) {
+    activities = (rootActivity as ActivityPubOrderedCollection<Activity>).orderedItems
+  } else {
+    activities = [ rootActivity as Activity ]
+  }
+
+  // Only keep activities we are able to process
+  logger.debug('Filtering %d activities...', activities.length)
+  activities = activities.filter(a => isActivityValid(a))
+  logger.debug('We keep %d activities.', activities.length, { activities })
+
+  const accountOrChannel = res.locals.account || res.locals.videoChannel
+
+  logger.info('Receiving inbox requests for %d activities by %s.', activities.length, res.locals.signature.actor.url)
+
+  InboxManager.Instance.addInboxMessage({
+    activities,
+    signatureActor: res.locals.signature.actor,
+    inboxActor: accountOrChannel
+      ? accountOrChannel.Actor
+      : undefined
+  })
+
+  return res.status(HttpStatusCode.NO_CONTENT_204).end()
+}