aboutsummaryrefslogtreecommitdiff
path: root/fedauth.go
blob: 3f403e77a0823df770b7f346c3ef231d63825cf0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
package main

import (
	"bufio"
	"context"
	"errors"
	"io"
	"net/http"
	"net/url"
	"strings"

	"github.com/jackc/pgx/v5"
)

func check_and_update_federated_user_status(ctx context.Context, user_id int, service, remote_username, pubkey string) (bool, error) {
	switch service {
	case "sr.ht":
		username_escaped := url.PathEscape(remote_username)

		resp, err := http.Get("https://meta.sr.ht/~" + username_escaped + ".keys")
		if err != nil {
			return false, err
		}

		defer func() {
			_ = resp.Body.Close()
		}()
		buf := bufio.NewReader(resp.Body)

		matched := false
		for {
			line, err := buf.ReadString('\n')
			if errors.Is(err, io.EOF) {
				break
			} else if err != nil {
				return false, err
			}

			line_split := strings.Split(line, " ")
			if len(line_split) < 2 {
				continue
			}
			line = strings.Join(line_split[:2], " ")

			if line == pubkey {
				matched = true
				break
			}
		}
		if !matched {
			return false, nil
		}

		var tx pgx.Tx
		if tx, err = database.Begin(ctx); err != nil {
			return false, err
		}
		defer func() {
			_ = tx.Rollback(ctx)
		}()
		if _, err = tx.Exec(ctx, `UPDATE users SET type = 'federated' WHERE id = $1 AND type = 'pubkey_only'`, user_id); err != nil {
			return false, err
		}
		if _, err = tx.Exec(ctx, `INSERT INTO federated_identities (user_id, service, remote_username) VALUES ($1, $2, $3)`, user_id, service, remote_username); err != nil {
			return false, err
		}
		if err = tx.Commit(ctx); err != nil {
			return false, err
		}

		return true, nil
	default:
		return false, errors.New("unknown federated service")
	}
}