package main import ( "database/sql" "errors" "fmt" "net/http" "net/http/httptest" "strings" "time" "git.jlel.se/jlelse/GoBlog/pkgs/contenttype" ) type webmentionStatus string const ( webmentionStatusVerified webmentionStatus = "verified" webmentionStatusApproved webmentionStatus = "approved" webmentionPath = "/webmention" ) type mention struct { ID int Source string Target string Created int64 Title string Content string Author string Status webmentionStatus } func (a *goBlog) initWebmention() { // Add hooks hookFunc := func(p *post) { if p.Status == statusPublished { _ = a.sendWebmentions(p) } } a.pPostHooks = append(a.pPostHooks, hookFunc) a.pUpdateHooks = append(a.pUpdateHooks, hookFunc) a.pDeleteHooks = append(a.pDeleteHooks, hookFunc) // Start verifier a.initWebmentionQueue() } func (a *goBlog) handleWebmention(w http.ResponseWriter, r *http.Request) { m, err := extractMention(r) if err != nil { a.serveError(w, r, err.Error(), http.StatusBadRequest) return } if !isAllowedHost(httptest.NewRequest(http.MethodGet, m.Target, nil), a.cfg.Server.publicHostname) { a.serveError(w, r, "target not allowed", http.StatusBadRequest) return } if err = a.queueMention(m); err != nil { a.serveError(w, r, err.Error(), http.StatusInternalServerError) return } w.WriteHeader(http.StatusAccepted) _, _ = fmt.Fprint(w, "Webmention accepted") } func extractMention(r *http.Request) (*mention, error) { if !strings.Contains(r.Header.Get(contentType), contenttype.WWWForm) { return nil, errors.New("unsupported Content-Type") } err := r.ParseForm() if err != nil { return nil, err } source := r.Form.Get("source") target := unescapedPath(r.Form.Get("target")) if source == "" || target == "" || !isAbsoluteURL(source) || !isAbsoluteURL(target) { return nil, errors.New("invalid request") } return &mention{ Source: source, Target: target, Created: time.Now().Unix(), }, nil } func (db *database) webmentionExists(source, target string) bool { result := 0 row, err := db.queryRow("select exists(select 1 from webmentions where source = ? and target = ?)", source, target) if err != nil { return false } if err = row.Scan(&result); err != nil { return false } return result == 1 } func (a *goBlog) createWebmention(source, target string) (err error) { return a.queueMention(&mention{ Source: source, Target: unescapedPath(target), Created: time.Now().Unix(), }) } func (db *database) deleteWebmention(id int) error { _, err := db.exec("delete from webmentions where id = @id", sql.Named("id", id)) return err } func (db *database) approveWebmention(id int) error { _, err := db.exec("update webmentions set status = ? where id = ?", webmentionStatusApproved, id) return err } func (a *goBlog) reverifyWebmention(id int) error { m, err := a.db.getWebmentions(&webmentionsRequestConfig{ id: id, limit: 1, }) if err != nil { return err } if len(m) > 0 { err = a.queueMention(m[0]) } return err } type webmentionsRequestConfig struct { target string status webmentionStatus sourcelike string id int asc bool offset, limit int } func buildWebmentionsQuery(config *webmentionsRequestConfig) (query string, args []interface{}) { args = []interface{}{} filter := "" if config != nil { filter = "where 1 = 1" if config.target != "" { filter += " and target = @target" args = append(args, sql.Named("target", config.target)) } if config.status != "" { filter += " and status = @status" args = append(args, sql.Named("status", config.status)) } if config.sourcelike != "" { filter += " and source like @sourcelike" args = append(args, sql.Named("sourcelike", "%"+config.sourcelike+"%")) } if config.id != 0 { filter += " and id = @id" args = append(args, sql.Named("id", config.id)) } } order := "desc" if config.asc { order = "asc" } query = "select id, source, target, created, title, content, author, status from webmentions " + filter + " order by created " + order if config.limit != 0 || config.offset != 0 { query += " limit @limit offset @offset" args = append(args, sql.Named("limit", config.limit), sql.Named("offset", config.offset)) } return query, args } func (db *database) getWebmentions(config *webmentionsRequestConfig) ([]*mention, error) { mentions := []*mention{} query, args := buildWebmentionsQuery(config) rows, err := db.query(query, args...) if err != nil { return nil, err } for rows.Next() { m := &mention{} err = rows.Scan(&m.ID, &m.Source, &m.Target, &m.Created, &m.Title, &m.Content, &m.Author, &m.Status) if err != nil { return nil, err } mentions = append(mentions, m) } return mentions, nil } func (db *database) getWebmentionsByAddress(address string) []*mention { mentions, _ := db.getWebmentions(&webmentionsRequestConfig{ target: address, status: webmentionStatusApproved, asc: true, }) return mentions } func (db *database) countWebmentions(config *webmentionsRequestConfig) (count int, err error) { query, params := buildWebmentionsQuery(config) query = "select count(*) from (" + query + ")" row, err := db.queryRow(query, params...) if err != nil { return } err = row.Scan(&count) return }