yetangitu/Peertube
1
0
Fork 0
mirror of https://github.com/Chocobozzz/PeerTube.git synced 2025-10-06 03:50:26 +02:00
Code Issues Releases Wiki Activity

Detect posting request in our own inbox

Browse source
This commit is contained in:
Chocobozzz 2018-02-23 15:09:12 +01:00
parent 1ee48d1903
commit 285fe7c930
No known key found for this signature in database
GPG key ID: 583A612D890159BE
3 changed files with 21 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
server/middlewares/validators/activitypub/activity.ts
View file

@ -2,16 +2,25 @@ import * as express from 'express'
import { body } from 'express-validator/check'
import { isRootActivityValid } from '../../../helpers/custom-validators/activitypub/activity'
import { logger } from '../../../helpers/logger'
import { getServerActor } from '../../../helpers/utils'
import { ActorModel } from '../../../models/activitypub/actor'
import { areValidationErrors } from '../utils'
const activityPubValidator = [
body('').custom((value, { req }) => isRootActivityValid(req.body)),
(req: express.Request, res: express.Response, next: express.NextFunction) => {
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
logger.debug('Checking activity pub parameters')
if (areValidationErrors(req, res)) return
const serverActor = await getServerActor()
const remoteActor = res.locals.signature.actor as ActorModel
if (serverActor.id === remoteActor.id) {
logger.error('Receiving request in INBOX by ourselves!', req.body)
return res.sendStatus(409)
}
return next()
}
]