- /api/v1/media and /api/v2/media (and GET/PUT /api/v1/media/:id):
images go through libvips (NetVips, its native build bundled):
autorotated, every kind of metadata dropped (EXIF, GPS, XMP, IPTC,
comments), capped at 4096 px, with a 640 px preview and a blurhash
(own encoder, the reference algorithm); animated GIFs are re-encoded;
video and audio are remuxed by ffmpeg with -map_metadata -1, never
re-encoded, and a video gets a still preview. Files get random names
under /var/lib/privapub/media, outside the web root deploys replace, and
are served at /media/files with nosniff and a sandbox CSP.
- media_ids on create and edit (four at most, the persona's own, each used
once); notes carry them as Document attachments with alt text, blurhash,
focalPoint and size; inbound attachments were already kept.
- avatar and header uploads in update_credentials, cropped to 400x400 and
1500x500, federated with Update{Person}.
- Remote media reaches clients only through /media/proxy/{hmac}/{url},
fetched by the guarded client (no SVG, 40 MB cap) and cached outside the
served root, trimmed to 5 GB; foreign avatars and headers use it too, so
a client never contacts another server.
- MediaJanitor deletes uploads left unattached for a day.
- nginx accepts 100 MB bodies on the upload endpoints only (applied on Max).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012CzABvBkbcFqoHdmi8b9WB
108 lines
3.8 KiB
C#
108 lines
3.8 KiB
C#
using Microsoft.AspNetCore.Builder;
|
|
using Microsoft.AspNetCore.Hosting;
|
|
using Microsoft.AspNetCore.Http;
|
|
using Microsoft.Extensions.Caching.Memory;
|
|
using Microsoft.Extensions.DependencyInjection;
|
|
using Microsoft.Extensions.Logging.Abstractions;
|
|
using Microsoft.Extensions.Options;
|
|
|
|
using PrivaPub.Federation.Moderation;
|
|
using PrivaPub.Infrastructure.Http;
|
|
using PrivaPub.Models.Federation;
|
|
|
|
using System.Collections.Concurrent;
|
|
|
|
namespace PrivaPub.Tests.Support
|
|
{
|
|
public sealed class Peer : IAsyncDisposable
|
|
{
|
|
readonly WebApplication _app;
|
|
readonly ConcurrentDictionary<string, string> _documents = new();
|
|
readonly ConcurrentDictionary<string, (int Status, TimeSpan Delay)> _answers = new();
|
|
readonly ConcurrentDictionary<string, (byte[] Bytes, string ContentType)> _files = new();
|
|
|
|
public int Port { get; }
|
|
public string A => $"http://127.0.0.1:{Port}";
|
|
public string B => $"http://localhost:{Port}";
|
|
public ConcurrentQueue<HttpRequestRecord> Requests { get; } = new();
|
|
|
|
Peer(WebApplication app, int port)
|
|
{
|
|
_app = app;
|
|
Port = port;
|
|
}
|
|
|
|
public static async Task<Peer> Start()
|
|
{
|
|
var builder = WebApplication.CreateSlimBuilder();
|
|
builder.WebHost.UseUrls("http://127.0.0.1:0");
|
|
var app = builder.Build();
|
|
Peer peer = default;
|
|
app.Run(async context =>
|
|
{
|
|
peer.Requests.Enqueue(new(context.Request.Method, context.Request.Path, context.Request.Headers["Signature"].ToString()));
|
|
var key = context.Request.Path.Value;
|
|
if (peer._files.TryGetValue(key, out var file))
|
|
{
|
|
context.Response.ContentType = file.ContentType;
|
|
await context.Response.Body.WriteAsync(file.Bytes);
|
|
return;
|
|
}
|
|
if (peer._answers.TryGetValue(key, out var answer))
|
|
{
|
|
if (answer.Delay > TimeSpan.Zero)
|
|
await Task.Delay(answer.Delay);
|
|
context.Response.StatusCode = answer.Status;
|
|
return;
|
|
}
|
|
if (!peer._documents.TryGetValue(key, out var document))
|
|
{
|
|
context.Response.StatusCode = StatusCodes.Status404NotFound;
|
|
return;
|
|
}
|
|
context.Response.ContentType = "application/activity+json";
|
|
await context.Response.WriteAsync(document.Replace("{A}", peer.A).Replace("{B}", peer.B));
|
|
});
|
|
await app.StartAsync();
|
|
peer = new Peer(app, new Uri(app.Urls.First()).Port);
|
|
return peer;
|
|
}
|
|
|
|
public void Serve(string path, string json) => _documents[path] = json;
|
|
|
|
public void ServeFile(string path, byte[] bytes, string contentType) => _files[path] = (bytes, contentType);
|
|
|
|
public void Answer(string path, int status, TimeSpan delay = default) => _answers[path] = (status, delay);
|
|
|
|
public static FederationHttp Http(IMemoryCache cache = default, IDomainBlocks blocks = default)
|
|
{
|
|
var options = new FederationOptions { AllowPrivateNetworks = true, AllowPlainHttp = true };
|
|
var services = new ServiceCollection();
|
|
services.AddHttpClient(FederationHttp.ClientName)
|
|
.ConfigurePrimaryHttpMessageHandler(() => SafeHttpHandlerFactory.Create(options));
|
|
return new FederationHttp(services.BuildServiceProvider().GetRequiredService<IHttpClientFactory>(),
|
|
cache ?? new MemoryCache(new MemoryCacheOptions()), new StaticOptions<FederationOptions>(options),
|
|
blocks ?? new NoBlocks(), NullLogger<FederationHttp>.Instance);
|
|
}
|
|
|
|
public async ValueTask DisposeAsync() => await _app.DisposeAsync();
|
|
}
|
|
|
|
public sealed class NoBlocks : IDomainBlocks
|
|
{
|
|
public DomainBlock Find(string host) => default;
|
|
public bool IsSuspended(string host) => false;
|
|
public Task Reload(CancellationToken token) => Task.CompletedTask;
|
|
}
|
|
|
|
public sealed record HttpRequestRecord(string Method, string Path, string Signature);
|
|
|
|
public sealed class StaticOptions<T> : IOptionsMonitor<T>
|
|
{
|
|
public StaticOptions(T value) => CurrentValue = value;
|
|
public T CurrentValue { get; }
|
|
public T Get(string name) => CurrentValue;
|
|
public IDisposable OnChange(Action<T, string> listener) => default;
|
|
}
|
|
}
|