Owner decision (2026-10-03, "A remote account deletes itself"): its posts are kept but
hidden everywhere.
- Post.AuthorGone (additive bool). DeleteHandler's actor-delete branch sets it on every
post whose ActorURI is the actor (one update-many), besides dropping its follows and
timeline rows as before. RemotePosts.Build sets it on a post stored later for an
account already marked Deleted.
- One rule in VisibilityPolicy: IsShown (not deleted, author not gone), IsPublic and
CanSee exclude AuthorGone, plus Shown(post) for loaded posts.
- Lookups by id answer 404 through CanSee (statuses/:id and every sub-route, context,
bookmarks, favourites, polls, reactions, search); provenance, account statuses,
home/public/tag timelines, notifications, conversations, reblogged_by, the clientapi
home and post/DM lists, a community's outbox and our Announces filter on IsShown or
IsPublic; the Mastodon mapper never renders a hidden post or a boost of one.
Tests (30 new):
- AuthorGoneTests: the rule, the handler (posts kept, boosts included, follows and rows
gone), a post fetched after the delete, and 20 Mastodon/ActivityPub lookups over HTTP
seen before and hidden after.
- InboxGapTests: actor Update refresh (name, sanitised summary, key rotation in place
and to a new key id) even with an older `updated`; Undo{Follow} by activity id and by
object; Reject of our QuoteRequest (and a stranger's ignored); group-wrapped
Announce{Like} and Announce{Undo{Like}}; a locked persona's pending follow,
FollowRequest notification, and Decide accepting and rejecting with the original Follow.
- JobHandlerTests: AncestorsJobHandler up to its depth limit; PollRefreshJob and
PollCloseJob (local and remote polls); InstanceDescriber from a peer's NodeInfo and
the weekly dedupe through ObjectRecords; LinkPreviews for public posts only;
DeliveryJobHandler outcomes (2xx, 404/410, 429/503 with Retry-After in seconds and as
a date, 5xx) and a signature and Digest the peer can verify; MediaJanitor.Sweep;
OAuthPruner.Prune.
- MigrationTests: _003, _004, _006 and _007 on seeded rows.
- PublicPagesTests: /@user and /@user/{id} (visibility, junk ids, exact CSP,
Referrer-Policy and nosniff), circle 404, community page, the instance actor,
ActivityPub redirects, and markup escaped in posts, titles and bios.
Production changes besides the rule:
- LinkPreviews.Handle re-checks that a post is still shown and public (the rule
Wanted applies) before fetching anything; before, only enqueueing checked it.
- The legacy /clientapi post and DM lists no longer return soft-deleted posts.
- MediaJanitor.Sweep and OAuthPruner.Prune are the loop bodies, now public and tested.
- InstanceDescriber.Address: a protected virtual identity seam so a test can point
the https NodeInfo addresses at a plain-http peer; production behaviour unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ELjqpznMFMNrJoJUj6K5p2
184 lines
7.4 KiB
C#
184 lines
7.4 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
using MongoDB.Entities;
|
|
|
|
using PrivaPub.Api.Mastodon.Infrastructure;
|
|
using PrivaPub.Domain.Privacy;
|
|
using PrivaPub.Federation.Objects;
|
|
using PrivaPub.Models.Federation;
|
|
using PrivaPub.Models.Jobs;
|
|
using PrivaPub.Models.Post;
|
|
using PrivaPub.StaticServices;
|
|
|
|
using System.Text.Json.Nodes;
|
|
|
|
using PostEntity = PrivaPub.Models.Post.Post;
|
|
|
|
namespace PrivaPub.Api.Mastodon.Controllers
|
|
{
|
|
public class ProvenanceController : MastodonController
|
|
{
|
|
readonly DbEntities _dbEntities;
|
|
|
|
public ProvenanceController(DbEntities dbEntities) => _dbEntities = dbEntities;
|
|
|
|
[HttpGet("/api/privapub/v1/statuses/{id}/provenance"), Scope("read:statuses", requiresUser: false), AllowAnonymous]
|
|
public async Task<IActionResult> Status(string id, CancellationToken token)
|
|
{
|
|
var post = await _dbEntities.Posts.Match(p => p.ID == id).Match(VisibilityPolicy.IsShown).ExecuteFirstAsync(token);
|
|
if (post?.ReblogOfPostId != default)
|
|
post = await _dbEntities.Posts.Match(p => p.ID == post.ReblogOfPostId).Match(VisibilityPolicy.IsShown).ExecuteFirstAsync(token);
|
|
if (post == default || post.Visibility == PostVisibility.LocalGeo || !await VisibilityPolicy.CanSee(post, MyId, token))
|
|
return NotFoundError();
|
|
if (!post.IsFederatedCopy)
|
|
return Json(new Provenance { ObjectUri = post.ObjectURI, Url = post.Url, Path = "local" });
|
|
|
|
var record = await DB.Default.Find<ObjectRecord>().Match(r => r.PostId == post.ID).ExecuteFirstAsync(token)
|
|
?? await DB.Default.Find<ObjectRecord>().Match(r => r.ObjectURI == post.ObjectURI).ExecuteFirstAsync(token);
|
|
var host = record?.Host ?? (Uri.TryCreate(post.ObjectURI, UriKind.Absolute, out var uri) ? uri.Host.ToLowerInvariant() : default);
|
|
var instance = host == default ? default : await DB.Default.Find<RemoteInstance>().Match(i => i.Host == host).ExecuteFirstAsync(token);
|
|
return Json(Describe(post, record, instance));
|
|
}
|
|
|
|
[HttpGet("/api/privapub/v1/instances/{host}"), Scope("read", requiresUser: false), AllowAnonymous]
|
|
public async Task<IActionResult> Instance(string host, CancellationToken token)
|
|
{
|
|
host = host?.Trim().ToLowerInvariant();
|
|
var instance = await DB.Default.Find<RemoteInstance>().Match(i => i.Host == host).ExecuteFirstAsync(token);
|
|
return instance == default ? NotFoundError() : Json(Describe(instance));
|
|
}
|
|
|
|
static Provenance Describe(PostEntity post, ObjectRecord record, RemoteInstance instance)
|
|
{
|
|
var raw = record?.Raw == default ? default : JsonNode.Parse(record.Raw) as JsonObject;
|
|
return new Provenance
|
|
{
|
|
ObjectUri = post.ObjectURI,
|
|
ObjectType = record?.ObjectType ?? post.ObjectType,
|
|
Url = post.Url,
|
|
Path = record == default ? "unrecorded" : record.Path == ObjectPath.Delivered ? "delivered" : "fetched",
|
|
Refetched = record?.Refetched == true,
|
|
Activity = record?.ActivityId == default ? default : new ProvenanceActivity
|
|
{
|
|
Id = record.ActivityId, Type = record.ActivityType, Actor = record.ActivityActorURI
|
|
},
|
|
Inbox = record?.Inbox,
|
|
FetchedBy = record?.Path == ObjectPath.Fetched ? "instance-actor" : default,
|
|
Signature = record?.KeyId == default || record.Path == ObjectPath.Fetched ? default : new ProvenanceSignature
|
|
{
|
|
Scheme = record.SignatureScheme, KeyId = record.KeyId, Algorithm = record.Algorithm, Headers = record.SignedHeaders
|
|
},
|
|
ReceivedAt = record == default ? default : MastodonJson.Time(record.ReceivedAt),
|
|
Published = record?.Published is { } published ? MastodonJson.Time(published) : default,
|
|
Updated = record?.Updated is { } updated ? MastodonJson.Time(updated) : default,
|
|
Extensions = record?.Extensions ?? ObjectFeatures.Detect(raw),
|
|
ContextNamespaces = record?.ContextNamespaces ?? ObjectFeatures.Namespaces(raw, record?.ActivityContext),
|
|
Raw = raw,
|
|
RawBytes = record?.RawBytes ?? 0,
|
|
RawHash = record?.RawHash,
|
|
RawTruncated = record?.RawTruncated == true,
|
|
Revisions = record?.Revisions.Select(r => new ProvenanceRevision
|
|
{
|
|
ActivityId = r.ActivityId,
|
|
Updated = r.Updated is { } at ? MastodonJson.Time(at) : default,
|
|
ReceivedAt = MastodonJson.Time(r.ReceivedAt),
|
|
RawHash = r.RawHash,
|
|
Raw = r.Raw == default ? default : JsonNode.Parse(r.Raw)
|
|
}).ToList() ?? new(),
|
|
Instance = instance == default ? default : Describe(instance)
|
|
};
|
|
}
|
|
|
|
static InstanceDescription Describe(RemoteInstance instance) => new()
|
|
{
|
|
Host = instance.Host,
|
|
Software = instance.Software,
|
|
Version = instance.SoftwareVersion,
|
|
NodeName = instance.NodeName,
|
|
Protocols = instance.Protocols ?? new(),
|
|
OpenRegistrations = instance.OpenRegistrations,
|
|
DescribedAt = instance.DescribedAt is { } described ? MastodonJson.Time(described) : default,
|
|
DescriptionError = instance.DescriptionError,
|
|
NodeInfo = instance.NodeInfo == default ? default : JsonNode.Parse(instance.NodeInfo),
|
|
Delivery = new InstanceDelivery
|
|
{
|
|
ConsecutiveFailures = instance.ConsecutiveFailures,
|
|
UnavailableUntil = instance.UnavailableUntil is { } until ? MastodonJson.Time(until) : default,
|
|
LastSuccessAt = instance.LastSuccessAt is { } success ? MastodonJson.Time(success) : default,
|
|
LastFailureAt = instance.LastFailureAt is { } failure ? MastodonJson.Time(failure) : default
|
|
}
|
|
};
|
|
|
|
public class Provenance
|
|
{
|
|
public string ObjectUri { get; set; }
|
|
public string ObjectType { get; set; }
|
|
public string Url { get; set; }
|
|
public string Path { get; set; }
|
|
public bool Refetched { get; set; }
|
|
public ProvenanceActivity Activity { get; set; }
|
|
public string Inbox { get; set; }
|
|
public string FetchedBy { get; set; }
|
|
public ProvenanceSignature Signature { get; set; }
|
|
public string ReceivedAt { get; set; }
|
|
public string Published { get; set; }
|
|
public string Updated { get; set; }
|
|
public List<string> Extensions { get; set; } = new();
|
|
public List<string> ContextNamespaces { get; set; } = new();
|
|
public JsonNode Raw { get; set; }
|
|
public int RawBytes { get; set; }
|
|
public string RawHash { get; set; }
|
|
public bool RawTruncated { get; set; }
|
|
public List<ProvenanceRevision> Revisions { get; set; } = new();
|
|
public InstanceDescription Instance { get; set; }
|
|
}
|
|
|
|
public class ProvenanceActivity
|
|
{
|
|
public string Id { get; set; }
|
|
public string Type { get; set; }
|
|
public string Actor { get; set; }
|
|
}
|
|
|
|
public class ProvenanceSignature
|
|
{
|
|
public string Scheme { get; set; }
|
|
public string KeyId { get; set; }
|
|
public string Algorithm { get; set; }
|
|
public List<string> Headers { get; set; } = new();
|
|
}
|
|
|
|
public class ProvenanceRevision
|
|
{
|
|
public string ActivityId { get; set; }
|
|
public string Updated { get; set; }
|
|
public string ReceivedAt { get; set; }
|
|
public string RawHash { get; set; }
|
|
public JsonNode Raw { get; set; }
|
|
}
|
|
|
|
public class InstanceDescription
|
|
{
|
|
public string Host { get; set; }
|
|
public string Software { get; set; }
|
|
public string Version { get; set; }
|
|
public string NodeName { get; set; }
|
|
public List<string> Protocols { get; set; } = new();
|
|
public bool? OpenRegistrations { get; set; }
|
|
public string DescribedAt { get; set; }
|
|
public string DescriptionError { get; set; }
|
|
public JsonNode NodeInfo { get; set; }
|
|
public InstanceDelivery Delivery { get; set; }
|
|
}
|
|
|
|
public class InstanceDelivery
|
|
{
|
|
public int ConsecutiveFailures { get; set; }
|
|
public string UnavailableUntil { get; set; }
|
|
public string LastSuccessAt { get; set; }
|
|
public string LastFailureAt { get; set; }
|
|
}
|
|
}
|
|
}
|