Fix #2196 - Respond with 201 when Salmon accepted, 400 when unverified Fix #2629 - Correctly handle confirm_domain? for local accounts Unify rules for extracting author acct from XML, prefer <email>, fall back to <name> + <uri> (see also #2017, #2172)
		
			
				
	
	
		
			27 lines
		
	
	
		
			471 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			27 lines
		
	
	
		
			471 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
# frozen_string_literal: true
 | 
						|
 | 
						|
class VerifySalmonService < BaseService
 | 
						|
  include AuthorExtractor
 | 
						|
 | 
						|
  def call(payload)
 | 
						|
    body = salmon.unpack(payload)
 | 
						|
 | 
						|
    xml = Nokogiri::XML(body)
 | 
						|
    xml.encoding = 'utf-8'
 | 
						|
 | 
						|
    account = author_from_xml(xml.at_xpath('/xmlns:entry', xmlns: TagManager::XMLNS))
 | 
						|
 | 
						|
    if account.nil?
 | 
						|
      false
 | 
						|
    else
 | 
						|
      salmon.verify(payload, account.keypair)
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  private
 | 
						|
 | 
						|
  def salmon
 | 
						|
    @salmon ||= OStatus2::Salmon.new
 | 
						|
  end
 | 
						|
end
 |