Post URIs and host-meta

1 files changed, 2 insertions, 127 deletions

diff --git a/users/views/identity.py b/users/views/identity.py
index d4e1155..5d11d63 100644
--- a/users/views/identity.py
+++ b/users/views/identity.py
@@ -1,33 +1,19 @@
-import json
 import string
 
-from asgiref.sync import async_to_sync
 from django import forms
 from django.conf import settings
 from django.contrib.auth.decorators import login_required
-from django.http import Http404, HttpResponse, HttpResponseBadRequest, JsonResponse
+from django.http import Http404
 from django.shortcuts import redirect
 from django.utils.decorators import method_decorator
-from django.views.decorators.csrf import csrf_exempt
 from django.views.generic import FormView, TemplateView, View
 
 from core.forms import FormHelper
-from core.ld import canonicalise
-from core.signatures import (
-    HttpSignature,
-    LDSignature,
-    VerificationError,
-    VerificationFormatError,
-)
 from users.decorators import identity_required
-from users.models import Domain, Follow, Identity, IdentityStates, InboxMessage
+from users.models import Domain, Follow, Identity, IdentityStates
 from users.shortcuts import by_handle_or_404
 
 
-class HttpResponseUnauthorized(HttpResponse):
-    status_code = 401
-
-
 class ViewIdentity(TemplateView):
 
     template_name = "identity/view.html"
@@ -151,114 +137,3 @@ class CreateIdentity(FormView):
         new_identity.users.add(self.request.user)
         new_identity.generate_keypair()
         return redirect(new_identity.urls.view)
-
-
-class Actor(View):
-    """
-    Returns the AP Actor object
-    """
-
-    def get(self, request, handle):
-        identity = by_handle_or_404(self.request, handle)
-        response = {
-            "@context": [
-                "https://www.w3.org/ns/activitystreams",
-                "https://w3id.org/security/v1",
-            ],
-            "id": identity.actor_uri,
-            "type": "Person",
-            "inbox": identity.actor_uri + "inbox/",
-            "preferredUsername": identity.username,
-            "publicKey": {
-                "id": identity.public_key_id,
-                "owner": identity.actor_uri,
-                "publicKeyPem": identity.public_key,
-            },
-            "published": identity.created.strftime("%Y-%m-%dT%H:%M:%SZ"),
-            "url": identity.urls.view_short.full(),
-        }
-        if identity.name:
-            response["name"] = identity.name
-        if identity.summary:
-            response["summary"] = identity.summary
-        return JsonResponse(canonicalise(response, include_security=True))
-
-
-@method_decorator(csrf_exempt, name="dispatch")
-class Inbox(View):
-    """
-    AP Inbox endpoint
-    """
-
-    def post(self, request, handle):
-        # Load the LD
-        document = canonicalise(json.loads(request.body), include_security=True)
-        # Find the Identity by the actor on the incoming item
-        # This ensures that the signature used for the headers matches the actor
-        # described in the payload.
-        identity = Identity.by_actor_uri(document["actor"], create=True)
-        if not identity.public_key:
-            # See if we can fetch it right now
-            async_to_sync(identity.fetch_actor)()
-        if not identity.public_key:
-            print("Cannot get actor")
-            return HttpResponseBadRequest("Cannot retrieve actor")
-        # If there's a "signature" payload, verify against that
-        if "signature" in document:
-            try:
-                LDSignature.verify_signature(document, identity.public_key)
-            except VerificationFormatError as e:
-                print("Bad LD signature format:", e.args[0])
-                return HttpResponseBadRequest(e.args[0])
-            except VerificationError:
-                print("Bad LD signature")
-                return HttpResponseUnauthorized("Bad signature")
-        # Otherwise, verify against the header (assuming it's the same actor)
-        else:
-            try:
-                HttpSignature.verify_request(
-                    request,
-                    identity.public_key,
-                )
-            except VerificationFormatError as e:
-                print("Bad HTTP signature format:", e.args[0])
-                return HttpResponseBadRequest(e.args[0])
-            except VerificationError:
-                print("Bad HTTP signature")
-                return HttpResponseUnauthorized("Bad signature")
-        # Hand off the item to be processed by the queue
-        InboxMessage.objects.create(message=document)
-        return HttpResponse(status=202)
-
-
-class Webfinger(View):
-    """
-    Services webfinger requests
-    """
-
-    def get(self, request):
-        resource = request.GET.get("resource")
-        if not resource.startswith("acct:"):
-            raise Http404("Not an account resource")
-        handle = resource[5:].replace("testfedi", "feditest")
-        identity = by_handle_or_404(request, handle)
-        return JsonResponse(
-            {
-                "subject": f"acct:{identity.handle}",
-                "aliases": [
-                    identity.urls.view_short.full(),
-                ],
-                "links": [
-                    {
-                        "rel": "http://webfinger.net/rel/profile-page",
-                        "type": "text/html",
-                        "href": identity.urls.view_short.full(),
-                    },
-                    {
-                        "rel": "self",
-                        "type": "application/activity+json",
-                        "href": identity.actor_uri,
-                    },
-                ],
-            }
-        )