Leatherface/mastodon
0
0
Fork 0
mirror of https://github.com/glitch-soc/mastodon.git synced 2026-03-29 03:00:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

Only persist a collection item's approval URI once it is verified (#38255)

Browse Source
This commit is contained in:
David Roetzel
2026-03-17 16:14:30 +01:00
committed by GitHub
parent b9d25bde3e
commit 96c93ba835
8 changed files with 24 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/services/activitypub/verify_featured_item_service.rb
View File

@@ -3,23 +3,23 @@
class ActivityPub::VerifyFeaturedItemService
include JsonLdHelper
def call(collection_item)
def call(collection_item, approval_uri)
@collection_item = collection_item
@authorization = fetch_resource(@collection_item.approval_uri, true, raise_on_error: :temporary)
@authorization = fetch_resource(approval_uri, true, raise_on_error: :temporary)
if @authorization.nil?
@collection_item.update!(state: :rejected)
return
end
return if non_matching_uri_hosts?(@collection_item.approval_uri, @authorization['interactionTarget'])
return if non_matching_uri_hosts?(approval_uri, @authorization['interactionTarget'])
return unless matching_type? && matching_collection_uri?
account = Account.where(uri: @collection_item.object_uri).first
account ||= ActivityPub::FetchRemoteAccountService.new.call(@collection_item.object_uri)
return if account.blank?
@collection_item.update!(account:, state: :accepted)
@collection_item.update!(account:, approval_uri:, state: :accepted)
end
private