@fedify/fedify 2.4.0-dev.1988 → 2.4.0-dev.1995

package/dist/federation/handler-compound-proof.test.mjs

@@ -0,0 +1,152 @@
+import "temporal-polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { r as createRequestContext, t as createInboxContext } from "../context-CbS35fLr.mjs";
+import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
+import { t as assertEquals } from "../assert_equals-CBlRfA-_.mjs";
+import "../std__assert-CxFT0MNt.mjs";
+import { s as signRequest } from "../http-D9urSO2D.mjs";
+import { a as rsaPrivateKey3, c as rsaPublicKey3 } from "../keys-DIJNHW-Y.mjs";
+import { d as handleInbox, o as createFederation } from "../middleware-CzvJvPHK.mjs";
+import { p as signJsonLd } from "../ld-qup__MAW.mjs";
+import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
+import { t as map_local_create_note_default } from "../map-local-create-note-B0SeXJms.mjs";
+import { Create } from "@fedify/vocab";
+import { mockDocumentLoader, test } from "@fedify/fixture";
+import { encodeMultibase } from "@fedify/vocab-runtime";
+import serialize from "json-canon";
+//#region src/federation/handler-compound-proof.test.ts
+async function sha256(value) {
+	return new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value)));
+}
+async function secureDocument(unsecuredDocument, privateJwk, verificationMethod) {
+	const proofConfiguration = {
+		"@context": unsecuredDocument["@context"],
+		type: "DataIntegrityProof",
+		cryptosuite: "eddsa-jcs-2022",
+		verificationMethod,
+		proofPurpose: "assertionMethod",
+		created: "2023-02-24T23:36:38Z"
+	};
+	const proofHash = await sha256(serialize(proofConfiguration));
+	const documentHash = await sha256(serialize(unsecuredDocument));
+	const input = /* @__PURE__ */ new Uint8Array(64);
+	input.set(proofHash);
+	input.set(documentHash, proofHash.length);
+	const privateKey = await crypto.subtle.importKey("jwk", privateJwk, "Ed25519", false, ["sign"]);
+	const signature = new Uint8Array(await crypto.subtle.sign("Ed25519", privateKey, input));
+	return {
+		...unsecuredDocument,
+		proof: {
+			...proofConfiguration,
+			proofValue: new TextDecoder().decode(encodeMultibase("base58btc", signature))
+		}
+	};
+}
+function requestFor(body) {
+	return new Request("https://example.com/inbox", {
+		method: "POST",
+		body: JSON.stringify(body)
+	});
+}
+async function handle(requestOrBody, dispatched) {
+	const request = requestOrBody instanceof Request ? requestOrBody : requestFor(requestOrBody);
+	const context = createRequestContext({
+		federation: createFederation({ kv: new MemoryKvStore() }),
+		request,
+		url: new URL(request.url),
+		data: void 0,
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	});
+	const inboxListeners = new ActivityListenerSet();
+	inboxListeners.add(Create, () => {
+		if (dispatched != null) dispatched.count++;
+	});
+	return await handleInbox(request, {
+		recipient: null,
+		context,
+		inboxContextFactory() {
+			return createInboxContext({
+				...context,
+				clone: void 0
+			});
+		},
+		kv: new MemoryKvStore(),
+		kvPrefixes: {
+			activityIdempotence: ["_fedify", "activityIdempotence"],
+			publicKey: ["_fedify", "publicKey"],
+			acceptSignatureNonce: ["_fedify", "acceptSignatureNonce"]
+		},
+		actorDispatcher() {
+			return null;
+		},
+		inboxListeners,
+		onNotFound() {
+			return new Response("Not found", { status: 404 });
+		},
+		signatureTimeWindow: { minutes: 5 },
+		skipSignatureVerification: false
+	});
+}
+test("handleInbox() enforces portable compound proofs atomically", async () => {
+	const valid = structuredClone(map_local_create_note_default.documents.finalSecuredCompound);
+	assertEquals((await handle(valid)).status, 202);
+	const unsignedInner = structuredClone(map_local_create_note_default.documents.outerUnsecuredDocument);
+	delete unsignedInner.object.proof;
+	const rejected = await handle(await secureDocument(unsignedInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod));
+	assertEquals([rejected.status, await rejected.text()], [401, "Failed to verify compound portable Object Integrity Proofs."]);
+	const tamperedInner = structuredClone(map_local_create_note_default.documents.outerUnsecuredDocument);
+	tamperedInner.object.content = "Tampered";
+	assertEquals((await handle(await secureDocument(tamperedInner, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 401);
+	const changedAfterSigning = structuredClone(valid);
+	changedAfterSigning.signature = {
+		type: "RsaSignature2017",
+		creator: "https://example.com/keys/1",
+		created: "2023-02-24T23:36:38Z",
+		signatureValue: "not-a-signature"
+	};
+	assertEquals((await handle(changedAfterSigning)).status, 401);
+});
+test("handleInbox() enforces compounds after alternate outer auth", async () => {
+	const createBody = (object) => ({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/compound",
+		type: "Create",
+		actor: rsaPublicKey3.ownerId.href,
+		object
+	});
+	const validInner = structuredClone(map_local_create_note_default.documents.securedInner);
+	const unsignedInner = structuredClone(validInner);
+	delete unsignedInner.proof;
+	for (const authentication of ["http", "ld"]) {
+		const sign = async (body) => {
+			if (authentication === "http") return await signRequest(requestFor(body), rsaPrivateKey3, rsaPublicKey3.id);
+			return requestFor(await signJsonLd(body, rsaPrivateKey3, rsaPublicKey3.id, { contextLoader: mockDocumentLoader }));
+		};
+		const acceptedDispatch = { count: 0 };
+		assertEquals([(await handle(await sign(createBody(structuredClone(validInner))), acceptedDispatch)).status, acceptedDispatch.count], [202, 1]);
+		const rejectedDispatch = { count: 0 };
+		assertEquals([(await handle(await sign(createBody(structuredClone(unsignedInner))), rejectedDispatch)).status, rejectedDispatch.count], [401, 0]);
+	}
+	const proofSetInner = structuredClone(validInner);
+	proofSetInner.proof = [proofSetInner.proof];
+	const unsupportedDispatch = { count: 0 };
+	assertEquals([(await handle(await signRequest(requestFor(createBody(proofSetInner)), rsaPrivateKey3, rsaPublicKey3.id), unsupportedDispatch)).status, unsupportedDispatch.count], [401, 0]);
+});
+test("handleInbox() preserves ordinary top-level proof behavior", async () => {
+	assertEquals((await handle(await secureDocument({
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://example.com/activities/ordinary",
+		type: "Create",
+		actor: map_local_create_note_default.keys.outer.controller,
+		object: {
+			id: "https://example.com/notes/ordinary",
+			type: "Note",
+			attributedTo: map_local_create_note_default.keys.outer.controller,
+			content: "An ordinary note"
+		}
+	}, map_local_create_note_default.keys.outer.testPrivateKeyJwk, map_local_create_note_default.keys.outer.verificationMethod))).status, 202);
+});
+//#endregion
+export {};

package/dist/federation/handler.test.mjs

@@ -10,12 +10,12 @@ import "../std__assert-CxFT0MNt.mjs";
 import { t as assertRejects } from "../assert_rejects-wFbSPn1O.mjs";
 import { t as assert } from "../assert-CebeUf0C.mjs";
 import { r as parseAcceptSignature } from "../accept-CPVqki78.mjs";
-import { a as generateCryptoKeyPair } from "../key-Cwbg5ggV.mjs";
-import { s as signRequest } from "../http-CtidZS_t.mjs";
+import { a as generateCryptoKeyPair } from "../key-Ccs8cnd7.mjs";
+import { s as signRequest } from "../http-D9urSO2D.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-DIJNHW-Y.mjs";
-import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-DCpiAsZi.mjs";
-import { a as compactJsonLd, p as signJsonLd } from "../ld-CzhdWyTt.mjs";
-import { r as signObject } from "../proof-DL8Iid3a.mjs";
+import { c as handleActor, d as handleInbox, f as handleObject, h as respondWithObjectIfAcceptable, l as handleCollection, m as respondWithObject, o as createFederation, p as handleOutbox, u as handleCustomCollection } from "../middleware-CzvJvPHK.mjs";
+import { a as compactJsonLd, p as signJsonLd } from "../ld-qup__MAW.mjs";
+import { r as signObject } from "../proof-BDxNVZ3E.mjs";
 import { t as ActivityListenerSet } from "../activity-listener-C-BSbKI7.mjs";
 import { Activity, Create, CryptographicKey, Multikey, Note, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";

package/dist/federation/idempotency.test.mjs

@@ -5,8 +5,8 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-CBlRfA-_.mjs";
 import "../std__assert-CxFT0MNt.mjs";
 import { n as ed25519PrivateKey, r as ed25519PublicKey, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { o as createFederation } from "../middleware-DCpiAsZi.mjs";
-import { r as signObject } from "../proof-DL8Iid3a.mjs";
+import { o as createFederation } from "../middleware-CzvJvPHK.mjs";
+import { r as signObject } from "../proof-BDxNVZ3E.mjs";
 import { Create, Follow, Person } from "@fedify/vocab";
 import { mockDocumentLoader, test } from "@fedify/fixture";
 //#region src/federation/idempotency.test.ts

package/dist/federation/metrics.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertEquals } from "../assert_equals-CBlRfA-_.mjs";
 import "../std__assert-CxFT0MNt.mjs";
 import { t as assertRejects } from "../assert_rejects-wFbSPn1O.mjs";
-import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-CrqsHP0l.mjs";
+import { _ as recordKeyLookup, a as instrumentDocumentLoader, b as recordWebFingerHandle, c as recordCircuitBreakerStateChange, d as recordCollectionRequest, f as recordCollectionTotalItems, g as recordInboxActivity, h as recordFanoutRecipients, i as getRemoteHost, l as recordCollectionDispatchDuration, m as recordDocumentFetch, p as recordDocumentCache, r as getFederationMetrics, t as classifyFetchError, u as recordCollectionPageItems, v as recordOutboxActivity, x as registerQueueDepthGauge, y as recordOutboxEnqueue } from "../metrics-CISXCvB1.mjs";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 import { FetchError } from "@fedify/vocab-runtime";
 import { DataPointType, MeterProvider, MetricReader } from "@opentelemetry/sdk-metrics";

package/dist/federation/middleware.test.mjs

@@ -16,14 +16,14 @@ import "../std__assert-CxFT0MNt.mjs";
 import { t as assertRejects } from "../assert_rejects-wFbSPn1O.mjs";
 import { t as assertStrictEquals } from "../assert_strict_equals-Bpjl4Psw.mjs";
 import { t as assert } from "../assert-CebeUf0C.mjs";
-import { g as recordInboxActivity } from "../metrics-CrqsHP0l.mjs";
-import { l as verifyRequest, s as signRequest } from "../http-CtidZS_t.mjs";
+import { g as recordInboxActivity } from "../metrics-CISXCvB1.mjs";
+import { l as verifyRequest, s as signRequest } from "../http-D9urSO2D.mjs";
 import { a as rsaPrivateKey3, c as rsaPublicKey3, i as rsaPrivateKey2, n as ed25519PrivateKey, r as ed25519PublicKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as getAuthenticatedDocumentLoader } from "../docloader-DEYs99FZ.mjs";
-import { g as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-DCpiAsZi.mjs";
-import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-CzhdWyTt.mjs";
-import { t as doesActorOwnKey } from "../owner-BqVXJLW8.mjs";
-import { i as verifyObject, r as signObject } from "../proof-DL8Iid3a.mjs";
+import { t as getAuthenticatedDocumentLoader } from "../docloader-BbGSL0Xq.mjs";
+import { g as handleBenchmarkTrigger, i as KvSpecDeterminer, n as FederationImpl, o as createFederation, r as InboxContextImpl, t as ContextImpl } from "../middleware-CzvJvPHK.mjs";
+import { a as compactJsonLd, h as verifyJsonLd, p as signJsonLd, s as detachSignature } from "../ld-qup__MAW.mjs";
+import { t as doesActorOwnKey } from "../owner-CRoq8Spb.mjs";
+import { a as verifyObject, r as signObject } from "../proof-BDxNVZ3E.mjs";
 import { t as CircuitBreaker } from "../circuit-breaker-C5NqoLBJ.mjs";
 import { t as TaskCodec } from "../codec-C6rTrpIp.mjs";
 import { t as markCircuitBreakerLegacySweepDone } from "../circuit-breaker-test-utils-DW6YC_Pe.mjs";

package/dist/federation/mod.cjs

@@ -1,6 +1,6 @@
 const { URLPattern } = require("urlpattern-polyfill");
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federation = require("../federation-DzPUG_AP.cjs");
+const require_federation = require("../federation-DCEHQk4G.cjs");
 exports.CircuitBreaker = require_federation.CircuitBreaker;
 exports.InProcessMessageQueue = require_federation.InProcessMessageQueue;
 exports.MemoryKvStore = require_federation.MemoryKvStore;

package/dist/federation/mod.js

@@ -1,6 +1,6 @@
 import { Temporal } from "temporal-polyfill";
 import { URLPattern } from "urlpattern-polyfill";
-import { a as respondWithObject, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as SendActivityError, l as CircuitBreaker, n as handleWebFinger, o as respondWithObjectIfAcceptable, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-CeCj5caM.js";
+import { a as respondWithObject, c as digest, d as parseCircuitBreakerKvState, f as createFederationBuilder, i as SendActivityError, l as CircuitBreaker, n as handleWebFinger, o as respondWithObjectIfAcceptable, r as createExponentialBackoffPolicy, s as buildCollectionSynchronizationHeader, t as createFederation, u as normalizeCircuitBreakerOptions } from "../middleware-DsfWajaD.js";
 import { getLogger } from "@logtape/logtape";
 import { Router as Router$1, RouterError as RouterError$1, assertPath, isPath } from "@fedify/uri-template";
 import { isEqual } from "es-toolkit";

package/dist/federation/send.test.mjs

@@ -10,10 +10,10 @@ import { t as assertNotEquals } from "../assert_not_equals-BN7yDMWe.mjs";
 import "../std__assert-CxFT0MNt.mjs";
 import { t as assertRejects } from "../assert_rejects-wFbSPn1O.mjs";
 import { t as assert } from "../assert-CebeUf0C.mjs";
-import { l as verifyRequest } from "../http-CtidZS_t.mjs";
+import { l as verifyRequest } from "../http-D9urSO2D.mjs";
 import { i as rsaPrivateKey2, n as ed25519PrivateKey, s as rsaPublicKey2, t as ed25519Multikey } from "../keys-DIJNHW-Y.mjs";
-import { t as doesActorOwnKey } from "../owner-BqVXJLW8.mjs";
-import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-6jS4xFsX.mjs";
+import { t as doesActorOwnKey } from "../owner-CRoq8Spb.mjs";
+import { n as extractInboxes, r as sendActivity, t as SendActivityError } from "../send-BzM5GLyn.mjs";
 import { Activity, Application, Endpoints, Group, Person, Service } from "@fedify/vocab";
 import { createTestMeterProvider, createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { FetchError, UrlError } from "@fedify/vocab-runtime";

package/dist/federation/tasks/enqueue.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
 import "../../testing-hbky2gMN.mjs";
-import { o as createFederation } from "../../middleware-DCpiAsZi.mjs";
+import { o as createFederation } from "../../middleware-CzvJvPHK.mjs";
 import { n as ParallelMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { configure, reset } from "@logtape/logtape";
 import { delay } from "es-toolkit";

package/dist/federation/tasks/tasks.test.mjs

@@ -4,8 +4,8 @@ globalThis.addEventListener = () => {};
 import { t as MemoryKvStore } from "../../kv-DCHkaJ9-.mjs";
 import { a as numberSchema, i as makeSchema, n as baseOptions, o as stringSchema, t as MockQueue } from "../../tasks-dbCShlCb.mjs";
 import "../../testing-hbky2gMN.mjs";
-import { o as createFederation } from "../../middleware-DCpiAsZi.mjs";
-import { r as createFederationBuilder } from "../../builder-Cts78G9N.mjs";
+import { o as createFederation } from "../../middleware-CzvJvPHK.mjs";
+import { r as createFederationBuilder } from "../../builder-D0DxgOV5.mjs";
 import { t as TaskCodec } from "../../codec-C6rTrpIp.mjs";
 import { t as InProcessMessageQueue } from "../../mq-Dm1Wmtm-.mjs";
 import { W3CTraceContextPropagator } from "@opentelemetry/core";

package/dist/federation/temporal.test.mjs

@@ -4,7 +4,7 @@ globalThis.addEventListener = () => {};
 import { t as assertFalse } from "../assert_false-3pLLLsO4.mjs";
 import "../std__assert-CxFT0MNt.mjs";
 import { t as assert } from "../assert-CebeUf0C.mjs";
-import { t as hasMalformedKnownTemporalLiteral } from "../temporal-DcyzeytP.mjs";
+import { t as hasMalformedKnownTemporalLiteral } from "../temporal-Dv6Qv-8k.mjs";
 import { test } from "@fedify/fixture";
 //#region src/federation/temporal.test.ts
 test("hasMalformedKnownTemporalLiteral() detects expanded proof timestamps", async () => {

package/dist/federation/webfinger.test.mjs

@@ -6,7 +6,7 @@ import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
 import { t as assertEquals } from "../assert_equals-CBlRfA-_.mjs";
 import { t as assertNotEquals } from "../assert_not_equals-BN7yDMWe.mjs";
 import "../std__assert-CxFT0MNt.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-DCpiAsZi.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-CzvJvPHK.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 //#region src/federation/webfinger.test.ts