@fedify/fedify 2.4.0-pr.934.40 → 2.4.0

package/dist/federation/webfinger.test.mjs

@@ -1,13 +1,14 @@
 import { Temporal } from "temporal-polyfill";
 import "urlpattern-polyfill";
 globalThis.addEventListener = () => {};
-import { r as createRequestContext } from "../context-BJXxPElm.mjs";
-import { t as MemoryKvStore } from "../kv-CXBAok3k.mjs";
-import { t as assertEquals } from "../assert_equals-BV7oLMxm.mjs";
-import "../std__assert-B2NnY9bq.mjs";
-import { t as assertNotEquals } from "../assert_not_equals-EPJPoxuf.mjs";
-import { o as createFederation, s as handleWebFinger } from "../middleware-O2LHXFEk.mjs";
+import { r as createRequestContext } from "../context-8Tu9kea0.mjs";
+import { t as MemoryKvStore } from "../kv-DCHkaJ9-.mjs";
+import { t as assertEquals } from "../assert_equals-Z6IcEbWU.mjs";
+import { t as assertNotEquals } from "../assert_not_equals-CpPK2t89.mjs";
+import "../std__assert-DvMDRPes.mjs";
+import { o as createFederation, s as handleWebFinger } from "../middleware-CqQ5Qahj.mjs";
 import { Image, Link, Person, Tombstone } from "@fedify/vocab";
+import { parseIri } from "@fedify/vocab-runtime";
 import { createTestMeterProvider, test } from "@fedify/fixture";
 //#region src/federation/webfinger.test.ts
 test("handleWebFinger()", async (t) => {
@@ -258,7 +259,7 @@ test("handleWebFinger()", async (t) => {
 	});
 	onNotFoundCalled = null;
 	const actorHandleMapper = (_ctx, username) => {
-		return username === "foo" ? "someone" : username === "bar" ? "someone2" : null;
+		return username === "foo" ? "someone" : username === "bar" ? "someone2" : username === "qux" ? "someone2" : null;
 	};
 	await t.step("handle mapper", async () => {
 		const u = new URL(url);
@@ -381,21 +382,83 @@ test("handleWebFinger()", async (t) => {
 		assertEquals(response.status, 404);
 	});
 	await t.step("handleHost", async () => {
-		const u = new URL(url);
-		u.searchParams.set("resource", "acct:someone@example.com");
+		let u = new URL("https://ap.example.com/.well-known/webfinger");
+		u.searchParams.set("resource", "acct:someone@ap.example.com");
 		let context = createContext(u);
 		let request = context.request;
 		let response = await handleWebFinger(request, {
 			context,
-			host: "handle.example.com",
+			host: "example.com",
 			actorDispatcher,
 			onNotFound
 		});
 		assertEquals(response.status, 200);
 		assertEquals(await response.json(), {
-			...expected,
-			aliases: [...expected.aliases, "acct:someone@handle.example.com"]
+			subject: "acct:someone@example.com",
+			aliases: ["https://ap.example.com/users/someone", "acct:someone@ap.example.com"],
+			links: [
+				{
+					href: "https://ap.example.com/users/someone",
+					rel: "self",
+					type: "application/activity+json"
+				},
+				{
+					href: "https://ap.example.com/@someone",
+					rel: "http://webfinger.net/rel/profile-page"
+				},
+				{
+					href: "https://ap.example.com/@someone",
+					rel: "alternate",
+					type: "text/html"
+				},
+				{
+					href: "https://ap.example.com/icon.jpg",
+					rel: "http://webfinger.net/rel/avatar",
+					type: "image/jpeg"
+				}
+			]
+		});
+		u.searchParams.set("resource", "acct:qux@ap.example.com");
+		context = createContext(u);
+		request = context.request;
+		response = await handleWebFinger(request, {
+			context,
+			host: "example.com",
+			actorDispatcher,
+			actorHandleMapper,
+			onNotFound
 		});
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:bar@example.com",
+			aliases: [
+				"https://ap.example.com/users/someone2",
+				"acct:qux@ap.example.com",
+				"acct:bar@ap.example.com"
+			],
+			links: [
+				{
+					href: "https://ap.example.com/users/someone2",
+					rel: "self",
+					type: "application/activity+json"
+				},
+				{
+					href: "https://ap.example.com/@someone2",
+					rel: "http://webfinger.net/rel/profile-page"
+				},
+				{
+					href: "https://ap.example.com/@someone2",
+					rel: "alternate",
+					type: "text/html"
+				},
+				{
+					href: "https://ap.example.com/icon.jpg",
+					rel: "http://webfinger.net/rel/avatar",
+					type: "image/jpeg"
+				}
+			]
+		});
+		u = new URL(url);
 		u.searchParams.set("resource", "acct:someone@handle.example.com");
 		context = createContext(u);
 		request = context.request;
@@ -677,5 +740,205 @@ test("handleWebFinger() records webfinger.handle counter and duration", async (t
 		assertEquals(recorder.getMeasurements("webfinger.handle.duration").length, 0);
 	});
 });
+test("handleWebFinger() for FEP-ef61 portable actors", async (t) => {
+	const did = "did:key:z6Mkabc";
+	const compatibleId = `https://example.com/.well-known/apgateway/${did}/actor`;
+	const gateways = {
+		alice: [new URL("https://example.com")],
+		secondary: [new URL("https://primary.example"), new URL("https://example.com")],
+		anonymous: [new URL("https://example.com")],
+		nogateway: []
+	};
+	const actorDispatcher = (_ctx, identifier) => {
+		if (!(identifier in gateways)) return null;
+		return new Person({
+			id: parseIri(`ap://${did}/actor`),
+			preferredUsername: identifier === "anonymous" ? null : "alice",
+			gateways: gateways[identifier]
+		});
+	};
+	const actorAliasMapper = (_ctx, resource) => {
+		if (resource.href === compatibleId) return { identifier: "alice" };
+		if (resource.protocol === "ap+ef61:") return { identifier: "anonymous" };
+		if (resource.href === "acct:anonymous") return { identifier: "anonymous" };
+		return null;
+	};
+	async function query(resource, host = "example.com") {
+		const url = new URL(`https://${host}/.well-known/webfinger`);
+		url.searchParams.set("resource", resource);
+		const context = createRequestContext({
+			federation: createFederation({ kv: new MemoryKvStore() }),
+			url,
+			data: void 0,
+			getActorUri(identifier) {
+				return new URL(`${url.origin}/users/${identifier}`);
+			},
+			parseUri: () => null
+		});
+		return await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			actorAliasMapper,
+			onNotFound: () => new Response("Not found", { status: 404 })
+		});
+	}
+	const selfLink = {
+		rel: "self",
+		href: compatibleId,
+		type: "application/activity+json"
+	};
+	await t.step("acct: on the first gateway", async () => {
+		const response = await query("acct:alice@example.com");
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:alice@example.com",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("acct: on a secondary gateway", async () => {
+		const response = await query("acct:secondary@example.com");
+		assertEquals(response.status, 200);
+		const primaryCompatibleId = `https://primary.example/.well-known/apgateway/${did}/actor`;
+		assertEquals(await response.json(), {
+			subject: "acct:alice@primary.example",
+			aliases: [primaryCompatibleId, "acct:secondary@example.com"],
+			links: [{
+				...selfLink,
+				href: primaryCompatibleId
+			}]
+		});
+	});
+	await t.step("compatible identifier", async () => {
+		const response = await query(compatibleId);
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:alice@example.com",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("portable ID without preferredUsername", async () => {
+		const response = await query(`ap://${did}/actor`);
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: compatibleId,
+			aliases: [],
+			links: [selfLink]
+		});
+	});
+	await t.step("acct: without preferredUsername", async () => {
+		const response = await query("acct:anonymous@example.com");
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:anonymous@example.com",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("acct: without a host or preferredUsername", async () => {
+		const response = await query("acct:anonymous");
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:anonymous",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("no gateways", async () => {
+		assertEquals((await query("acct:nogateway@example.com")).status, 404);
+	});
+	await t.step("another host", async () => {
+		assertEquals((await query("acct:alice@primary.example")).status, 404);
+	});
+});
+test("handleWebFinger() for FEP-ef61 compatible-ID actors", async (t) => {
+	const compatibleId = `https://example.com/.well-known/apgateway/did:key:z6Mkabc/actor`;
+	const actors = {
+		alice: {
+			id: compatibleId,
+			gateways: [new URL("https://example.com")]
+		},
+		secondary: {
+			id: compatibleId,
+			gateways: [new URL("https://primary.example"), new URL("https://example.com")]
+		},
+		malformed: {
+			id: `${compatibleId}?@gateway=https%3A%2F%2Fexample.com`,
+			gateways: [new URL("https://example.com")]
+		},
+		nogateway: {
+			id: compatibleId,
+			gateways: []
+		}
+	};
+	const actorDispatcher = (_ctx, identifier) => {
+		const actor = actors[identifier];
+		if (actor == null) return null;
+		return new Person({
+			id: new URL(actor.id),
+			preferredUsername: "alice",
+			gateways: actor.gateways
+		});
+	};
+	const actorAliasMapper = (_ctx, resource) => resource.href === compatibleId ? { identifier: "alice" } : null;
+	async function query(resource) {
+		const url = new URL("https://example.com/.well-known/webfinger");
+		url.searchParams.set("resource", resource);
+		const context = createRequestContext({
+			federation: createFederation({ kv: new MemoryKvStore() }),
+			url,
+			data: void 0,
+			getActorUri(identifier) {
+				return new URL(`${url.origin}/users/${identifier}`);
+			},
+			parseUri: () => null
+		});
+		return await handleWebFinger(context.request, {
+			context,
+			actorDispatcher,
+			actorAliasMapper,
+			onNotFound: () => new Response("Not found", { status: 404 })
+		});
+	}
+	const selfLink = {
+		rel: "self",
+		href: compatibleId,
+		type: "application/activity+json"
+	};
+	await t.step("acct: on the first gateway", async () => {
+		const response = await query("acct:alice@example.com");
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:alice@example.com",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("compatible identifier", async () => {
+		const response = await query(compatibleId);
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:alice@example.com",
+			aliases: [compatibleId],
+			links: [selfLink]
+		});
+	});
+	await t.step("compatible identifier not on the first gateway", async () => {
+		const response = await query("acct:secondary@example.com");
+		assertEquals(response.status, 200);
+		assertEquals(await response.json(), {
+			subject: "acct:alice@primary.example",
+			aliases: [compatibleId, "acct:secondary@example.com"],
+			links: [selfLink]
+		});
+	});
+	await t.step("malformed compatible identifier", async () => {
+		assertEquals((await query("acct:malformed@example.com")).status, 404);
+	});
+	await t.step("no gateways", async () => {
+		assertEquals((await query("acct:nogateway@example.com")).status, 404);
+	});
+});
 //#endregion
 export {};