active-boxes 0.0.1.dev2__py3-none-any.whl

active_boxes/urlutils.py

@@ -0,0 +1,66 @@
+import ipaddress
+import logging
+import socket
+from typing import Dict
+from urllib.parse import urlparse
+
+from .errors import Error
+from .errors import ServerError
+
+logger = logging.getLogger(__name__)
+
+
+_CACHE: Dict[str, bool] = {}
+
+
+class InvalidURLError(ServerError):
+    pass
+
+
+class URLLookupFailedError(Error):
+    pass
+
+
+def is_url_valid(url: str, debug: bool = False) -> bool:
+    parsed = urlparse(url)
+    if parsed.scheme not in ["http", "https"]:
+        return False
+
+    # XXX in debug mode, we want to allow requests to localhost to test the federation with local instances
+    if debug:  # pragma: no cover
+        return True
+
+    if parsed.hostname in ["localhost"]:
+        return False
+
+    if _CACHE.get(parsed.hostname, False):
+        return True
+
+    try:
+        ip_address = ipaddress.ip_address(parsed.hostname)
+    except ValueError:
+        try:
+            ip_address = socket.getaddrinfo(parsed.hostname, parsed.port or 80)[0][4][0]
+            logger.debug(f"dns lookup: {parsed.hostname} -> {ip_address}")
+        except socket.gaierror:
+            logger.exception(f"failed to lookup url {url}")
+            _CACHE[parsed.hostname] = False
+            raise URLLookupFailedError(f"failed to lookup url {url}")
+
+    logger.debug(f"{ip_address}")
+
+    if ipaddress.ip_address(ip_address).is_private:
+        logger.info(f"rejecting private URL {url}")
+        _CACHE[parsed.hostname] = False
+        return False
+
+    _CACHE[parsed.hostname] = True
+    return True
+
+
+def check_url(url: str, debug: bool = False) -> None:
+    logger.debug(f"check_url {url} debug={debug}")
+    if not is_url_valid(url, debug=debug):
+        raise InvalidURLError(f'"{url}" is invalid')
+
+    return None

active_boxes/webfinger.py

@@ -0,0 +1,92 @@
+import json
+import logging
+from typing import Any
+from typing import Dict
+from typing import Optional
+from urllib.parse import urlparse
+
+import requests
+
+from .activitypub import get_backend
+from .urlutils import check_url
+
+logger = logging.getLogger(__name__)
+
+
+def webfinger(
+    resource: str, debug: bool = False
+) -> Optional[Dict[str, Any]]:  # noqa: C901
+    """Mastodon-like WebFinger resolution to retrieve the activity stream Actor URL.
+    """
+    logger.info(f"performing webfinger resolution for {resource}")
+    protos = ["https", "http"]
+    if resource.startswith("http://"):
+        protos.reverse()
+        host = urlparse(resource).netloc
+    elif resource.startswith("https://"):
+        host = urlparse(resource).netloc
+    else:
+        if resource.startswith("acct:"):
+            resource = resource[5:]
+        if resource.startswith("@"):
+            resource = resource[1:]
+        _, host = resource.split("@", 1)
+        resource = "acct:" + resource
+
+    # Security check on the url (like not calling localhost)
+    check_url(f"https://{host}", debug=debug)
+    is_404 = False
+
+    for i, proto in enumerate(protos):
+        try:
+            url = f"{proto}://{host}/.well-known/webfinger"
+            # FIXME(tsileo): BACKEND.fetch_json so we can set a UserAgent
+            resp = get_backend().fetch_json(url, params={"resource": resource})
+            break
+        except requests.ConnectionError:
+            logger.exception("req failed")
+            # If we tried https first and the domain is "http only"
+            if i == 0:
+                continue
+            break
+        except requests.HTTPError as http_error:
+            logger.exception("HTTP error")
+            if http_error.response.status_code in [403, 404]:
+                is_404 = True
+                continue
+            raise
+    if is_404:
+        return None
+    resp.raise_for_status()
+    try:
+        return resp.json()
+    except json.JSONDecodeError:
+        return None
+
+
+def get_remote_follow_template(resource: str, debug: bool = False) -> Optional[str]:
+    data = webfinger(resource, debug=debug)
+    if data is None:
+        return None
+    for link in data["links"]:
+        if link.get("rel") == "http://ostatus.org/schema/1.0/subscribe":
+            return link.get("template")
+    return None
+
+
+def get_actor_url(resource: str, debug: bool = False) -> Optional[str]:
+    """Mastodon-like WebFinger resolution to retrieve the activity stream Actor URL.
+
+    Returns:
+        the Actor URL or None if the resolution failed.
+    """
+    data = webfinger(resource, debug=debug)
+    if data is None:
+        return None
+    for link in data["links"]:
+        if (
+            link.get("rel") == "self"
+            and link.get("type") == "application/activity+json"
+        ):
+            return link.get("href")
+    return None

active_boxes-0.0.1.dev2.dist-info/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2018, Thomas Sileo
+Copyright (c) 2025, Chaiwat Suttipongsakul
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR PERFORMANCE OF THE
+SOFTWARE.

active_boxes-0.0.1.dev2.dist-info/METADATA

@@ -0,0 +1,45 @@
+Metadata-Version: 2.3
+Name: active-boxes
+Version: 0.0.1.dev2
+Summary: Tiny ActivityPub framework written in Python, both database and server agnostic.
+License: MIT
+Author: Chaiwat Suttipongsakul
+Author-email: cwt@bashell.com
+Requires-Python: >=3.6.0
+Classifier: Development Status :: 2 - Pre-Alpha
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3.6
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Programming Language :: Python :: Implementation :: PyPy
+Provides-Extra: dev
+Requires-Dist: black ; extra == "dev"
+Requires-Dist: codecov ; extra == "dev"
+Requires-Dist: flake8 ; extra == "dev"
+Requires-Dist: httpretty ; extra == "dev"
+Requires-Dist: mypy ; extra == "dev"
+Requires-Dist: pytest ; extra == "dev"
+Requires-Dist: pytest-cov ; extra == "dev"
+Project-URL: Homepage, https://github.com/cwt/active-boxes
+Description-Content-Type: text/markdown
+
+# Active Boxes (Modernized Little Boxes)
+
+This project is a fork of [Little Boxes](https://github.com/tsileo/little-boxes) that is currently being modernized and relicensed from ISC to MIT.
+
+⚠️ **Work in Progress** ⚠️
+
+This project is in the process of being modernized and updated to current Python packaging standards. 
+The original README can be found in [ORIGINAL-README.md](ORIGINAL-README.md).
+
+## Modernization Progress
+
+- [x] Migrated from `setup.py` to `pyproject.toml`
+- [x] Moved development dependencies to `pyproject.toml`
+- [x] Switched to Poetry for dependency management and building
+- [ ] More modernization steps to come...
+
+## Original Project
+
+For information about the original project, please refer to [ORIGINAL-README.md](ORIGINAL-README.md).

active_boxes-0.0.1.dev2.dist-info/RECORD

@@ -0,0 +1,16 @@
+active_boxes/__init__.py,sha256=ZCY4whXMFRux4hRNuo-krzKv7SgXFUGxBtDx_40EO50,291
+active_boxes/__version__.py,sha256=k-pUXV5otZaKDeBgIdBQmw_3zGHYt0YIJTUVOqYO-8I,300
+active_boxes/activitypub.py,sha256=J-VMqPKG_eOPeXd_P8zFiIX2kygPgG5ZAz9AEfy5T_o,30668
+active_boxes/backend.py,sha256=2SkfectK_TNDPXFdVqkjoQvOXVOblih3nYncV_CXATI,4005
+active_boxes/collection.py,sha256=OoQkjlYVFGhq3K1hB3uzh4V1p5P3xgtNuXw0ME-5e_A,2371
+active_boxes/content_helper.py,sha256=cEtcWpCSzhmGVpEQQCo9Vv0_NzI8ocR1AyOlm20qrak,2210
+active_boxes/errors.py,sha256=FwQHtYRbAXvKhR5PNmzi93Gk0OPf69WkopkHq9OUW9k,2504
+active_boxes/httpsig.py,sha256=5weDW2RHUY8wZEIsujQjGq5GIrgH5cWdPrFPwlfjFlw,4395
+active_boxes/key.py,sha256=2ALhblEd0uTzfyNa2cidyTwNJo2QEk-E2spdgHhknoE,2024
+active_boxes/linked_data_sig.py,sha256=0vMtqdmFwqtORo0fNhRRnl3qOO5zzq9jKAfnXAzH3Lc,2418
+active_boxes/urlutils.py,sha256=das0iGifazXxXJYrZe26Eig_UrIp1HmB9XyF-l4G7nY,1717
+active_boxes/webfinger.py,sha256=xyKSMCnisq2sscj2_ol7sRrEK1OMUFG6-fubNqKAHr0,2852
+active_boxes-0.0.1.dev2.dist-info/LICENSE,sha256=8z10AN_4FDMHZgAlfpD955ATwtbuDpnuX2MSMtZS-98,1109
+active_boxes-0.0.1.dev2.dist-info/METADATA,sha256=Qzf_nlAbumZp46l1zwE5yU7pgRJmQ-07lk7bFH8QSC4,1805
+active_boxes-0.0.1.dev2.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
+active_boxes-0.0.1.dev2.dist-info/RECORD,,

active_boxes-0.0.1.dev2.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.1.3
+Root-Is-Purelib: true
+Tag: py3-none-any