AkkomaGang/akkoma
AkkomaGang/akkoma
17
68
Fork 108
Code Issues 148 Pull requests 15 Projects 2 Releases 21 Packages Wiki Activity

webfinger: don’t serve response for remote users’ AP id
All checks were successful
ci/woodpecker/pr/test/2 Pipeline was successful
Details
ci/woodpecker/pr/test/1 Pipeline was successful
Details

Browse source
This commit is contained in:
Oneric 2026-01-10 00:00:00 +00:00
commit 74fa8f5581
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/pleroma/web/web_finger.ex
View file

@ -45,7 +45,8 @@ defmodule Pleroma.Web.WebFinger do
{:ok, represent_user(user, fmt)}
else
_e ->
with %User{} = user <- User.get_cached_by_ap_id(resource) do
with %User{} = user <- User.get_cached_by_ap_id(resource),
true <- user.local do
{:ok, represent_user(user, fmt)}
else
_e ->

7
test/pleroma/web/web_finger_test.exs
View file

@ -42,6 +42,13 @@ defmodule Pleroma.Web.WebFingerTest do
assert is_binary(result)
end
test "fails for remote ap_ids" do
user = insert(:user, local: false)
{:error, _} = WebFinger.webfinger(user.ap_id, "XML")
{:error, _} = WebFinger.webfinger(user.ap_id, "JSON")
end
test "exposes AP id with both canonical and Mastodon content type in JSON" do
user = insert(:user, local: true)
{:ok, data} = WebFinger.webfinger(user.ap_id, "JSON")