forked from FoundKeyGang/FoundKey
nullobsi
9acd4bc855
- Add instance actor - Add private mode, which uses an allowlist - Add Secure Mode, restricts access to blocked instances Co-authored-by: Francis Dinh <normandy@biribiri.dev>
103 lines
3 KiB
TypeScript
103 lines
3 KiB
TypeScript
import { URL } from 'node:url';
|
|
import Bull from 'bull';
|
|
import request from '@/remote/activitypub/request.js';
|
|
import { registerOrFetchInstanceDoc } from '@/services/register-or-fetch-instance-doc.js';
|
|
import Logger from '@/services/logger.js';
|
|
import { Instances } from '@/models/index.js';
|
|
import { apRequestChart, federationChart, instanceChart } from '@/services/chart/index.js';
|
|
import { fetchInstanceMetadata } from '@/services/fetch-instance-metadata.js';
|
|
import { fetchMeta } from '@/misc/fetch-meta.js';
|
|
import { toPuny } from '@/misc/convert-host.js';
|
|
import { Cache } from '@/misc/cache.js';
|
|
import { Instance } from '@/models/entities/instance.js';
|
|
import { StatusError } from '@/misc/fetch.js';
|
|
import { DeliverJobData } from '@/queue/types.js';
|
|
|
|
const logger = new Logger('deliver');
|
|
|
|
let latest: string | null = null;
|
|
|
|
const suspendedHostsCache = new Cache<Instance[]>(1000 * 60 * 60);
|
|
|
|
export default async (job: Bull.Job<DeliverJobData>) => {
|
|
const { host } = new URL(job.data.to);
|
|
|
|
// ブロックしてたら中断
|
|
const meta = await fetchMeta();
|
|
if (meta.blockedHosts.includes(toPuny(host))) {
|
|
return 'skip (blocked)';
|
|
}
|
|
|
|
if (meta.privateMode && !meta.allowedHosts.includes(toPuny(host))) {
|
|
return 'skip (not allowed)';
|
|
}
|
|
|
|
// isSuspendedなら中断
|
|
let suspendedHosts = suspendedHostsCache.get(null);
|
|
if (suspendedHosts == null) {
|
|
suspendedHosts = await Instances.find({
|
|
where: {
|
|
isSuspended: true,
|
|
},
|
|
});
|
|
suspendedHostsCache.set(null, suspendedHosts);
|
|
}
|
|
if (suspendedHosts.map(x => x.host).includes(toPuny(host))) {
|
|
return 'skip (suspended)';
|
|
}
|
|
|
|
try {
|
|
if (latest !== (latest = JSON.stringify(job.data.content, null, 2))) {
|
|
logger.debug(`delivering ${latest}`);
|
|
}
|
|
|
|
await request(job.data.user, job.data.to, job.data.content);
|
|
|
|
// Update stats
|
|
registerOrFetchInstanceDoc(host).then(i => {
|
|
Instances.update(i.id, {
|
|
latestRequestSentAt: new Date(),
|
|
latestStatus: 200,
|
|
lastCommunicatedAt: new Date(),
|
|
isNotResponding: false,
|
|
});
|
|
|
|
fetchInstanceMetadata(i);
|
|
|
|
instanceChart.requestSent(i.host, true);
|
|
apRequestChart.deliverSucc();
|
|
federationChart.deliverd(i.host, true);
|
|
});
|
|
|
|
return 'Success';
|
|
} catch (res) {
|
|
// Update stats
|
|
registerOrFetchInstanceDoc(host).then(i => {
|
|
Instances.update(i.id, {
|
|
latestRequestSentAt: new Date(),
|
|
latestStatus: res instanceof StatusError ? res.statusCode : null,
|
|
isNotResponding: true,
|
|
});
|
|
|
|
instanceChart.requestSent(i.host, false);
|
|
apRequestChart.deliverFail();
|
|
federationChart.deliverd(i.host, false);
|
|
});
|
|
|
|
if (res instanceof StatusError) {
|
|
// 4xx
|
|
if (res.isClientError) {
|
|
// HTTPステータスコード4xxはクライアントエラーであり、それはつまり
|
|
// 何回再送しても成功することはないということなのでエラーにはしないでおく
|
|
return `${res.statusCode} ${res.statusMessage}`;
|
|
}
|
|
|
|
// 5xx etc.
|
|
throw new Error(`${res.statusCode} ${res.statusMessage}`);
|
|
} else {
|
|
// DNS error, socket error, timeout ...
|
|
throw res;
|
|
}
|
|
}
|
|
};
|