bafd22ecf4
Fix #2196 - Respond with 201 when Salmon accepted, 400 when unverified Fix #2629 - Correctly handle confirm_domain? for local accounts Unify rules for extracting author acct from XML, prefer <email>, fall back to <name> + <uri> (see also #2017, #2172)
33 lines
852 B
Ruby
33 lines
852 B
Ruby
# frozen_string_literal: true
|
|
|
|
class Api::SubscriptionsController < ApiController
|
|
before_action :set_account
|
|
respond_to :txt
|
|
|
|
def show
|
|
if @account.subscription(api_subscription_url(@account.id)).valid?(params['hub.topic'])
|
|
@account.update(subscription_expires_at: Time.now.utc + (params['hub.lease_seconds'] || 86_400).to_i.seconds)
|
|
render plain: HTMLEntities.new.encode(params['hub.challenge']), status: 200
|
|
else
|
|
head 404
|
|
end
|
|
end
|
|
|
|
def update
|
|
body = request.body.read
|
|
subscription = @account.subscription(api_subscription_url(@account.id))
|
|
|
|
if subscription.verify(body, request.headers['HTTP_X_HUB_SIGNATURE'])
|
|
ProcessingWorker.perform_async(@account.id, body.force_encoding('UTF-8'))
|
|
end
|
|
|
|
head 200
|
|
end
|
|
|
|
private
|
|
|
|
def set_account
|
|
@account = Account.find(params[:id])
|
|
end
|
|
end
|