Something went wrong. Try again.
Something went wrong. Try again.
2.9 kB · 103 lines
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104package api
import ( "context" "crypto" "fmt"
"github.com/bluesky-social/indigo/atproto/atcrypto" "github.com/decred/dcrd/dcrec/secp256k1" "github.com/mr-tron/base58" "stream.place/streamplace/pkg/atproto" "stream.place/streamplace/pkg/log" "stream.place/streamplace/pkg/media")
func (a *StreamplaceAPI) MakeMediaSigner(ctx context.Context, keyStr string) (media.MediaSigner, error) { if len(keyStr) < 2 || keyStr[0] != 'z' { return nil, fmt.Errorf("invalid authorization key (not a multibase base58btc string)") }
var addrBytes []byte var didBytes []byte priv, err := atcrypto.ParsePrivateMultibase(keyStr) if err == nil { addrBytes = priv.Bytes() } else { decoded, err := base58.Decode(keyStr[1:]) if err != nil { return nil, fmt.Errorf("invalid authorization key (not a base58btc string)") } addrBytes = decoded[:32] didBytes = decoded[32:] priv, err = atcrypto.ParsePrivateBytesK256(addrBytes) if err != nil { return nil, fmt.Errorf("invalid authorization key (not valid atproto): %w", err) } }
key, _ := secp256k1.PrivKeyFromBytes(addrBytes) if key == nil { return nil, fmt.Errorf("invalid authorization key (not valid secp256k1)") } var signer crypto.Signer = key.ToECDSA() pub, err := priv.PublicKey() if err != nil { return nil, fmt.Errorf("invalid authorization key (could not parse as atproto): %w", err) }
did := string(didBytes)
if did != "" { repo, err := a.ATSync.SyncBlueskyRepo(ctx, did, a.Model) if err != nil { return nil, fmt.Errorf("could not resolve streamplace key: %w", err) } err = a.CLI.StreamIsAllowed(repo.DID) if err != nil { return nil, fmt.Errorf("user is not allowed to stream: %w", err) } signingKey, err := a.Model.GetSigningKey(ctx, pub.DIDKey(), repo.DID) if err != nil { return nil, fmt.Errorf("signing key not found: %w", err) } if signingKey == nil { return nil, fmt.Errorf("signing key not found") } } else { atkey, err := atproto.ParsePubKey(signer.Public()) if err != nil { return nil, fmt.Errorf("invalid authorization key (not valid secp256k1): %w", err) } did = atkey.DIDKey() err = a.CLI.StreamIsAllowed(did) if err != nil { return nil, fmt.Errorf("user is not allowed to stream: %w", err) } }
ctx = log.WithLogValues(ctx, "did", did) err = a.checkBanned(ctx, did) if err != nil { return nil, err }
mediaSigner, err := media.MakeMediaSigner(ctx, a.CLI, did, signer, a.Model) if err != nil { return nil, fmt.Errorf("invalid authorization key (not valid secp256k1): %w", err) }
return mediaSigner, nil}
func (a *StreamplaceAPI) checkBanned(ctx context.Context, did string) error { labels, err := a.Model.GetActiveLabels(did) if err != nil { return fmt.Errorf("failed to get active labels: %w", err) } if atproto.IsBanned(labels...) { log.Error(ctx, "user is banned", "did", did) return fmt.Errorf("user is banned") } return nil}