activitypub_object ) { return $this->activitypub_object; } $queried_object = $this->get_queried_object(); // Check for Outbox Activity. if ( $queried_object instanceof \WP_Post && Outbox::POST_TYPE === $queried_object->post_type ) { $activitypub_object = Outbox::maybe_get_activity( $queried_object ); // Check if the Outbox Activity is public. if ( ! \is_wp_error( $activitypub_object ) ) { $this->activitypub_object = $activitypub_object; return $this->activitypub_object; } } if ( ! $queried_object ) { // If the object is not a valid ActivityPub object, try to get a virtual object. $activitypub_object = $this->maybe_get_virtual_object(); if ( $activitypub_object ) { $this->activitypub_object = $activitypub_object; return $this->activitypub_object; } } $transformer = Factory::get_transformer( $queried_object ); if ( $transformer && ! \is_wp_error( $transformer ) ) { $this->activitypub_object = $transformer->to_object(); } return $this->activitypub_object; } /** * Get the ActivityPub object ID. * * @return string The ActivityPub object ID. */ public function get_activitypub_object_id() { if ( $this->activitypub_object_id ) { return $this->activitypub_object_id; } if ( $this->activitypub_object ) { $this->activitypub_object_id = $this->activitypub_object->get_id(); return $this->activitypub_object_id; } return $this->get_activitypub_object(); } /** * Get the queried object. * * This adds support for Comments by `?c=123` IDs and Users by `?author=123` and `@username` IDs. * * @return \WP_Term|\WP_Post_Type|\WP_Post|\WP_User|\WP_Comment|null The queried object. */ public function get_queried_object() { $queried_object = \get_queried_object(); // Check Comment by ID. if ( ! $queried_object ) { $comment_id = \get_query_var( 'c' ); if ( $comment_id ) { $queried_object = \get_comment( $comment_id ); } } // Check Post by ID (works for custom post types). if ( ! $queried_object ) { $post_id = \get_query_var( 'p' ); if ( $post_id ) { $queried_object = \get_post( $post_id ); } } // Try to get Author by ID. if ( ! $queried_object ) { $url = $this->get_request_url(); $author_id = url_to_authorid( $url ); if ( $author_id ) { $queried_object = \get_user_by( 'id', $author_id ); } } /** * Filters the queried object. * * @param \WP_Term|\WP_Post_Type|\WP_Post|\WP_User|\WP_Comment|null $queried_object The queried object. */ return apply_filters( 'activitypub_queried_object', $queried_object ); } /** * Get the virtual object. * * Virtual objects are objects that are not stored in the database, but are created on the fly. * The plugins currently supports two virtual objects: The Blog-Actor and the Application-Actor. * * @see \Activitypub\Blog * @see \Activitypub\Application * * @return object|null The virtual object. */ protected function maybe_get_virtual_object() { $url = $this->get_request_url(); if ( ! $url ) { return null; } $author_id = url_to_authorid( $url ); if ( ! is_numeric( $author_id ) ) { return null; } $user = Actors::get_by_id( $author_id ); if ( \is_wp_error( $user ) || ! $user ) { return null; } return $user; } /** * Get the request URL. * * @return string|null The request URL. */ protected function get_request_url() { if ( ! isset( $_SERVER['REQUEST_URI'] ) ) { return null; } // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized $url = \wp_unslash( $_SERVER['REQUEST_URI'] ); $url = \WP_Http::make_absolute_url( $url, \home_url() ); $url = \sanitize_url( $url ); return $url; } /** * Check if the current request is an ActivityPub request. * * @return bool True if the request is an ActivityPub request, false otherwise. */ public function is_activitypub_request() { if ( isset( $this->is_activitypub_request ) ) { return $this->is_activitypub_request; } global $wp_query; // One can trigger an ActivityPub request by adding `?activitypub` to the URL. if ( isset( $wp_query->query_vars['activitypub'] ) || // phpcs:ignore WordPress.Security.NonceVerification.Recommended isset( $_GET['activitypub'] ) ) { defined( 'ACTIVITYPUB_REQUEST' ) || \define( 'ACTIVITYPUB_REQUEST', true ); $this->is_activitypub_request = true; return true; } /* * The other (more common) option to make an ActivityPub request * is to send an Accept header. */ if ( isset( $_SERVER['HTTP_ACCEPT'] ) ) { $accept = \sanitize_text_field( \wp_unslash( $_SERVER['HTTP_ACCEPT'] ) ); /* * $accept can be a single value, or a comma separated list of values. * We want to support both scenarios, * and return true when the header includes at least one of the following: * - application/activity+json * - application/ld+json * - application/json */ if ( \preg_match( '/(application\/(ld\+json|activity\+json|json))/i', $accept ) ) { defined( 'ACTIVITYPUB_REQUEST' ) || \define( 'ACTIVITYPUB_REQUEST', true ); $this->is_activitypub_request = true; return true; } } $this->is_activitypub_request = false; return false; } }