* If an Update is signed with known key, skip re-following procedure
Because it means the remote actor did *not* lose their database
* Add CLI method for rotating keys
    bin/tootctl accounts rotate [USERNAME]
Generates a new RSA key per account and sends out an Update activity
signed with the old key.
* Key rotation: Space out Update fan-outs every 5 minutes per 1000 accounts
* Skip suspended accounts in key rotation
		
	
			
		
			
				
	
	
		
			58 lines
		
	
	
	
		
			1.6 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			58 lines
		
	
	
	
		
			1.6 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| class ActivityPub::DeliveryWorker
 | |
|   include Sidekiq::Worker
 | |
| 
 | |
|   STOPLIGHT_FAILURE_THRESHOLD = 10
 | |
|   STOPLIGHT_COOLDOWN = 60
 | |
| 
 | |
|   sidekiq_options queue: 'push', retry: 16, dead: false
 | |
| 
 | |
|   HEADERS = { 'Content-Type' => 'application/activity+json' }.freeze
 | |
| 
 | |
|   def perform(json, source_account_id, inbox_url, options = {})
 | |
|     @options        = options.with_indifferent_access
 | |
|     @json           = json
 | |
|     @source_account = Account.find(source_account_id)
 | |
|     @inbox_url      = inbox_url
 | |
| 
 | |
|     perform_request
 | |
| 
 | |
|     failure_tracker.track_success!
 | |
|   rescue => e
 | |
|     failure_tracker.track_failure!
 | |
|     raise e.class, "Delivery failed for #{inbox_url}: #{e.message}", e.backtrace[0]
 | |
|   end
 | |
| 
 | |
|   private
 | |
| 
 | |
|   def build_request
 | |
|     request = Request.new(:post, @inbox_url, body: @json)
 | |
|     request.on_behalf_of(@source_account, :uri, sign_with: @options[:sign_with])
 | |
|     request.add_headers(HEADERS)
 | |
|   end
 | |
| 
 | |
|   def perform_request
 | |
|     light = Stoplight(@inbox_url) do
 | |
|       build_request.perform do |response|
 | |
|         raise Mastodon::UnexpectedResponseError, response unless response_successful?(response) || response_error_unsalvageable?(response)
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     light.with_threshold(STOPLIGHT_FAILURE_THRESHOLD)
 | |
|          .with_cool_off_time(STOPLIGHT_COOLDOWN)
 | |
|          .run
 | |
|   end
 | |
| 
 | |
|   def response_successful?(response)
 | |
|     (200...300).cover?(response.code)
 | |
|   end
 | |
| 
 | |
|   def response_error_unsalvageable?(response)
 | |
|     (400...500).cover?(response.code) && response.code != 429
 | |
|   end
 | |
| 
 | |
|   def failure_tracker
 | |
|     @failure_tracker ||= DeliveryFailureTracker.new(@inbox_url)
 | |
|   end
 | |
| end
 |