require 'rails_helper' RSpec.describe ProcessFeedService do subject { ProcessFeedService.new } describe 'processing a feed' do let(:body) { File.read(File.join(Rails.root, 'spec', 'fixtures', 'xml', 'mastodon.atom')) } let(:account) { Fabricate(:account, username: 'localhost', domain: 'kickass.zone') } before do stub_request(:post, "https://pubsubhubbub.superfeedr.com/").to_return(:status => 200, :body => "", :headers => {}) stub_request(:get, "http://kickass.zone/system/accounts/avatars/000/000/001/large/eris.png").to_return(request_fixture('avatar.txt')) stub_request(:get, "http://kickass.zone/system/media_attachments/files/000/000/002/original/morpheus_linux.jpg?1476059910").to_return(request_fixture('attachment1.txt')) stub_request(:get, "http://kickass.zone/system/media_attachments/files/000/000/003/original/gizmo.jpg?1476060065").to_return(request_fixture('attachment2.txt')) end context 'when domain does not reject media' do before do subject.call(body, account) end it 'updates remote user\'s account information' do account.reload expect(account.display_name).to eq '::1' expect(account).to have_attached_file(:avatar) expect(account.avatar_file_name).not_to be_nil end it 'creates posts' do expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=1:objectType=Status')).to_not be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=2:objectType=Status')).to_not be_nil end it 'ignores delete statuses unless they existed before' do expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=3:objectType=Status')).to be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=12:objectType=Status')).to be_nil end it 'does not create statuses for follows' do expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=1:objectType=Follow')).to be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=2:objectType=Follow')).to be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=4:objectType=Follow')).to be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=7:objectType=Follow')).to be_nil end it 'does not create statuses for favourites' do expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=2:objectType=Favourite')).to be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=3:objectType=Favourite')).to be_nil end it 'creates posts with media' do status = Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=14:objectType=Status') expect(status).to_not be_nil expect(status.media_attachments.first).to have_attached_file(:file) expect(status.media_attachments.first.image?).to be true expect(status.media_attachments.first.file_file_name).not_to be_nil end end context 'when domain is set to reject media' do let!(:domain_block) { Fabricate(:domain_block, domain: 'kickass.zone', reject_media: true) } before do subject.call(body, account) end it 'updates remote user\'s account information' do account.reload expect(account.display_name).to eq '::1' end it 'rejects remote user\'s avatar' do account.reload expect(account.display_name).to eq '::1' expect(account.avatar_file_name).to be_nil end it 'creates posts' do expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=1:objectType=Status')).to_not be_nil expect(Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=2:objectType=Status')).to_not be_nil end it 'creates posts with remote-only media' do status = Status.find_by(uri: 'tag:kickass.zone,2016-10-10:objectId=14:objectType=Status') expect(status).to_not be_nil expect(status.media_attachments.first.file_file_name).to be_nil expect(status.media_attachments.first.unknown?).to be true end end end it 'does not accept tampered reblogs' do good_actor = Fabricate(:account, username: 'tracer', domain: 'overwatch.com') real_body = < tag:overwatch.com,2017-04-27:objectId=4467137:objectType=Status 2017-04-27T13:49:25Z 2017-04-27T13:49:25Z http://activitystrea.ms/schema/1.0/note http://activitystrea.ms/schema/1.0/post https://overwatch.com/users/tracer http://activitystrea.ms/schema/1.0/person https://overwatch.com/users/tracer tracer Overwatch rocks XML stub_request(:head, 'https://overwatch.com/users/tracer/updates/1').to_return(status: 200, headers: { 'Content-Type' => 'application/atom+xml' }) stub_request(:get, 'https://overwatch.com/users/tracer/updates/1').to_return(status: 200, body: real_body) bad_actor = Fabricate(:account, username: 'sombra', domain: 'talon.xyz') body = < tag:talon.xyz,2017-04-27:objectId=4467137:objectType=Status 2017-04-27T13:49:25Z 2017-04-27T13:49:25Z https://talon.xyz/users/sombra http://activitystrea.ms/schema/1.0/person https://talon.xyz/users/sombra sombra http://activitystrea.ms/schema/1.0/activity http://activitystrea.ms/schema/1.0/share Overwatch SUCKS AHAHA tag:overwatch.com,2017-04-27:objectId=4467137:objectType=Status http://activitystrea.ms/schema/1.0/note http://activitystrea.ms/schema/1.0/post https://overwatch.com/users/tracer http://activitystrea.ms/schema/1.0/person https://overwatch.com/users/tracer tracer Overwatch SUCKS AHAHA XML created_statuses = subject.call(body, bad_actor) expect(created_statuses.first.reblog?).to be true expect(created_statuses.first.account_id).to eq bad_actor.id expect(created_statuses.first.reblog.account_id).to eq good_actor.id expect(created_statuses.first.reblog.text).to eq 'Overwatch rocks' end it 'ignores statuses with an out-of-order delete' do sender = Fabricate(:account, username: 'tracer', domain: 'overwatch.com') delete_body = < tag:overwatch.com,2017-04-27:objectId=4487555:objectType=Status 2017-04-27T13:49:25Z 2017-04-27T13:49:25Z http://activitystrea.ms/schema/1.0/note http://activitystrea.ms/schema/1.0/delete https://overwatch.com/users/tracer http://activitystrea.ms/schema/1.0/person https://overwatch.com/users/tracer tracer XML status_body = < tag:overwatch.com,2017-04-27:objectId=4487555:objectType=Status 2017-04-27T13:49:25Z 2017-04-27T13:49:25Z http://activitystrea.ms/schema/1.0/note http://activitystrea.ms/schema/1.0/post https://overwatch.com/users/tracer http://activitystrea.ms/schema/1.0/person https://overwatch.com/users/tracer tracer Overwatch rocks XML subject.call(delete_body, sender) created_statuses = subject.call(status_body, sender) expect(created_statuses).to be_empty end end