streams/Code/Lib/CommentApproval.php

<?php

namespace Code\Lib;

use Code\Daemon\Run;

class CommentApproval
{
    protected $channel;
    protected $item;

    public function __construct($channel, $item)
    {
        $this->channel = $channel;
        $this->item = $item;
    }

    public function Accept()
    {
        $obj = $this->item['obj'];
        if (! is_array($obj)) {
            $obj = json_decode($obj, true);
        }
        $parent = $this->get_parent();
        $activity = post_activity_item(
            [
                'verb' => 'Accept',
                'obj_type' => $obj['type'],
                'obj' => $obj['id'],
                'item_wall' => 1,
                'allow_cid' => '',
                'owner_xchan' => $this->channel['xchan_hash'],
                'author_xchan' => $this->channel['xchan_hash'],
                'parent_mid' => $parent,
                'thr_parent' => $parent,
                'uid' => $this->channel['channel_id'],
                'title' => 'comment accepted'
            ],
            deliver: false,
            channel: $this->channel,
            observer: $this->channel
        );
        if ($activity['item_id']) {
            IConfig::Set($activity['item_id'], 'system', 'comment_recipient', $this->item['author_xchan']);
        }
        Run::Summon(['Notifier', 'comment_approval', $activity['item_id']]);
    }

    public function Reject()
    {
        $obj = $this->item['obj'];
        if (! is_array($obj)) {
            $obj = json_decode($obj, true);
        }
        $parent = $this->get_parent();
        $activity = post_activity_item(
            [
                'verb' => 'Reject',
                'obj_type' => $obj['type'],
                'obj' => $obj['id'],
                'item_wall' => 1,
                'allow_cid' => '',
                'owner_xchan' => $this->channel['xchan_hash'],
                'author_xchan' => $this->channel['xchan_hash'],
                'parent_mid' => $parent,
                'thr_parent' => $parent,
                'uid' => $this->channel['channel_id'],
                'title' => 'comment rejected'
            ],
            deliver: false,
            channel: $this->channel,
            observer: $this->channel
        );
        if ($activity['item_id']) {
            IConfig::Set($activity['item_id'], 'system', 'comment_recipient', $this->item['author_xchan']);
        }
        Run::Summon(['Notifier', 'comment_approval', $activity['item_id']]);
    }

    /**
     * To be considered valid, the Accept activity referenced in replyApproval MUST
     * satisfy the following properties:
     *
     * its actor property is the authority
     * its authenticity can be asserted
     * its object property is the reply under consideration
     * its inReplyTo property matches that of the reply under consideration
     *
     * In addition, if the reply is considered valid, but has no valid replyApproval
     * despite the object it is in reply to having a canReply property, the recipient MAY hide
     * the reply from certain views.
     */
    public static function verify($item, $channel, $approvalActivity = null)
    {

        if(!$approvalActivity) {
            $approvalActivity = Activity::fetch($item['approved'], $channel, true);
        }
        $parent_item = q("select * from item where mid = '%s'", $item['parent_mid']);

        if (! $approvalActivity) {
            logger('no approval activity');
            return false;
        }
        if (!$parent_item) {
            logger('no parent item');
            return false;
        }

        if ($approvalActivity instanceof ActivityStreams) {
            $act = $approvalActivity;
        }
        else {
            $act = new ActivityStreams($approvalActivity);
        }
        if (! $act->is_valid()) {
            logger('invalid parse');
            return false;
        }
        if (!$act->obj) {
            logger('no object');
            return false;
        }
        if ($act->type !== 'Accept') {
            logger('not an accept');
            return false;
        }
        if (!isset($act->actor)) {
            logger('no actor');
            return false;
        }
        $sender = Activity::find_best_identity($act->actor['id']);
        if (!$sender || $sender !== $parent_item[0]['owner_xchan']) {
            logger('no identity');
            return false;
        }
        $comment = is_string($act->obj) ? $act->obj : $act->obj['id'];
        if ($comment !== $item['mid']) {
            logger('incorrect mid');
            return false;
        }
        if(!in_array($act->parent_id, [$item['thr_parent'], $item['parent_mid']])) {
            logger('wrong provenance');
            logger('act: ' . $act->parent_id);
            logger('item: ' . print_r($item,true));
            return false;
        }
        logger('comment verified', LOGGER_DEBUG);
        return true;
    }

    public static function verifyReject($item, $channel, $approvalActivity = null)
    {

        if(!$approvalActivity) {
            $approvalActivity = Activity::fetch($item['approved'], $channel, true);
        }
        $parent_item = q("select * from item where mid = '%s'", $item['parent_mid']);

        if (! $approvalActivity) {
            return false;
        }
        if (!$parent_item) {
            return false;
        }

        if ($approvalActivity instanceof ActivityStreams) {
            $act = $approvalActivity;
        }
        else {
            $act = new ActivityStreams($approvalActivity);
        }
        if (! $act->is_valid()) {
            return false;
        }
        if (!$act->obj) {
            return false;
        }
        if ($act->type !== 'Reject') {
            return false;
        }
        if (!isset($act->actor)) {
            return false;
        }
        $sender = Activity::find_best_identity($act->actor['id']);
        if (!$sender || $sender !== $parent_item['owner_xchan']) {
            return false;
        }
        $comment = is_string($act->obj) ? $act->obj : $act->obj['id'];
        if ($comment !== $item['mid']) {
            return false;
        }
        if(!in_array($act->parent_id, [$item['thr_parent'], $item['parent_mid']])) {
            return false;
        }
        logger('comment verified', LOGGER_DEBUG);
        return true;
    }


    protected function get_parent()
    {
        $result = q("select parent_mid from item where mid = '%s'",
            dbesc($this->item['parent_mid'])
        );
        return $result ? $result[0]['parent_mid'] : '';
    }

}