comparing 9388ad027b43c970864b8e72b688785a62042367 and main on veryroundbird.house/smallbird-social

+17

.env.example

···

       1
       1
       +
       SERVER_URL=

     

       2
       2
       +
       CLIENT_ID=

     

       3
       3
       +
       DEFAULT_PDS=

     

       4
       4
       +
       CONSTELLATION_INSTANCE=

     

       5
       5
       +
       SLINGSHOT_INSTANCE=

     

       6
       6
       +
       PLC_DIRECTORY=

     

       7
       7
       +
       

     

       8
       8
       +
       AUTH_ACCOUNT=

     

       9
       9
       +
       AUTH_KEYTYPE=

     

       10
       10
       +
       AUTH_PUBKEY=

     

       11
       11
       +
       AUTH_PRIVKEY_HEX=

     

       12
       12
       +
       AUTH_PRIVKEY_MULTI=

     

       13
       13
       +
       

     

       14
       14
       +
       PRETTY_URLS=

     

       15
       15
       +
       DEFAULT_THEME=

     

       16
       16
       +
       DEFAULT_FONT=

     

       17
       17
       +
       SSL_CERT_PATH=

+69

config.php.example

···

       1
       1
       +
       <?php

     

       2
       2
       +
       define('SITE_TITLE', 'smallbird social');

     

       3
       3
       +
       define('SITE_PATH', ''); # or wherever you keep it

     

       4
       4
       +
       define('DB_LOCATION', __DIR__.'/data/sbs.db'); # or something like that. not in the same folder! it is ass in source control!!!

     

       5
       5
       +
       define('PUBLIC_API', "https://public.api.bsky.app");

     

       6
       6
       +
       # options:

     

       7
       7
       +
       # - https://public.api.bsky.app (bluesky)

     

       8
       8
       +
       # - that's it until the cool people at blacksky do theirs

     

       9
       9
       +
       define('FRONTPAGE_FEED', "at://did:plc:ffkgesg3jsv2j7aagkzrtcvt/app.bsky.feed.generator/aaagllxbcbsje");

     

       10
       10
       +
       define('SLINGSHOT_INSTANCE', "https://slingshot.microcosm.blue");

     

       11
       11
       +
       define('CONSTELLATION_INSTANCE', "https://constellation.smallbird.social");

     

       12
       12
       +
       # alternates:

     

       13
       13
       +
       # - constellation.microcosm.blue

     

       14
       14
       +
       # - constellation.snek.cc (run by natalie.sh)

     

       15
       15
       +
       # - constellation.smallbird.social (run by veryroundbird.house)

     

       16
       16
       +
       define('DEFAULT_PDS', "https://bsky.social");

     

       17
       17
       +
       # ideally pick a DEFAULT_PDS that has open registration, since this will be used to allow people to

     

       18
       18
       +
       # register new accounts.

     

       19
       19
       +
       # some options are

     

       20
       20
       +
       # - myatproto.social (run by blacksky)

     

       21
       21
       +
       # - cryptoanarchy.net (run by blacksky)

     

       22
       22
       +
       # - sprk.so

     

       23
       23
       +
       define('DEFAULT_RELAY', "https://relay.fire.hose.cam");

     

       24
       24
       +
       # some relay options:

     

       25
       25
       +
       # - bsky.network (you know who runs this)

     

       26
       26
       +
       # - relay1.us-east.bsky.network (bsky US east)

     

       27
       27
       +
       # - relay1.us-west.bsky.network (bsky US west)

     

       28
       28
       +
       # - relay3.fr.hose.cam (france)

     

       29
       29
       +
       # - relay.fire.hose.cam (montreal)

     

       30
       30
       +
       # - relay-ovh.demo.bsky.dev

     

       31
       31
       +
       # - atproto.africa (blacksky)

     

       32
       32
       +
       # - relay.upcloud.world (upcloud)

     

       33
       33
       +
       # - relay.hayescmd.net (edavis.dev)

     

       34
       34
       +
       # - relay.xero.systems (dane.is.extraordinarily.cool)

     

       35
       35
       +
       # - relay.feeds.blue (mackuba.eu; self-hosted only)

     

       36
       36
       +
       define('PLC_DIRECTORY', "https://plc.directory");

     

       37
       37
       +
       # other plc directory options:

     

       38
       38
       +
       # - https://plc.parakeet.at/

     

       39
       39
       +
       define('FAVORITE_FEEDS', [ // list of feeds you want to display in the sidebar to users not logged in

     

       40
       40
       +
         "at://did:plc:ffkgesg3jsv2j7aagkzrtcvt/app.bsky.feed.generator/aaagllxbcbsje",

     

       41
       41
       +
         "at://did:plc:xdtvlh4k3tntzp2vinmgehsz/app.bsky.feed.generator/aaaeb7hxb53jg",

     

       42
       42
       +
         "at://did:plc:abv47bjgzjgoh3yrygwoi36x/app.bsky.feed.generator/aaai4f7awwzkc",

     

       43
       43
       +
         "at://did:plc:dltmiiweocm22l656iffwn5a/app.bsky.feed.generator/aaagnt6bwkkb2",

     

       44
       44
       +
         "at://did:plc:mlq4aycufcuolr7ax6sezpc4/app.bsky.feed.generator/aaad2auzj4ana"

     

       45
       45
       +
       ]);

     

       46
       46
       +
       define('THEMES', [

     

       47
       47
       +
         'blank', 'catppuccin', 'rosepine', 'dracula', 'solarized', 'tempus'

     

       48
       48
       +
       ]);

     

       49
       49
       +
       define('PAGES', [

     

       50
       50
       +
         'about' => 'About',

     

       51
       51
       +
         'terms' => 'Terms',

     

       52
       52
       +
         'privacy' => 'Privacy'

     

       53
       53
       +
       ]);

     

       54
       54
       +
       define('LINKS', [

     

       55
       55
       +
         'code' => 'https://tangled.org/@veryroundbird.house/smallbird-social',

     

       56
       56
       +
         'bsky' => 'https://bsky.app/profile/smallbirdsocial.on.computer',

     

       57
       57
       +
         'ko-fi' => 'https://ko-fi.com/veryroundbird'

     

       58
       58
       +
       ]);

     

       59
       59
       +
       define('FONTS', [

     

       60
       60
       +
          'alegreya' => 'alegreya',

     

       61
       61
       +
          'geometria' => 'geometria',

     

       62
       62
       +
          'recursive' => 'recursive mono casual', 

     

       63
       63
       +
          'comicsans' => 'comic sans ms'

     

       64
       64
       +
       ]);

     

       65
       65
       +
       define('PRETTY_URLS', false);

     

       66
       66
       +
       define('DEFAULT_THEME', "catppuccin");

     

       67
       67
       +
       define('DEFAULT_FONT', "recursive");

     

       68
       68
       +
       define('THREAD_POST_COUNT', 5);

     

       69
       69
       +
       ?>

+84 -83

index.php

···

       19
       19
        
       use Matrix\Async;

     

       20
       20
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       21
       21
        
       use chillerlan\OAuth\OAuthOptions;

     

       22
       22
       +
       use chillerlan\OAuth\Storage\SessionStorage;

     

       22
       23
        
       use DateTimeImmutable;

     

       23
       23
       -
       use Lcobucci\JWT\Builder;

     

       24
       24
       -
       use Lcobucci\JWT\JwtFacade;

     

       25
       25
       -
       use Lcobucci\JWT\Signer\Hmac\Sha256;

     

       24
       24
       +
       use Lcobucci\JWT\Token\Builder;

     

       25
       25
       +
       use Lcobucci\JWT\Encoding\ChainedFormatter;

     

       26
       26
       +
       use Lcobucci\JWT\Encoding\JoseEncoder;

     

       26
       27
        
       use Lcobucci\JWT\Signer\Key\InMemory;

     

       28
       28
       +
       use Lcobucci\JWT\Signer\Ecdsa\Sha256;

     

       27
       29
        
       use Smallnest\Bsky\BskyProvider;

     

       28
       30
        
       

     

       31
       31
       +
       session_start();

     

       29
       32
        
       $bskyToucher = new BskyToucher();

     

       30
       33
        
       

     

       31
       34
        
       $favoriteFeeds = array_map(function ($feed) use ($bskyToucher) {

     
···

       64
       67
        
       Flight::set('publicApi', PUBLIC_API);

     

       65
       68
        
       Flight::set('frontpageFeed', FRONTPAGE_FEED);

     

       66
       69
        
       Flight::set('defaultRelay', DEFAULT_RELAY);

     

       67
       67
       -
       Flight::set('userAuth', null);

     

       70
       70
       +
       Flight::set('userAuth', array_key_exists('sbs_'.SITE_DOMAIN, $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN] : null);

     

       71
       71
       +
       Flight::set('userPds', array_key_exists('sbs_'.SITE_DOMAIN.'_pds', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] : null);

     

       72
       72
       +
       Flight::set('userInfo', array_key_exists('sbs_'.SITE_DOMAIN.'_userinfo', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] : null);

     

       68
       73
        
       Flight::set('flight.log_errors', false);

     

       69
       74
        
       Flight::set('flight.handle_errors', false);

     

       70
       75
        
       Flight::set('flight.content_length', false);

     
···

       76
       81
        
         'setTheme' => array_key_exists('sbs_theme', $_COOKIE) ? $_COOKIE['sbs_theme'] : DEFAULT_THEME,

     

       77
       82
        
         'setFont' => array_key_exists('sbs_font', $_COOKIE) ? $_COOKIE['sbs_font'] : DEFAULT_FONT,

     

       78
       83
        
         'userAuth' => Flight::get('userAuth'),

     

       84
       84
       +
         'userPds' => Flight::get('userPds'),

     

       85
       85
       +
         'userInfo' => Flight::Get('userInfo'),

     

       79
       86
        
         'favFeeds' => $favoriteFeeds,

     

       80
       87
        
         'pages' => PAGES,

     

       81
       88
        
         'links' => LINKS,

     
···

       175
       182
        
       });

     

       176
       183
        
       

     

       177
       184
        
       Flight::route('/login', function(): void {

     

       178
       178
       -
         $options = new OAuthOptions([

     

       179
       179
       -
         	'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       180
       180
       -
         	'secret'       => CLIENT_SECRET,

     

       181
       181
       -
         	'callbackURL'  => 'http://127.0.0.1/login',

     

       182
       182
       -
         	'sessionStart' => true,

     

       183
       183
       -
         ]);

     

       184
       184
       -
         $connector = new React\Socket\Connector([

     

       185
       185
       -
           'dns' => '1.1.1.1'

     

       186
       186
       -
         ]);

     

       187
       187
       -
         $http = new React\Http\Browser($connector);

     

       188
       188
       -
         $httpFactory = new HttpFactory();

     

       189
       189
       -
         $client = new GuzzleHttp\Client([

     

       190
       190
       -
           'verify' => true,

     

       191
       191
       -
           'headers' => [

     

       192
       192
       -
             'User-Agent' => USER_AGENT_STR

     

       193
       193
       -
           ]

     

       194
       194
       -
         ]);

     

       195
       195
       -
         $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       196
       196
       -
         $name = $provider->getName();

     

       185
       185
       +
         if (isset($_GET['username'])) {

     

       197
       186
        
         $username = $_GET['username'];

     

       198
       198
       -
         $bskyToucher = new BskyToucher();

     

       199
       199
       -
         $userInfo = $bskyToucher->getUserInfo($username);

     

       200
       200
       -
         if (!$userInfo) die(1);

     

       201
       201
       -
         $pds = $userInfo->pds;

     

       202
       202
       -
         $provider->setPds($pds);

     

       203
       203
       -
         $token_builder = (new Builder(new JoseEncoder(), ChainedFormatter::default()));

     

       204
       204
       -
         $algorithm    = new Sha256();

     

       205
       205
       -
         $signing_key   = InMemory::plainText(random_bytes(32));

     

       206
       206
       -
         $now   = new DateTimeImmutable();

     

       207
       207
       -
         $token = $token_builder

     

       208
       208
       -
           ->withHeader('alg', 'ES256')

     

       209
       209
       -
           ->withHeader('typ', 'JWT')

     

       210
       210
       -
           ->withClaim('iss', $userInfo->did)

     

       211
       211
       -
           ->withClaim('sub', 'https://'.SITE_DOMAIN.CLIENT_ID)

     

       212
       212
       -
           ->withClaim('aud', 'did:web:'.str_replace("/", str_replace("https://", $pds)))

     

       213
       213
       -
           ->withClaim('iat', strtotime('now'))

     

       214
       214
       -
           ->getToken($algorithm, $signing_key);

     

       215
       215
       -
           

     

       216
       216
       -
         /*$jwt_header = base64_encode(json_encode([

     

       217
       217
       -
           'alg' => 'ES256',

     

       218
       218
       -
           'typ' => 'JWT'

     

       219
       219
       -
         ]));

     

       220
       220
       -
         $jwt_body = base64_encode(json_encode([

     

       221
       221
       -
           'iss' => $userInfo->did,

     

       222
       222
       -
           'sub' => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       223
       223
       -
           'aud' => 'did:web:'.str_replace("/", str_replace("https://", $pds)),

     

       224
       224
       -
           'jti' => hash('sha512', bin2hex(random_bytes(256 / 2))),

     

       225
       225
       -
           'iat' => strtotime('now')

     

       226
       226
       -
         ]));

     

       227
       227
       -
         $jwt = $jwt_header.$jwt_body.base64_encode(CERT);*/

     

       228
       228
       -
         $client->setDefaultOption('headers', [

     

       229
       229
       -
           'User-Agent' => USER_AGENT_STR,

     

       230
       230
       -
           'Authorization' => 'Bearer: '.$token->toString()

     

       231
       231
       -
         ]);

     

       232
       232
       -
         if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       233
       233
       -
           $auth_url = $provider->getAuthorizationUrl();

     

       234
       234
       -
           header('Location: '.$auth_url);

     

       235
       235
       -
           die(1);

     

       236
       236
       -
         } else if (isset($_GET['code'], $_GET['state'])) {

     

       237
       237
       -
           $token = $provider->getAccessToken($_GET['code'], $_GET['state']);

     

       238
       238
       -
       

     

       239
       239
       -
         	// save the token in a permanent storage

     

       240
       240
       -
         	// [...]

     

       241
       241
       -
       

     

       242
       242
       -
         	// access granted, redirect

     

       243
       243
       -
         	header('Location: ?granted='.$name);

     

       244
       244
       -
           die(1);

     

       245
       245
       -
         } else if (isset($_GET['granted']) && $_GET['granted'] === $name) {

     

       246
       246
       -
           die(1);

     

       247
       247
       -
         } else if (isset($_GET['error'])) {

     

       248
       248
       -
           die(1);

     

       187
       187
       +
           $bskyToucher = new BskyToucher();

     

       188
       188
       +
           $userInfo = $bskyToucher->getUserInfo($username);

     

       189
       189
       +
           if (!$userInfo) die(1);

     

       190
       190
       +
           $pds = $userInfo->pds;

     

       191
       191
       +
           $options = new OAuthOptions([

     

       192
       192
       +
             'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       193
       193
       +
             'secret'       => CLIENT_SECRET,

     

       194
       194
       +
             'callbackURL'  => 'https://'.SITE_DOMAIN.'/login',

     

       195
       195
       +
             'sessionStart' => true,

     

       196
       196
       +
             'sessionStorageVar' => 'sbs_'.SITE_DOMAIN

     

       197
       197
       +
           ]);

     

       198
       198
       +
           $storage = new SessionStorage($options);

     

       199
       199
       +
           $connector = new React\Socket\Connector([

     

       200
       200
       +
             'dns' => '1.1.1.1'

     

       201
       201
       +
           ]);

     

       202
       202
       +
           $http = new React\Http\Browser($connector);

     

       203
       203
       +
           $httpFactory = new HttpFactory();

     

       204
       204
       +
           $token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());

     

       205
       205
       +
           $algorithm    = new Sha256();

     

       206
       206
       +
           $signing_key   = InMemory::file(CERT_PATH);

     

       207
       207
       +
           $now   = new DateTimeImmutable();

     

       208
       208
       +
           $token = $token_builder

     

       209
       209
       +
             ->withHeader('alg', 'ES256')

     

       210
       210
       +
             ->withHeader('typ', 'JWT')

     

       211
       211
       +
             ->withHeader('kid', 'ocwgKj_O7H9at1sL6yWf9ZZ82NOM7D0xlN8HGIyWH6M')

     

       212
       212
       +
             ->issuedBy('https://'.SITE_DOMAIN.CLIENT_ID)

     

       213
       213
       +
             ->identifiedBy(uniqid())

     

       214
       214
       +
             ->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)

     

       215
       215
       +
             ->permittedFor($pds)

     

       216
       216
       +
             ->issuedAt($now->modify('-5 seconds'))

     

       217
       217
       +
             ->getToken($algorithm, $signing_key);

     

       218
       218
       +
           $client = new GuzzleHttp\Client([

     

       219
       219
       +
             'verify' => true,

     

       220
       220
       +
             'headers' => [

     

       221
       221
       +
               'User-Agent' => USER_AGENT_STR,

     

       222
       222
       +
               'Authorization' => 'Bearer: '.$token->toString()

     

       223
       223
       +
             ]

     

       224
       224
       +
           ]);

     

       225
       225
       +
           $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       226
       226
       +
           $provider->setPds($pds);

     

       227
       227
       +
           $name = $provider->getName();

     

       228
       228
       +
           if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       229
       229
       +
             $auth_url = $provider->getAuthorizationUrl([

     

       230
       230
       +
               'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

     

       231
       231
       +
               'client_assertion' => $token->toString()

     

       232
       232
       +
             ]);

     

       233
       233
       +
             Flight::redirect($auth_url);

     

       234
       234
       +
             die(1);

     

       235
       235
       +
           } else if (isset($_GET['code'], $_GET['iss'])) {

     

       236
       236
       +
             $storage->storeAccessToken($_GET['code'], $name);

     

       237
       237
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] = $_GET['iss'];

     

       238
       238
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] = $bskyToucher->getUserInfo();

     

       239
       239
       +
             Flight::redirect('/');

     

       240
       240
       +
             die(1);

     

       241
       241
       +
           } else if (isset($_GET['error'])) {

     

       242
       242
       +
             die(1);

     

       243
       243
       +
           }

     

       244
       244
       +
         } else {

     

       245
       245
       +
           $latte = new Latte\Engine;

     

       246
       246
       +
           $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

     

       247
       247
       +
             'mainClass' => 'form',

     

       248
       248
       +
             'ogtitle' => SITE_TITLE." | login",

     

       249
       249
       +
             'ogdesc' => SITE_DESC,

     

       250
       250
       +
             'ogimage' => '',

     

       251
       251
       +
             'ogurl' => 'https://'.SITE_DOMAIN.'/login'

     

       252
       252
       +
           ]));

     

       249
       253
        
         }

     

       250
       250
       -
         $latte = new Latte\Engine;

     

       251
       251
       -
         $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

     

       252
       252
       -
           'mainClass' => 'form',

     

       253
       253
       -
           'ogtitle' => SITE_TITLE." | login",

     

       254
       254
       -
           'ogdesc' => SITE_DESC,

     

       255
       255
       -
           'ogimage' => '',

     

       256
       256
       -
           'ogurl' => 'https://'.SITE_DOMAIN.'/login'

     

       257
       257
       -
         ]));

     

       258
       254
        
       });

     

       259
       255
        
       

     

       260
       260
       -
       // https://shimaenaga.veryroundbird.house/oauth/authorize?client_id=https%3A%2F%2Ftangled.org%2Foauth%2Fclient-metadata.json&request_uri=urn%3Aietf%3Aparams%3Aoauth%3Arequest_uri%3Areq-2399ff42af66498132ebf8de809254b7

     

       256
       256
       +
       Flight::route('/logout', function(): void {

     

       257
       257
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN]);

     

       258
       258
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN.'_pds']);

     

       259
       259
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN.'_userinfo']);

     

       260
       260
       +
         Flight::redirect('/');

     

       261
       261
       +
       });

     

       261
       262
        
       

     

       262
       263
        
       Flight::route('/createaccount', function(): void {

     

       263
       264
        
         $latte = new Latte\Engine;

+40 -2

lib/bskyProvider.php

···

       6
       6
        
       

     

       7
       7
        
       use chillerlan\OAuth\Core\OAuth2Interface;

     

       8
       8
        
       use chillerlan\OAuth\Core\OAuth2Provider;

     

       9
       9
       -
       use chillerlan\OAuth\Core\PARTrait;

     

       10
       9
        
       use chillerlan\OAuth\Core\PKCETrait;

     

       11
       10
        
       use chillerlan\OAuth\OAuthOptions;

     

       12
       11
        
       use chillerlan\OAuth\Storage\SessionStorage;

     

       12
       12
       +
       use chillerlan\HTTP\Utils\MessageUtil;

     

       13
       13
       +
       use chillerlan\HTTP\Utils\QueryUtil;

     

       14
       14
       +
       use chillerlan\OAuth\Providers\ProviderException;

     

       13
       15
        
       use GuzzleHttp\Client;

     

       14
       16
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       17
       17
       +
       use Psr\Http\Message\UriInterface;

     

       18
       18
       +
       use function sprintf;

     

       15
       19
        
       

     

       16
       20
        
       class BskyProvider extends OAuth2Provider implements \chillerlan\OAuth\Core\PAR, \chillerlan\OAuth\Core\PKCE {

     

       17
       17
       -
         use \chillerlan\OAuth\Core\PARTrait;

     

       18
       21
        
         use \chillerlan\OAuth\Core\PKCETrait;

     

       19
       22
        
         

     

       20
       23
        
       	public const IDENTIFIER               = 'BSKYPROVIDER';

     
···

       52
       55
        
           $this->parAuthorizationURL = (string)$pds->withPath('/oauth/par');

     

       53
       56
        
           

     

       54
       57
        
       		return $this;

     

       58
       58
       +
       	}

     

       59
       59
       +
         

     

       60
       60
       +
       	public function getParRequestUri(array $body):UriInterface{

     

       61
       61
       +
       		// send the request with the same method and parameters as the token requests

     

       62
       62
       +
       		// @link https://datatracker.ietf.org/doc/html/rfc9126#name-request

     

       63
       63
       +
       		$response = $this->sendAccessTokenRequest($this->parAuthorizationURL, $body);

     

       64
       64
       +
       		$status   = $response->getStatusCode();

     

       65
       65
       +
       		$json     = MessageUtil::decodeJSON($response, true);

     

       66
       66
       +
       

     

       67
       67
       +
       		// something went horribly wrong

     

       68
       68
       +
       		if($status !== 201){

     

       69
       69
       +
       

     

       70
       70
       +
       			// @link https://datatracker.ietf.org/doc/html/rfc9126#section-2.3

     

       71
       71
       +
       			if(isset($json['error'], $json['error_description'])){

     

       72
       72
       +
       				throw new ProviderException(sprintf('PAR error: "%s" (%s)', $json['error'], $json['error_description']));

     

       73
       73
       +
       			}

     

       74
       74
       +
       

     

       75
       75
       +
       			throw new ProviderException(sprintf('PAR request error: (HTTP/%s)', $status)); // @codeCoverageIgnore

     

       76
       76
       +
       		}

     

       77
       77
       +
       

     

       78
       78
       +
       		$url = QueryUtil::merge($this->authorizationURL, $this->getParAuthorizationURLRequestParams($json));

     

       79
       79
       +
       

     

       80
       80
       +
       		return $this->uriFactory->createUri($url);

     

       81
       81
       +
       	}

     

       82
       82
       +
         

     

       83
       83
       +
       	protected function getParAuthorizationURLRequestParams(array $response):array{

     

       84
       84
       +
       

     

       85
       85
       +
       		if(!isset($response['request_uri'])){

     

       86
       86
       +
       			throw new ProviderException('PAR response error: "request_uri" missing');

     

       87
       87
       +
       		}

     

       88
       88
       +
       

     

       89
       89
       +
       		return [

     

       90
       90
       +
       			'client_id'   => $this->options->key,

     

       91
       91
       +
       			'request_uri' => $response['request_uri'],

     

       92
       92
       +
       		];

     

       55
       93
        
       	}

     

       56
       94
        
       }

     

       57
       95
        
       ?>

lib/bskyToucher.php

···

       25
       25
        
       use Psr\Http\Message\RequestInterface;

     

       26
       26
        
       use Psr\Http\Message\ResponseInterface;

     

       27
       27
        
       use Fusonic\OpenGraph\Consumer;

     

       28
       28
       +
       use chillerlan\OAuth\Storage\SessionStorage;

     

       28
       29
        
       

     

       29
       30
        
       class BskyToucher {

     

       30
       31
        
         private $bskyApiBase = 'https://public.api.bsky.app/xrpc/';

pages/privacy.md

···

       2
       2
        
       

     

       3
       3
        
       smallbird social is meant to run as lightweight as possible and stores no data on its own server. if you are using a veryroundbird.house pds, your data and activity is on *that* server, but it only stores what's necessary to, you know, interact with the atproto ecosystem. so, user ID information, your posts, follows, likes, etc.

     

       4
       4
        
       

     

       5
       5
       +
       the server also caches publicly-available post and user data to speed up requests. none of this data is kept longer than, like, a few days unless it's requested again.

     

       6
       6
       +
       

     

       5
       7
        
       there is some minimal tracking via goatcounter, but your data will never touch advertisers and it doesn't track individual users; i mostly just want to know what the site usage numbers are and where people found it from.

     

       6
       8
        
         

     

       7
       9
        
       i have never been asked to or required to turn over data to any law enforcement agency.

pages/terms.md

···

       1
       1
       +
       ## terms of use

     

       2
       2
       +
       

     

       3
       3
       +
       i reserve the right to block any IPs that are hitting the site too hard. i also reserve the right to end service at any time if for some reason it gets too hard to maintain or something like that. some features may be jank, broken, or missing due to the limitations of my approach and time.

     

       4
       4
       +
       

     

       5
       5
       +
       just be normal, ok. use the site like a normal person. that's what it's for.

-17

public/.env.example

···

       1
       1
       -
       SERVER_URL=

     

       2
       2
       -
       CLIENT_ID=

     

       3
       3
       -
       DEFAULT_PDS=

     

       4
       4
       -
       CONSTELLATION_INSTANCE=

     

       5
       5
       -
       SLINGSHOT_INSTANCE=

     

       6
       6
       -
       PLC_DIRECTORY=

     

       7
       7
       -
       

     

       8
       8
       -
       AUTH_ACCOUNT=

     

       9
       9
       -
       AUTH_KEYTYPE=

     

       10
       10
       -
       AUTH_PUBKEY=

     

       11
       11
       -
       AUTH_PRIVKEY_HEX=

     

       12
       12
       -
       AUTH_PRIVKEY_MULTI=

     

       13
       13
       -
       

     

       14
       14
       -
       PRETTY_URLS=

     

       15
       15
       -
       DEFAULT_THEME=

     

       16
       16
       -
       DEFAULT_FONT=

     

       17
       17
       -
       SSL_CERT_PATH=

-15

public/client-metadata.json

···

       1
       1
       -
       {

     

       2
       2
       -
         "client_id": "http://localhost:5173/client-metadata.json",

     

       3
       3
       -
         "application_type": "web",

     

       4
       4
       -
         "client_name": "smallbird-social",

     

       5
       5
       -
         "client_uri": "https://localhost:5173",

     

       6
       6
       -
         "dpop_bound_access_tokens": true,

     

       7
       7
       -
         "grant_types": ["authorization_code", "refresh_token"],

     

       8
       8
       -
         "redirect_uris": ["http://localhost:5173/login"],

     

       9
       9
       -
         "response_types": ["code"],

     

       10
       10
       -
         "scope": "atproto transition:generic",

     

       11
       11
       -
         "dpop_bound_access_tokens": true,

     

       12
       12
       -
         "jwks_uri": "http://localhost:5173/jwks.json",

     

       13
       13
       -
         "token_endpoint_auth_method": "private_key_jwt",

     

       14
       14
       -
         "token_endpoint_auth_signing_alg": "ES256"

     

       15
       15
       -
       }

-69

public/config.php.example

···

       1
       1
       -
       <?php

     

       2
       2
       -
       define('SITE_TITLE', 'smallbird social');

     

       3
       3
       -
       define('SITE_PATH', ''); # or wherever you keep it

     

       4
       4
       -
       define('DB_LOCATION', __DIR__.'/data/sbs.db'); # or something like that. not in the same folder! it is ass in source control!!!

     

       5
       5
       -
       define('PUBLIC_API', "https://public.api.bsky.app");

     

       6
       6
       -
       # options:

     

       7
       7
       -
       # - https://public.api.bsky.app (bluesky)

     

       8
       8
       -
       # - that's it until the cool people at blacksky do theirs

     

       9
       9
       -
       define('FRONTPAGE_FEED', "at://did:plc:ffkgesg3jsv2j7aagkzrtcvt/app.bsky.feed.generator/aaagllxbcbsje");

     

       10
       10
       -
       define('SLINGSHOT_INSTANCE', "https://slingshot.microcosm.blue");

     

       11
       11
       -
       define('CONSTELLATION_INSTANCE', "https://constellation.smallbird.social");

     

       12
       12
       -
       # alternates:

     

       13
       13
       -
       # - constellation.microcosm.blue

     

       14
       14
       -
       # - constellation.snek.cc (run by natalie.sh)

     

       15
       15
       -
       # - constellation.smallbird.social (run by veryroundbird.house)

     

       16
       16
       -
       define('DEFAULT_PDS', "https://bsky.social");

     

       17
       17
       -
       # ideally pick a DEFAULT_PDS that has open registration, since this will be used to allow people to

     

       18
       18
       -
       # register new accounts.

     

       19
       19
       -
       # some options are

     

       20
       20
       -
       # - myatproto.social (run by blacksky)

     

       21
       21
       -
       # - cryptoanarchy.net (run by blacksky)

     

       22
       22
       -
       # - sprk.so

     

       23
       23
       -
       define('DEFAULT_RELAY', "https://relay.fire.hose.cam");

     

       24
       24
       -
       # some relay options:

     

       25
       25
       -
       # - bsky.network (you know who runs this)

     

       26
       26
       -
       # - relay1.us-east.bsky.network (bsky US east)

     

       27
       27
       -
       # - relay1.us-west.bsky.network (bsky US west)

     

       28
       28
       -
       # - relay3.fr.hose.cam (france)

     

       29
       29
       -
       # - relay.fire.hose.cam (montreal)

     

       30
       30
       -
       # - relay-ovh.demo.bsky.dev

     

       31
       31
       -
       # - atproto.africa (blacksky)

     

       32
       32
       -
       # - relay.upcloud.world (upcloud)

     

       33
       33
       -
       # - relay.hayescmd.net (edavis.dev)

     

       34
       34
       -
       # - relay.xero.systems (dane.is.extraordinarily.cool)

     

       35
       35
       -
       # - relay.feeds.blue (mackuba.eu; self-hosted only)

     

       36
       36
       -
       define('PLC_DIRECTORY', "https://plc.directory");

     

       37
       37
       -
       # other plc directory options:

     

       38
       38
       -
       # - https://plc.parakeet.at/

     

       39
       39
       -
       define('FAVORITE_FEEDS', [ // list of feeds you want to display in the sidebar to users not logged in

     

       40
       40
       -
         "at://did:plc:ffkgesg3jsv2j7aagkzrtcvt/app.bsky.feed.generator/aaagllxbcbsje",

     

       41
       41
       -
         "at://did:plc:xdtvlh4k3tntzp2vinmgehsz/app.bsky.feed.generator/aaaeb7hxb53jg",

     

       42
       42
       -
         "at://did:plc:abv47bjgzjgoh3yrygwoi36x/app.bsky.feed.generator/aaai4f7awwzkc",

     

       43
       43
       -
         "at://did:plc:dltmiiweocm22l656iffwn5a/app.bsky.feed.generator/aaagnt6bwkkb2",

     

       44
       44
       -
         "at://did:plc:mlq4aycufcuolr7ax6sezpc4/app.bsky.feed.generator/aaad2auzj4ana"

     

       45
       45
       -
       ]);

     

       46
       46
       -
       define('THEMES', [

     

       47
       47
       -
         'blank', 'catppuccin', 'rosepine', 'dracula', 'solarized', 'tempus'

     

       48
       48
       -
       ]);

     

       49
       49
       -
       define('PAGES', [

     

       50
       50
       -
         'about' => 'About',

     

       51
       51
       -
         'terms' => 'Terms',

     

       52
       52
       -
         'privacy' => 'Privacy'

     

       53
       53
       -
       ]);

     

       54
       54
       -
       define('LINKS', [

     

       55
       55
       -
         'code' => 'https://tangled.org/@veryroundbird.house/smallbird-social',

     

       56
       56
       -
         'bsky' => 'https://bsky.app/profile/smallbirdsocial.on.computer',

     

       57
       57
       -
         'ko-fi' => 'https://ko-fi.com/veryroundbird'

     

       58
       58
       -
       ]);

     

       59
       59
       -
       define('FONTS', [

     

       60
       60
       -
          'alegreya' => 'alegreya',

     

       61
       61
       -
          'geometria' => 'geometria',

     

       62
       62
       -
          'recursive' => 'recursive mono casual', 

     

       63
       63
       -
          'comicsans' => 'comic sans ms'

     

       64
       64
       -
       ]);

     

       65
       65
       -
       define('PRETTY_URLS', false);

     

       66
       66
       -
       define('DEFAULT_THEME', "catppuccin");

     

       67
       67
       -
       define('DEFAULT_FONT', "recursive");

     

       68
       68
       -
       define('THREAD_POST_COUNT', 5);

     

       69
       69
       -
       ?>

+2 -1

templates/_partials/nav.latte

···

       1
       1
        
       <nav>

     

       2
       2
        
         <ul>

     

       3
       3
        
           {if $userAuth}

     

       4
       4
       +
             <li><a href="/u/{$userInfo->handle}">profile</a></li>

     

       4
       5
        
             <li><a href="/settings">settings</a></li>

     

       5
       5
       -
             <li><a href="#">log out</a></li>

     

       6
       6
       +
             <li><a href="/logout">log out</a></li>

     

       6
       7
        
           {else}

     

       7
       8
        
             <li><a href="/createaccount">create</a></li>

     

       8
       9
        
             <li><a href="/login">log in</a></li>

templates/layout.latte

···

       24
       24
        
           data-theme="{$setTheme}"

     

       25
       25
        
           data-font="{$setFont}"

     

       26
       26
        
         >

     

       27
       27
       +
           <!--

     

       28
       28
       +
             {print_r($_SESSION)}

     

       29
       29
       +
             {print_r(PHP_SESSION_DISABLED)}

     

       30
       30
       +
           -->

     

       27
       31
        
           <div id="page">

     

       28
       32
        
             <header>

     

       29
       33
        
               <h1><a href="/">{include '_partials/logo.latte'}{$siteTitle}</a></h1>

+1 -3

vendor/chillerlan/php-oauth/src/Core/PARTrait.php

···

       35
       35
        
       	public function getParRequestUri(array $body):UriInterface{

     

       36
       36
        
       		// send the request with the same method and parameters as the token requests

     

       37
       37
        
       		// @link https://datatracker.ietf.org/doc/html/rfc9126#name-request

     

       38
       38
       -
           print_r($this->parAuthorizationURL);

     

       39
       38
        
       		$response = $this->sendAccessTokenRequest($this->parAuthorizationURL, $body);

     

       40
       39
        
       		$status   = $response->getStatusCode();

     

       41
       40
        
       		$json     = MessageUtil::decodeJSON($response, true);

     

       42
       42
       -
           print_r($body);

     

       43
       43
       -
           print_r($json);

     

       44
       41
        
       

     

       45
       42
        
       		// something went horribly wrong

     

       46
       43
        
       		if($status !== 200){

     

       44
       44
       +
             print_r($json);

     

       47
       45
        
       

     

       48
       46
        
       			// @link https://datatracker.ietf.org/doc/html/rfc9126#section-2.3

     

       49
       47
        
       			if(isset($json['error'], $json['error_description'])){

+2 -2

vendor/composer/installed.php

···

       3
       3
        
               'name' => '__root__',

     

       4
       4
        
               'pretty_version' => 'dev-main',

     

       5
       5
        
               'version' => 'dev-main',

     

       6
       6
       -
               'reference' => '988c87ce046f0ee346497af8fb5c755d3ae75b7b',

     

       6
       6
       +
               'reference' => '1ea5f55bde378131812f28e47f7d5b6558b04018',

     

       7
       7
        
               'type' => 'library',

     

       8
       8
        
               'install_path' => __DIR__ . '/../../',

     

       9
       9
        
               'aliases' => array(),

     
···

       13
       13
        
               '__root__' => array(

     

       14
       14
        
                   'pretty_version' => 'dev-main',

     

       15
       15
        
                   'version' => 'dev-main',

     

       16
       16
       -
                   'reference' => '988c87ce046f0ee346497af8fb5c755d3ae75b7b',

     

       16
       16
       +
                   'reference' => '1ea5f55bde378131812f28e47f7d5b6558b04018',

     

       17
       17
        
                   'type' => 'library',

     

       18
       18
        
                   'install_path' => __DIR__ . '/../../',

     

       19
       19
        
                   'aliases' => array(),

vite.config.js

···

       14
       14
        
           usePHP({

     

       15
       15
        
             entry: [

     

       16
       16
        
               'index.php',

     

       17
       17
       +
               'config.php',

     

       18
       18
       +
               '.env',

     

       19
       19
       +
               'client-metadata.json',

     

       20
       20
       +
               'jwks.json',

     

       17
       21
        
               'oauth/*',

     

       18
       22
        
               'oauth/**/*.json',

     

       19
       23
        
               'templates/**/*.latte',

Compare changes