-
Notifications
You must be signed in to change notification settings - Fork 46
/
Copy pathopt_out.py
225 lines (186 loc) · 7.39 KB
/
opt_out.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
"""Opts a user out and deletes their bridged profiles in other networks.
https://github.com/snarfed/bridgy-fed/issues/783
Usage: opt_out.py [PROTOCOL] [USER_ID] [EXTRA_TARGETS ...]
PROTOCOL: protocol label, eg web, activitypub, atproto
USER_ID: key id of the user entity
EXTRA_TARGETS: bridged profiles will also be deleted here. currently AP only!
Run with:
source local/bin/activate.csh
env PYTHONPATH=. GOOGLE_APPLICATION_CREDENTIALS=service_account_creds.json APPVIEW_HOST=bsky.social PLC_HOST=plc.directory BGS_HOST=bsky.network \
python scripts/opt_out.py ...
"""
import argparse
import logging
import sys
from google.cloud import ndb
from oauth_dropins.webutil import appengine_info
appengine_info.DEBUG = False
from oauth_dropins.webutil import appengine_config, flask_util, util
import ids
from models import Object, Target
import protocol
from activitypub import ActivityPub
from atproto import ATProto
from web import Web
from app import app
appengine_config.error_reporting_client.host = 'localhost:9999'
appengine_config.error_reporting_client.secure = False
# logging.basicConfig(level=logging.DEBUG)
# Includes top 20-40 each from fedidb.org and fediverse.observer on 2024-01-23
AP_BASE_TARGETS = [
# Diaspora
# 'https://joindiaspora.com/',
# 'https://diasp.org/',
# Friendica
'https://venera.social/inbox',
# kbin (not sharedInbox)
# dead!
# 'https://kbin.social/i/inbox',
# # Lemmy (not sharedInbox); these tend to fail on BF objects right now
# 'https://alien.top/inbox',
# # 'https://enterprise.lemmy.ml/inbox',
# 'https://lemmy.ml/inbox',
# 'https://lemmy.world/inbox',
# 'https://pasta.faith/inbox',
# 'https://r-sauna.fi/inbox',
# Mastodon
'https://baraag.net/inbox',
'https://c.im/inbox',
# down as of 2024-08-03
# 'https://daystorm.netz.org/inbox',
'https://fosstodon.org/inbox',
# down as of 2024-08-03
# 'https://gc2.jp/inbox',
'https://hachyderm.io/inbox',
'https://indieweb.social/inbox',
'https://infosec.exchange/inbox',
'https://mas.to/inbox',
'https://masto.ai/inbox',
'https://mastodon.cloud/inbox',
'https://mastodon.online/inbox',
'https://mastodon.sdf.org/inbox',
'https://mastodon.social/inbox',
'https://mastodon.top/inbox',
'https://mastodon.uno/inbox',
'https://mastodon.world/inbox',
'https://mastodonapp.uk/inbox',
'https://mozilla.social/inbox',
'https://mstdn.jp/inbox',
'https://mstdn.social/inbox',
'https://pawoo.net/inbox',
'https://pravda.me/inbox',
'https://techhub.social/inbox',
'https://universeodon.com/inbox',
# Misskey
'https://misskey.io/inbox',
# micro.blog
'https://micro.blog/activitypub/shared/inbox',
# PixelFed (not sharedInbox)
'https://pixelfed.social/i/actor/inbox',
# Twitter bridge
# 'https://bird.makeup/inbox',
]
parser = argparse.ArgumentParser()
parser.add_argument('protocol')
parser.add_argument('user_id')
parser.add_argument('extra_targets', nargs='*')
parser.add_argument('-o', '--only',
help='only disable bridging to this protocol')
parser.add_argument('--no-extra', action='store_true',
help="don't send Deletes to extra fediverse instances")
args = parser.parse_args()
def run():
from_proto = protocol.PROTOCOLS[args.protocol]
kind = from_proto._get_kind()
user_id = args.user_id
only_proto = protocol.PROTOCOLS[args.only] if args.only else None
if args.protocol == 'activitypub' and user_id.count('@') == 1:
instance, user = user_id.strip().removeprefix('https://').split('/@')
user_id = f'@{user}@{instance}'
print(f'Cleaned up user id to {user_id}')
if (from_proto.owns_id(user_id) is False
and from_proto.owns_handle(user_id) is not False):
handle = user_id
user_id = from_proto.handle_to_id(handle)
print(f'Converted {args.protocol} handle {handle} to user id {user_id}')
assert from_proto.owns_id(user_id) is not False
user = from_proto.get_by_id(user_id, allow_opt_out=True)
if not user:
print(f"user {kind} {user_id} doesn't exist. Creating new and marking as opted out.")
from_proto.get_or_create(user_id, manual_opt_out=True)
return
if user.manual_opt_out:
# needed for key_for etc in misc downstream code below
user.manual_opt_out = False
user.put()
# assert not user.status, user.status
# delete base and extra AP targets
if from_proto != ActivityPub and only_proto in (None, ActivityPub):
delete_ap_targets(from_proto=from_proto, user=user, user_id=user_id)
# give AS1 delete activity to receive
delete_base_id = user.web_url() if from_proto is Web else user_id
delete_id = f'{delete_base_id}#bridgy-fed-delete-{util.now().isoformat()}'
delete_as1 = {
'objectType': 'activity',
'verb': 'delete',
'id': delete_id,
'actor': user_id,
'object': user_id,
}
obj = Object(id=delete_id, source_protocol=from_proto.LABEL, our_as1=delete_as1)
if only_proto:
from_proto.deliver(obj, from_user=user, to_proto=only_proto)
user.disable_protocol(only_proto)
else:
from_proto.receive(obj, authed_as=user_id, internal=True)
if not user.manual_opt_out:
user.manual_opt_out = True
user.put()
def delete_ap_targets(*, from_proto=None, user=None, user_id=None):
if not user.is_enabled(ActivityPub):
user.enabled_protocols.append('activitypub')
user.put()
delete_base_id = user.web_url() if from_proto is Web else user_id
delete_id = f'{delete_base_id}#bridgy-fed-delete-{util.now().isoformat()}'
delete_as1 = {
'objectType': 'activity',
'verb': 'delete',
'id': delete_id,
'actor': user_id,
'object': user_id,
}
obj = Object(id=delete_id, source_protocol=from_proto.LABEL, our_as1=delete_as1)
obj.put()
targets = args.extra_targets
if not args.no_extra:
targets += AP_BASE_TARGETS
targets = [Target(protocol='activitypub', uri=t) for t in targets]
for target in targets:
assert util.is_web(target.uri), f'Non-URL target: {target.uri}'
params = {
'protocol': target.protocol,
'url': target.uri,
'obj_id': delete_id,
'user': user.key.urlsafe(),
'force': 'true',
}
with app.test_request_context('/queue/send', base_url='https://fed.brid.gy/',
data=params, headers={
flask_util.CLOUD_TASKS_TASK_HEADER: 'x',
}):
# in ActivityPub, if the actor is already deleted on this instance,
# it may return 502 here because it no longer has the actor's public
# key, so it can't verify the HTTP Sig. (eg Mastodon does this; it
# uses LD Sigs for its actor deletes instead.)
#
# an alternative is to use the instance actor:
#
# activitypub.instance_actor().key.urlsafe()
#
# ...which gets accepted, but I'm not sure all implementations
# accept the instance actor as authorized to delete a different
# actor.
protocol.send_task()
with appengine_config.ndb_client.context(), \
app.test_request_context(base_url='https://fed.brid.gy/'):
run()