# frozen_string_literal: true require 'rails_helper' RSpec.describe VerifyLinkService do subject { described_class.new } context 'when given a local account' do let(:account) { Fabricate(:account, username: 'alice') } let(:field) { Account::Field.new(account, 'name' => 'Website', 'value' => 'http://example.com') } before do stub_request(:head, 'https://redirect.me/abc').to_return(status: 301, headers: { 'Location' => ActivityPub::TagManager.instance.url_for(account) }) stub_request(:head, 'http://unrelated-site.com').to_return(status: 301) stub_request(:get, 'http://example.com').to_return(status: 200, body: html) subject.call(field) end context 'when a link contains an back' do let(:html) do <<~HTML Follow me on Mastodon HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when a link contains an back' do let(:html) do <<~HTML Follow me on Mastodon HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when a link contains a back' do let(:html) do <<~HTML HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when a link goes through a redirect back' do let(:html) do <<~HTML HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when a document is truncated but the link back is valid' do let(:html) do <<-HTML HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when a link tag might be truncated' do let(:html) do <<-HTML_TRUNCATED Follow me on Mastodon HTML end it 'does not mark the field as verified' do expect(field.verified?).to be false end end context 'when a link contains a link to an unexpected URL' do let(:html) do <<~HTML Follow me on Unrelated Site HTML end it 'does not mark the field as verified' do expect(field.verified?).to be false end end end context 'when given a remote account' do let(:account) { Fabricate(:account, username: 'alice', domain: 'example.com', url: 'https://profile.example.com/alice') } let(:field) { Account::Field.new(account, 'name' => 'Website', 'value' => 'http://example.com') } before do stub_request(:get, 'http://example.com').to_return(status: 200, body: html) subject.call(field) end context 'when a link contains an back' do let(:html) do <<~HTML Follow me on Mastodon HTML end it 'marks the field as verified' do expect(field.verified?).to be true end end context 'when the link contains a link with a missing protocol slash' do # This was seen in the wild where a user had three pages: # 1. their mastodon profile, which linked to github and the personal website # 2. their personal website correctly linking back to mastodon # 3. a github profile that was linking to the personal website, but with # a malformed protocol of http:/ # # This caused link verification between the mastodon profile and the # website to fail. # # apparently github allows the user to enter website URLs with a single # slash and makes no attempts to correct that. let(:html) do <<-HTML Hello HTML end it 'does not crash' do # We could probably put more effort into perhaps auto-correcting the # link and following it anyway, but at the very least we shouldn't let # exceptions bubble up expect(field.verified?).to be false end end end end