relmeauth-algorithms - Revision history

Barnabywalters: de-markdownifying things

2014-01-12T16:25:45Z

de-markdownifying things

← Older revision		Revision as of 16:25, 12 January 2014
Line 102:		Line 102:
	* Define behaviour for URLs which redirect to relative URLs		* Define behaviour for URLs which redirect to relative URLs

	## Implementations		== Implementations ==
	* PHP package: [https://github.com/indieweb/rel-me indieweb/rel-me]		* '''PHP''' package: [https://github.com/indieweb/rel-me indieweb/rel-me]
	* Ruby, as part of IndieAuth: [https://github.com/aaronpk/IndieAuth/blob/master/lib/relparser.rb relparser.rb]		* '''Ruby''', as part of IndieAuth: [https://github.com/aaronpk/IndieAuth/blob/master/lib/relparser.rb relparser.rb]

Barnabywalters: added implementations section with indieweb/rel-me and relparser.rb

2014-01-12T16:25:01Z

added implementations section with indieweb/rel-me and relparser.rb

← Older revision		Revision as of 16:25, 12 January 2014
Line 100:		Line 100:

	TODO:		TODO:
	* Generalise secure redirect matching loop, define as any_secure_redirects_match(url, match_url)
	* Define behaviour for URLs which redirect to relative URLs		* Define behaviour for URLs which redirect to relative URLs

			## Implementations
			* PHP package: [https://github.com/indieweb/rel-me indieweb/rel-me]
			* Ruby, as part of IndieAuth: [https://github.com/aaronpk/IndieAuth/blob/master/lib/relparser.rb relparser.rb]

Barnabywalters: added backlink verification stage, relative redirect TODO

2013-10-08T22:03:27Z

added backlink verification stage, relative redirect TODO

← Older revision		Revision as of 22:03, 8 October 2013
Line 91:		Line 91:

	for backlink in reverse_rel_me_links		for backlink in reverse_rel_me_links
	~~TODO~~: ~~reintegrate validate single link function~~		matches, secure, previous = backlinking_rel_me_url_matches(backlink, me_url)
			if matches and secure: return true

	if insecure_redirect_to_url is not false		if insecure_redirect_to_url is not false
Line 100:		Line 101:
	TODO:		TODO:
	* Generalise secure redirect matching loop, define as any_secure_redirects_match(url, match_url)		* Generalise secure redirect matching loop, define as any_secure_redirects_match(url, match_url)
			* Define behaviour for URLs which redirect to relative URLs

Barnabywalters: fixed reverse_rel_me_url link is reciprocal logic, think it matches outcomes now

2013-10-08T20:19:32Z

fixed reverse_rel_me_url link is reciprocal logic, think it matches outcomes now

← Older revision		Revision as of 20:19, 8 October 2013
Line 34:		Line 34:

	return me_url		return me_url

	To find rel=me links given me_url (rel_me_links):		To find rel=me links given me_url (rel_me_links):

Line 52:		Line 53:

	To determine whether or not a reverse_rel_me_url can be considered a reciprocal link for me_url:		To determine whether or not a reverse_rel_me_url can be considered a reciprocal link for me_url:

	~~TODO: fix this to match outcomes listed below~~

	me_url = normalise(me_url)		me_url = normalise(me_url)
Line 66:		Line 65:

	redirected_url = follow_one_redirect(reverse_rel_me_url)		redirected_url = follow_one_redirect(reverse_rel_me_url)
	if redirected_url is null		if redirected_url is null or redirected_url in previous
	~~break~~		return [false, true, previous]
	~~elseif~~ redirected_url in previous
	~~break~~
	elseif url_scheme(reverse_rel_me_url) != url_scheme(redirected_url)		elseif url_scheme(reverse_rel_me_url) != url_scheme(redirected_url)
	if me_url otherwise matches redirected_url		if me_url otherwise matches redirected_url
	~~secure =~~ false		return [true, false, previous]
	~~break~~		else:
			return [false, false, previous]
	else		else
	reverse_rel_me_url = redirected_url		reverse_rel_me_url = redirected_url

Barnabywalters: clarified return argument order

2013-10-08T18:33:30Z

clarified return argument order

← Older revision		Revision as of 18:33, 8 October 2013
Line 78:		Line 78:
	append redirected_url to previous		append redirected_url to previous

	Outcomes:		Outcomes (input => bool matches, bool is_secure, array redirect chain):

	* reverse_rel_me_url == me_url => true, true, previous		* reverse_rel_me_url == me_url => true, true, previous

Barnabywalters: extracted single reverse rel me link matching function, listed outcomes

2013-10-08T14:16:27Z

extracted single reverse rel me link matching function, listed outcomes

@@ Line 50: / Line 50: @@
      return rel_me_links
 To determine whether or not a profile_url linked via rel=me from the me_url back-links validly to the given me_url:
@@ Line 56: / Line 93: @@
      for backlink in reverse_rel_me_links
-         stop = false
+         TODO: reintegrate validate single link function
      if insecure_redirect_to_url is not false

Barnabywalters: Dump from etherpad

2013-10-05T18:23:43Z

Dump from etherpad

New page

Pseudocode implementations of various algorithms required for implementing relmeauth.

* Sourced mainly from https://github.com/aaronpk/IndieAuth/blob/master/lib/relparser.rb
* Dumped from https://etherpad.mozilla.org/indiewebcamp-relmeauth-algorithms

To find me_url from the raw_url (normalise_url):
If the path of raw_url == ""
set the path of raw_url to "/"
return raw_url

To find rel_me_document_url for given me_url:

stop = false
previous = []
secure = true
while stop == false
redirected_url = follow_one_redirect(me_url)
if redirected_url == nil
# this is the end of the redirect line
stop = true
elseif redirected_url in previous
# entered redirect loop, stop here
stop = true
elseif url_scheme(me_url) != url_scheme(redirected_url)
stop = true
secure = false
else
me_url = redirected_url
add redirected_url to previous
end
end

if secure is false return nil

return me_url
To find rel=me links given me_url (rel_me_links):

response = http_get(final_me_url)
rel_me_links = []
if content type of response != html return rel_me_links

document = parse_html(body of content)
link_elements = document.querySelectorAll('a[rel~=me], link[rel~=me]')

for element in link_elements:
if element.href is a valid URI
add element.href to rel_me_links

rel_me_links = remove_duplicates(rel_me_links)

return rel_me_links
To determine whether or not a profile_url linked via rel=me from the me_url back-links validly to the given me_url:

final_profile_url = rel_me_document_url(profile_url)
reverse_rel_me_links = rel_me_links(final_profile_url)

for backlink in reverse_rel_me_links
stop = false
previous = []
insecure_redirect_to_url = false

while stop is false
profile_url = normalise(profile_url)

if profile_url == me_url
return true

redirected_url = follow_one_redirect(profile_url)
if redirected_url is null
stop = true
elseif redirected_url in previous
stop = true
elseif url_scheme(me_url) != url_scheme(redirected_url)
stop = true
if me_url otherwise matches redirected_url
insecure_redirect_to_url = redirected_url
else
profile_url = redirected_url
append redirected_url to previous

if insecure_redirect_to_url is not false
return error insecure_redirect_to_url + " is linked to via an insecure redirect. Link to it directly to fix this"

return false

TODO:
* Generalise secure redirect matching loop, define as any_secure_redirects_match(url, match_url)