+
+ Error
+
+ {{ form.errors }}
+
++
{{ note.content }}
+ + +
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/create_review.html b/fedcode/templates/create_review.html
new file mode 100644
index 0000000..5a6f180
--- /dev/null
+++ b/fedcode/templates/create_review.html
@@ -0,0 +1,119 @@
+{% extends "base.html" %}
+{% block title %}
+Create Review
+{% endblock %}
+
+{% block extra-head %}
+
+{% endblock %}
+{% block content %}
+
+
+ {% if form.errors %}
+
+
+{% endif %}
+
+
+
+Create Git Repository
+ +
+
+
+
+ {% if messages %}
+ {% for message in messages %}
+
+
+ {% endfor %}
+ {% endif %}
+
+
+ {{ message }}
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/footer.html b/fedcode/templates/footer.html
new file mode 100644
index 0000000..949c6ec
--- /dev/null
+++ b/fedcode/templates/footer.html
@@ -0,0 +1,9 @@
+
\ No newline at end of file
diff --git a/fedcode/templates/home.html b/fedcode/templates/home.html
new file mode 100644
index 0000000..60de0c0
--- /dev/null
+++ b/fedcode/templates/home.html
@@ -0,0 +1,72 @@
+{% extends "base.html" %}
+{% load static %}
+{% load webfinger_image %}
+{% block title %}
+Home
+{% endblock %}
+
+{% block extra-head %}
+
+{% endblock %}
+{% block content %}
+
+
+ + + +
+ Choose a File
++ + + +
+
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/login.html b/fedcode/templates/login.html
new file mode 100644
index 0000000..19b8b58
--- /dev/null
+++ b/fedcode/templates/login.html
@@ -0,0 +1,45 @@
+{% extends "base.html" %}
+{% block title %}
+Login page
+{% endblock %}
+
+{% block content %}
+
+
+
+
+
+
+
+
+
+
+ Home
++
+ {% for note in page_note %}
+
+
+
+
+
+
+ {% endfor %}
+
+
+
+
+
+
+
+
+ last update: {{ note.updated_at }}
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/messages.html b/fedcode/templates/messages.html
new file mode 100644
index 0000000..d3c7722
--- /dev/null
+++ b/fedcode/templates/messages.html
@@ -0,0 +1,13 @@
+
+ {% if form.errors %}
+
+
+
+
+ {% endif %}
+
+
+
+
+
+
+
+ Your username and password didn't match. Please try again.
+
+
\ No newline at end of file
diff --git a/fedcode/templates/navbar.html b/fedcode/templates/navbar.html
new file mode 100644
index 0000000..307d6ce
--- /dev/null
+++ b/fedcode/templates/navbar.html
@@ -0,0 +1,80 @@
+
\ No newline at end of file
diff --git a/fedcode/templates/note.html b/fedcode/templates/note.html
new file mode 100644
index 0000000..f6124a9
--- /dev/null
+++ b/fedcode/templates/note.html
@@ -0,0 +1,90 @@
+{% extends "base.html" %}
+{% load static %}
+{% load webfinger_image %}
+{% block title %}
+Note page
+{% endblock %}
+{% block extra-head %}
+
+{% endblock %}
+{% block content %}
+
+ {% if messages %}
+ {% for message in messages %}
+
+
+ {% endfor %}
+ {% endif %}
+
+
+ {{ message }}
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/pkg_list.html b/fedcode/templates/pkg_list.html
new file mode 100644
index 0000000..3c711cd
--- /dev/null
+++ b/fedcode/templates/pkg_list.html
@@ -0,0 +1,58 @@
+{% extends "base.html" %}
+{% block title %}
+Purl List
+{% endblock %}
+
+{% block extra-head %}
+{% endblock %}
+{% block content %}
+
+
+
+
+
+
+
+
+
+
+
+ {% for note_r in note.replies.all %}
+
+
+ {% endfor %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ note.acct }}
+
+
{{ note.content }}
+
+
+ last update: {{ note.updated_at }}
+
+
+
+
+
+ {{ note_r.content }}
+ +
+ last update: {{ note.updated_at }}
+
+
+ 
+
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/pkg_profile.html b/fedcode/templates/pkg_profile.html
new file mode 100644
index 0000000..36759b6
--- /dev/null
+++ b/fedcode/templates/pkg_profile.html
@@ -0,0 +1,115 @@
+{% extends "base.html" %}
+{% load webfinger_image %}
+{% block title %}
+Your Profile
+{% endblock %}
+{% block json_ld_script %}
+
+{% endblock %}
+{% block content %}
+
+
+
+
+
+
+ {% endfor %}
+ {% if is_paginated %}
+
+ {% endif %}
+
+
+
+
+
+
+
+ {% for package in package_list %}
+ Package List
++
+
+ Number of Followers
+{{ package.followers_count }}
+
+
+
+
+
+ {{ package.purl }}
+ Created by @{{ package.service.user.username }} ++
+
+{% endblock %}
diff --git a/fedcode/templates/repo_list.html b/fedcode/templates/repo_list.html
new file mode 100644
index 0000000..a7edfa1
--- /dev/null
+++ b/fedcode/templates/repo_list.html
@@ -0,0 +1,57 @@
+{% extends "base.html" %}
+{% block title %}
+Git Repository List
+{% endblock %}
+
+{% block extra-head %}
+{% endblock %}
+{% block content %}
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ package.note }} +
+ +
+ {% if user.is_authenticated %}
+
+ {% endif %}
+
+
+ {% if user.is_anonymous %} + + {% endif %} + + {% if user.service %} + + {% endif %} + +
+ + {% if user.is_anonymous %} + + {% endif %} + + {% if user.service %} + + {% endif %} + +
+
+
+
+ {% if followers %}
+
+
+ + Followers +
+ {% endif %} + {% for follower in followers %} +
+
+ 
+
+
+
+ {% endfor %}
+
+
+
+
+
+
+ + Posts +
+
+
+
+
+
+ {% for post_note in purl_notes %}
+
+ {% endfor %} +
+
+ @{{ post_note.acct }} , updated_at {{ post_note.updated_at }}
+
+
+ +
{{ post_note.content }}
+ + {% endfor %} +
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/review.html b/fedcode/templates/review.html
new file mode 100644
index 0000000..61dba45
--- /dev/null
+++ b/fedcode/templates/review.html
@@ -0,0 +1,122 @@
+{% extends "base.html" %}
+{% load static %}
+{% block title %}
+Review page
+{% endblock %}
+
+{% block extra-head %}
+
+
+{% endblock %}
+{% block content %}
+
+
+
+
+
+
+
+
+
+ Git Repository List
++
+
+
+
+ {% for repo in repo_list %}
+
+
+ {% endfor %}
+
+
+
+
+
+ Number of Reviews
+{{ repo.review_count }}
+
+
+
+
+
+ {{ repo.url }}
+ @{{ repo.admin.user.username }} + {% if user.person %} + Create Review + {% endif %} + {% if user.service %} + + {% endif %} + ++ {{ review.headline }} + {% if review.status == 0 %} + 🟢 Open + {% elif review.status == 1 %} + ⚪ Draft + {% elif review.status == 2 %} + 🔴 Closed + {% elif review.status == 3 %} + 🔵 Merged + {% endif %} + +
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/review_list.html b/fedcode/templates/review_list.html
new file mode 100644
index 0000000..7121ea6
--- /dev/null
+++ b/fedcode/templates/review_list.html
@@ -0,0 +1,45 @@
+{% extends "base.html" %}
+{% block title %}
+Review List
+{% endblock %}
+
+{% block extra-head %}
+{% endblock %}
+{% block content %}
+
+
+
+
+
+ {{ patch|safe }}
+
+
+
+
+
+
+
+ {% for note in review.notes.all %}
+
+
+
+ {% endfor %}
+
+
+
+
+
+
+
+ {{ note.username }}
+ @{{ note.acct }}
+ updated_at: {{ note.updated_at }}
+
+ {{ note.content }}
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/update_profile.html b/fedcode/templates/update_profile.html
new file mode 100644
index 0000000..7a3be77
--- /dev/null
+++ b/fedcode/templates/update_profile.html
@@ -0,0 +1,26 @@
+{% extends "base.html" %}
+{% block title %}
+Update Profile
+{% endblock %}
+
+{% block content %}
+
+
+
+
+
+
+
+
+
+ Review List
++
+
+ {% for review in review_list %}
+
+
+ {% endfor %}
+
+
+
+
+ Votes
+{{ review.reputation_value }}
+
+
+
+
+
+ {{ review.headline }}
+ @{{ review.author.user.username }} + updated_at : {{ review.updated_at }} ++
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/user_profile.html b/fedcode/templates/user_profile.html
new file mode 100644
index 0000000..8a8825f
--- /dev/null
+++ b/fedcode/templates/user_profile.html
@@ -0,0 +1,74 @@
+{% extends "base.html" %}
+{% block title %}
+Your Profile
+{% endblock %}
+
+{% block json_ld_script %}
+
+{% endblock %}
+
+{% block content %}
+
+
+ 
+
+
+
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/user_sign_up.html b/fedcode/templates/user_sign_up.html
new file mode 100644
index 0000000..da368b0
--- /dev/null
+++ b/fedcode/templates/user_sign_up.html
@@ -0,0 +1,58 @@
+{% extends "base.html" %}
+{% block title %}
+Sign up page
+{% endblock %}
+
+{% block content %}
+
+
+
+
+ {% if followings %}
+
+
+
+ + Following List +
+ {% endif %} + {% for following in followings %} + + {{ following.package.purl }}@{{ following.package.service.user.username }} + + {% endfor %} +
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/fedcode/templates/webfinger_package.json b/fedcode/templates/webfinger_package.json
new file mode 100644
index 0000000..c93cbf3
--- /dev/null
+++ b/fedcode/templates/webfinger_package.json
@@ -0,0 +1,15 @@
+{
+ "subject": "{{ resource }}",
+ "links": [
+ {
+ "rel": "https://webfinger.net/rel/profile-page",
+ "type": "text/html",
+ "href": "https://{{ domain }}/purls/@{{ purl_string }}"
+ },
+ {
+ "rel": "self",
+ "type": "application/activity+json",
+ "href": "https://{{ domain }}/api/v0/purls/@{{ purl_string }}"
+ }
+ ]
+}
diff --git a/fedcode/templates/webfinger_user.json b/fedcode/templates/webfinger_user.json
new file mode 100644
index 0000000..4b5d4e0
--- /dev/null
+++ b/fedcode/templates/webfinger_user.json
@@ -0,0 +1,15 @@
+{
+ "subject": "{{ resource }}",
+ "links": [
+ {
+ "rel": "https://webfinger.net/rel/profile-page",
+ "type": "text/html",
+ "href": "https://{{ domain }}/users/@{{ username }}"
+ },
+ {
+ "rel": "self",
+ "type": "application/activity+json",
+ "href": "https://{{ domain }}/api/v0/users/@{{ username }}"
+ }
+ ]
+}
diff --git a/fedcode/templatetags/__init__.py b/fedcode/templatetags/__init__.py
new file mode 100644
index 0000000..bdac1cd
--- /dev/null
+++ b/fedcode/templatetags/__init__.py
@@ -0,0 +1,8 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
diff --git a/fedcode/templatetags/webfinger_image.py b/fedcode/templatetags/webfinger_image.py
new file mode 100644
index 0000000..1327ea1
--- /dev/null
+++ b/fedcode/templatetags/webfinger_image.py
@@ -0,0 +1,27 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+from django import template
+from packageurl import PackageURL
+
+from federatedcode.settings import STATIC_URL
+
+register = template.Library()
+
+
+@register.filter
+def get_pkg_image(purl_webfinger):
+ """
+ Return the path of the image package
+ """
+ try:
+ purl, _ = purl_webfinger.split("@")
+ package_type = PackageURL.from_string(purl).type
+ return "/" + STATIC_URL + "pictogram-gh-pages/" + package_type + "/" + package_type + ".png"
+ except ValueError:
+ return ""
diff --git a/fedcode/utils.py b/fedcode/utils.py
new file mode 100644
index 0000000..b6751f8
--- /dev/null
+++ b/fedcode/utils.py
@@ -0,0 +1,143 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+
+import io
+import json
+import os
+from urllib.parse import urlparse
+
+import requests
+from django.urls import resolve
+from django.urls import reverse
+from git.repo.base import Repo
+from packageurl import PackageURL
+from federatedcode.settings import FEDERATED_CODE_DOMAIN
+
+
+def parse_webfinger(subject):
+ """
+ get the username and host from webfinger acct:user@host
+ >>> parse_webfinger("acct:ziadhany@example.com")
+ ('ziadhany', 'example.com')
+ >>> parse_webfinger("acct:")
+ ('', '')
+ >>> parse_webfinger("ziadhany@example.com")
+ ('ziadhany', 'example.com')
+ """
+ if subject.startswith("acct"):
+ acct = subject[5:]
+ result = acct.split("@")
+ user_part, host = "", ""
+ if len(result) == 2:
+ user_part, host = result
+ return user_part, host
+ else:
+ return tuple(subject.split("@"))
+
+
+def generate_webfinger(username, domain=FEDERATED_CODE_DOMAIN):
+ return username + "@" + domain
+
+
+def clone_git_repo(repo_path, repo_url):
+ """
+ Clone Git repository in ${repo_path}/repo_name.git
+ """
+ repo_name = str(hash(repo_url))
+ abspath = os.path.join(repo_path, repo_name)
+ repo = Repo.clone_from(repo_url, str(abspath))
+ return repo
+
+
+def full_reverse(page_name, *args, **kwargs):
+ web_page = reverse(page_name, args=args, kwargs=kwargs)
+ return f'{"https://"}{FEDERATED_CODE_DOMAIN}{web_page}'
+
+
+def full_resolve(full_path):
+ parser = urlparse(full_path)
+ resolver = resolve(parser.path)
+ return resolver.kwargs, resolver.url_name
+
+
+def check_purl_actor(purl_string):
+ """
+ Purl actor is a purl without a version
+ """
+ purl = PackageURL.from_string(purl_string)
+ if not (purl.version or purl.qualifiers or purl.subpath):
+ return True
+ return False
+
+
+def ap_collection(objects):
+ """
+ accept the result of the query like filter and Add all objects in activitypub collection format
+ https://www.w3.org/TR/activitystreams-vocabulary/#dfn-orderedcollection
+ """
+ return {
+ "type": "OrderedCollection",
+ "totalItems": objects.count(),
+ "orderedItems": [obj.to_ap for obj in objects.all()],
+ }
+
+
+def webfinger_actor(domain, user):
+ """"""
+ acct = generate_webfinger(user, domain)
+ url = f"http://{domain}/.well-known/webfinger?resource=acct:{acct}" # TODO http -> https
+ headers = {"User-Agent": ""} # TODO
+ try:
+ response = requests.get(url, headers=headers)
+ if response.status_code == 200:
+ return response.json()["links"][1][
+ "href"
+ ] # TODO please check if type = "application/activity+json"
+ except requests.exceptions.RequestException as e:
+ return f"Failed to fetch the actor {e}"
+
+
+def fetch_actor(url):
+ """
+ fetch actor profile URL and return profile Json-LD
+ """
+ headers = {"User-Agent": ""} # TODO
+ try:
+ response = requests.get(url, headers=headers)
+ if response.status_code == 200:
+ return response.json()
+
+ except requests.exceptions.HTTPError as e:
+ return f"Http Error: {e}"
+ except requests.exceptions.ConnectionError as e:
+ return f"Error Connecting: {e}"
+ except requests.exceptions.Timeout as e:
+ return f"Timeout Error:{e}"
+ except requests.exceptions.RequestException as e:
+ return f"OOps: Something Else {e}"
+
+ return "Failed to fetch the actor"
+
+
+def file_data(file_name):
+ with open(file_name) as file:
+ data = file.read()
+ return json.loads(data)
+
+
+def load_git_file(git_repo_obj, filename, commit_id):
+ """
+ Get file data from a specific git commit using gitpython
+ copied from https://stackoverflow.com/a/54900961/9871531
+ """
+ commit = git_repo_obj.commit(commit_id)
+ target_file = commit.tree / filename
+
+ with io.BytesIO(target_file.data_stream.read()) as f:
+ return f.read().decode("utf-8")
diff --git a/fedcode/views.py b/fedcode/views.py
new file mode 100644
index 0000000..96fb247
--- /dev/null
+++ b/fedcode/views.py
@@ -0,0 +1,842 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+import difflib
+import json
+import logging
+import os.path
+
+import requests
+from django.contrib.auth import login
+from django.contrib.auth.decorators import login_required
+from django.contrib.auth.mixins import LoginRequiredMixin
+from django.contrib.auth.models import User
+from django.contrib.auth.views import LoginView
+from django.core.paginator import Paginator
+from django.http import Http404
+from django.http import HttpResponse
+from django.http import HttpResponseBadRequest
+from django.http import HttpResponseForbidden
+from django.http import JsonResponse
+from django.shortcuts import get_object_or_404
+from django.shortcuts import redirect
+from django.shortcuts import render
+from django.urls import reverse_lazy
+from django.utils.decorators import method_decorator
+from django.views import View
+from django.views.decorators.csrf import csrf_exempt
+from django.views.decorators.http import require_http_methods
+from django.views.generic import CreateView
+from django.views.generic import DetailView
+from django.views.generic import FormView
+from django.views.generic import ListView
+from django.views.generic import TemplateView
+from django.views.generic.edit import FormMixin
+from django.views.generic.edit import UpdateView
+
+from fedcode.forms import FetchForm
+from fedcode.forms import PersonSignUpForm
+from fedcode.forms import SearchPackageForm
+from fedcode.forms import SearchRepositoryForm
+from fedcode.forms import SearchReviewForm
+from fedcode.forms import SubscribePackageForm
+from federatedcode.settings import AP_CONTENT_TYPE, FEDERATED_CODE_GIT_PATH
+from federatedcode.settings import FEDERATED_CODE_DOMAIN
+from federatedcode.settings import env
+
+from .activitypub import AP_CONTEXT
+from .activitypub import create_activity_obj
+from .activitypub import has_valid_header
+from .forms import CreateGitRepoForm
+from .forms import CreateNoteForm
+from .forms import CreateReviewForm
+from .forms import ReviewStatusForm
+from .models import Follow, SyncRequest
+from .models import Note
+from .models import Person
+from .models import Package
+from .models import Repository
+from .models import Reputation
+from .models import Review
+from .models import Vulnerability
+from .signatures import HttpSignature,FEDERATED_CODE_PUBLIC_KEY
+from .utils import ap_collection
+from .utils import full_reverse
+from .utils import generate_webfinger
+from .utils import load_git_file
+from .utils import parse_webfinger
+from .utils import webfinger_actor
+from django.contrib.auth.models import auth
+from django.contrib import messages
+from django.contrib.contenttypes.models import ContentType
+
+logger = logging.getLogger(__name__)
+
+FEDERATED_CODE_CLIENT_ID = env.str("FEDERATED_CODE_CLIENT_ID")
+FEDERATED_CODE_CLIENT_SECRET = env.str("FEDERATED_CODE_CLIENT_SECRET")
+
+
+def logout(request):
+ auth.logout(request)
+ return redirect("login")
+
+
+class WebfingerView(View):
+ def get(self, request):
+ """/.well-known/webfinger?resource=acct:gargron@mastodon.social"""
+ resource = request.GET.get("resource")
+
+ if not resource:
+ return HttpResponseBadRequest("No resource found")
+
+ obj, domain = parse_webfinger(resource)
+
+ if FEDERATED_CODE_DOMAIN != domain or not obj:
+ return HttpResponseBadRequest("Invalid domain")
+
+ if obj.startswith("pkg:"):
+ try:
+ package = Package.objects.get(purl=obj)
+ except Package.DoesNotExist:
+ return HttpResponseBadRequest("Not an Purl resource")
+
+ return render(
+ request,
+ "webfinger_package.json",
+ status=200,
+ content_type="application/jrd+json",
+ context={
+ "resource": resource,
+ "domain": FEDERATED_CODE_DOMAIN,
+ "purl_string": package.purl,
+ },
+ )
+ else:
+ try:
+ user = User.objects.get(username=obj)
+ except User.DoesNotExist:
+ return HttpResponseBadRequest("Not an account resource")
+
+ return render(
+ request,
+ "webfinger_user.json",
+ status=200,
+ content_type="application/jrd+json",
+ context={
+ "resource": resource,
+ "domain": FEDERATED_CODE_DOMAIN,
+ "username": user.username,
+ },
+ )
+
+
+class HomeView(View):
+ def get(self, request, *args, **kwargs):
+ if hasattr(self.request.user, "person"):
+ packages = [
+ generate_webfinger(follow.package.purl)
+ for follow in Follow.objects.filter(person=self.request.user.person)
+ ]
+ note_list = Note.objects.filter(acct__in=packages).order_by("updated_at__minute")
+ paginator = Paginator(note_list, 10)
+ page_number = request.GET.get("page")
+ page_note = paginator.get_page(page_number)
+ return render(request, "home.html", context={"page_note": page_note})
+ elif hasattr(self.request.user, "service"):
+ return redirect("repo-list")
+ else:
+ return redirect("login")
+
+
+class PersonView(DetailView):
+ model = Person
+ template_name = "user_profile.html"
+ slug_field = "user__username"
+ context_object_name = "person"
+
+ def get_context_data(self, *args, **kwargs):
+ context = super().get_context_data(**kwargs)
+ following_list = Follow.objects.filter(person=self.object)
+ paginator = Paginator(following_list, 10)
+ page_number = self.request.GET.get("page")
+ context["followings"] = paginator.get_page(page_number)
+ context["follow_count"] = following_list.count()
+ return context
+
+
+class PackageView(DetailView, FormMixin):
+ model = Package
+ template_name = "pkg_profile.html"
+ slug_field = "purl"
+ context_object_name = "package"
+ form_class = CreateNoteForm
+
+ def get_success_url(self):
+ return self.request.path
+
+ def get_context_data(self, **kwargs):
+ context = super().get_context_data(**kwargs)
+ # slug = purl_string
+
+ context["purl_notes"] = Note.objects.filter(acct=generate_webfinger(self.kwargs["slug"]))
+
+ context["followers"] = Follow.objects.filter(package=self.object)
+
+ if self.request.user.is_authenticated:
+ context["is_user_follow"] = (
+ True
+ if Follow.objects.filter(package=self.object, person__user=self.request.user).first()
+ else False
+ )
+
+ context["note_form"] = CreateNoteForm()
+ context["subscribe_form"] = SubscribePackageForm()
+ return context
+
+ def post(self, request, *args, **kwargs):
+ self.object = self.get_object()
+ note_form = self.get_form()
+ if note_form.is_valid():
+ note_form.instance.acct = generate_webfinger(self.kwargs["slug"])
+ note_form.instance.note_type = 0
+ note_form.save()
+ return super(PackageView, self).form_valid(note_form)
+ else:
+ return self.form_invalid(note_form)
+
+
+def is_service_user(view):
+ def wrapper(request, *args, **kwargs):
+ if hasattr(request.user, "service"):
+ return view(request, *args, **kwargs)
+ else:
+ return HttpResponseForbidden()
+
+ return wrapper
+
+
+@method_decorator(is_service_user, name="dispatch")
+class CreatGitView(LoginRequiredMixin, CreateView):
+ model = Repository
+ form_class = CreateGitRepoForm
+ template_name = "create_repository.html"
+ success_url = reverse_lazy("repo-list")
+
+ def form_valid(self, form):
+ self.object = form.save(commit=False)
+ self.object.admin = self.request.user.service
+ try:
+ self.object.save()
+ messages.success(self.request, "Git repo successfully created")
+ except Exception as e: #
+ logger.error(f"Error occurred while creating git repo {e}")
+ messages.error(self.request, "An error occurred")
+
+ return super(CreatGitView, self).form_valid(form)
+
+
+@method_decorator(is_service_user, name="dispatch")
+class CreateSync(LoginRequiredMixin, View):
+ def post(self, request, repository_id):
+ try:
+ repo = Repository.objects.get(id=repository_id)
+ if repo.admin == self.request.user.service:
+ SyncRequest.objects.create(repo=repo)
+ messages.success(self.request, "The sync request was sent successfully")
+ else:
+ return HttpResponseForbidden("Invalid Git Repository Admin")
+ except Repository.DoesNotExist:
+ return HttpResponseBadRequest("Invalid Git Repository")
+ return redirect("repo-list")
+
+
+class UserLogin(LoginView):
+ template_name = "login.html"
+ next_page = "/review-list"
+
+
+class PersonSignUp(FormView):
+ form_class = PersonSignUpForm
+ success_url = "/review-list"
+ template_name = "user_sign_up.html"
+
+ def form_valid(self, form):
+ user = form.save()
+ if user:
+ person = Person.objects.create(user=user)
+ person.save()
+ login(self.request, user, backend="django.contrib.auth.backends.ModelBackend")
+ return super(PersonSignUp, self).form_valid(form)
+
+
+class RepositoryListView(ListView, FormMixin):
+ model = Repository
+ context_object_name = "repo_list"
+ template_name = "repo_list.html"
+ paginate_by = 10
+ form_class = SearchRepositoryForm
+
+ def get_queryset(self):
+ form = self.form_class(self.request.GET)
+ if form.is_valid():
+ return Repository.objects.filter(url__icontains=form.cleaned_data.get("search"))
+ return Repository.objects.all()
+
+
+class ReviewListView(ListView, FormMixin):
+ model = Review
+ context_object_name = "review_list"
+ template_name = "review_list.html"
+ paginate_by = 10
+ form_class = SearchReviewForm
+
+ def get_queryset(self):
+ form = self.form_class(self.request.GET)
+ if form.is_valid():
+ return Review.objects.filter(headline__icontains=form.cleaned_data.get("search"))
+ return Review.objects.all()
+
+
+class PackageListView(ListView, FormMixin):
+ model = Package
+ context_object_name = "package_list"
+ template_name = "pkg_list.html"
+ paginate_by = 20
+ form_class = SearchPackageForm
+
+ def get_queryset(self):
+ form = self.form_class(self.request.GET)
+ if form.is_valid():
+ return Package.objects.filter(purl__icontains=form.cleaned_data.get("search"))
+ return Package.objects.all()
+
+
+class ReviewView(LoginRequiredMixin, TemplateView):
+ template_name = "review.html"
+
+ def get_context_data(self, request, **kwargs):
+ context = super().get_context_data(**kwargs)
+ context["review"] = get_object_or_404(Review, id=self.kwargs["review_id"])
+ vul_source = context["review"].data.splitlines()
+ vul_target = load_git_file(
+ git_repo_obj=context["review"].repository.git_repo_obj,
+ filename=context["review"].filepath,
+ commit_id=context["review"].commit,
+ ).splitlines()
+ d = difflib.HtmlDiff()
+ context["patch"] = d.make_table(
+ vul_source, vul_target, fromdesc="original", todesc="modified"
+ )
+ return context
+
+ def get(self, request, *args, **kwargs):
+ context = self.get_context_data(request, **kwargs)
+ return render(
+ request,
+ self.template_name,
+ {
+ "status_form": ReviewStatusForm(),
+ "comment_form": CreateNoteForm(),
+ **context,
+ },
+ )
+
+ def post(self, request, *args, **kwargs):
+ context = self.get_context_data(request, **kwargs)
+ status_form = ReviewStatusForm(request.POST, instance=context["review"])
+ comment_form = CreateNoteForm(request.POST)
+ if status_form.is_bound and status_form.is_valid():
+ status_form.save()
+
+ elif comment_form.is_bound and comment_form.is_valid():
+ comment_form.save(commit=False)
+ comment_form.instance.acct = generate_webfinger(request.user.username)
+ comment = comment_form.save()
+ context["review"].notes.add(comment)
+ context["review"].save()
+
+ status_form = ReviewStatusForm()
+ comment_form = CreateNoteForm()
+ context = self.get_context_data(request, **kwargs)
+ return render(
+ request,
+ self.template_name,
+ {"status_form": status_form, "comment_form": comment_form, **context},
+ )
+
+
+def fetch_repository_file(request, repository_id):
+ if request.headers.get("x-requested-with") == "XMLHttpRequest" and request.method == "POST":
+ request_body = json.load(request)
+ path = request_body.get("path")
+
+ repo = get_object_or_404(Repository, id=repository_id).git_repo_obj
+ for entry in repo.commit().tree.traverse():
+ if path == entry.path:
+ with open(entry.abspath) as f:
+ return JsonResponse({"filename": path, "text": f.read()})
+ return HttpResponseBadRequest("Can't fetch this file")
+
+
+@login_required
+def obj_vote(request, obj_id, obj_type):
+ if request.headers.get("x-requested-with") == "XMLHttpRequest" and request.method == "PUT":
+ user_webfinger = generate_webfinger(request.user.username)
+ if obj_type == 'review':
+ obj = get_object_or_404(Review, id=obj_id)
+ elif obj_type == 'note':
+ obj = get_object_or_404(Note, id=obj_id)
+ else:
+ return HttpResponseBadRequest("Invalid object type to vote")
+
+ request_body = json.load(request)
+ try:
+ content_type = ContentType.objects.get_for_model(Review if obj_type == 'review' else Note).id
+ rep_obj = Reputation.objects.get(
+ voter=user_webfinger,
+ object_id=obj.id,
+ content_type=content_type,
+ )
+ if rep_obj:
+ vote_type = 'vote-down' if rep_obj.positive else 'vote-up'
+ rep_obj.delete()
+ return JsonResponse(
+ {
+ "message": "The vote has been removed successfully",
+ "vote-type": vote_type,
+ }
+ )
+ except Reputation.DoesNotExist:
+ vote_type = request_body.get("vote-type")
+ rep_obj = None
+ if vote_type == "vote-up":
+ rep_obj = Reputation.objects.create(
+ voter=user_webfinger,
+ content_object=obj,
+ positive=True,
+ )
+ elif vote_type == "vote-down":
+ rep_obj = Reputation.objects.create(
+ voter=user_webfinger,
+ content_object=obj,
+ positive=False,
+ ),
+
+ else:
+ return HttpResponseBadRequest("Invalid vote-type request")
+
+ if rep_obj:
+ return JsonResponse(
+ {
+ "message": "Voting completed successfully",
+ "vote-type": vote_type,
+ }
+ )
+ return HttpResponseBadRequest("Invalid vote request")
+
+
+class FollowPackageView(View):
+ def post(self, request, *args, **kwargs):
+ package = Package.objects.get(purl=self.kwargs["purl_string"])
+ if request.user.is_authenticated:
+ if "follow" in request.POST:
+ follow_obj, _ = Follow.objects.get_or_create(
+ person=self.request.user.person, package=package
+ )
+
+ elif "unfollow" in request.POST:
+ try:
+ follow_obj = Follow.objects.get(person=self.request.user.person, package=package)
+ follow_obj.delete()
+ except Follow.DoesNotExist:
+ return HttpResponseBadRequest(
+ "Some thing went wrong when you try to unfollow this purl"
+ )
+ elif request.user.is_anonymous:
+ form = SubscribePackageForm(request.POST)
+ if form.is_valid():
+ user, domain = parse_webfinger(form.cleaned_data.get("acct"))
+ remote_actor_url = webfinger_actor(domain, user)
+
+ payload = json.dumps(
+ {
+ **AP_CONTEXT,
+ "type": "Follow",
+ "actor": {
+ "type": "Person",
+ "id": remote_actor_url,
+ },
+ "object": {
+ "type": "Purl",
+ "id": package.absolute_url_ap,
+ },
+ "to": [remote_actor_url],
+ }
+ )
+
+ activity = create_activity_obj(payload)
+ activity_response = activity.handler()
+ return JsonResponse(
+ {
+ "redirect_url": f"https://{domain}/authorize_interaction?uri={remote_actor_url}"
+ }
+ )
+ else:
+ return HttpResponseBadRequest()
+
+ return redirect(".")
+
+
+class CreateReview(LoginRequiredMixin, TemplateView):
+ template_name = "create_review.html"
+
+ def get_context_data(self, request, **kwargs):
+ context = super().get_context_data(**kwargs)
+ repo = Repository.objects.get(id=self.kwargs["repository_id"])
+ context["git_files_tree"] = [
+ entry.path
+ for entry in repo.git_repo_obj.commit().tree.traverse()
+ if entry.type == "blob"
+ ]
+ return context
+
+ def get(self, request, *args, **kwargs):
+ context = self.get_context_data(request, **kwargs)
+ return render(
+ request,
+ self.template_name,
+ {
+ **context,
+ "create_review_form": CreateReviewForm(),
+ "fetch_form": FetchForm(),
+ },
+ )
+
+ def post(self, request, *args, **kwargs):
+ create_review_form = CreateReviewForm(request.POST)
+ if create_review_form.is_valid() and request.user.person:
+ repo = Repository.objects.get(id=self.kwargs["repository_id"])
+ commit = repo.git_repo_obj.head.commit
+ review = Review.objects.create(
+ headline=create_review_form.cleaned_data["headline"],
+ data=create_review_form.cleaned_data["data"],
+ author=request.user.person,
+ repository=repo,
+ filepath=create_review_form.cleaned_data["filename"],
+ commit=commit,
+ )
+ review.save()
+ context = self.get_context_data(request, **kwargs)
+ messages.add_message(request, messages.SUCCESS, "The review was created successfully.")
+ return render(
+ request,
+ self.template_name,
+ {
+ **context,
+ "create_review_form": CreateReviewForm(),
+ "fetch_form": FetchForm(),
+ },
+ )
+
+
+class NoteView(LoginRequiredMixin, FormMixin, DetailView):
+ template_name = "note.html"
+ model = Note
+ context_object_name = "note"
+ slug_field = "id"
+ slug_url_kwarg = "uuid"
+ form_class = CreateNoteForm
+
+ def get_context_data(self, **kwargs):
+ context = super(NoteView, self).get_context_data(**kwargs)
+ context["form"] = CreateNoteForm()
+ return context
+
+ def post(self, request, *args, **kwargs):
+ """Create a note"""
+ comment_form = self.get_form()
+ if comment_form.is_valid():
+ comment_form.instance.acct = generate_webfinger(request.user.username)
+ comment_form.instance.reply_to = Note.objects.get(id=self.kwargs["uuid"])
+ comment_form.save()
+ return self.get(request)
+ else:
+ return self.form_invalid(comment_form)
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class UserProfile(View):
+ def get(self, request, *args, **kwargs):
+ """"""
+ try:
+ user = User.objects.get(username=kwargs["username"])
+ except User.DoesNotExist:
+ return HttpResponseBadRequest("User doesn't exist")
+
+ if request.GET.get("main-key"):
+ return HttpResponse(
+ user.person.public_key if hasattr(user, "person") else user.service.public_key
+ )
+
+ if hasattr(user, "person"):
+ return JsonResponse(user.person.to_ap, content_type=AP_CONTENT_TYPE)
+ elif hasattr(user, "service"):
+ return JsonResponse(user.service.to_ap, content_type=AP_CONTENT_TYPE)
+ else:
+ return HttpResponseBadRequest("Invalid type user")
+
+
+class PersonUpdateView(UpdateView):
+ model = Person
+ fields = ["avatar", "summary"]
+ template_name = "update_profile.html"
+ slug_field = "user__username"
+
+ def get_success_url(self):
+ return reverse_lazy("user-profile", kwargs={"slug": self.object.user.username})
+
+ def get_form(self, *args, **kwargs):
+ form = super(PersonUpdateView, self).get_form(*args, **kwargs)
+ form.fields["summary"].widget.attrs["class"] = "textarea"
+ form.fields["summary"].help_text = ""
+ form.fields["avatar"].label = ""
+ return form
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class PackageProfile(View):
+ def get(self, request, *args, **kwargs):
+ """"""
+ try:
+ package = Package.objects.get(purl=kwargs["purl_string"])
+ except Package.DoesNotExist:
+ return HttpResponseBadRequest("Invalid type user")
+
+ if request.GET.get("main-key"):
+ return HttpResponse(package.public_key)
+
+ return JsonResponse(package.to_ap, content_type=AP_CONTENT_TYPE)
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class UserInbox(View):
+ def get(self, request, *args, **kwargs):
+ """You can GET from your inbox to read your latest messages
+ (client-to-server; this is like reading your social network stream)"""
+ if hasattr(request.user, "person") and request.user.username == kwargs["username"]:
+ purl_followers = [
+ generate_webfinger(follow.package.purl)
+ for follow in Follow.objects.filter(person=request.user.person)
+ ]
+ note_list = Note.objects.filter(acct__in=purl_followers).order_by("updated_at__minute")
+ reviews = Review.objects.filter(author=request.user.person)
+ return JsonResponse(
+ {"notes": ap_collection(note_list), "reviews": ap_collection(reviews)},
+ content_type=AP_CONTENT_TYPE,
+ )
+
+ def post(self, request, *args, **kwargs):
+ """You can POST to someone's inbox to send them a message
+ (server-to-server / federation only... this is federation!)"""
+ return NotImplementedError
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class UserOutbox(View):
+ def get(self, request, *args, **kwargs):
+ """You can GET from someone's outbox to see what messages they've posted
+ (or at least the ones you're authorized to see).
+ (client-to-server and/or server-to-server)"""
+ try:
+ user = User.objects.get(username=kwargs["username"])
+ except User.DoesNotExist:
+ user = None
+
+ if hasattr(user, "person"):
+ notes = Note.objects.filter(acct=user.person.acct)
+ reviews = Review.objects.filter(author=user.person)
+ return JsonResponse(
+ {
+ "notes": ap_collection(notes),
+ "reviews": ap_collection(reviews),
+ },
+ content_type=AP_CONTENT_TYPE,
+ )
+ elif hasattr(user, "service"):
+ repos = Repository.objects.filter(admin=user.service)
+ return JsonResponse(
+ {
+ "repositories": ap_collection(repos),
+ },
+ content_type=AP_CONTENT_TYPE,
+ )
+ else:
+ return HttpResponseBadRequest("Can't find this user")
+
+ @csrf_exempt
+ def post(self, request, *args, **kwargs):
+ """You can POST to your outbox to send messages to the world (client-to-server)"""
+ if request.user.is_authenticated and request.user.username == kwargs["username"]:
+ activity = create_activity_obj(request.body)
+ if activity:
+ return activity.handler()
+
+ return HttpResponseBadRequest("Invalid message")
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class PackageInbox(View):
+ def get(self, request, *args, **kwargs):
+ """
+ You can GET from your inbox to read your latest messages
+ (client-to-server; this is like reading your social network stream)
+ """
+ try:
+ package = Package.objects.get(purl=kwargs["purl_string"])
+ except Package.DoesNotExist:
+ package = None
+
+ if hasattr(request.user, "service") and package:
+ return JsonResponse(
+ {
+ "notes": ap_collection(package.notes.all()),
+ },
+ content_type="application/activity+json",
+ )
+ return HttpResponseBadRequest()
+
+ @csrf_exempt
+ def post(self, request, *args, **kwargs):
+ """
+ You can POST to someone's inbox to send them a message
+ (server-to-server / federation only... this is federation!)
+ """
+ HttpSignature.verify_request(request, FEDERATED_CODE_PUBLIC_KEY)
+ activity = create_activity_obj(request.body)
+ activity_response = activity.handler()
+ return activity_response
+
+
+@method_decorator(has_valid_header, name="dispatch")
+class PackageOutbox(View):
+ def get(self, request, *args, **kwargs):
+ """GET from someone's outbox to see what messages they've posted
+ (or at least the ones you're authorized to see).
+ (client-to-server and/or server-to-server)"""
+
+ actor = Package.objects.get(purl=kwargs["purl_string"])
+ return JsonResponse(
+ {"notes": ap_collection(actor.notes)},
+ content_type=AP_CONTENT_TYPE,
+ )
+
+ def post(self, request, *args, **kwargs):
+ """You can POST to your outbox to send messages to the world (client-to-server)"""
+ try:
+ actor = Package.objects.get(purl=kwargs["purl_string"])
+ except Package.DoesNotExist:
+ return HttpResponseBadRequest("Invalid purl")
+
+ if (
+ request.user.is_authenticated
+ and hasattr(request.user, "service")
+ and actor.service == request.user.service
+ ):
+ activity = create_activity_obj(request.body)
+ return activity.handler()
+ return HttpResponseBadRequest("Invalid Message")
+
+
+def redirect_repository(request, repository_id):
+ try:
+ repo = Repository.objects.get(id=repository_id)
+ except Repository.DoesNotExist:
+ raise Http404("Repository does not exist")
+ return redirect(repo.url)
+
+
+def redirect_vulnerability(request, vulnerability_id):
+ try:
+ vul = Vulnerability.objects.get(id=vulnerability_id)
+ vul_filepath = os.path.join(vul.repo.path,
+ f"./aboutcode-vulnerabilities-{vulnerability_id[5:7]}/{vulnerability_id[10:12]}"
+ f"/{vulnerability_id}/{vulnerability_id}.yml")
+ with open(vul_filepath) as f:
+ return HttpResponse(json.dumps(f.read()))
+
+ except Vulnerability.DoesNotExist:
+ return Http404("Vulnerability does not exist")
+
+
+class UserFollowing(View):
+ def get(self, request, *args, **kwargs):
+ followings = Follow.objects.filter(person__user__username=self.kwargs["username"])
+ return JsonResponse(
+ [full_reverse(following) for following in followings],
+ content_type=AP_CONTENT_TYPE,
+ )
+
+
+class PackageFollowers(View):
+ def get(self, request, *args, **kwargs):
+ followers = Follow.objects.filter(purl__string=self.kwargs["purl_string"])
+ return JsonResponse(
+ [full_reverse(following) for following in followers],
+ content_type=AP_CONTENT_TYPE,
+ )
+
+
+@require_http_methods(["POST"])
+@csrf_exempt
+def token(request):
+ payload = json.loads(request.body)
+ r = requests.post(
+ "http://127.0.0.1:8000/o/token/",
+ headers={"content-type": "application/x-www-form-urlencoded"},
+ data={
+ "grant_type": "password",
+ "username": payload["username"],
+ "password": payload["password"],
+ "client_id": FEDERATED_CODE_CLIENT_ID,
+ "client_secret": FEDERATED_CODE_CLIENT_SECRET,
+ },
+ )
+ return JsonResponse(json.loads(r.content), status=r.status_code, content_type=AP_CONTENT_TYPE)
+
+
+@require_http_methods(["POST"])
+@csrf_exempt
+def refresh_token(request):
+ payload = json.loads(request.body)
+ r = requests.post(
+ "http://127.0.0.1:8000/o/token/",
+ headers={"content-type": "application/x-www-form-urlencoded"},
+ data={
+ "grant_type": "refresh_token",
+ "refresh_token": payload["refresh_token"],
+ "client_id": FEDERATED_CODE_CLIENT_ID,
+ "client_secret": FEDERATED_CODE_CLIENT_SECRET,
+ },
+ )
+ return JsonResponse(json.loads(r.text), status=r.status_code, content_type=AP_CONTENT_TYPE)
+
+
+@require_http_methods(["POST"])
+@csrf_exempt
+def revoke_token(request):
+ payload = json.loads(request.body)
+ r = requests.post(
+ "http://127.0.0.1:8000/o/revoke_token/",
+ headers={"content-type": "application/x-www-form-urlencoded"},
+ data={
+ "token": payload["token"],
+ "client_id": FEDERATED_CODE_CLIENT_ID,
+ "client_secret": FEDERATED_CODE_CLIENT_SECRET,
+ },
+ )
+ return JsonResponse(json.loads(r.content), status=r.status_code, content_type=AP_CONTENT_TYPE)
diff --git a/federatedcode/__init__.py b/federatedcode/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/federatedcode/asgi.py b/federatedcode/asgi.py
new file mode 100644
index 0000000..bea1728
--- /dev/null
+++ b/federatedcode/asgi.py
@@ -0,0 +1,16 @@
+"""
+ASGI config for federatedcode project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/4.2/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "federatedcode.settings")
+
+application = get_asgi_application()
diff --git a/federatedcode/settings.py b/federatedcode/settings.py
new file mode 100644
index 0000000..78fb982
--- /dev/null
+++ b/federatedcode/settings.py
@@ -0,0 +1,158 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+import os
+from pathlib import Path
+
+import environ
+
+PROJECT_DIR = Path(__file__).resolve().parent
+ROOT_DIR = PROJECT_DIR.parent
+# Environment
+
+ENV_FILE = "federated_code/.env"
+if not Path(ENV_FILE).exists():
+ ENV_FILE = ROOT_DIR / ".env"
+
+env = environ.Env()
+environ.Env.read_env(str(ENV_FILE))
+
+FEDERATED_CODE_DOMAIN = env.str("FEDERATED_CODE_DOMAIN", "127.0.0.1:8000")
+FEDERATED_CODE_GIT_PATH = env.str("FEDERATED_CODE_GIT_PATH", "")
+# Build paths inside the project like this: BASE_DIR / 'subdir'.
+BASE_DIR = Path(__file__).resolve().parent.parent
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/4.1/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = "django-insecure-uoc-dv7+6%dy7c6(hc$6*z_m-#4y*jp1%-^*5)y&+i9-@j7zup"
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = True
+
+ALLOWED_HOSTS = ["localhost", "0.0.0.0", "127.0.0.1"]
+
+# Application definition
+
+INSTALLED_APPS = [
+ "django.contrib.admin",
+ "django.contrib.auth",
+ "django.contrib.contenttypes",
+ "django.contrib.sessions",
+ "django.contrib.messages",
+ "django.contrib.staticfiles",
+ "oauth2_provider",
+ "fedcode",
+]
+
+MIDDLEWARE = [
+ "django.middleware.security.SecurityMiddleware",
+ "django.contrib.sessions.middleware.SessionMiddleware",
+ "django.middleware.common.CommonMiddleware",
+ "django.middleware.csrf.CsrfViewMiddleware",
+ "django.contrib.auth.middleware.AuthenticationMiddleware",
+ "django.contrib.messages.middleware.MessageMiddleware",
+ "django.middleware.clickjacking.XFrameOptionsMiddleware",
+ "oauth2_provider.middleware.OAuth2TokenMiddleware",
+]
+
+ROOT_URLCONF = "federatedcode.urls"
+
+TEMPLATES = [
+ {
+ "BACKEND": "django.template.backends.django.DjangoTemplates",
+ "DIRS": [],
+ "APP_DIRS": True,
+ "OPTIONS": {
+ "context_processors": [
+ "django.template.context_processors.debug",
+ "django.template.context_processors.request",
+ "django.contrib.auth.context_processors.auth",
+ "django.contrib.messages.context_processors.messages",
+ ],
+ },
+ },
+]
+
+WSGI_APPLICATION = "federatedcode.wsgi.application"
+
+# https://docs.djangoproject.com/en/4.1/ref/settings/#databases
+# postgresql database
+DATABASES = {
+ "default": {
+ "ENGINE": env.str("DB_ENGINE", "django.db.backends.postgresql"),
+ "HOST": env.str("POSTGRES_HOST", "127.0.0.1"),
+ "NAME": env.str("POSTGRES_DB_NAME", "federatedcode"),
+ "USER": env.str("POSTGRES_USER", "federatedcode"),
+ "PASSWORD": env.str("POSTGRES_PASSWORD", "federatedcode"),
+ "PORT": env.str("POSTGRES_PORT", "5432"),
+ }
+}
+
+# Password validation
+# https://docs.djangoproject.com/en/4.1/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+ {
+ "NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",
+ },
+ {
+ "NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
+ },
+ {
+ "NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",
+ },
+ {
+ "NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",
+ },
+]
+
+REST_FRAMEWORK = {
+ "DEFAULT_AUTHENTICATION_CLASSES": (
+ "oauth2_provider.contrib.rest_framework.OAuth2Authentication",
+ "rest_framework.authentication.SessionAuthentication",
+ ),
+ "DEFAULT_PERMISSION_CLASSES": ("rest_framework.permissions.IsAuthenticated",),
+}
+
+OAUTH2_PROVIDER = {
+ "ACCESS_TOKEN_EXPIRE_SECONDS": 3600,
+ "REFRESH_TOKEN_EXPIRE_SECONDS": 3600 * 24 * 365,
+ "SCOPES": {"read": "Read scope", "write": "Write scope"},
+}
+
+AUTHENTICATION_BACKENDS = (
+ "django.contrib.auth.backends.ModelBackend",
+ "oauth2_provider.backends.OAuth2Backend",
+)
+# Internationalization
+# https://docs.djangoproject.com/en/4.1/topics/i18n/
+
+LANGUAGE_CODE = "en-us"
+
+TIME_ZONE = "UTC"
+
+USE_I18N = True
+
+USE_TZ = True
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/4.1/howto/static-files/
+
+STATIC_URL = 'static/'
+# STATIC_ROOT = env.str("FEDERATED_CODE_STATIC_ROOT", "./")
+
+# Default primary key field type
+# https://docs.djangoproject.com/en/4.1/ref/settings/#default-auto-field
+
+DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
+
+MEDIA_URL = "/media/"
+MEDIA_ROOT = os.path.join(BASE_DIR, "media")
+AP_CONTENT_TYPE = "application/activity+json"
diff --git a/federatedcode/urls.py b/federatedcode/urls.py
new file mode 100644
index 0000000..5ec2220
--- /dev/null
+++ b/federatedcode/urls.py
@@ -0,0 +1,115 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# VulnerableCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: Apache-2.0
+# See http://www.apache.org/licenses/LICENSE-2.0 for the license text.
+# See https://github.com/nexB/vulnerablecode for support or download.
+# See https://aboutcode.org for more information about nexB OSS projects.
+#
+from django.conf import settings
+from django.conf.urls.static import static
+from django.contrib import admin
+from django.urls import include
+from django.urls import path
+
+from fedcode import views
+from fedcode.views import CreateReview, logout, obj_vote
+from fedcode.views import CreateSync
+from fedcode.views import CreatGitView
+from fedcode.views import FollowPackageView
+from fedcode.views import HomeView
+from fedcode.views import NoteView
+from fedcode.views import PersonSignUp
+from fedcode.views import PersonUpdateView
+from fedcode.views import PersonView
+from fedcode.views import PackageFollowers
+from fedcode.views import PackageInbox
+from fedcode.views import PackageListView
+from fedcode.views import PackageOutbox
+from fedcode.views import PackageProfile
+from fedcode.views import PackageView
+from fedcode.views import RepositoryListView
+from fedcode.views import ReviewListView
+from fedcode.views import ReviewView
+from fedcode.views import UserFollowing
+from fedcode.views import UserInbox
+from fedcode.views import UserLogin
+from fedcode.views import UserOutbox
+from fedcode.views import UserProfile
+from fedcode.views import WebfingerView
+from fedcode.views import fetch_repository_file
+from fedcode.views import redirect_repository
+from fedcode.views import redirect_vulnerability
+
+urlpatterns = [
+ path("admin/", admin.site.urls),
+ path(".well-known/webfinger", WebfingerView.as_view(), name="web-finger"),
+ path("", HomeView.as_view(), name="home-page"),
+ path("users/@
+ {% if form.errors %}
+
+
+{% endif %}
+
+
+
+
+
+
+ Error
+
+ {{ form.errors }}
+
+