zegnat/webmention-endpoint-discovery

A straight forward implementation of webmention endpoint discovery.

v1.0 2018-08-18 21:42 UTC

Requires

• php: ^7.0
• masterminds/html5: ^2.3
• pear/http2: ^1.1
• pear/net_url2: ^2.2
• php-http/httplug: ^1.1
• psr/http-factory: ^1.0
• psr/http-message: ^1.0

Requires (Dev)

• nyholm/psr7: ^1.0
• php-http/curl-client: ^1.7
• phpunit/phpunit: ^7.0
• squizlabs/php_codesniffer: ^3.3
• zendframework/zend-diactoros: ^1.8

0BSD

• Martijn van der Ven

• indieweb
• webmention

README

Mostly a thought experiment to see what exactly is required to do Webmention endpoints discovery. You can use this implementation on its own, though it will probably net you better results to tightly integrate the code within the rest of your application.

Under the licence of this project you should feel free to copy any parts of it that you want to take for inspiration! Not even attribution is required – even when appreciated.

Install

Via Composer

$ composer require zegnat/webmention-endpoint-discovery

Usage

$discoverer = new Zegnat\Webmention\EndpointDiscovery($httpClient, $requestFactory);
echo $discoverer->discover('https://webmention.rocks/test/1');
// https://webmention.rocks/test/1/webmention\?head=true

• $httpClient must be an implementation of HttpClient as defined by HTTPlug. This will (hopefully soon) be replaced with PSR-18.
• $requestFactory must be an implementation of RequestFactoryInterface as defined by PHP-FIG as PSR-17.

Secure Endpoints

NOTE: This feature is very much experimental. Please consult the code before deciding to use it.

There might be some weird issues triggered by having Webmention senders post mentions to things on their local machines. The Webmention specification calls on senders to avoid sending Webmentions to localhost. This library enables that.

EndpointDiscovery::secureDiscover will return null not only when no endpoint could be found, but also when the found endpoint’s host’s DNS resolves to an IP address in the private or reserved range. When all the IP addresses found are deemed to be OK, the method will return an array as follows:

$discoverer = new Zegnat\Webmention\EndpointDiscovery($httpClient, $requestFactory);
var_export($discoverer->secureDiscover('https://webmention.rocks/test/1'));
// array (
//   'url' => 'https://webmention.rocks/test/1/webmention?head=true',
//   'host' => 'webmention.rocks',
//   'ips' =>
//   array (
//     0 => '173.230.155.197',
//   ),
// )

It is recommended that the Webmention sender uses this information for posting the mention. Use one of the checked IP addresses to post to (instead of the domain, which might redo the DNS lookup) with the host in a Host HTTP header.

Testing

For quick testing without logging, coverage reports, or live calls to Webmention Rocks!:

$ composer test -- --no-logging --no-coverage --exclude-group internet

Else:

$ composer test