.

Signed-off-by: ziadhany <ziadhany2016@gmail.com>

Author: ziadhany

.github/workflows/main.yml

@@ -3,9 +3,9 @@ name: run tests
 on: [push, pull_request]
 
 env:
-  DB_NAME: vulnerablecode
-  DB_USER: vulnerablecode
-  DB_PASSWORD: vulnerablecode
+  DB_NAME: purl-sync
+  DB_USER: purl-sync
+  DB_PASSWORD: purl-sync
 
 jobs:
   build:

purl_sync/Makefile

@@ -0,0 +1,101 @@
+# SPDX-License-Identifier: Apache-2.0
+#
+# http://nexb.com and https://github.com/nexB/scancode.io
+# The ScanCode.io software is licensed under the Apache License version 2.0.
+# Data generated with ScanCode.io is provided as-is without warranties.
+# ScanCode is a trademark of nexB Inc.
+#
+# You may not use this software except in compliance with the License.
+# You may obtain a copy of the License at: http://apache.org/licenses/LICENSE-2.0
+# Unless required by applicable law or agreed to in writing, software distributed
+# under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+# CONDITIONS OF ANY KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations under the License.
+#
+# Data Generated with ScanCode.io is provided on an "AS IS" BASIS, WITHOUT WARRANTIES
+# OR CONDITIONS OF ANY KIND, either express or implied. No content created from
+# ScanCode.io should be considered or used as legal advice. Consult an Attorney
+# for any legal advice.
+#
+# ScanCode.io is a free software code scanning tool from nexB Inc. and others.
+# Visit https://github.com/nexB/scancode.io for support and download.
+# Modified for VulnerableCode use
+
+# Python version can be specified with `$ PYTHON_EXE=python3.x make conf`
+PYTHON_EXE?=python3
+VENV=venv
+MANAGE=${VENV}/bin/python manage.py
+ACTIVATE?=. ${VENV}/bin/activate;
+VIRTUALENV_PYZ=etc/thirdparty/virtualenv.pyz
+# Do not depend on Python to generate the SECRET_KEY
+GET_SECRET_KEY=`base64 /dev/urandom | head -c50`
+# Customize with `$ make envfile ENV_FILE=/etc/vulnerablecode/.env`
+ENV_FILE=.env
+# Customize with `$ make postgres VULNERABLECODE_DB_PASSWORD=YOUR_PASSWORD`
+VULNERABLECODE_DB_PASSWORD=vulnerablecode
+
+virtualenv:
+	@echo "-> Bootstrap the virtualenv with PYTHON_EXE=${PYTHON_EXE}"
+	@${PYTHON_EXE} ${VIRTUALENV_PYZ} --never-download --no-periodic-update ${VENV}
+
+conf: virtualenv
+	@echo "-> Install dependencies"
+	@${ACTIVATE} pip install -e . -c requirements.txt
+
+dev: virtualenv
+	@echo "-> Configure and install development dependencies"
+	@${ACTIVATE} pip install -e .[dev] -c requirements.txt
+
+envfile:
+	@echo "-> Create the .env file and generate a secret key"
+	@if test -f ${ENV_FILE}; then echo ".env file exists already"; exit 1; fi
+	@mkdir -p $(shell dirname ${ENV_FILE}) && touch ${ENV_FILE}
+	@echo SECRET_KEY=\"${GET_SECRET_KEY}\" > ${ENV_FILE}
+
+isort:
+	@echo "-> Apply isort changes to ensure proper imports ordering"
+	${VENV}/bin/isort .
+
+black:
+	@echo "-> Apply black code formatter"
+	${VENV}/bin/black .
+
+doc8:
+	@echo "-> Run doc8 validation"
+	@${ACTIVATE} doc8 --max-line-length 100 --ignore-path docs/_build/ --quiet docs/
+
+valid: isort black
+
+check:
+	@echo "-> Run pycodestyle (PEP8) validation"
+	@${ACTIVATE} pycodestyle --max-line-length=100 --exclude=venv,lib,thirdparty,docs,migrations,settings.py .
+	@echo "-> Run isort imports ordering validation"
+	@${ACTIVATE} isort --check-only .
+	@echo "-> Run black validation"
+	@${ACTIVATE} black --check ${BLACK_ARGS}
+
+clean:
+	@echo "-> Clean the Python env"
+	rm -rf ${VENV} build/ dist/ vulnerablecode.egg-info/ docs/_build/ pip-selfcheck.json
+	find . -type f -name '*.py[co]' -delete -o -type d -name __pycache__ -delete
+
+migrate:
+	@echo "-> Apply database migrations"
+	${MANAGE} migrate
+
+sqlite:
+	@echo "-> Configure SQLite database"
+	@echo VULNERABLECODE_DB_ENGINE=\"django.db.backends.sqlite3\" >> ${ENV_FILE}
+	@echo VULNERABLECODE_DB_NAME=\"sqlite3.db\" >> ${ENV_FILE}
+	@$(MAKE) migrate
+
+run:
+	${MANAGE} runserver 8000 --insecure
+
+test:
+	@echo "-> Run the test suite"
+	${ACTIVATE} ${PYTHON_EXE} -m pytest -vvs -m "not webtest"
+
+webtest:
+	@echo "-> Run web tests"
+	${ACTIVATE} ${PYTHON_EXE} -m pytest -vvs -m "webtest"

purl_sync/purl_sync/urls.py

@@ -16,7 +16,7 @@
 from review import views
 from review.views import CreateReview
 from review.views import CreatGitView
-from review.views import FollowView
+from review.views import FollowPurlView
 from review.views import HomeView
 from review.views import NoteView
 from review.views import PersonSignUp
@@ -48,7 +48,7 @@
     path("", HomeView.as_view(), name="home-page"),
     path("users/@<str:slug>", PersonView.as_view(), name="user-profile"),
     path("purls/@<path:slug>/", PurlView.as_view(), name="purl-profile"),
-    path("purls/@<path:purl_string>/follow", FollowView.as_view(), name="purl-follow"),
+    path("purls/@<path:purl_string>/follow", FollowPurlView.as_view(), name="purl-follow"),
     path("accounts/sign-up", PersonSignUp.as_view(), name="signup"),
     path("accounts/login/", UserLogin.as_view(), name="login"),
     path("accounts/logout", LogoutView.as_view(next_page="login"), name="logout"),

purl_sync/requirements.txt

@@ -1,18 +1,49 @@
+anyio==4.0.0
 asgiref==3.7.2
+attrs==23.1.0
+certifi==2023.5.7
+cffi==1.15.1
+charset-normalizer==3.1.0
+cryptography==41.0.1
+dateparser==1.1.8
+Deprecated==1.2.14
 Django==4.2.2
 django-environ==0.10.0
+django-oauth-toolkit==2.3.0
+django-rest-framework==0.1.0
+djangorestframework==3.14.0
 exceptiongroup==1.1.1
+gitdb==4.0.10
+GitPython==3.1.31
+h11==0.14.0
+http-message-signatures==0.4.4
+http-sfv==0.9.8
+httpcore==0.17.3
+httpx==0.24.1
+idna==3.4
 iniconfig==2.0.0
+jwcrypto==1.5.0
+oauthlib==3.2.2
+packageurl-python==0.11.1
 packaging==23.1
 Pillow==9.5.0
 pluggy==1.0.0
+pycparser==2.21
 pytest==7.3.2
 pytest-django==4.5.2
+python-dateutil==2.8.2
+pytz==2023.3
+PyYAML==6.0.1
+regex==2023.8.8
+requests==2.31.0
+saneyaml==0.6.0
+six==1.16.0
+smmap==5.0.0
+sniffio==1.3.0
 sqlparse==0.4.4
 tomli==2.0.1
 typing_extensions==4.6.3
-
-djangorestframework~=3.14.0
-requests~=2.31.0
-saneyaml~=0.6.0
-django-oauth-toolkit~=2.3.0
+tzlocal==5.0.1
+unidiff==0.7.5
+urllib3==2.0.3
+wrapt==1.15.0

purl_sync/review/activitypub.py

@@ -56,6 +56,13 @@
 
 AP_TARGET = {"cc": "https://www.w3.org/ns/activitystreams#Public"}
 
+OBJ_Map = {
+    "Note": "note-page",
+    "Review": "review-page",
+    "Repository": "repository-page",
+    "Vulnerability": "vulnerability-page",
+}
+
 
 def check_and_r_ap_context(request):
     """
@@ -270,19 +277,13 @@ def save(self):
 
     def succeeded_ap_rs(self, new_obj):
         """Response for successfully deleting the object"""
-        Obj_Map = {
-            "Note": "note-page",
-            "Review": "review-page",
-            "Repository": "repository-page",
-            "Vulnerability": "vulnerability-page",
-        }
         return JsonResponse(
-            {"Location": full_reverse(Obj_Map[self.object.type], new_obj.id)}, status=201
+            {"Location": full_reverse(OBJ_Map[self.object.type], new_obj.id)}, status=201
         )
 
     def failed_ap_rs(self):
         """Response for failure deleting the object"""
-        return JsonResponse({self.object}, status=405)
+        return HttpResponseBadRequest("Invalid Create Activity request")
 
     def to_ap(self):
         """Request for creating object in activitypub format"""
@@ -309,19 +310,20 @@ def save(self):
         }
 
         if (
-            (isinstance(actor, Person) and self.object.type in ["Note", "Review"])
-            or (isinstance(actor, Service) and self.object.type == "Repository")
-            or (isinstance(actor, Purl) and self.object.type == "Note")
+                (isinstance(actor, Person) and self.object.type in ["Note", "Review"])
+                or (isinstance(actor, Service) and self.object.type == "Repository")
+                or (isinstance(actor, Purl) and self.object.type == "Note")
         ):
             for key, value in updated_param[self.object.type].items():
                 if value:
                     setattr(old_obj, key, value)
             old_obj.save()
-        return "TODO"
 
-    def succeeded_ap_rs(self):
+        return self.succeeded_ap_rs(old_obj.to_ap)
+
+    def succeeded_ap_rs(self, update_obj):
         """Response for successfully deleting the object"""
-        return JsonResponse({self.object}, status=410)
+        return JsonResponse(update_obj, status=200)
 
     def failed_ap_rs(self):
         """Response for failure deleting the object"""
@@ -344,9 +346,9 @@ def save(self):
             return self.failed_ap_rs()
 
         if (
-            (type(actor) is Person and self.object.type in ["Note", "Review"])
-            or (type(actor) is Purl and self.object.type in ["Note"])
-            or (type(actor) is Service and self.object.type == ["Repository", "Purl"])
+                (type(actor) is Person and self.object.type in ["Note", "Review"])
+                or (type(actor) is Purl and self.object.type in ["Note"])
+                or (type(actor) is Service and self.object.type == ["Repository", "Purl"])
         ):
             instance = self.object.get_object()
             instance.delete()
@@ -360,7 +362,7 @@ def ap_rq(self):
 
     def succeeded_ap_rs(self):
         """Response for successfully deleting the object"""
-        return JsonResponse(asdict(self.object), status=410)
+        return JsonResponse({"message": "The object has been deleted successfully"}, status=200)
 
     def failed_ap_rs(self):
         """Response for failure deleting the object"""

purl_sync/review/forms.py

@@ -74,3 +74,11 @@ class CreateReviewForm(forms.Form):
     )
     data = forms.CharField(widget=forms.Textarea(attrs={"class": "textarea", "rows": 16}))
     filename = forms.CharField(widget=forms.HiddenInput())
+
+
+class SubscribePurlForm(forms.Form):
+    acct = forms.CharField(label="Subscribe with a remote account:",
+                           widget=forms.TextInput(
+                               attrs={'placeholder': 'ziadhany@vulnerablecode.io',
+                                      'class': 'input'
+                                      }))

purl_sync/review/models.py

@@ -32,7 +32,6 @@
 class RemoteActor(models.Model):
     url = models.URLField(primary_key=True)
     username = models.CharField(max_length=100)
-    profile_data = models.JSONField()
     updated_at = models.DateTimeField(auto_now=True)
 
     class Meta:
@@ -185,10 +184,12 @@ def acct(self):
     def followers_count(self):
         return Follow.objects.filter(purl=self).count()
 
+    # TODO raise error if the purl have a version or qualifiers or subpath
     # def save(self, *args, **kwargs):
     #     if not check_purl_actor(self.string):
     #         return ValidationError(self.string)
     #     super(Purl, self).save(*args, **kwargs)
+
     @property
     def absolute_url_ap(self):
         return full_reverse("purl-ap-profile", self.string)