pixelfed/app/Util/ActivityPub/Inbox.php

<?php

namespace App\Util\ActivityPub;

use Cache, DB, Log, Purify, Redis, Storage, Validator;
use App\{
	Activity,
	DirectMessage,
	Follower,
	FollowRequest,
	Like,
	Notification,
	Media,
	Profile,
	Status,
	StatusHashtag,
	Story,
	StoryView,
	UserFilter
};
use Carbon\Carbon;
use App\Util\ActivityPub\Helpers;
use Illuminate\Support\Str;
use App\Jobs\LikePipeline\LikePipeline;
use App\Jobs\FollowPipeline\FollowPipeline;
use App\Jobs\DeletePipeline\DeleteRemoteProfilePipeline;
use App\Jobs\DeletePipeline\DeleteRemoteStatusPipeline;
use App\Jobs\StoryPipeline\StoryExpire;
use App\Jobs\StoryPipeline\StoryFetch;

use App\Util\ActivityPub\Validator\Accept as AcceptValidator;
use App\Util\ActivityPub\Validator\Add as AddValidator;
use App\Util\ActivityPub\Validator\Announce as AnnounceValidator;
use App\Util\ActivityPub\Validator\Follow as FollowValidator;
use App\Util\ActivityPub\Validator\Like as LikeValidator;
use App\Util\ActivityPub\Validator\UndoFollow as UndoFollowValidator;

use App\Services\PollService;
use App\Services\FollowerService;
use App\Services\StatusService;
use App\Services\UserFilterService;
use App\Services\NetworkTimelineService;
use App\Models\Conversation;
use App\Jobs\ProfilePipeline\IncrementPostCount;
use App\Jobs\ProfilePipeline\DecrementPostCount;

class Inbox
{
	protected $headers;
	protected $profile;
	protected $payload;
	protected $logger;

	public function __construct($headers, $profile, $payload)
	{
		$this->headers = $headers;
		$this->profile = $profile;
		$this->payload = $payload;
	}

	public function handle()
	{
		$this->handleVerb();
		return;
	}

	public function handleVerb()
	{
		$verb = (string) $this->payload['type'];
		switch ($verb) {

			case 'Add':
				$this->handleAddActivity();
				break;

			case 'Create':
				$this->handleCreateActivity();
				break;

			case 'Follow':
				if(FollowValidator::validate($this->payload) == false) { return; }
				$this->handleFollowActivity();
				break;

			case 'Announce':
				if(AnnounceValidator::validate($this->payload) == false) { return; }
				$this->handleAnnounceActivity();
				break;

			case 'Accept':
				if(AcceptValidator::validate($this->payload) == false) { return; }
				$this->handleAcceptActivity();
				break;

			case 'Delete':
				$this->handleDeleteActivity();
				break;

			case 'Like':
				if(LikeValidator::validate($this->payload) == false) { return; }
				$this->handleLikeActivity();
				break;

			case 'Reject':
				$this->handleRejectActivity();
				break;

			case 'Undo':
				$this->handleUndoActivity();
				break;

			case 'View':
				$this->handleViewActivity();
				break;

			case 'Story:Reaction':
				$this->handleStoryReactionActivity();
				break;

			case 'Story:Reply':
				$this->handleStoryReplyActivity();
				break;

			// case 'Update':
			// 	(new UpdateActivity($this->payload, $this->profile))->handle();
			// 	break;

			default:
				// TODO: decide how to handle invalid verbs.
				break;
		}
	}

	public function verifyNoteAttachment()
	{
		$activity = $this->payload['object'];

		if(isset($activity['inReplyTo']) &&
			!empty($activity['inReplyTo']) &&
			Helpers::validateUrl($activity['inReplyTo'])
		) {
			// reply detected, skip attachment check
			return true;
		}

		$valid = Helpers::verifyAttachments($activity);

		return $valid;
	}

	public function actorFirstOrCreate($actorUrl)
	{
		return Helpers::profileFetch($actorUrl);
	}

	public function handleAddActivity()
	{
		// stories ;)

		if(!isset(
			$this->payload['actor'],
			$this->payload['object']
		)) {
			return;
		}

		$actor = $this->payload['actor'];
		$obj = $this->payload['object'];

		if(!Helpers::validateUrl($actor)) {
			return;
		}

		if(!isset($obj['type'])) {
			return;
		}

		switch($obj['type']) {
			case 'Story':
				StoryFetch::dispatchNow($this->payload);
			break;
		}
	}

	public function handleCreateActivity()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		if(!$actor || $actor->domain == null) {
			return;
		}
		if(!isset($activity['to'])) {
			return;
		}
		$to = isset($activity['to']) ? $activity['to'] : [];
		$cc = isset($activity['cc']) ? $activity['cc'] : [];

		if($activity['type'] == 'Question') {
			$this->handlePollCreate();
			return;
		}

		if( is_array($to) &&
			is_array($cc) &&
 			count($to) == 1 &&
			count($cc) == 0 &&
			parse_url($to[0], PHP_URL_HOST) == config('pixelfed.domain.app')
		) {
			$this->handleDirectMessage();
			return;
		}

		if($activity['type'] == 'Note' && !empty($activity['inReplyTo'])) {
			$this->handleNoteReply();

		} elseif ($activity['type'] == 'Note' && !empty($activity['attachment'])) {
			if(!$this->verifyNoteAttachment()) {
				return;
			}
			$this->handleNoteCreate();
		}
	}

	public function handleNoteReply()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		if(!$actor || $actor->domain == null) {
			return;
		}

		$inReplyTo = $activity['inReplyTo'];
		$url = isset($activity['url']) ? $activity['url'] : $activity['id'];

		Helpers::statusFirstOrFetch($url, true);
		return;
	}

	public function handlePollCreate()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		if(!$actor || $actor->domain == null) {
			return;
		}
		$url = isset($activity['url']) ? $activity['url'] : $activity['id'];
		Helpers::statusFirstOrFetch($url);
		return;
	}

	public function handleNoteCreate()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		if(!$actor || $actor->domain == null) {
			return;
		}

		if( isset($activity['inReplyTo']) &&
			isset($activity['name']) &&
			!isset($activity['content']) &&
			!isset($activity['attachment']) &&
			Helpers::validateLocalUrl($activity['inReplyTo'])
		) {
			$this->handlePollVote();
			return;
		}

		if($actor->followers()->count() == 0) {
			return;
		}

		$url = isset($activity['url']) ? $activity['url'] : $activity['id'];

		if(Status::whereUrl($url)->exists()) {
			return;
		}

		Helpers::storeStatus(
			$url,
			$actor,
			$activity
		);
		return;
	}

	public function handlePollVote()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		$status = Helpers::statusFetch($activity['inReplyTo']);
		$poll = $status->poll;

		if(!$status || !$poll) {
			return;
		}

		if(now()->gt($poll->expires_at)) {
			return;
		}

		$choices = $poll->poll_options;
		$choice = array_search($activity['name'], $choices);

		if($choice === false) {
			return;
		}

		if(PollVote::whereStatusId($status->id)->whereProfileId($actor->id)->exists()) {
			return;
		}

		$vote = new PollVote;
		$vote->status_id = $status->id;
		$vote->profile_id = $actor->id;
		$vote->poll_id = $poll->id;
		$vote->choice = $choice;
		$vote->uri = isset($activity['id']) ? $activity['id'] : null;
		$vote->save();

		$tallies = $poll->cached_tallies;
		$tallies[$choice] = $tallies[$choice] + 1;
		$poll->cached_tallies = $tallies;
		$poll->votes_count = array_sum($tallies);
		$poll->save();

		PollService::del($status->id);

		return;
	}

	public function handleDirectMessage()
	{
		$activity = $this->payload['object'];
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		$profile = Profile::whereNull('domain')
			->whereUsername(array_last(explode('/', $activity['to'][0])))
			->firstOrFail();

		if(in_array($actor->id, $profile->blockedIds()->toArray())) {
			return;
		}

		$msg = $activity['content'];
		$msgText = strip_tags($activity['content']);

		if(Str::startsWith($msgText, '@' . $profile->username)) {
			$len = strlen('@' . $profile->username);
			$msgText = substr($msgText, $len + 1);
		}

		if($profile->user->settings->public_dm == false || $profile->is_private) {
			if($profile->follows($actor) == true) {
				$hidden = false;
			} else {
				$hidden = true;
			}
		} else {
			$hidden = false;
		}

		$status = new Status;
		$status->profile_id = $actor->id;
		$status->caption = $msgText;
		$status->rendered = $msg;
		$status->visibility = 'direct';
		$status->scope = 'direct';
		$status->url = $activity['id'];
		$status->in_reply_to_profile_id = $profile->id;
		$status->save();

		$dm = new DirectMessage;
		$dm->to_id = $profile->id;
		$dm->from_id = $actor->id;
		$dm->status_id = $status->id;
		$dm->is_hidden = $hidden;
		$dm->type = 'text';
		$dm->save();

		Conversation::updateOrInsert(
			[
				'to_id' => $profile->id,
				'from_id' => $actor->id
			],
			[
				'type' => 'text',
				'status_id' => $status->id,
				'dm_id' => $dm->id,
				'is_hidden' => $hidden
			]
		);

		if(count($activity['attachment'])) {
			$photos = 0;
			$videos = 0;
			$allowed = explode(',', config_cache('pixelfed.media_types'));
			$activity['attachment'] = array_slice($activity['attachment'], 0, config_cache('pixelfed.max_album_length'));
			foreach($activity['attachment'] as $a) {
				$type = $a['mediaType'];
				$url = $a['url'];
				$valid = Helpers::validateUrl($url);
				if(in_array($type, $allowed) == false || $valid == false) {
					continue;
				}

				$media = new Media();
				$media->remote_media = true;
				$media->status_id = $status->id;
				$media->profile_id = $status->profile_id;
				$media->user_id = null;
				$media->media_path = $url;
				$media->remote_url = $url;
				$media->mime = $type;
				$media->save();
				if(explode('/', $type)[0] == 'image') {
					$photos = $photos + 1;
				}
				if(explode('/', $type)[0] == 'video') {
					$videos = $videos + 1;
				}
			}

			if($photos && $videos == 0) {
				$dm->type = $photos == 1 ? 'photo' : 'photos';
				$dm->save();
			}
			if($videos && $photos == 0) {
				$dm->type = $videos == 1 ? 'video' : 'videos';
				$dm->save();
			}
		}

		if(filter_var($msgText, FILTER_VALIDATE_URL)) {
			if(Helpers::validateUrl($msgText)) {
				$dm->type = 'link';
				$dm->meta = [
					'domain' => parse_url($msgText, PHP_URL_HOST),
					'local' => parse_url($msgText, PHP_URL_HOST) ==
						parse_url(config('app.url'), PHP_URL_HOST)
				];
				$dm->save();
			}
		}

		$nf = UserFilter::whereUserId($profile->id)
			->whereFilterableId($actor->id)
			->whereFilterableType('App\Profile')
			->whereFilterType('dm.mute')
			->exists();

		if($profile->domain == null && $hidden == false && !$nf) {
			$notification = new Notification();
			$notification->profile_id = $profile->id;
			$notification->actor_id = $actor->id;
			$notification->action = 'dm';
			$notification->message = $dm->toText();
			$notification->rendered = $dm->toHtml();
			$notification->item_id = $dm->id;
			$notification->item_type = "App\DirectMessage";
			$notification->save();
		}

		return;
	}

	public function handleFollowActivity()
	{
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		$target = $this->actorFirstOrCreate($this->payload['object']);
		if(!$actor || $actor->domain == null || $target->domain !== null) {
			return;
		}
		if(
			Follower::whereProfileId($actor->id)
				->whereFollowingId($target->id)
				->exists() ||
			FollowRequest::whereFollowerId($actor->id)
				->whereFollowingId($target->id)
				->exists()
		) {
			return;
		}

        $blocks = UserFilterService::blocks($target->id);
        if($blocks && in_array($actor->id, $blocks)) {
            return;
        }

		if($target->is_private == true) {
			FollowRequest::updateOrCreate([
				'follower_id' => $actor->id,
				'following_id' => $target->id,
			],[
				'activity' => collect($this->payload)->only(['id','actor','object','type'])->toArray()
			]);
		} else {
			$follower = new Follower;
			$follower->profile_id = $actor->id;
			$follower->following_id = $target->id;
			$follower->local_profile = empty($actor->domain);
			$follower->save();

			FollowPipeline::dispatch($follower);
			FollowerService::add($actor->id, $target->id);

			// send Accept to remote profile
			$accept = [
				'@context' => 'https://www.w3.org/ns/activitystreams',
				'id'       => $target->permalink().'#accepts/follows/' . $follower->id,
				'type'     => 'Accept',
				'actor'    => $target->permalink(),
				'object'   => [
					'id'        => $this->payload['id'],
					'actor'     => $actor->permalink(),
					'type'      => 'Follow',
					'object'    => $target->permalink()
				]
			];
			Helpers::sendSignedObject($target, $actor->inbox_url, $accept);
			Cache::forget('profile:follower_count:'.$target->id);
			Cache::forget('profile:follower_count:'.$actor->id);
			Cache::forget('profile:following_count:'.$target->id);
			Cache::forget('profile:following_count:'.$actor->id);
		}
	}

	public function handleAnnounceActivity()
	{
		$actor = $this->actorFirstOrCreate($this->payload['actor']);
		$activity = $this->payload['object'];

		if(!$actor || $actor->domain == null) {
			return;
		}

		if(Helpers::validateLocalUrl($activity) == false) {
			return;
		}

		$parent = Helpers::statusFetch($activity);

		if(empty($parent)) {
			return;
		}

        $blocks = UserFilterService::blocks($parent->profile_id);
        if($blocks && in_array($actor->id, $blocks)) {
            return;
        }

		$status = Status::firstOrCreate([
			'profile_id' => $actor->id,
			'reblog_of_id' => $parent->id,
			'type' => 'share'
		]);

		Notification::firstOrCreate([
			'profile_id' => $parent->profile->id,
			'actor_id' => $actor->id,
			'action' => 'share',
			'message' => $status->replyToText(),
			'rendered' => $status->replyToHtml(),
			'item_id' => $parent->id,
			'item_type' => 'App\Status'
		]);

		$parent->reblogs_count = $parent->shares()->count();
		$parent->save();
	}

	public function handleAcceptActivity()
	{
		$actor = $this->payload['object']['actor'];
		$obj = $this->payload['object']['object'];
		$type = $this->payload['object']['type'];

		if($type !== 'Follow') {
			return;
		}

		$actor = Helpers::validateLocalUrl($actor);
		$target = Helpers::validateUrl($obj);

		if(!$actor || !$target) {
			return;
		}

		$actor = Helpers::profileFetch($actor);
		$target = Helpers::profileFetch($target);

		if(!$actor || !$target) {
			return;
		}

		$request = FollowRequest::whereFollowerId($actor->id)
			->whereFollowingId($target->id)
			->whereIsRejected(false)
			->first();

		if(!$request) {
			return;
		}

		$follower = Follower::firstOrCreate([
			'profile_id' => $actor->id,
			'following_id' => $target->id,
		]);
		FollowPipeline::dispatch($follower);

		$request->delete();
	}

	public function handleDeleteActivity()
	{
		if(!isset(
			$this->payload['actor'],
			$this->payload['object']
		)) {
			return;
		}
		$actor = $this->payload['actor'];
		$obj = $this->payload['object'];
		if(is_string($obj) == true && $actor == $obj && Helpers::validateUrl($obj)) {
			$profile = Profile::whereRemoteUrl($obj)->first();
			if(!$profile || $profile->private_key != null) {
				return;
			}
			DeleteRemoteProfilePipeline::dispatch($profile)->onQueue('delete');
			return;
		} else {
			if(!isset($obj['id'], $this->payload['object'], $this->payload['object']['id'])) {
				return;
			}
			$type = $this->payload['object']['type'];
			$typeCheck = in_array($type, ['Person', 'Tombstone', 'Story']);
			if(!Helpers::validateUrl($actor) || !Helpers::validateUrl($obj['id']) || !$typeCheck) {
				return;
			}
			if(parse_url($obj['id'], PHP_URL_HOST) !== parse_url($actor, PHP_URL_HOST)) {
				return;
			}
			$id = $this->payload['object']['id'];
			switch ($type) {
				case 'Person':
						$profile = Profile::whereRemoteUrl($actor)->first();
						if(!$profile || $profile->private_key != null) {
							return;
						}
						DeleteRemoteProfilePipeline::dispatch($profile)->onQueue('delete');
						return;
					break;

				case 'Tombstone':
						$profile = Profile::whereRemoteUrl($actor)->first();
						if(!$profile || $profile->private_key != null) {
							return;
						}
						$status = Status::whereProfileId($profile->id)
							->whereUri($id)
							->orWhere('url', $id)
							->orWhere('object_url', $id)
							->first();
						if(!$status) {
							return;
						}
						DeleteRemoteStatusPipeline::dispatch($status)->onQueue('delete');
						return;
					break;

				case 'Story':
					$story = Story::whereObjectId($id)
						->first();
					if($story) {
						StoryExpire::dispatch($story)->onQueue('story');
					}
					break;

				default:
					return;
					break;
			}
		}
	}

	public function handleLikeActivity()
	{
		$actor = $this->payload['actor'];

		if(!Helpers::validateUrl($actor)) {
			return;
		}

		$profile = self::actorFirstOrCreate($actor);
		$obj = $this->payload['object'];
		if(!Helpers::validateUrl($obj)) {
			return;
		}
		$status = Helpers::statusFirstOrFetch($obj);
		if(!$status || !$profile) {
			return;
		}

        $blocks = UserFilterService::blocks($status->profile_id);
        if($blocks && in_array($profile->id, $blocks)) {
            return;
        }

		$like = Like::firstOrCreate([
			'profile_id' => $profile->id,
			'status_id' => $status->id
		]);

		if($like->wasRecentlyCreated == true) {
			$status->likes_count = $status->likes()->count();
			$status->save();
			LikePipeline::dispatch($like);
		}

		return;
	}

	public function handleRejectActivity()
	{
	}

	public function handleUndoActivity()
	{
		$actor = $this->payload['actor'];
		$profile = self::actorFirstOrCreate($actor);
		$obj = $this->payload['object'];

		if(!$profile) {
			return;
		}
		// TODO: Some implementations do not inline the object, skip for now
		if(!$obj || !is_array($obj) || !isset($obj['type'])) {
			return;
		}

		switch ($obj['type']) {
			case 'Accept':
				break;

			case 'Announce':
				if(is_array($obj) && isset($obj['object'])) {
					$obj = $obj['object'];
				}
				if(!is_string($obj) || !Helpers::validateLocalUrl($obj)) {
					return;
				}
				$status = Status::whereUri($obj)->exists();
				if(!$status) {
					return;
				}
				Status::whereProfileId($profile->id)
					->whereReblogOfId($status->id)
					->forceDelete();
				Notification::whereProfileId($status->profile->id)
					->whereActorId($profile->id)
					->whereAction('share')
					->whereItemId($status->reblog_of_id)
					->whereItemType('App\Status')
					->forceDelete();
				break;

			case 'Block':
				break;

			case 'Follow':
				$following = self::actorFirstOrCreate($obj['object']);
				if(!$following) {
					return;
				}
				Follower::whereProfileId($profile->id)
					->whereFollowingId($following->id)
					->delete();
				Notification::whereProfileId($following->id)
					->whereActorId($profile->id)
					->whereAction('follow')
					->whereItemId($following->id)
					->whereItemType('App\Profile')
					->forceDelete();
				FollowerService::remove($profile->id, $following->id);
				break;

			case 'Like':
				$status = Helpers::statusFirstOrFetch($obj['object']);
				if(!$status) {
					return;
				}
				Like::whereProfileId($profile->id)
					->whereStatusId($status->id)
					->forceDelete();
				Notification::whereProfileId($status->profile_id)
					->whereActorId($profile->id)
					->whereAction('like')
					->whereItemId($status->id)
					->whereItemType('App\Status')
					->forceDelete();
				break;
		}
		return;
	}

	public function handleViewActivity()
	{
		if(!isset(
			$this->payload['actor'],
			$this->payload['object']
		)) {
			return;
		}

		$actor = $this->payload['actor'];
		$obj = $this->payload['object'];

		if(!Helpers::validateUrl($actor)) {
			return;
		}

		if(!$obj || !is_array($obj)) {
			return;
		}

		if(!isset($obj['type']) || !isset($obj['object']) || $obj['type'] != 'Story') {
			return;
		}

		if(!Helpers::validateLocalUrl($obj['object'])) {
			return;
		}

		$profile = Helpers::profileFetch($actor);
		$storyId = Str::of($obj['object'])->explode('/')->last();

		$story = Story::whereActive(true)
			->whereLocal(true)
			->find($storyId);

		if(!$story) {
			return;
		}

		if(!FollowerService::follows($profile->id, $story->profile_id)) {
			return;
		}

		$view = StoryView::firstOrCreate([
			'story_id' => $story->id,
			'profile_id' => $profile->id
		]);

		if($view->wasRecentlyCreated == true) {
			$story->view_count++;
			$story->save();
		}
	}

	public function handleStoryReactionActivity()
	{
		if(!isset(
			$this->payload['actor'],
			$this->payload['id'],
			$this->payload['inReplyTo'],
			$this->payload['content']
		)) {
			return;
		}

		$id = $this->payload['id'];
		$actor = $this->payload['actor'];
		$storyUrl = $this->payload['inReplyTo'];
		$to = $this->payload['to'];
		$text = Purify::clean($this->payload['content']);

		if(parse_url($id, PHP_URL_HOST) !== parse_url($actor, PHP_URL_HOST)) {
			return;
		}

		if(!Helpers::validateUrl($id) || !Helpers::validateUrl($actor)) {
			return;
		}

		if(!Helpers::validateLocalUrl($storyUrl)) {
			return;
		}

		if(!Helpers::validateLocalUrl($to)) {
			return;
		}

		if(Status::whereObjectUrl($id)->exists()) {
			return;
		}

		$storyId = Str::of($storyUrl)->explode('/')->last();
		$targetProfile = Helpers::profileFetch($to);

		$story = Story::whereProfileId($targetProfile->id)
			->find($storyId);

		if(!$story) {
			return;
		}

		if($story->can_react == false) {
			return;
		}

		$actorProfile = Helpers::profileFetch($actor);

		if(!FollowerService::follows($actorProfile->id, $targetProfile->id)) {
			return;
		}

		$status = new Status;
		$status->profile_id = $actorProfile->id;
		$status->type = 'story:reaction';
		$status->caption = $text;
		$status->rendered = $text;
		$status->scope = 'direct';
		$status->visibility = 'direct';
		$status->in_reply_to_profile_id = $story->profile_id;
		$status->entities = json_encode([
			'story_id' => $story->id,
			'reaction' => $text
		]);
		$status->save();

		$dm = new DirectMessage;
		$dm->to_id = $story->profile_id;
		$dm->from_id = $actorProfile->id;
		$dm->type = 'story:react';
		$dm->status_id = $status->id;
		$dm->meta = json_encode([
			'story_username' => $targetProfile->username,
			'story_actor_username' => $actorProfile->username,
			'story_id' => $story->id,
			'story_media_url' => url(Storage::url($story->path)),
			'reaction' => $text
		]);
		$dm->save();

		Conversation::updateOrInsert(
			[
				'to_id' => $story->profile_id,
				'from_id' => $actorProfile->id
			],
			[
				'type' => 'story:react',
				'status_id' => $status->id,
				'dm_id' => $dm->id,
				'is_hidden' => false
			]
		);

		$n = new Notification;
		$n->profile_id = $dm->to_id;
		$n->actor_id = $dm->from_id;
		$n->item_id = $dm->id;
		$n->item_type = 'App\DirectMessage';
		$n->action = 'story:react';
		$n->message = "{$actorProfile->username} reacted to your story";
		$n->rendered = "{$actorProfile->username} reacted to your story";
		$n->save();
	}

	public function handleStoryReplyActivity()
	{
		if(!isset(
			$this->payload['actor'],
			$this->payload['id'],
			$this->payload['inReplyTo'],
			$this->payload['content']
		)) {
			return;
		}

		$id = $this->payload['id'];
		$actor = $this->payload['actor'];
		$storyUrl = $this->payload['inReplyTo'];
		$to = $this->payload['to'];
		$text = Purify::clean($this->payload['content']);

		if(parse_url($id, PHP_URL_HOST) !== parse_url($actor, PHP_URL_HOST)) {
			return;
		}

		if(!Helpers::validateUrl($id) || !Helpers::validateUrl($actor)) {
			return;
		}

		if(!Helpers::validateLocalUrl($storyUrl)) {
			return;
		}

		if(!Helpers::validateLocalUrl($to)) {
			return;
		}

		if(Status::whereObjectUrl($id)->exists()) {
			return;
		}

		$storyId = Str::of($storyUrl)->explode('/')->last();
		$targetProfile = Helpers::profileFetch($to);

		$story = Story::whereProfileId($targetProfile->id)
			->find($storyId);

		if(!$story) {
			return;
		}

		if($story->can_react == false) {
			return;
		}

		$actorProfile = Helpers::profileFetch($actor);

		if(!FollowerService::follows($actorProfile->id, $targetProfile->id)) {
			return;
		}

		$status = new Status;
		$status->profile_id = $actorProfile->id;
		$status->type = 'story:reply';
		$status->caption = $text;
		$status->rendered = $text;
		$status->scope = 'direct';
		$status->visibility = 'direct';
		$status->in_reply_to_profile_id = $story->profile_id;
		$status->entities = json_encode([
			'story_id' => $story->id,
			'caption' => $text
		]);
		$status->save();

		$dm = new DirectMessage;
		$dm->to_id = $story->profile_id;
		$dm->from_id = $actorProfile->id;
		$dm->type = 'story:comment';
		$dm->status_id = $status->id;
		$dm->meta = json_encode([
			'story_username' => $targetProfile->username,
			'story_actor_username' => $actorProfile->username,
			'story_id' => $story->id,
			'story_media_url' => url(Storage::url($story->path)),
			'caption' => $text
		]);
		$dm->save();

		Conversation::updateOrInsert(
			[
				'to_id' => $story->profile_id,
				'from_id' => $actorProfile->id
			],
			[
				'type' => 'story:comment',
				'status_id' => $status->id,
				'dm_id' => $dm->id,
				'is_hidden' => false
			]
		);

		$n = new Notification;
		$n->profile_id = $dm->to_id;
		$n->actor_id = $dm->from_id;
		$n->item_id = $dm->id;
		$n->item_type = 'App\DirectMessage';
		$n->action = 'story:comment';
		$n->message = "{$actorProfile->username} commented on story";
		$n->rendered = "{$actorProfile->username} commented on story";
		$n->save();
	}
}