Webmention Endpoint Discovery
Mostly a thought experiment to see what exactly is required to do Webmention endpoints discovery. You can use this implementation on its own, though it will probably net you better results to tightly integrate the code within the rest of your application.
Under the licence of this project you should feel free to copy any parts of it that you want to take for inspiration! Not even attribution is required – even when appreciated.
$ composer require zegnat/webmention-endpoint-discovery
$discoverer = new Zegnat\Webmention\EndpointDiscovery($httpClient, $requestFactory); echo $discoverer->discover('https://webmention.rocks/test/1'); // https://webmention.rocks/test/1/webmention\?head=true
$httpClientmust be an implementation of
HttpClientas defined by HTTPlug. This will (hopefully soon) be replaced with PSR-18.
$requestFactorymust be an implementation of
RequestFactoryInterfaceas defined by PHP-FIG as PSR-17.
NOTE: This feature is very much experimental. Please consult the code before deciding to use it.
There might be some weird issues triggered by having Webmention senders post mentions to things on their local machines. The Webmention specification calls on senders to avoid sending Webmentions to localhost. This library enables that.
EndpointDiscovery::secureDiscover will return
null not only when no endpoint could be found, but also when the found endpoint’s host’s DNS resolves to an IP address in the private or reserved range. When all the IP addresses found are deemed to be OK, the method will return an array as follows:
$discoverer = new Zegnat\Webmention\EndpointDiscovery($httpClient, $requestFactory); var_export($discoverer->secureDiscover('https://webmention.rocks/test/1')); // array ( // 'url' => 'https://webmention.rocks/test/1/webmention?head=true', // 'host' => 'webmention.rocks', // 'ips' => // array ( // 0 => '184.108.40.206', // ), // )
It is recommended that the Webmention sender uses this information for posting the mention. Use one of the checked IP addresses to post to (instead of the domain, which might redo the DNS lookup) with the host in a
Host HTTP header.
For quick testing without logging, coverage reports, or live calls to Webmention Rocks!:
$ composer test -- --no-logging --no-coverage --exclude-group internet
$ composer test