From bb21803b18464ea8f5863667409d45a3359e8e80 Mon Sep 17 00:00:00 2001
From: Django Doucet <mediaformat.ux@gmail.com>
Date: Sun, 16 Apr 2023 13:46:44 -0600
Subject: [PATCH] Add Secure mode setting

---
 includes/class-admin.php |  9 +++++++++
 templates/settings.php   | 15 +++++++++++++++
 2 files changed, 24 insertions(+)

diff --git a/includes/class-admin.php b/includes/class-admin.php
index 220ed9b..dfe7deb 100644
--- a/includes/class-admin.php
+++ b/includes/class-admin.php
@@ -142,6 +142,15 @@ class Admin {
 				'default'      => array( 'post', 'pages' ),
 			)
 		);
+		\register_setting(
+			'activitypub',
+			'activitypub_use_secure_mode',
+			array(
+				'type' => 'boolean',
+				'description' => \__( 'Secure mode allows blocking servers from fetching public activities', 'activitypub' ),
+				'default' => 0,
+			)
+		);
 	}
 
 	public static function add_settings_help_tab() {
diff --git a/templates/settings.php b/templates/settings.php
index 2bfaed4..6429688 100644
--- a/templates/settings.php
+++ b/templates/settings.php
@@ -171,6 +171,21 @@
 			</tbody>
 		</table>
 
+		<table class="form-table">
+			<tbody>
+				<tr>
+					<th scope="row">
+						<?php \esc_html_e( 'Secure Mode', 'activitypub' ); ?>
+					</th>
+					<td>
+						<p>
+							<label><input type="checkbox" name="activitypub_use_secure_mode" id="activitypub_use_secure_mode" value="1" <?php echo \checked( '1', \get_option( 'activitypub_use_secure_mode', '0' ) ); ?> /> <?php echo wp_kses( \__( 'In secure mode every ActivityPub request must be signed. This disallows anonymous requests and prevents serving content to servers listed in the Blocklist.', 'activitypub' ), 'default' ); ?></label>
+						</p>
+					</td>
+				</tr>
+			</tbody>
+		</table>
+
 		<?php \do_settings_fields( 'activitypub', 'server' ); ?>
 
 		<?php \do_settings_sections( 'activitypub' ); ?>