2023-03-12 16:00:57 +01:00
|
|
|
// GoToSocial
|
|
|
|
// Copyright (C) GoToSocial Authors admin@gotosocial.org
|
|
|
|
// SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
//
|
|
|
|
// This program is free software: you can redistribute it and/or modify
|
|
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
|
|
// (at your option) any later version.
|
|
|
|
//
|
|
|
|
// This program is distributed in the hope that it will be useful,
|
|
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
// GNU Affero General Public License for more details.
|
|
|
|
//
|
|
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
2021-10-24 11:57:39 +02:00
|
|
|
|
2023-02-22 16:05:26 +01:00
|
|
|
package fedi
|
2021-10-24 11:57:39 +02:00
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
"fmt"
|
|
|
|
"net/url"
|
|
|
|
|
2021-11-13 17:29:43 +01:00
|
|
|
"github.com/superseriousbusiness/activity/streams/vocab"
|
2023-05-09 12:16:10 +02:00
|
|
|
"github.com/superseriousbusiness/gotosocial/internal/ap"
|
2023-04-28 17:45:21 +02:00
|
|
|
"github.com/superseriousbusiness/gotosocial/internal/gtscontext"
|
2021-10-24 11:57:39 +02:00
|
|
|
"github.com/superseriousbusiness/gotosocial/internal/gtserror"
|
2021-12-20 15:19:53 +01:00
|
|
|
"github.com/superseriousbusiness/gotosocial/internal/uris"
|
2021-10-24 11:57:39 +02:00
|
|
|
)
|
|
|
|
|
2023-02-22 16:05:26 +01:00
|
|
|
// UserGet handles the getting of a fedi/activitypub representation of a user/account, performing appropriate authentication
|
|
|
|
// before returning a JSON serializable interface to the caller.
|
|
|
|
func (p *Processor) UserGet(ctx context.Context, requestedUsername string, requestURL *url.URL) (interface{}, gtserror.WithCode) {
|
2023-02-03 21:03:05 +01:00
|
|
|
// Get the instance-local account the request is referring to.
|
2023-03-01 19:26:53 +01:00
|
|
|
requestedAccount, err := p.state.DB.GetAccountByUsernameDomain(ctx, requestedUsername, "")
|
2021-10-24 11:57:39 +02:00
|
|
|
if err != nil {
|
|
|
|
return nil, gtserror.NewErrorNotFound(fmt.Errorf("database error getting account with username %s: %s", requestedUsername, err))
|
|
|
|
}
|
|
|
|
|
|
|
|
var requestedPerson vocab.ActivityStreamsPerson
|
2023-02-03 21:03:05 +01:00
|
|
|
|
2022-04-15 14:33:01 +02:00
|
|
|
if uris.IsPublicKeyPath(requestURL) {
|
2021-10-24 11:57:39 +02:00
|
|
|
// if it's a public key path, we don't need to authenticate but we'll only serve the bare minimum user profile needed for the public key
|
|
|
|
requestedPerson, err = p.tc.AccountToASMinimal(ctx, requestedAccount)
|
|
|
|
if err != nil {
|
|
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
|
|
}
|
2022-04-15 14:33:01 +02:00
|
|
|
} else {
|
|
|
|
// if it's any other path, we want to fully authenticate the request before we serve any data, and then we can serve a more complete profile
|
2022-04-26 18:10:11 +02:00
|
|
|
requestingAccountURI, errWithCode := p.federator.AuthenticateFederatedRequest(ctx, requestedUsername)
|
|
|
|
if errWithCode != nil {
|
|
|
|
return nil, errWithCode
|
2021-10-24 11:57:39 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
// if we're not already handshaking/dereferencing a remote account, dereference it now
|
2023-02-03 21:03:05 +01:00
|
|
|
if !p.federator.Handshaking(requestedUsername, requestingAccountURI) {
|
|
|
|
requestingAccount, err := p.federator.GetAccountByURI(
|
2023-05-09 12:16:10 +02:00
|
|
|
gtscontext.SetFastFail(ctx), requestedUsername, requestingAccountURI,
|
2023-02-03 21:03:05 +01:00
|
|
|
)
|
2021-10-24 11:57:39 +02:00
|
|
|
if err != nil {
|
2022-06-08 20:38:03 +02:00
|
|
|
return nil, gtserror.NewErrorUnauthorized(err)
|
2021-10-24 11:57:39 +02:00
|
|
|
}
|
|
|
|
|
[performance] refactoring + add fave / follow / request / visibility caching (#1607)
* refactor visibility checking, add caching for visibility
* invalidate visibility cache items on account / status deletes
* fix requester ID passed to visibility cache nil ptr
* de-interface caches, fix home / public timeline caching + visibility
* finish adding code comments for visibility filter
* fix angry goconst linter warnings
* actually finish adding filter visibility code comments for timeline functions
* move home timeline status author check to after visibility
* remove now-unused code
* add more code comments
* add TODO code comment, update printed cache start names
* update printed cache names on stop
* start adding separate follow(request) delete db functions, add specific visibility cache tests
* add relationship type caching
* fix getting local account follows / followed-bys, other small codebase improvements
* simplify invalidation using cache hooks, add more GetAccountBy___() functions
* fix boosting to return 404 if not boostable but no error (to not leak status ID)
* remove dead code
* improved placement of cache invalidation
* update license headers
* add example follow, follow-request config entries
* add example visibility cache configuration to config file
* use specific PutFollowRequest() instead of just Put()
* add tests for all GetAccountBy()
* add GetBlockBy() tests
* update block to check primitive fields
* update and finish adding Get{Account,Block,Follow,FollowRequest}By() tests
* fix copy-pasted code
* update envparsing test
* whitespace
* fix bun struct tag
* add license header to gtscontext
* fix old license header
* improved error creation to not use fmt.Errorf() when not needed
* fix various rebase conflicts, fix account test
* remove commented-out code, fix-up mention caching
* fix mention select bun statement
* ensure mention target account populated, pass in context to customrenderer logging
* remove more uncommented code, fix typeutil test
* add statusfave database model caching
* add status fave cache configuration
* add status fave cache example config
* woops, catch missed error. nice catch linter!
* add back testrig panic on nil db
* update example configuration to match defaults, slight tweak to cache configuration defaults
* update envparsing test with new defaults
* fetch followingget to use the follow target account
* use accounnt.IsLocal() instead of empty domain check
* use constants for the cache visibility type check
* use bun.In() for notification type restriction in db query
* include replies when fetching PublicTimeline() (to account for single-author threads in Visibility{}.StatusPublicTimelineable())
* use bun query building for nested select statements to ensure working with postgres
* update public timeline future status checks to match visibility filter
* same as previous, for home timeline
* update public timeline tests to dynamically check for appropriate statuses
* migrate accounts to allow unique constraint on public_key
* provide minimal account with publicKey
---------
Signed-off-by: kim <grufwub@gmail.com>
Co-authored-by: tsmethurst <tobi.smethurst@protonmail.com>
2023-03-28 15:03:14 +02:00
|
|
|
blocked, err := p.state.DB.IsEitherBlocked(ctx, requestedAccount.ID, requestingAccount.ID)
|
2021-10-24 11:57:39 +02:00
|
|
|
if err != nil {
|
|
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
|
|
}
|
|
|
|
|
|
|
|
if blocked {
|
2022-06-08 20:38:03 +02:00
|
|
|
return nil, gtserror.NewErrorUnauthorized(fmt.Errorf("block exists between accounts %s and %s", requestedAccount.ID, requestingAccount.ID))
|
2021-10-24 11:57:39 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
requestedPerson, err = p.tc.AccountToAS(ctx, requestedAccount)
|
|
|
|
if err != nil {
|
|
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-05-09 12:16:10 +02:00
|
|
|
data, err := ap.Serialize(requestedPerson)
|
2021-10-24 11:57:39 +02:00
|
|
|
if err != nil {
|
|
|
|
return nil, gtserror.NewErrorInternalError(err)
|
|
|
|
}
|
|
|
|
|
|
|
|
return data, nil
|
|
|
|
}
|