refactor: Fix errors in api/client/keys.rs

This commit is contained in:
Ginger
2026-04-10 14:26:31 -04:00
parent 267e1c5d65
commit 1ea9330df8
+44 -60
View File
@@ -5,7 +5,7 @@ use std::{
use axum::extract::State; use axum::extract::State;
use conduwuit::{ use conduwuit::{
Err, Error, Result, debug, debug_warn, err, Err, Result, debug, debug_warn, err,
result::NotFound, result::NotFound,
utils::{IterStream, stream::WidebandExt}, utils::{IterStream, stream::WidebandExt},
}; };
@@ -14,16 +14,14 @@ use futures::{StreamExt, stream::FuturesUnordered};
use ruma::{ use ruma::{
OneTimeKeyAlgorithm, OwnedDeviceId, OwnedUserId, UserId, OneTimeKeyAlgorithm, OwnedDeviceId, OwnedUserId, UserId,
api::{ api::{
client::{ client::keys::{
error::ErrorKind, claim_keys, get_key_changes, get_keys, upload_keys,
keys::{ upload_signatures::{self},
claim_keys, get_key_changes, get_keys, upload_keys, upload_signing_keys,
upload_signatures::{self},
upload_signing_keys,
},
}, },
federation, federation,
}, },
assign,
encryption::CrossSigningKey, encryption::CrossSigningKey,
serde::Raw, serde::Raw,
}; };
@@ -115,12 +113,12 @@ pub(crate) async fn upload_keys_route(
} }
} }
Ok(upload_keys::v3::Response { let one_time_key_counts = services
one_time_key_counts: services .users
.users .count_one_time_keys(sender_user, sender_device)
.count_one_time_keys(sender_user, sender_device) .await;
.await,
}) Ok(upload_keys::v3::Response::new(one_time_key_counts))
} }
/// # `POST /_matrix/client/r0/keys/query` /// # `POST /_matrix/client/r0/keys/query`
@@ -214,7 +212,7 @@ pub(crate) async fn upload_signing_keys_route(
) )
.await?; .await?;
Ok(upload_signing_keys::v3::Response {}) Ok(upload_signing_keys::v3::Response::new())
} }
async fn check_for_new_keys( async fn check_for_new_keys(
@@ -226,8 +224,7 @@ async fn check_for_new_keys(
) -> Result<Option<upload_signing_keys::v3::Response>> { ) -> Result<Option<upload_signing_keys::v3::Response>> {
debug!("checking for existing keys"); debug!("checking for existing keys");
let mut empty = false; let mut empty = false;
if let Some(master_signing_key) = master_signing_key { if master_signing_key.is_some() {
let (key, value) = parse_master_key(user_id, master_signing_key)?;
let result = services let result = services
.users .users
.get_master_key(None, user_id, &|_| true) .get_master_key(None, user_id, &|_| true)
@@ -235,16 +232,12 @@ async fn check_for_new_keys(
if result.is_not_found() { if result.is_not_found() {
empty = true; empty = true;
} else { } else {
let existing_master_key = result?; return Err!(Request(Forbidden(
let (existing_key, existing_value) = parse_master_key(user_id, &existing_master_key)?; "Tried to change an existing master key, UIA required"
if existing_key != key || existing_value != value { )));
return Err!(Request(Forbidden(
"Tried to change an existing master key, UIA required"
)));
}
} }
} }
if let Some(user_signing_key) = user_signing_key { if user_signing_key.is_some() {
let key = services.users.get_user_signing_key(user_id).await; let key = services.users.get_user_signing_key(user_id).await;
if key.is_not_found() && !empty { if key.is_not_found() && !empty {
return Err!(Request(Forbidden( return Err!(Request(Forbidden(
@@ -252,15 +245,12 @@ async fn check_for_new_keys(
))); )));
} }
if !key.is_not_found() { if !key.is_not_found() {
let existing_signing_key = key?.deserialize()?; return Err!(Request(Forbidden(
if existing_signing_key != user_signing_key.deserialize()? { "Tried to change an existing user signing key, UIA required"
return Err!(Request(Forbidden( )));
"Tried to change an existing user signing key, UIA required"
)));
}
} }
} }
if let Some(self_signing_key) = self_signing_key { if self_signing_key.is_some() {
let key = services let key = services
.users .users
.get_self_signing_key(None, user_id, &|_| true) .get_self_signing_key(None, user_id, &|_| true)
@@ -272,19 +262,16 @@ async fn check_for_new_keys(
))); )));
} }
if !key.is_not_found() { if !key.is_not_found() {
let existing_signing_key = key?.deserialize()?; return Err!(Request(Forbidden(
if existing_signing_key != self_signing_key.deserialize()? { "Tried to update an existing self signing key, UIA required"
return Err!(Request(Forbidden( )));
"Tried to update an existing self signing key, UIA required"
)));
}
} }
} }
if empty { if empty {
return Ok(None); return Ok(None);
} }
Ok(Some(upload_signing_keys::v3::Response {})) Ok(Some(upload_signing_keys::v3::Response::new()))
} }
/// # `POST /_matrix/client/r0/keys/signatures/upload` /// # `POST /_matrix/client/r0/keys/signatures/upload`
@@ -343,7 +330,7 @@ pub(crate) async fn upload_signatures_route(
} }
} }
Ok(upload_signatures::v3::Response { failures: BTreeMap::new() }) Ok(upload_signatures::v3::Response::new())
} }
/// # `POST /_matrix/client/r0/keys/changes` /// # `POST /_matrix/client/r0/keys/changes`
@@ -363,18 +350,17 @@ pub(crate) async fn get_key_changes_route(
let from = body let from = body
.from .from
.parse() .parse()
.map_err(|_| Error::BadRequest(ErrorKind::InvalidParam, "Invalid `from`."))?; .map_err(|_| err!(Request(InvalidParam("Invalid `from`."))))?;
let to = body let to = body
.to .to
.parse() .parse()
.map_err(|_| Error::BadRequest(ErrorKind::InvalidParam, "Invalid `to`."))?; .map_err(|_| err!(Request(InvalidParam("Invalid `to`."))))?;
device_list_updates.extend( device_list_updates.extend(
services services
.users .users
.keys_changed(sender_user, Some(from), Some(to)) .keys_changed(sender_user, Some(from), Some(to))
.map(ToOwned::to_owned)
.collect::<Vec<_>>() .collect::<Vec<_>>()
.await, .await,
); );
@@ -385,18 +371,18 @@ pub(crate) async fn get_key_changes_route(
device_list_updates.extend( device_list_updates.extend(
services services
.users .users
.room_keys_changed(room_id, Some(from), Some(to)) .room_keys_changed(&room_id, Some(from), Some(to))
.map(|(user_id, _)| user_id) .map(|(user_id, _)| user_id)
.map(ToOwned::to_owned)
.collect::<Vec<_>>() .collect::<Vec<_>>()
.await, .await,
); );
} }
Ok(get_key_changes::v3::Response { Ok(get_key_changes::v3::Response::new(
changed: device_list_updates.into_iter().collect(), device_list_updates.into_iter().collect(),
left: Vec::new(), // TODO // TODO
}) vec![],
))
} }
pub(crate) async fn get_keys_helper<F>( pub(crate) async fn get_keys_helper<F>(
@@ -433,10 +419,10 @@ where
let mut devices = services.users.all_device_ids(user_id).boxed(); let mut devices = services.users.all_device_ids(user_id).boxed();
while let Some(device_id) = devices.next().await { while let Some(device_id) = devices.next().await {
if let Ok(mut keys) = services.users.get_device_keys(user_id, device_id).await { if let Ok(mut keys) = services.users.get_device_keys(user_id, &device_id).await {
let metadata = services let metadata = services
.users .users
.get_device_metadata(user_id, device_id) .get_device_metadata(user_id, &device_id)
.await .await
.map_err(|_| { .map_err(|_| {
err!(Database("all_device_keys contained nonexistent device.")) err!(Database("all_device_keys contained nonexistent device."))
@@ -506,8 +492,7 @@ where
device_keys_input_fed.insert(user_id.to_owned(), keys.clone()); device_keys_input_fed.insert(user_id.to_owned(), keys.clone());
} }
let request = let request = federation::keys::get_keys::v1::Request::new(device_keys_input_fed);
federation::keys::get_keys::v1::Request { device_keys: device_keys_input_fed };
let response = tokio::time::timeout( let response = tokio::time::timeout(
timeout, timeout,
services.sending.send_federation_request(server, request), services.sending.send_federation_request(server, request),
@@ -561,13 +546,13 @@ where
} }
} }
Ok(get_keys::v3::Response { Ok(assign!(get_keys::v3::Response::new(), {
failures, failures,
device_keys, device_keys,
master_keys, master_keys,
self_signing_keys, self_signing_keys,
user_signing_keys, user_signing_keys,
}) }))
} }
fn add_unsigned_device_display_name( fn add_unsigned_device_display_name(
@@ -576,7 +561,8 @@ fn add_unsigned_device_display_name(
include_display_names: bool, include_display_names: bool,
) -> serde_json::Result<()> { ) -> serde_json::Result<()> {
if let Some(display_name) = metadata.display_name { if let Some(display_name) = metadata.display_name {
let mut object = keys.deserialize_as::<serde_json::Map<String, serde_json::Value>>()?; let mut object =
keys.deserialize_as_unchecked::<serde_json::Map<String, serde_json::Value>>()?;
let unsigned = object.entry("unsigned").or_insert_with(|| json!({})); let unsigned = object.entry("unsigned").or_insert_with(|| json!({}));
if let serde_json::Value::Object(unsigned_object) = unsigned { if let serde_json::Value::Object(unsigned_object) = unsigned {
@@ -642,9 +628,7 @@ pub(crate) async fn claim_keys_helper(
timeout, timeout,
services.sending.send_federation_request( services.sending.send_federation_request(
server, server,
federation::keys::claim_keys::v1::Request { federation::keys::claim_keys::v1::Request::new(one_time_keys_input_fed),
one_time_keys: one_time_keys_input_fed,
},
), ),
) )
.await .await
@@ -667,5 +651,5 @@ pub(crate) async fn claim_keys_helper(
} }
} }
Ok(claim_keys::v3::Response { failures, one_time_keys }) Ok(assign!(claim_keys::v3::Response::new(one_time_keys), { failures: failures }))
} }