mirror of
https://forgejo.ellis.link/continuwuation/continuwuity.git
synced 2026-05-26 20:49:55 +00:00
Compare commits
37 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| c376fce725 | |||
| da36604163 | |||
| fa74747ab1 | |||
| 07199f9f17 | |||
| 2f38de16f6 | |||
| 5c162fdb3a | |||
| 9e60bfa365 | |||
| 5b959fca1c | |||
| a6d325440c | |||
| 6246c11265 | |||
| 852bf99d34 | |||
| d2cc2fb19b | |||
| c2449bde74 | |||
| c89aa4503e | |||
| f71cfd18a5 | |||
| 9a27bccc8e | |||
| fb66356154 | |||
| 3b8b9d4b5c | |||
| b20000fcf3 | |||
| fe1efe0787 | |||
| 08213038a9 | |||
| ad2118e371 | |||
| be743ec70a | |||
| eba5f16e09 | |||
| 5fb49d8668 | |||
| 19e895b57f | |||
| 5932efa92d | |||
| 1afa8413a2 | |||
| 31cc888119 | |||
| 1ad60df7a6 | |||
| afd115eedc | |||
| 1444f43fa7 | |||
| 91d07a9bfc | |||
| c85b5bb122 | |||
| 99aadff38e | |||
| d2d996d306 | |||
| 26fa73841b |
@@ -54,7 +54,7 @@ runs:
|
|||||||
run: mv /tmp/binaries/sbin/conduwuit /tmp/binaries/conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
run: mv /tmp/binaries/sbin/conduwuit /tmp/binaries/conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
||||||
|
|
||||||
- name: Upload binary artifact
|
- name: Upload binary artifact
|
||||||
uses: forgejo/upload-artifact@v3
|
uses: forgejo/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
name: conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
||||||
path: /tmp/binaries/conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
path: /tmp/binaries/conduwuit${{ inputs.cpu_suffix }}-${{ inputs.slug }}${{ inputs.artifact_suffix }}
|
||||||
@@ -62,7 +62,7 @@ runs:
|
|||||||
|
|
||||||
- name: Upload digest
|
- name: Upload digest
|
||||||
if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }}
|
if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }}
|
||||||
uses: forgejo/upload-artifact@v3
|
uses: forgejo/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: digests${{ inputs.digest_suffix }}-${{ inputs.slug }}${{ inputs.cpu_suffix }}
|
name: digests${{ inputs.digest_suffix }}-${{ inputs.slug }}${{ inputs.cpu_suffix }}
|
||||||
path: /tmp/digests/*
|
path: /tmp/digests/*
|
||||||
|
|||||||
@@ -126,7 +126,7 @@ jobs:
|
|||||||
[ -f /etc/conduwuit/conduwuit.toml ] && echo "✅ Config file installed"
|
[ -f /etc/conduwuit/conduwuit.toml ] && echo "✅ Config file installed"
|
||||||
|
|
||||||
- name: Upload deb artifact
|
- name: Upload deb artifact
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v5
|
||||||
with:
|
with:
|
||||||
name: continuwuity-${{ steps.debian-version.outputs.distribution }}
|
name: continuwuity-${{ steps.debian-version.outputs.distribution }}
|
||||||
path: ${{ steps.cargo-deb.outputs.path }}
|
path: ${{ steps.cargo-deb.outputs.path }}
|
||||||
|
|||||||
@@ -238,13 +238,13 @@ jobs:
|
|||||||
cp $BIN_RPM upload-bin/
|
cp $BIN_RPM upload-bin/
|
||||||
|
|
||||||
- name: Upload binary RPM
|
- name: Upload binary RPM
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v5
|
||||||
with:
|
with:
|
||||||
name: continuwuity
|
name: continuwuity
|
||||||
path: upload-bin/
|
path: upload-bin/
|
||||||
|
|
||||||
- name: Upload debug RPM artifact
|
- name: Upload debug RPM artifact
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v5
|
||||||
with:
|
with:
|
||||||
name: continuwuity-debug
|
name: continuwuity-debug
|
||||||
path: artifacts/*debuginfo*.rpm
|
path: artifacts/*debuginfo*.rpm
|
||||||
|
|||||||
@@ -109,7 +109,7 @@ jobs:
|
|||||||
cat ./element-web/webapp/config.json
|
cat ./element-web/webapp/config.json
|
||||||
|
|
||||||
- name: 📤 Upload Artifact
|
- name: 📤 Upload Artifact
|
||||||
uses: forgejo/upload-artifact@v3
|
uses: forgejo/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: element-web
|
name: element-web
|
||||||
path: ./element-web/webapp/
|
path: ./element-web/webapp/
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
{"m.homeserver":{"base_url": "https://matrix.continuwuity.org"},"org.matrix.msc3575.proxy":{"url": "https://matrix.continuwuity.org"},"org.matrix.msc4143.rtc_foci":[{"type":"livekit","livekit_service_url":"https://livekit.ellis.link"}]}
|
{"m.homeserver":{"base_url": "https://matrix.continuwuity.org"},"org.matrix.msc3575.proxy":{"url": "https://matrix.continuwuity.org"}}
|
||||||
|
|||||||
@@ -44,7 +44,6 @@ use service::{
|
|||||||
rooms::{
|
rooms::{
|
||||||
state::RoomMutexGuard,
|
state::RoomMutexGuard,
|
||||||
state_compressor::{CompressedState, HashSetCompressStateEvent},
|
state_compressor::{CompressedState, HashSetCompressStateEvent},
|
||||||
timeline::pdu_fits,
|
|
||||||
},
|
},
|
||||||
};
|
};
|
||||||
|
|
||||||
@@ -574,13 +573,6 @@ async fn join_room_by_id_helper_remote(
|
|||||||
return state;
|
return state;
|
||||||
},
|
},
|
||||||
};
|
};
|
||||||
if !pdu_fits(&mut value.clone()) {
|
|
||||||
warn!(
|
|
||||||
"dropping incoming PDU {event_id} in room {room_id} from room join because \
|
|
||||||
it exceeds 65535 bytes or is otherwise too large."
|
|
||||||
);
|
|
||||||
return state;
|
|
||||||
}
|
|
||||||
services.rooms.outlier.add_pdu_outlier(&event_id, &value);
|
services.rooms.outlier.add_pdu_outlier(&event_id, &value);
|
||||||
if let Some(state_key) = &pdu.state_key {
|
if let Some(state_key) = &pdu.state_key {
|
||||||
let shortstatekey = services
|
let shortstatekey = services
|
||||||
|
|||||||
@@ -1,5 +1,4 @@
|
|||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{
|
use conduwuit::{
|
||||||
Err, Result, at,
|
Err, Result, at,
|
||||||
matrix::{
|
matrix::{
|
||||||
@@ -71,7 +70,6 @@ const LIMIT_DEFAULT: usize = 10;
|
|||||||
/// where the user was joined, depending on `history_visibility`)
|
/// where the user was joined, depending on `history_visibility`)
|
||||||
pub(crate) async fn get_message_events_route(
|
pub(crate) async fn get_message_events_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<get_message_events::v3::Request>,
|
body: Ruma<get_message_events::v3::Request>,
|
||||||
) -> Result<get_message_events::v3::Response> {
|
) -> Result<get_message_events::v3::Response> {
|
||||||
debug_assert!(IGNORED_MESSAGE_TYPES.is_sorted(), "IGNORED_MESSAGE_TYPES is not sorted");
|
debug_assert!(IGNORED_MESSAGE_TYPES.is_sorted(), "IGNORED_MESSAGE_TYPES is not sorted");
|
||||||
@@ -80,11 +78,6 @@ pub(crate) async fn get_message_events_route(
|
|||||||
let room_id = &body.room_id;
|
let room_id = &body.room_id;
|
||||||
let filter = &body.filter;
|
let filter = &body.filter;
|
||||||
|
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, sender_device, client_ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
if !services.rooms.metadata.exists(room_id).await {
|
if !services.rooms.metadata.exists(room_id).await {
|
||||||
return Err!(Request(Forbidden("Room does not exist to this server")));
|
return Err!(Request(Forbidden("Room does not exist to this server")));
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,7 +1,6 @@
|
|||||||
use std::collections::BTreeMap;
|
use std::collections::BTreeMap;
|
||||||
|
|
||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{Err, PduCount, Result, err};
|
use conduwuit::{Err, PduCount, Result, err};
|
||||||
use ruma::{
|
use ruma::{
|
||||||
MilliSecondsSinceUnixEpoch,
|
MilliSecondsSinceUnixEpoch,
|
||||||
@@ -119,14 +118,9 @@ pub(crate) async fn set_read_marker_route(
|
|||||||
/// Sets private read marker and public read receipt EDU.
|
/// Sets private read marker and public read receipt EDU.
|
||||||
pub(crate) async fn create_receipt_route(
|
pub(crate) async fn create_receipt_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<create_receipt::v3::Request>,
|
body: Ruma<create_receipt::v3::Request>,
|
||||||
) -> Result<create_receipt::v3::Response> {
|
) -> Result<create_receipt::v3::Response> {
|
||||||
let sender_user = body.sender_user();
|
let sender_user = body.sender_user();
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, body.sender_device.as_deref(), client_ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
if matches!(
|
if matches!(
|
||||||
&body.receipt_type,
|
&body.receipt_type,
|
||||||
|
|||||||
@@ -1,5 +1,4 @@
|
|||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{Err, Result, matrix::pdu::PduBuilder};
|
use conduwuit::{Err, Result, matrix::pdu::PduBuilder};
|
||||||
use ruma::{
|
use ruma::{
|
||||||
api::client::redact::redact_event, events::room::redaction::RoomRedactionEventContent,
|
api::client::redact::redact_event, events::room::redaction::RoomRedactionEventContent,
|
||||||
@@ -14,14 +13,9 @@ use crate::Ruma;
|
|||||||
/// - TODO: Handle txn id
|
/// - TODO: Handle txn id
|
||||||
pub(crate) async fn redact_event_route(
|
pub(crate) async fn redact_event_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<redact_event::v3::Request>,
|
body: Ruma<redact_event::v3::Request>,
|
||||||
) -> Result<redact_event::v3::Response> {
|
) -> Result<redact_event::v3::Response> {
|
||||||
let sender_user = body.sender_user();
|
let sender_user = body.sender_user();
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, body.sender_device.as_deref(), client_ip)
|
|
||||||
.await;
|
|
||||||
let body = &body.body;
|
let body = &body.body;
|
||||||
if services.users.is_suspended(sender_user).await? {
|
if services.users.is_suspended(sender_user).await? {
|
||||||
// TODO: Users can redact their own messages while suspended
|
// TODO: Users can redact their own messages while suspended
|
||||||
|
|||||||
@@ -1,7 +1,6 @@
|
|||||||
use std::collections::BTreeMap;
|
use std::collections::BTreeMap;
|
||||||
|
|
||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{Err, Result, err, matrix::pdu::PduBuilder, utils};
|
use conduwuit::{Err, Result, err, matrix::pdu::PduBuilder, utils};
|
||||||
use ruma::{api::client::message::send_message_event, events::MessageLikeEventType};
|
use ruma::{api::client::message::send_message_event, events::MessageLikeEventType};
|
||||||
use serde_json::from_str;
|
use serde_json::from_str;
|
||||||
@@ -19,7 +18,6 @@ use crate::Ruma;
|
|||||||
/// allowed
|
/// allowed
|
||||||
pub(crate) async fn send_message_event_route(
|
pub(crate) async fn send_message_event_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<send_message_event::v3::Request>,
|
body: Ruma<send_message_event::v3::Request>,
|
||||||
) -> Result<send_message_event::v3::Response> {
|
) -> Result<send_message_event::v3::Response> {
|
||||||
let sender_user = body.sender_user();
|
let sender_user = body.sender_user();
|
||||||
@@ -29,11 +27,6 @@ pub(crate) async fn send_message_event_route(
|
|||||||
return Err!(Request(UserSuspended("You cannot perform this action while suspended.")));
|
return Err!(Request(UserSuspended("You cannot perform this action while suspended.")));
|
||||||
}
|
}
|
||||||
|
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, body.sender_device.as_deref(), client_ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
// Forbid m.room.encrypted if encryption is disabled
|
// Forbid m.room.encrypted if encryption is disabled
|
||||||
if MessageLikeEventType::RoomEncrypted == body.event_type && !services.config.allow_encryption
|
if MessageLikeEventType::RoomEncrypted == body.event_type && !services.config.allow_encryption
|
||||||
{
|
{
|
||||||
|
|||||||
+3
-10
@@ -1,5 +1,4 @@
|
|||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{
|
use conduwuit::{
|
||||||
Err, Result, err,
|
Err, Result, err,
|
||||||
matrix::{Event, pdu::PduBuilder},
|
matrix::{Event, pdu::PduBuilder},
|
||||||
@@ -8,7 +7,7 @@ use conduwuit::{
|
|||||||
use conduwuit_service::Services;
|
use conduwuit_service::Services;
|
||||||
use futures::{FutureExt, TryStreamExt};
|
use futures::{FutureExt, TryStreamExt};
|
||||||
use ruma::{
|
use ruma::{
|
||||||
MilliSecondsSinceUnixEpoch, OwnedEventId, RoomId, UserId,
|
OwnedEventId, RoomId, UserId,
|
||||||
api::client::state::{get_state_events, get_state_events_for_key, send_state_event},
|
api::client::state::{get_state_events, get_state_events_for_key, send_state_event},
|
||||||
events::{
|
events::{
|
||||||
AnyStateEventContent, StateEventType,
|
AnyStateEventContent, StateEventType,
|
||||||
@@ -31,14 +30,9 @@ use crate::{Ruma, RumaResponse};
|
|||||||
/// Sends a state event into the room.
|
/// Sends a state event into the room.
|
||||||
pub(crate) async fn send_state_event_for_key_route(
|
pub(crate) async fn send_state_event_for_key_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(ip): InsecureClientIp,
|
|
||||||
body: Ruma<send_state_event::v3::Request>,
|
body: Ruma<send_state_event::v3::Request>,
|
||||||
) -> Result<send_state_event::v3::Response> {
|
) -> Result<send_state_event::v3::Response> {
|
||||||
let sender_user = body.sender_user();
|
let sender_user = body.sender_user();
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, body.sender_device.as_deref(), ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
if services.users.is_suspended(sender_user).await? {
|
if services.users.is_suspended(sender_user).await? {
|
||||||
return Err!(Request(UserSuspended("You cannot perform this action while suspended.")));
|
return Err!(Request(UserSuspended("You cannot perform this action while suspended.")));
|
||||||
@@ -67,10 +61,9 @@ pub(crate) async fn send_state_event_for_key_route(
|
|||||||
/// Sends a state event into the room.
|
/// Sends a state event into the room.
|
||||||
pub(crate) async fn send_state_event_for_empty_key_route(
|
pub(crate) async fn send_state_event_for_empty_key_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(ip): InsecureClientIp,
|
|
||||||
body: Ruma<send_state_event::v3::Request>,
|
body: Ruma<send_state_event::v3::Request>,
|
||||||
) -> Result<RumaResponse<send_state_event::v3::Response>> {
|
) -> Result<RumaResponse<send_state_event::v3::Response>> {
|
||||||
send_state_event_for_key_route(State(services), InsecureClientIp(ip), body)
|
send_state_event_for_key_route(State(services), body)
|
||||||
.boxed()
|
.boxed()
|
||||||
.await
|
.await
|
||||||
.map(RumaResponse)
|
.map(RumaResponse)
|
||||||
@@ -192,7 +185,7 @@ async fn send_state_event_for_key_helper(
|
|||||||
event_type: &StateEventType,
|
event_type: &StateEventType,
|
||||||
json: &Raw<AnyStateEventContent>,
|
json: &Raw<AnyStateEventContent>,
|
||||||
state_key: &str,
|
state_key: &str,
|
||||||
timestamp: Option<MilliSecondsSinceUnixEpoch>,
|
timestamp: Option<ruma::MilliSecondsSinceUnixEpoch>,
|
||||||
) -> Result<OwnedEventId> {
|
) -> Result<OwnedEventId> {
|
||||||
allowed_to_send_state_event(services, room_id, event_type, state_key, json).await?;
|
allowed_to_send_state_event(services, room_id, event_type, state_key, json).await?;
|
||||||
let state_lock = services.rooms.state.mutex.lock(room_id).await;
|
let state_lock = services.rooms.state.mutex.lock(room_id).await;
|
||||||
|
|||||||
@@ -9,7 +9,6 @@ use std::{
|
|||||||
};
|
};
|
||||||
|
|
||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{
|
use conduwuit::{
|
||||||
Result, extract_variant,
|
Result, extract_variant,
|
||||||
utils::{
|
utils::{
|
||||||
@@ -181,7 +180,6 @@ type PresenceUpdates = HashMap<OwnedUserId, PresenceEventContent>;
|
|||||||
)]
|
)]
|
||||||
pub(crate) async fn sync_events_route(
|
pub(crate) async fn sync_events_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<sync_events::v3::Request>,
|
body: Ruma<sync_events::v3::Request>,
|
||||||
) -> Result<sync_events::v3::Response, RumaResponse<UiaaResponse>> {
|
) -> Result<sync_events::v3::Response, RumaResponse<UiaaResponse>> {
|
||||||
let (sender_user, sender_device) = body.sender();
|
let (sender_user, sender_device) = body.sender();
|
||||||
@@ -194,12 +192,6 @@ pub(crate) async fn sync_events_route(
|
|||||||
.await?;
|
.await?;
|
||||||
}
|
}
|
||||||
|
|
||||||
// Increment the "device last active" metadata
|
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, Some(sender_device), client_ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
// Setup watchers, so if there's no response, we can wait for them
|
// Setup watchers, so if there's no response, we can wait for them
|
||||||
let watcher = services.sync.watch(sender_user, sender_device);
|
let watcher = services.sync.watch(sender_user, sender_device);
|
||||||
|
|
||||||
|
|||||||
@@ -6,7 +6,6 @@ use std::{
|
|||||||
};
|
};
|
||||||
|
|
||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{
|
use conduwuit::{
|
||||||
Err, Error, Result, at, error, extract_variant, is_equal_to,
|
Err, Error, Result, at, error, extract_variant, is_equal_to,
|
||||||
matrix::{Event, TypeStateKey, pdu::PduCount},
|
matrix::{Event, TypeStateKey, pdu::PduCount},
|
||||||
@@ -62,18 +61,11 @@ type KnownRooms = BTreeMap<String, BTreeMap<OwnedRoomId, u64>>;
|
|||||||
/// [MSC4186]: https://github.com/matrix-org/matrix-spec-proposals/pull/4186
|
/// [MSC4186]: https://github.com/matrix-org/matrix-spec-proposals/pull/4186
|
||||||
pub(crate) async fn sync_events_v5_route(
|
pub(crate) async fn sync_events_v5_route(
|
||||||
State(ref services): State<crate::State>,
|
State(ref services): State<crate::State>,
|
||||||
InsecureClientIp(client_ip): InsecureClientIp,
|
|
||||||
body: Ruma<sync_events::v5::Request>,
|
body: Ruma<sync_events::v5::Request>,
|
||||||
) -> Result<sync_events::v5::Response> {
|
) -> Result<sync_events::v5::Response> {
|
||||||
debug_assert!(DEFAULT_BUMP_TYPES.is_sorted(), "DEFAULT_BUMP_TYPES is not sorted");
|
debug_assert!(DEFAULT_BUMP_TYPES.is_sorted(), "DEFAULT_BUMP_TYPES is not sorted");
|
||||||
let sender_user = body.sender_user.as_ref().expect("user is authenticated");
|
let sender_user = body.sender_user.as_ref().expect("user is authenticated");
|
||||||
let sender_device = body.sender_device.as_ref().expect("user is authenticated");
|
let sender_device = body.sender_device.as_ref().expect("user is authenticated");
|
||||||
|
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, Some(sender_device), client_ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
let mut body = body.body;
|
let mut body = body.body;
|
||||||
|
|
||||||
// Setup watchers, so if there's no response, we can wait for them
|
// Setup watchers, so if there's no response, we can wait for them
|
||||||
|
|||||||
@@ -1,5 +1,4 @@
|
|||||||
use axum::extract::State;
|
use axum::extract::State;
|
||||||
use axum_client_ip::InsecureClientIp;
|
|
||||||
use conduwuit::{Err, Result, utils, utils::math::Tried};
|
use conduwuit::{Err, Result, utils, utils::math::Tried};
|
||||||
use ruma::api::client::typing::create_typing_event;
|
use ruma::api::client::typing::create_typing_event;
|
||||||
|
|
||||||
@@ -10,15 +9,10 @@ use crate::Ruma;
|
|||||||
/// Sets the typing state of the sender user.
|
/// Sets the typing state of the sender user.
|
||||||
pub(crate) async fn create_typing_event_route(
|
pub(crate) async fn create_typing_event_route(
|
||||||
State(services): State<crate::State>,
|
State(services): State<crate::State>,
|
||||||
InsecureClientIp(ip): InsecureClientIp,
|
|
||||||
body: Ruma<create_typing_event::v3::Request>,
|
body: Ruma<create_typing_event::v3::Request>,
|
||||||
) -> Result<create_typing_event::v3::Response> {
|
) -> Result<create_typing_event::v3::Response> {
|
||||||
use create_typing_event::v3::Typing;
|
use create_typing_event::v3::Typing;
|
||||||
let sender_user = body.sender_user();
|
let sender_user = body.sender_user();
|
||||||
services
|
|
||||||
.users
|
|
||||||
.update_device_last_seen(sender_user, body.sender_device.as_deref(), ip)
|
|
||||||
.await;
|
|
||||||
|
|
||||||
if sender_user != body.user_id && body.appservice_info.is_none() {
|
if sender_user != body.user_id && body.appservice_info.is_none() {
|
||||||
return Err!(Request(Forbidden("You cannot update typing status of other users.")));
|
return Err!(Request(Forbidden("You cannot update typing status of other users.")));
|
||||||
|
|||||||
@@ -177,6 +177,11 @@ where
|
|||||||
|
|
||||||
// [synapse] do_sig_check check the event has valid signatures for member events
|
// [synapse] do_sig_check check the event has valid signatures for member events
|
||||||
|
|
||||||
|
// TODO do_size_check is false when called by `iterative_auth_check`
|
||||||
|
// do_size_check is also mostly accomplished by ruma with the exception of
|
||||||
|
// checking event_type, state_key, and json are below a certain size (255 and
|
||||||
|
// 65_536 respectively)
|
||||||
|
|
||||||
let sender = incoming_event.sender();
|
let sender = incoming_event.sender();
|
||||||
|
|
||||||
// Implementation of https://spec.matrix.org/latest/rooms/v1/#authorization-rules
|
// Implementation of https://spec.matrix.org/latest/rooms/v1/#authorization-rules
|
||||||
|
|||||||
@@ -31,13 +31,12 @@ impl crate::Service for Service {
|
|||||||
|
|
||||||
let turn_secret = config.turn_secret_file.as_ref().map_or_else(
|
let turn_secret = config.turn_secret_file.as_ref().map_or_else(
|
||||||
|| config.turn_secret.clone(),
|
|| config.turn_secret.clone(),
|
||||||
|path| match std::fs::read_to_string(path) {
|
|path| {
|
||||||
| Ok(secret) => secret.trim().to_owned(),
|
std::fs::read_to_string(path).unwrap_or_else(|e| {
|
||||||
| Err(e) => {
|
|
||||||
error!("Failed to read the TURN secret file: {e}");
|
error!("Failed to read the TURN secret file: {e}");
|
||||||
|
|
||||||
config.turn_secret.clone()
|
config.turn_secret.clone()
|
||||||
},
|
})
|
||||||
},
|
},
|
||||||
);
|
);
|
||||||
|
|
||||||
@@ -50,7 +49,7 @@ impl crate::Service for Service {
|
|||||||
return config.registration_token.clone();
|
return config.registration_token.clone();
|
||||||
};
|
};
|
||||||
|
|
||||||
Some(token.trim().to_owned())
|
Some(token)
|
||||||
},
|
},
|
||||||
);
|
);
|
||||||
|
|
||||||
|
|||||||
+16
-24
@@ -590,10 +590,6 @@ async fn fix_readreceiptid_readreceipt_duplicates(services: &Services) -> Result
|
|||||||
|
|
||||||
const FIXED_CORRUPT_MSC4133_FIELDS_MARKER: &[u8] = b"fix_corrupt_msc4133_fields";
|
const FIXED_CORRUPT_MSC4133_FIELDS_MARKER: &[u8] = b"fix_corrupt_msc4133_fields";
|
||||||
async fn fix_corrupt_msc4133_fields(services: &Services) -> Result {
|
async fn fix_corrupt_msc4133_fields(services: &Services) -> Result {
|
||||||
// Due to an old bug, some conduwuit databases have `us.cloke.msc4175.tz` user
|
|
||||||
// profile fields with raw strings instead of quoted JSON ones.
|
|
||||||
// This migration fixes that.
|
|
||||||
|
|
||||||
use serde_json::{Value, from_slice};
|
use serde_json::{Value, from_slice};
|
||||||
type KeyVal<'a> = ((OwnedUserId, String), &'a [u8]);
|
type KeyVal<'a> = ((OwnedUserId, String), &'a [u8]);
|
||||||
|
|
||||||
@@ -610,28 +606,24 @@ async fn fix_corrupt_msc4133_fields(services: &Services) -> Result {
|
|||||||
async |(mut total, mut fixed),
|
async |(mut total, mut fixed),
|
||||||
((user, key), value): KeyVal<'_>|
|
((user, key), value): KeyVal<'_>|
|
||||||
-> Result<(usize, usize)> {
|
-> Result<(usize, usize)> {
|
||||||
match from_slice::<Value>(value) {
|
if let Err(error) = from_slice::<Value>(value) {
|
||||||
// corrupted timezone field
|
// Due to an old bug, some conduwuit databases have `us.cloke.msc4175.tz` user
|
||||||
| Err(_) if key == "us.cloke.msc4175.tz" => {
|
// profile fields with raw strings instead of quoted JSON ones.
|
||||||
let new_value = Value::String(String::from_utf8(value.to_vec())?);
|
// This migration fixes that.
|
||||||
useridprofilekey_value.put((user, key), Json(new_value));
|
let new_value = if key == "us.cloke.msc4175.tz" {
|
||||||
fixed = fixed.saturating_add(1);
|
Value::String(String::from_utf8(value.to_vec())?)
|
||||||
},
|
} else {
|
||||||
// corrupted value for some other key
|
return Err!(
|
||||||
| Err(error) => {
|
"failed to deserialize msc4133 key {} of user {}: {}",
|
||||||
warn!(
|
key,
|
||||||
"deleting MSC4133 key {} for user {} due to deserialization \
|
user,
|
||||||
failure: {}",
|
error
|
||||||
key, user, error
|
|
||||||
);
|
);
|
||||||
useridprofilekey_value.del((user, key));
|
};
|
||||||
},
|
|
||||||
// other key with no issues
|
|
||||||
| Ok(_) => {
|
|
||||||
// do nothing
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
|
useridprofilekey_value.put((user, key), Json(new_value));
|
||||||
|
fixed = fixed.saturating_add(1);
|
||||||
|
}
|
||||||
total = total.saturating_add(1);
|
total = total.saturating_add(1);
|
||||||
|
|
||||||
Ok((total, fixed))
|
Ok((total, fixed))
|
||||||
|
|||||||
@@ -14,7 +14,7 @@ use futures::{
|
|||||||
use ruma::{CanonicalJsonValue, EventId, RoomId, ServerName, UserId, events::StateEventType};
|
use ruma::{CanonicalJsonValue, EventId, RoomId, ServerName, UserId, events::StateEventType};
|
||||||
use tracing::debug;
|
use tracing::debug;
|
||||||
|
|
||||||
use crate::rooms::timeline::{RawPduId, pdu_fits};
|
use crate::rooms::timeline::RawPduId;
|
||||||
|
|
||||||
/// When receiving an event one needs to:
|
/// When receiving an event one needs to:
|
||||||
/// 0. Check the server is in the room
|
/// 0. Check the server is in the room
|
||||||
@@ -62,13 +62,6 @@ pub async fn handle_incoming_pdu<'a>(
|
|||||||
if let Ok(pdu_id) = self.services.timeline.get_pdu_id(event_id).await {
|
if let Ok(pdu_id) = self.services.timeline.get_pdu_id(event_id).await {
|
||||||
return Ok(Some(pdu_id));
|
return Ok(Some(pdu_id));
|
||||||
}
|
}
|
||||||
if !pdu_fits(&mut value.clone()) {
|
|
||||||
warn!(
|
|
||||||
"dropping incoming PDU {event_id} in room {room_id} from {origin} because it \
|
|
||||||
exceeds 65535 bytes or is otherwise too large."
|
|
||||||
);
|
|
||||||
return Err!(Request(TooLarge("PDU is too large")));
|
|
||||||
}
|
|
||||||
|
|
||||||
// 1.1 Check the server is in the room
|
// 1.1 Check the server is in the room
|
||||||
let meta_exists = self.services.metadata.exists(room_id).map(Ok);
|
let meta_exists = self.services.metadata.exists(room_id).map(Ok);
|
||||||
|
|||||||
@@ -1,8 +1,7 @@
|
|||||||
use std::collections::{BTreeMap, HashMap, hash_map};
|
use std::collections::{BTreeMap, HashMap, hash_map};
|
||||||
|
|
||||||
use conduwuit::{
|
use conduwuit::{
|
||||||
Err, Event, PduEvent, Result, debug, debug_info, debug_warn, err, implement, state_res,
|
Err, Event, PduEvent, Result, debug, debug_info, debug_warn, err, implement, state_res, trace,
|
||||||
trace, warn,
|
|
||||||
};
|
};
|
||||||
use futures::future::ready;
|
use futures::future::ready;
|
||||||
use ruma::{
|
use ruma::{
|
||||||
@@ -11,7 +10,6 @@ use ruma::{
|
|||||||
};
|
};
|
||||||
|
|
||||||
use super::{check_room_id, get_room_version_id, to_room_version};
|
use super::{check_room_id, get_room_version_id, to_room_version};
|
||||||
use crate::rooms::timeline::pdu_fits;
|
|
||||||
|
|
||||||
#[implement(super::Service)]
|
#[implement(super::Service)]
|
||||||
#[allow(clippy::too_many_arguments)]
|
#[allow(clippy::too_many_arguments)]
|
||||||
@@ -27,13 +25,6 @@ pub(super) async fn handle_outlier_pdu<'a, Pdu>(
|
|||||||
where
|
where
|
||||||
Pdu: Event + Send + Sync,
|
Pdu: Event + Send + Sync,
|
||||||
{
|
{
|
||||||
if !pdu_fits(&mut value.clone()) {
|
|
||||||
warn!(
|
|
||||||
"dropping incoming PDU {event_id} in room {room_id} from {origin} because it \
|
|
||||||
exceeds 65535 bytes or is otherwise too large."
|
|
||||||
);
|
|
||||||
return Err!(Request(TooLarge("PDU is too large")));
|
|
||||||
}
|
|
||||||
// 1. Remove unsigned field
|
// 1. Remove unsigned field
|
||||||
value.remove("unsigned");
|
value.remove("unsigned");
|
||||||
|
|
||||||
|
|||||||
@@ -23,40 +23,6 @@ use serde_json::value::{RawValue, to_raw_value};
|
|||||||
|
|
||||||
use super::RoomMutexGuard;
|
use super::RoomMutexGuard;
|
||||||
|
|
||||||
pub fn pdu_fits(owned_obj: &mut CanonicalJsonObject) -> bool {
|
|
||||||
// room IDs, event IDs, senders, types, and state keys must all be <= 255 bytes
|
|
||||||
if let Some(CanonicalJsonValue::String(room_id)) = owned_obj.get("room_id") {
|
|
||||||
if room_id.len() > 255 {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if let Some(CanonicalJsonValue::String(event_id)) = owned_obj.get("event_id") {
|
|
||||||
if event_id.len() > 255 {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if let Some(CanonicalJsonValue::String(sender)) = owned_obj.get("sender") {
|
|
||||||
if sender.len() > 255 {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if let Some(CanonicalJsonValue::String(kind)) = owned_obj.get("type") {
|
|
||||||
if kind.len() > 255 {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if let Some(CanonicalJsonValue::String(state_key)) = owned_obj.get("state_key") {
|
|
||||||
if state_key.len() > 255 {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
// Now check the full PDU size
|
|
||||||
match serde_json::to_string(owned_obj) {
|
|
||||||
| Ok(s) => s.len() <= 65535,
|
|
||||||
| Err(_) => false,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
#[implement(super::Service)]
|
#[implement(super::Service)]
|
||||||
pub async fn create_hash_and_sign_event(
|
pub async fn create_hash_and_sign_event(
|
||||||
&self,
|
&self,
|
||||||
@@ -182,6 +148,19 @@ pub async fn create_hash_and_sign_event(
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// if event_type != TimelineEventType::RoomCreate && prev_events.is_empty() {
|
||||||
|
// return Err!(Request(Unknown("Event incorrectly had zero prev_events.")));
|
||||||
|
// }
|
||||||
|
// if state_key.is_none() && depth.lt(&uint!(2)) {
|
||||||
|
// // The first two events in a room are always m.room.create and
|
||||||
|
// m.room.member, // so any other events with that same depth are illegal.
|
||||||
|
// warn!(
|
||||||
|
// "Had unsafe depth {depth} when creating non-state event in {}. Cowardly
|
||||||
|
// aborting", room_id.expect("room_id is Some here").as_str()
|
||||||
|
// );
|
||||||
|
// return Err!(Request(Unknown("Unsafe depth for non-state event.")));
|
||||||
|
// }
|
||||||
|
|
||||||
let mut pdu = PduEvent {
|
let mut pdu = PduEvent {
|
||||||
event_id: ruma::event_id!("$thiswillbefilledinlater").into(),
|
event_id: ruma::event_id!("$thiswillbefilledinlater").into(),
|
||||||
room_id: room_id.map(ToOwned::to_owned),
|
room_id: room_id.map(ToOwned::to_owned),
|
||||||
@@ -290,16 +269,8 @@ pub async fn create_hash_and_sign_event(
|
|||||||
}
|
}
|
||||||
// Generate event id
|
// Generate event id
|
||||||
pdu.event_id = gen_event_id(&pdu_json, &room_version_id)?;
|
pdu.event_id = gen_event_id(&pdu_json, &room_version_id)?;
|
||||||
pdu_json.insert("event_id".into(), CanonicalJsonValue::String(pdu.event_id.clone().into()));
|
|
||||||
// Verify that the *full* PDU isn't over 64KiB.
|
|
||||||
// Ruma only validates that it's under 64KiB before signing and hashing.
|
|
||||||
// Has to be cloned to prevent mutating pdu_json itself :(
|
|
||||||
if !pdu_fits(&mut pdu_json.clone()) {
|
|
||||||
// feckin huge PDU mate
|
|
||||||
return Err!(Request(TooLarge("Message/PDU is too long (exceeds 65535 bytes)")));
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check with the policy server
|
// Check with the policy server
|
||||||
|
pdu_json.insert("event_id".into(), CanonicalJsonValue::String(pdu.event_id.clone().into()));
|
||||||
if room_id.is_some() {
|
if room_id.is_some() {
|
||||||
trace!(
|
trace!(
|
||||||
"Checking event in room {} with policy server",
|
"Checking event in room {} with policy server",
|
||||||
|
|||||||
@@ -26,7 +26,7 @@ use ruma::{
|
|||||||
use serde::Deserialize;
|
use serde::Deserialize;
|
||||||
|
|
||||||
use self::data::Data;
|
use self::data::Data;
|
||||||
pub use self::{create::pdu_fits, data::PdusIterItem};
|
pub use self::data::PdusIterItem;
|
||||||
use crate::{
|
use crate::{
|
||||||
Dep, account_data, admin, appservice, globals, pusher, rooms, sending, server_keys, users,
|
Dep, account_data, admin, appservice, globals, pusher, rooms, sending, server_keys, users,
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
#[cfg(feature = "ldap")]
|
#[cfg(feature = "ldap")]
|
||||||
use std::collections::HashMap;
|
use std::collections::HashMap;
|
||||||
use std::{collections::BTreeMap, mem, net::IpAddr, sync::Arc};
|
use std::{collections::BTreeMap, mem, sync::Arc};
|
||||||
|
|
||||||
#[cfg(feature = "ldap")]
|
#[cfg(feature = "ldap")]
|
||||||
use conduwuit::result::LogErr;
|
use conduwuit::result::LogErr;
|
||||||
@@ -25,7 +25,6 @@ use ruma::{
|
|||||||
invite_permission_config::{FilterLevel, InvitePermissionConfigEvent},
|
invite_permission_config::{FilterLevel, InvitePermissionConfigEvent},
|
||||||
},
|
},
|
||||||
serde::Raw,
|
serde::Raw,
|
||||||
uint,
|
|
||||||
};
|
};
|
||||||
use serde::{Deserialize, Serialize};
|
use serde::{Deserialize, Serialize};
|
||||||
use serde_json::json;
|
use serde_json::json;
|
||||||
@@ -981,7 +980,6 @@ impl Service {
|
|||||||
.await;
|
.await;
|
||||||
}
|
}
|
||||||
|
|
||||||
/// Updates device metadata and increments the device list version.
|
|
||||||
pub async fn update_device_metadata(
|
pub async fn update_device_metadata(
|
||||||
&self,
|
&self,
|
||||||
user_id: &UserId,
|
user_id: &UserId,
|
||||||
@@ -989,51 +987,13 @@ impl Service {
|
|||||||
device: &Device,
|
device: &Device,
|
||||||
) -> Result<()> {
|
) -> Result<()> {
|
||||||
increment(&self.db.userid_devicelistversion, user_id.as_bytes());
|
increment(&self.db.userid_devicelistversion, user_id.as_bytes());
|
||||||
self.update_device_metadata_no_increment(user_id, device_id, device)
|
|
||||||
.await
|
|
||||||
}
|
|
||||||
|
|
||||||
// Updates device metadata without incrementing the device list version.
|
|
||||||
// This is namely used for updating the last_seen_ip and last_seen_ts values,
|
|
||||||
// as those do not need a device list version bump due to them not being
|
|
||||||
// relevant to other consumers.
|
|
||||||
pub async fn update_device_metadata_no_increment(
|
|
||||||
&self,
|
|
||||||
user_id: &UserId,
|
|
||||||
device_id: &DeviceId,
|
|
||||||
device: &Device,
|
|
||||||
) -> Result<()> {
|
|
||||||
let key = (user_id, device_id);
|
let key = (user_id, device_id);
|
||||||
self.db.userdeviceid_metadata.put(key, Json(device));
|
self.db.userdeviceid_metadata.put(key, Json(device));
|
||||||
|
|
||||||
Ok(())
|
Ok(())
|
||||||
}
|
}
|
||||||
|
|
||||||
pub async fn update_device_last_seen(
|
|
||||||
&self,
|
|
||||||
user_id: &UserId,
|
|
||||||
device_id: Option<&DeviceId>,
|
|
||||||
ip: IpAddr,
|
|
||||||
) {
|
|
||||||
let now = MilliSecondsSinceUnixEpoch::now();
|
|
||||||
if let Some(device_id) = device_id {
|
|
||||||
if let Ok(mut device) = self.get_device_metadata(user_id, device_id).await {
|
|
||||||
device.last_seen_ip = Some(ip.to_string());
|
|
||||||
// If the last update was less than 10 seconds ago, don't update the timestamp
|
|
||||||
if let Some(prev) = device.last_seen_ts {
|
|
||||||
if now.get().saturating_sub(prev.get()) < uint!(10_000) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
device.last_seen_ts = Some(now);
|
|
||||||
|
|
||||||
self.update_device_metadata_no_increment(user_id, device_id, &device)
|
|
||||||
.await
|
|
||||||
.ok();
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/// Get device metadata.
|
/// Get device metadata.
|
||||||
pub async fn get_device_metadata(
|
pub async fn get_device_metadata(
|
||||||
&self,
|
&self,
|
||||||
|
|||||||
Reference in New Issue
Block a user