use axum::extract::State; use conduwuit::{Err, Event, Result, debug_warn, err}; use ruma::api::client::room::get_room_event; use crate::{Ruma, client::is_ignored_pdu}; /// # `GET /_matrix/client/r0/rooms/{roomId}/event/{eventId}` /// /// Gets a single event. pub(crate) async fn get_room_event_route( State(ref services): State, ref body: Ruma, ) -> Result { let sender_user = body.identity.expect_sender_user()?; let event_id = &body.event_id; let room_id = &body.room_id; let mut event = match services.rooms.timeline.get_pdu(event_id).await { | Ok(event) => event, | Err(e) if e.is_not_found() => { // Only fetch over federation for users who could see the event. let (joined, world_readable) = tokio::join!( services.rooms.state_cache.is_joined(sender_user, room_id), services.rooms.state_accessor.is_world_readable(room_id) ); if !joined && !world_readable { return Err!(Request(NotFound("Event {event_id} not found."))); } services .rooms .timeline .get_remote_pdu(room_id, event_id) .await .map_err(|_| err!(Request(NotFound("Event {event_id} not found."))))? }, | Err(e) => return Err(e), }; if !event.room_id_or_hash().eq(room_id) { // Return not found instead of invalid param to avoid revealing the // existence of events the user might not be allowed to know about. return Err!(Request(NotFound("Event {event_id} not found."))); } // NOTE: checked after fetching, as visibility of an unknown event cannot // be determined (user_can_see_event returns true for those). let visible = services .rooms .state_accessor .user_can_see_event(sender_user, room_id, event_id) .await; if !visible || is_ignored_pdu(services, &event, sender_user).await? { return Err!(Request(Forbidden("You don't have permission to view this event."))); } if let Err(e) = services .rooms .pdu_metadata .add_bundled_aggregations_to_pdu(sender_user, &mut event) .await { debug_warn!("Failed to add bundled aggregations to event: {e}"); } let ctx = services .rooms .timeline .get_unsigned_context(&event, Some(sender_user)) .await; event.set_unsigned(Some(ctx))?; Ok(get_room_event::v3::Response::new(event.into_format())) }