continuwuity/src/api/client/room/event.rs

use axum::extract::State;
use conduwuit::{Err, Event, Result, debug_warn, err};
use ruma::api::client::room::get_room_event;

use crate::{Ruma, client::is_ignored_pdu};

/// # `GET /_matrix/client/r0/rooms/{roomId}/event/{eventId}`
///
/// Gets a single event.
pub(crate) async fn get_room_event_route(
	State(ref services): State<crate::State>,
	ref body: Ruma<get_room_event::v3::Request>,
) -> Result<get_room_event::v3::Response> {
	let sender_user = body.identity.expect_sender_user()?;
	let event_id = &body.event_id;
	let room_id = &body.room_id;

	let mut event = match services.rooms.timeline.get_pdu(event_id).await {
		| Ok(event) => event,
		| Err(e) if e.is_not_found() => {
			// Only fetch over federation for users who could see the event.
			let (joined, world_readable) = tokio::join!(
				services.rooms.state_cache.is_joined(sender_user, room_id),
				services.rooms.state_accessor.is_world_readable(room_id)
			);
			if !joined && !world_readable {
				return Err!(Request(NotFound("Event {event_id} not found.")));
			}

			services
				.rooms
				.timeline
				.get_remote_pdu(room_id, event_id)
				.await
				.map_err(|_| err!(Request(NotFound("Event {event_id} not found."))))?
		},
		| Err(e) => return Err(e),
	};
	if !event.room_id_or_hash().eq(room_id) {
		// Return not found instead of invalid param to avoid revealing the
		// existence of events the user might not be allowed to know about.
		return Err!(Request(NotFound("Event {event_id} not found.")));
	}

	// NOTE: checked after fetching, as visibility of an unknown event cannot
	// be determined (user_can_see_event returns true for those).
	let visible = services
		.rooms
		.state_accessor
		.user_can_see_event(sender_user, room_id, event_id)
		.await;

	if !visible || is_ignored_pdu(services, &event, sender_user).await? {
		return Err!(Request(Forbidden("You don't have permission to view this event.")));
	}

	if let Err(e) = services
		.rooms
		.pdu_metadata
		.add_bundled_aggregations_to_pdu(sender_user, &mut event)
		.await
	{
		debug_warn!("Failed to add bundled aggregations to event: {e}");
	}

	let ctx = services
		.rooms
		.timeline
		.get_unsigned_context(&event, Some(sender_user))
		.await;
	event.set_unsigned(Some(ctx))?;

	Ok(get_room_event::v3::Response::new(event.into_format()))
}