mirror of
https://github.com/superseriousbusiness/gotosocial.git
synced 2025-10-29 17:02:25 -05:00
~~Still WIP!~~ This PR allows v0.20.0 of GtS to be forward-compatible with the interaction request / authorization flow that will fully replace the current flow in v0.21.0. Basically, this means we need to recognize LikeRequest, ReplyRequest, and AnnounceRequest, and in response to those requests, deliver either a Reject or an Accept, with the latter pointing towards a LikeAuthorization, ReplyAuthorization, or AnnounceAuthorization, respectively. This can then be used by the remote instance to prove to third parties that the interaction has been accepted by the interactee. These Authorization types need to be dereferencable to third parties, so we need to serve them. As well as recognizing the above "polite" interaction request types, we also need to still serve appropriate responses to "impolite" interaction request types, where an instance that's unaware of interaction policies tries to interact with a post by sending a reply, like, or boost directly, without wrapping it in a WhateverRequest type. Doesn't fully close https://codeberg.org/superseriousbusiness/gotosocial/issues/4026 but gets damn near (just gotta update the federating with GtS documentation). Migrations tested on both Postgres and SQLite. Co-authored-by: kim <grufwub@gmail.com> Reviewed-on: https://codeberg.org/superseriousbusiness/gotosocial/pulls/4394 Co-authored-by: tobi <tobi.smethurst@protonmail.com> Co-committed-by: tobi <tobi.smethurst@protonmail.com>
147 lines
4.3 KiB
Go
147 lines
4.3 KiB
Go
// GoToSocial
|
|
// Copyright (C) GoToSocial Authors admin@gotosocial.org
|
|
// SPDX-License-Identifier: AGPL-3.0-or-later
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package federatingdb
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"net/http"
|
|
|
|
"code.superseriousbusiness.org/activity/streams/vocab"
|
|
"code.superseriousbusiness.org/gotosocial/internal/ap"
|
|
"code.superseriousbusiness.org/gotosocial/internal/db"
|
|
"code.superseriousbusiness.org/gotosocial/internal/gtserror"
|
|
"code.superseriousbusiness.org/gotosocial/internal/id"
|
|
"code.superseriousbusiness.org/gotosocial/internal/log"
|
|
"code.superseriousbusiness.org/gotosocial/internal/messages"
|
|
)
|
|
|
|
func (f *DB) Like(ctx context.Context, likeable vocab.ActivityStreamsLike) error {
|
|
log.DebugKV(ctx, "like", serialize{likeable})
|
|
|
|
// Mark activity as handled.
|
|
f.storeActivityID(likeable)
|
|
|
|
// Extract relevant values from passed ctx.
|
|
activityContext := getActivityContext(ctx)
|
|
if activityContext.internal {
|
|
return nil // Already processed.
|
|
}
|
|
|
|
requesting := activityContext.requestingAcct
|
|
receiving := activityContext.receivingAcct
|
|
|
|
if requesting.IsMoving() {
|
|
// A Moving account
|
|
// can't do this.
|
|
return nil
|
|
}
|
|
|
|
// Convert received AS like type to internal fave model.
|
|
fave, err := f.converter.ASLikeToFave(ctx, likeable)
|
|
if err != nil {
|
|
err := gtserror.Newf("error converting from AS type: %w", err)
|
|
return gtserror.WrapWithCode(http.StatusBadRequest, err)
|
|
}
|
|
|
|
// Ensure fave enacted by correct account.
|
|
if fave.AccountID != requesting.ID {
|
|
return gtserror.NewfWithCode(http.StatusForbidden, "requester %s is not expected actor %s",
|
|
requesting.URI, fave.Account.URI)
|
|
}
|
|
|
|
// Ensure fave received by correct account.
|
|
if fave.TargetAccountID != receiving.ID {
|
|
return gtserror.NewfWithCode(http.StatusForbidden, "receiver %s is not expected object %s",
|
|
receiving.URI, fave.TargetAccount.URI)
|
|
}
|
|
|
|
if !*fave.Status.Local {
|
|
// Only process likes of local statuses.
|
|
// TODO: process for remote statuses as well.
|
|
return nil
|
|
}
|
|
|
|
// Ensure valid Like target for requester.
|
|
policyResult, err := f.intFilter.StatusLikeable(ctx,
|
|
requesting,
|
|
fave.Status,
|
|
)
|
|
if err != nil {
|
|
return gtserror.Newf("error seeing if status %s is likeable: %w", fave.Status.URI, err)
|
|
}
|
|
|
|
if policyResult.Forbidden() {
|
|
return gtserror.NewWithCode(http.StatusForbidden, "requester does not have permission to Like status")
|
|
}
|
|
|
|
// Derive pendingApproval
|
|
// and preapproved status.
|
|
var (
|
|
pendingApproval bool
|
|
preApproved bool
|
|
)
|
|
|
|
switch {
|
|
case policyResult.ManualApproval():
|
|
// Requester allowed to do
|
|
// this pending approval.
|
|
pendingApproval = true
|
|
|
|
case policyResult.MatchedOnCollection():
|
|
// Requester allowed to do this,
|
|
// but matched on collection.
|
|
// Preapprove Like and have the
|
|
// processor send out an Accept.
|
|
pendingApproval = true
|
|
preApproved = true
|
|
|
|
case policyResult.AutomaticApproval():
|
|
// Requester straight up
|
|
// permitted to do this,
|
|
// no need for Accept.
|
|
pendingApproval = false
|
|
}
|
|
|
|
// Set appropriate fields
|
|
// on fave and store it.
|
|
fave.ID = id.NewULID()
|
|
fave.PendingApproval = &pendingApproval
|
|
fave.PreApproved = preApproved
|
|
|
|
if err := f.state.DB.PutStatusFave(ctx, fave); err != nil {
|
|
if errors.Is(err, db.ErrAlreadyExists) {
|
|
// The fave already exists in the
|
|
// database, which means we've already
|
|
// handled side effects. We can just
|
|
// return nil here and be done with it.
|
|
return nil
|
|
}
|
|
return gtserror.Newf("error inserting %s into db: %w", fave.URI, err)
|
|
}
|
|
|
|
f.state.Workers.Federator.Queue.Push(&messages.FromFediAPI{
|
|
APObjectType: ap.ActivityLike,
|
|
APActivityType: ap.ActivityCreate,
|
|
GTSModel: fave,
|
|
Receiving: receiving,
|
|
Requesting: requesting,
|
|
})
|
|
|
|
return nil
|
|
}
|