]> Untitled Git - lemmy.git/blob - crates/api_crud/src/post/create.rs
Implement restricted community (only mods can post) (fixes #187) (#2235)
[lemmy.git] / crates / api_crud / src / post / create.rs
1 use crate::PerformCrud;
2 use actix_web::web::Data;
3 use lemmy_api_common::{
4   blocking,
5   check_community_ban,
6   check_community_deleted_or_removed,
7   get_local_user_view_from_jwt,
8   honeypot_check,
9   mark_post_as_read,
10   post::*,
11 };
12 use lemmy_apub::{
13   generate_local_apub_endpoint,
14   objects::post::ApubPost,
15   protocol::activities::{create_or_update::post::CreateOrUpdatePost, CreateOrUpdateType},
16   EndpointType,
17 };
18 use lemmy_db_schema::{
19   source::{
20     community::Community,
21     post::{Post, PostForm, PostLike, PostLikeForm},
22   },
23   traits::{Crud, Likeable},
24 };
25 use lemmy_db_views_actor::community_view::CommunityView;
26 use lemmy_utils::{
27   request::fetch_site_data,
28   utils::{
29     check_slurs,
30     check_slurs_opt,
31     clean_optional_text,
32     clean_url_params,
33     is_valid_post_title,
34   },
35   ConnectionId,
36   LemmyError,
37 };
38 use lemmy_websocket::{send::send_post_ws_message, LemmyContext, UserOperationCrud};
39 use tracing::{warn, Instrument};
40 use url::Url;
41 use webmention::{Webmention, WebmentionError};
42
43 #[async_trait::async_trait(?Send)]
44 impl PerformCrud for CreatePost {
45   type Response = PostResponse;
46
47   #[tracing::instrument(skip(context, websocket_id))]
48   async fn perform(
49     &self,
50     context: &Data<LemmyContext>,
51     websocket_id: Option<ConnectionId>,
52   ) -> Result<PostResponse, LemmyError> {
53     let data: &CreatePost = self;
54     let local_user_view =
55       get_local_user_view_from_jwt(&data.auth, context.pool(), context.secret()).await?;
56
57     let slur_regex = &context.settings().slur_regex();
58     check_slurs(&data.name, slur_regex)?;
59     check_slurs_opt(&data.body, slur_regex)?;
60     honeypot_check(&data.honeypot)?;
61
62     if !is_valid_post_title(&data.name) {
63       return Err(LemmyError::from_message("invalid_post_title"));
64     }
65
66     check_community_ban(local_user_view.person.id, data.community_id, context.pool()).await?;
67     check_community_deleted_or_removed(data.community_id, context.pool()).await?;
68
69     let community_id = data.community_id;
70     let community = blocking(context.pool(), move |conn| {
71       Community::read(conn, community_id)
72     })
73     .await??;
74     if community.posting_restricted_to_mods {
75       let community_id = data.community_id;
76       let is_mod = blocking(context.pool(), move |conn| {
77         CommunityView::is_mod_or_admin(conn, local_user_view.local_user.person_id, community_id)
78       })
79       .await?;
80       if !is_mod {
81         return Err(LemmyError::from_message("only_mods_can_post_in_community"));
82       }
83     }
84
85     // Fetch post links and pictrs cached image
86     let data_url = data.url.as_ref();
87     let (metadata_res, pictrs_thumbnail) =
88       fetch_site_data(context.client(), &context.settings(), data_url).await;
89     let (embed_title, embed_description, embed_html) = metadata_res
90       .map(|u| (u.title, u.description, u.html))
91       .unwrap_or((None, None, None));
92
93     let post_form = PostForm {
94       name: data.name.trim().to_owned(),
95       url: data_url.map(|u| clean_url_params(u.to_owned()).into()),
96       body: clean_optional_text(&data.body),
97       community_id: data.community_id,
98       creator_id: local_user_view.person.id,
99       nsfw: data.nsfw,
100       embed_title,
101       embed_description,
102       embed_html,
103       thumbnail_url: pictrs_thumbnail.map(|u| u.into()),
104       ..PostForm::default()
105     };
106
107     let inserted_post =
108       match blocking(context.pool(), move |conn| Post::create(conn, &post_form)).await? {
109         Ok(post) => post,
110         Err(e) => {
111           let err_type = if e.to_string() == "value too long for type character varying(200)" {
112             "post_title_too_long"
113           } else {
114             "couldnt_create_post"
115           };
116
117           return Err(LemmyError::from_error_message(e, err_type));
118         }
119       };
120
121     let inserted_post_id = inserted_post.id;
122     let protocol_and_hostname = context.settings().get_protocol_and_hostname();
123     let updated_post = blocking(context.pool(), move |conn| -> Result<Post, LemmyError> {
124       let apub_id = generate_local_apub_endpoint(
125         EndpointType::Post,
126         &inserted_post_id.to_string(),
127         &protocol_and_hostname,
128       )?;
129       Ok(Post::update_ap_id(conn, inserted_post_id, apub_id)?)
130     })
131     .await?
132     .map_err(|e| e.with_message("couldnt_create_post"))?;
133
134     // They like their own post by default
135     let person_id = local_user_view.person.id;
136     let post_id = inserted_post.id;
137     let like_form = PostLikeForm {
138       post_id,
139       person_id,
140       score: 1,
141     };
142
143     let like = move |conn: &'_ _| PostLike::like(conn, &like_form);
144     blocking(context.pool(), like)
145       .await?
146       .map_err(|e| LemmyError::from_error_message(e, "couldnt_like_post"))?;
147
148     // Mark the post as read
149     mark_post_as_read(person_id, post_id, context.pool()).await?;
150
151     if let Some(url) = &updated_post.url {
152       let mut webmention =
153         Webmention::new::<Url>(updated_post.ap_id.clone().into(), url.clone().into())?;
154       webmention.set_checked(true);
155       match webmention
156         .send()
157         .instrument(tracing::info_span!("Sending webmention"))
158         .await
159       {
160         Ok(_) => {}
161         Err(WebmentionError::NoEndpointDiscovered(_)) => {}
162         Err(e) => warn!("Failed to send webmention: {}", e),
163       }
164     }
165
166     let apub_post: ApubPost = updated_post.into();
167     CreateOrUpdatePost::send(
168       apub_post.clone(),
169       &local_user_view.person.clone().into(),
170       CreateOrUpdateType::Create,
171       context,
172     )
173     .await?;
174
175     send_post_ws_message(
176       inserted_post.id,
177       UserOperationCrud::CreatePost,
178       websocket_id,
179       Some(local_user_view.person.id),
180       context,
181     )
182     .await
183   }
184 }