]> Untitled Git - lemmy.git/blob - crates/apub/src/activities/community/add_mod.rs
Fix check for federated mod actions (#2489)
[lemmy.git] / crates / apub / src / activities / community / add_mod.rs
1 use crate::{
2   activities::{
3     community::{
4       announce::GetCommunity,
5       get_community_from_moderators_url,
6       send_activity_in_community,
7     },
8     generate_activity_id,
9     verify_add_remove_moderator_target,
10     verify_is_public,
11     verify_mod_action,
12     verify_person_in_community,
13   },
14   activity_lists::AnnouncableActivities,
15   generate_moderators_url,
16   local_instance,
17   objects::{community::ApubCommunity, person::ApubPerson},
18   protocol::activities::community::add_mod::AddMod,
19   ActorType,
20 };
21 use activitypub_federation::{
22   core::object_id::ObjectId,
23   data::Data,
24   traits::{ActivityHandler, Actor},
25 };
26 use activitystreams_kinds::{activity::AddType, public};
27 use lemmy_api_common::utils::blocking;
28 use lemmy_db_schema::{
29   source::{
30     community::{CommunityModerator, CommunityModeratorForm},
31     moderator::{ModAddCommunity, ModAddCommunityForm},
32   },
33   traits::{Crud, Joinable},
34 };
35 use lemmy_utils::error::LemmyError;
36 use lemmy_websocket::LemmyContext;
37 use url::Url;
38
39 impl AddMod {
40   #[tracing::instrument(skip_all)]
41   pub async fn send(
42     community: &ApubCommunity,
43     added_mod: &ApubPerson,
44     actor: &ApubPerson,
45     context: &LemmyContext,
46   ) -> Result<(), LemmyError> {
47     let id = generate_activity_id(
48       AddType::Add,
49       &context.settings().get_protocol_and_hostname(),
50     )?;
51     let add = AddMod {
52       actor: ObjectId::new(actor.actor_id()),
53       to: vec![public()],
54       object: ObjectId::new(added_mod.actor_id()),
55       target: generate_moderators_url(&community.actor_id)?.into(),
56       cc: vec![community.actor_id()],
57       kind: AddType::Add,
58       id: id.clone(),
59       unparsed: Default::default(),
60     };
61
62     let activity = AnnouncableActivities::AddMod(add);
63     let inboxes = vec![added_mod.shared_inbox_or_inbox()];
64     send_activity_in_community(activity, actor, community, inboxes, context).await
65   }
66 }
67
68 #[async_trait::async_trait(?Send)]
69 impl ActivityHandler for AddMod {
70   type DataType = LemmyContext;
71   type Error = LemmyError;
72
73   fn id(&self) -> &Url {
74     &self.id
75   }
76
77   fn actor(&self) -> &Url {
78     self.actor.inner()
79   }
80
81   #[tracing::instrument(skip_all)]
82   async fn verify(
83     &self,
84     context: &Data<LemmyContext>,
85     request_counter: &mut i32,
86   ) -> Result<(), LemmyError> {
87     verify_is_public(&self.to, &self.cc)?;
88     let community = self.get_community(context, request_counter).await?;
89     verify_person_in_community(&self.actor, &community, context, request_counter).await?;
90     verify_mod_action(
91       &self.actor,
92       self.object.inner(),
93       community.id,
94       context,
95       request_counter,
96     )
97     .await?;
98     verify_add_remove_moderator_target(&self.target, &community)?;
99     Ok(())
100   }
101
102   #[tracing::instrument(skip_all)]
103   async fn receive(
104     self,
105     context: &Data<LemmyContext>,
106     request_counter: &mut i32,
107   ) -> Result<(), LemmyError> {
108     let community = self.get_community(context, request_counter).await?;
109     let new_mod = self
110       .object
111       .dereference(context, local_instance(context), request_counter)
112       .await?;
113
114     // If we had to refetch the community while parsing the activity, then the new mod has already
115     // been added. Skip it here as it would result in a duplicate key error.
116     let new_mod_id = new_mod.id;
117     let moderated_communities = blocking(context.pool(), move |conn| {
118       CommunityModerator::get_person_moderated_communities(conn, new_mod_id)
119     })
120     .await??;
121     if !moderated_communities.contains(&community.id) {
122       let form = CommunityModeratorForm {
123         community_id: community.id,
124         person_id: new_mod.id,
125       };
126       blocking(context.pool(), move |conn| {
127         CommunityModerator::join(conn, &form)
128       })
129       .await??;
130
131       // write mod log
132       let actor = self
133         .actor
134         .dereference(context, local_instance(context), request_counter)
135         .await?;
136       let form = ModAddCommunityForm {
137         mod_person_id: actor.id,
138         other_person_id: new_mod.id,
139         community_id: community.id,
140         removed: Some(false),
141       };
142       blocking(context.pool(), move |conn| {
143         ModAddCommunity::create(conn, &form)
144       })
145       .await??;
146     }
147     // TODO: send websocket notification about added mod
148     Ok(())
149   }
150 }
151
152 #[async_trait::async_trait(?Send)]
153 impl GetCommunity for AddMod {
154   #[tracing::instrument(skip_all)]
155   async fn get_community(
156     &self,
157     context: &LemmyContext,
158     request_counter: &mut i32,
159   ) -> Result<ApubCommunity, LemmyError> {
160     get_community_from_moderators_url(&self.target, context, request_counter).await
161   }
162 }