2 activities::{verify_is_public, verify_person_in_community},
3 check_apub_id_valid_with_strictness,
5 objects::{read_from_string_or_source_opt, verify_is_remote_object},
8 page::{Attachment, AttributedTo, Page, PageType},
15 use activitypub_federation::{
16 core::object_id::ObjectId,
17 deser::values::MediaTypeMarkdownOrHtml,
19 utils::verify_domains_match,
21 use activitystreams_kinds::public;
22 use chrono::NaiveDateTime;
23 use lemmy_api_common::{request::fetch_site_data, utils::blocking};
24 use lemmy_db_schema::{
29 moderator::{ModLockPost, ModLockPostForm, ModStickyPost, ModStickyPostForm},
31 post::{Post, PostForm},
37 utils::{check_slurs, convert_datetime, markdown_to_html, remove_slurs},
39 use lemmy_websocket::LemmyContext;
43 #[derive(Clone, Debug)]
44 pub struct ApubPost(Post);
46 impl Deref for ApubPost {
48 fn deref(&self) -> &Self::Target {
53 impl From<Post> for ApubPost {
54 fn from(p: Post) -> Self {
59 #[async_trait::async_trait(?Send)]
60 impl ApubObject for ApubPost {
61 type DataType = LemmyContext;
64 type Error = LemmyError;
66 fn last_refreshed_at(&self) -> Option<NaiveDateTime> {
70 #[tracing::instrument(skip_all)]
71 async fn read_from_apub_id(
73 context: &LemmyContext,
74 ) -> Result<Option<Self>, LemmyError> {
76 blocking(context.pool(), move |conn| {
77 Post::read_from_apub_id(conn, object_id)
84 #[tracing::instrument(skip_all)]
85 async fn delete(self, context: &LemmyContext) -> Result<(), LemmyError> {
87 blocking(context.pool(), move |conn| {
88 Post::update_deleted(conn, self.id, true)
95 // Turn a Lemmy post into an ActivityPub page that can be sent out over the network.
96 #[tracing::instrument(skip_all)]
97 async fn into_apub(self, context: &LemmyContext) -> Result<Page, LemmyError> {
98 let creator_id = self.creator_id;
99 let creator = blocking(context.pool(), move |conn| Person::read(conn, creator_id)).await??;
100 let community_id = self.community_id;
101 let community = blocking(context.pool(), move |conn| {
102 Community::read(conn, community_id)
105 let language = self.language_id;
106 let language = blocking(context.pool(), move |conn| {
107 Language::read_from_id(conn, language)
112 kind: PageType::Page,
113 id: ObjectId::new(self.ap_id.clone()),
114 attributed_to: AttributedTo::Lemmy(ObjectId::new(creator.actor_id)),
115 to: vec![community.actor_id.into(), public()],
117 name: self.name.clone(),
118 content: self.body.as_ref().map(|b| markdown_to_html(b)),
119 media_type: Some(MediaTypeMarkdownOrHtml::Html),
120 source: self.body.clone().map(Source::new),
121 url: self.url.clone().map(|u| u.into()),
122 attachment: self.url.clone().map(Attachment::new).into_iter().collect(),
123 image: self.thumbnail_url.clone().map(ImageObject::new),
124 comments_enabled: Some(!self.locked),
125 sensitive: Some(self.nsfw),
126 stickied: Some(self.stickied),
127 language: LanguageTag::new(language),
128 published: Some(convert_datetime(self.published)),
129 updated: self.updated.map(convert_datetime),
134 #[tracing::instrument(skip_all)]
137 expected_domain: &Url,
138 context: &LemmyContext,
139 request_counter: &mut i32,
140 ) -> Result<(), LemmyError> {
141 // We can't verify the domain in case of mod action, because the mod may be on a different
142 // instance from the post author.
143 if !page.is_mod_action(context).await? {
144 verify_domains_match(page.id.inner(), expected_domain)?;
145 verify_is_remote_object(page.id.inner(), context.settings())?;
148 let community = page.extract_community(context, request_counter).await?;
149 check_apub_id_valid_with_strictness(page.id.inner(), community.local, context.settings())?;
150 verify_person_in_community(&page.creator()?, &community, context, request_counter).await?;
151 check_slurs(&page.name, &context.settings().slur_regex())?;
152 verify_domains_match(page.creator()?.inner(), page.id.inner())?;
153 verify_is_public(&page.to, &page.cc)?;
157 #[tracing::instrument(skip_all)]
160 context: &LemmyContext,
161 request_counter: &mut i32,
162 ) -> Result<ApubPost, LemmyError> {
165 .dereference(context, local_instance(context), request_counter)
167 let community = page.extract_community(context, request_counter).await?;
169 let form = if !page.is_mod_action(context).await? {
170 let url = if let Some(attachment) = page.attachment.first() {
171 Some(match attachment {
172 // url as sent by Lemmy (new)
173 Attachment::Link(link) => link.href.clone(),
174 Attachment::Image(image) => image.url.clone(),
176 } else if page.kind == PageType::Video {
177 // we cant display videos directly, so insert a link to external video page
178 Some(page.id.inner().clone())
180 // url sent by lemmy (old)
183 let (metadata_res, thumbnail_url) = if let Some(url) = &url {
184 fetch_site_data(context.client(), context.settings(), Some(url)).await
186 (None, page.image.map(|i| i.url.into()))
188 let (embed_title, embed_description, embed_video_url) = metadata_res
189 .map(|u| (Some(u.title), Some(u.description), Some(u.embed_video_url)))
190 .unwrap_or_default();
191 let body_slurs_removed =
192 read_from_string_or_source_opt(&page.content, &page.media_type, &page.source)
193 .map(|s| Some(remove_slurs(&s, &context.settings().slur_regex())));
194 let language = page.language.map(|l| l.identifier);
195 let language = blocking(context.pool(), move |conn| {
196 Language::read_id_from_code_opt(conn, language.as_deref())
201 name: page.name.clone(),
202 url: Some(url.map(Into::into)),
203 body: body_slurs_removed,
204 creator_id: creator.id,
205 community_id: community.id,
207 locked: page.comments_enabled.map(|e| !e),
208 published: page.published.map(|u| u.naive_local()),
209 updated: page.updated.map(|u| u.naive_local()),
211 nsfw: page.sensitive,
212 stickied: page.stickied,
216 thumbnail_url: Some(thumbnail_url),
217 ap_id: Some(page.id.clone().into()),
219 language_id: language,
222 // if is mod action, only update locked/stickied fields, nothing else
224 name: page.name.clone(),
225 creator_id: creator.id,
226 community_id: community.id,
227 locked: page.comments_enabled.map(|e| !e),
228 stickied: page.stickied,
229 updated: page.updated.map(|u| u.naive_local()),
230 ap_id: Some(page.id.clone().into()),
235 // read existing, local post if any (for generating mod log)
236 let old_post = ObjectId::<ApubPost>::new(page.id.clone())
237 .dereference_local(context)
240 let post = blocking(context.pool(), move |conn| Post::upsert(conn, &form)).await??;
242 // write mod log entries for sticky/lock
243 if Page::is_stickied_changed(&old_post, &page.stickied) {
244 let form = ModStickyPostForm {
245 mod_person_id: creator.id,
247 stickied: Some(post.stickied),
249 blocking(context.pool(), move |conn| {
250 ModStickyPost::create(conn, &form)
254 if Page::is_locked_changed(&old_post, &page.comments_enabled) {
255 let form = ModLockPostForm {
256 mod_person_id: creator.id,
258 locked: Some(post.locked),
260 blocking(context.pool(), move |conn| ModLockPost::create(conn, &form)).await??;
272 community::tests::parse_lemmy_community,
273 person::tests::parse_lemmy_person,
277 protocol::tests::file_to_json_object,
279 use lemmy_db_schema::source::site::Site;
280 use serial_test::serial;
284 async fn test_parse_lemmy_post() {
285 let context = init_context();
286 let (person, site) = parse_lemmy_person(&context).await;
287 let community = parse_lemmy_community(&context).await;
289 let json = file_to_json_object("assets/lemmy/objects/page.json").unwrap();
290 let url = Url::parse("https://enterprise.lemmy.ml/post/55143").unwrap();
291 let mut request_counter = 0;
292 ApubPost::verify(&json, &url, &context, &mut request_counter)
295 let post = ApubPost::from_apub(json, &context, &mut request_counter)
299 assert_eq!(post.ap_id, url.into());
300 assert_eq!(post.name, "Post title");
301 assert!(post.body.is_some());
302 assert_eq!(post.body.as_ref().unwrap().len(), 45);
303 assert!(!post.locked);
304 assert!(post.stickied);
305 assert_eq!(request_counter, 0);
307 Post::delete(&*context.pool().get().unwrap(), post.id).unwrap();
308 Person::delete(&*context.pool().get().unwrap(), person.id).unwrap();
309 Community::delete(&*context.pool().get().unwrap(), community.id).unwrap();
310 Site::delete(&*context.pool().get().unwrap(), site.id).unwrap();