2 activities::{verify_is_public, verify_person_in_community},
3 check_apub_id_valid_with_strictness,
5 objects::{read_from_string_or_source_opt, verify_is_remote_object},
7 objects::page::{Attachment, AttributedTo, Page, PageType},
12 use activitypub_federation::{
13 core::object_id::ObjectId,
14 deser::values::MediaTypeMarkdownOrHtml,
16 utils::verify_domains_match,
18 use activitystreams_kinds::public;
19 use chrono::NaiveDateTime;
20 use lemmy_api_common::{request::fetch_site_data, utils::blocking};
21 use lemmy_db_schema::{
24 moderator::{ModLockPost, ModLockPostForm, ModStickyPost, ModStickyPostForm},
26 post::{Post, PostForm},
33 utils::{check_slurs, convert_datetime, markdown_to_html, remove_slurs},
35 use lemmy_websocket::LemmyContext;
39 #[derive(Clone, Debug)]
40 pub struct ApubPost(Post);
42 impl Deref for ApubPost {
44 fn deref(&self) -> &Self::Target {
49 impl From<Post> for ApubPost {
50 fn from(p: Post) -> Self {
55 #[async_trait::async_trait(?Send)]
56 impl ApubObject for ApubPost {
57 type DataType = LemmyContext;
60 type Error = LemmyError;
62 fn last_refreshed_at(&self) -> Option<NaiveDateTime> {
66 #[tracing::instrument(skip_all)]
67 async fn read_from_apub_id(
69 context: &LemmyContext,
70 ) -> Result<Option<Self>, LemmyError> {
72 blocking(context.pool(), move |conn| {
73 Post::read_from_apub_id(conn, object_id)
80 #[tracing::instrument(skip_all)]
81 async fn delete(self, context: &LemmyContext) -> Result<(), LemmyError> {
83 blocking(context.pool(), move |conn| {
84 Post::update_deleted(conn, self.id, true)
91 // Turn a Lemmy post into an ActivityPub page that can be sent out over the network.
92 #[tracing::instrument(skip_all)]
93 async fn into_apub(self, context: &LemmyContext) -> Result<Page, LemmyError> {
94 let creator_id = self.creator_id;
95 let creator = blocking(context.pool(), move |conn| Person::read(conn, creator_id)).await??;
96 let community_id = self.community_id;
97 let community = blocking(context.pool(), move |conn| {
98 Community::read(conn, community_id)
103 kind: PageType::Page,
104 id: ObjectId::new(self.ap_id.clone()),
105 attributed_to: AttributedTo::Lemmy(ObjectId::new(creator.actor_id)),
106 to: vec![community.actor_id.into(), public()],
108 name: self.name.clone(),
109 content: self.body.as_ref().map(|b| markdown_to_html(b)),
110 media_type: Some(MediaTypeMarkdownOrHtml::Html),
111 source: self.body.clone().map(Source::new),
112 url: self.url.clone().map(|u| u.into()),
113 attachment: self.url.clone().map(Attachment::new).into_iter().collect(),
114 image: self.thumbnail_url.clone().map(ImageObject::new),
115 comments_enabled: Some(!self.locked),
116 sensitive: Some(self.nsfw),
117 stickied: Some(self.stickied),
118 published: Some(convert_datetime(self.published)),
119 updated: self.updated.map(convert_datetime),
124 #[tracing::instrument(skip_all)]
127 expected_domain: &Url,
128 context: &LemmyContext,
129 request_counter: &mut i32,
130 ) -> Result<(), LemmyError> {
131 // We can't verify the domain in case of mod action, because the mod may be on a different
132 // instance from the post author.
133 if !page.is_mod_action(context).await? {
134 verify_domains_match(page.id.inner(), expected_domain)?;
135 verify_is_remote_object(page.id.inner())?;
138 let community = page.extract_community(context, request_counter).await?;
139 check_apub_id_valid_with_strictness(page.id.inner(), community.local, &context.settings())?;
140 verify_person_in_community(&page.creator()?, &community, context, request_counter).await?;
141 check_slurs(&page.name, &context.settings().slur_regex())?;
142 verify_domains_match(page.creator()?.inner(), page.id.inner())?;
143 verify_is_public(&page.to, &page.cc)?;
147 #[tracing::instrument(skip_all)]
150 context: &LemmyContext,
151 request_counter: &mut i32,
152 ) -> Result<ApubPost, LemmyError> {
155 .dereference::<LemmyError>(context, local_instance(context), request_counter)
157 let community = page.extract_community(context, request_counter).await?;
159 let form = if !page.is_mod_action(context).await? {
160 let url = if let Some(attachment) = page.attachment.first() {
161 // url as sent by Lemmy (new)
162 Some(attachment.href.clone())
163 } else if page.kind == PageType::Video {
164 // we cant display videos directly, so insert a link to external video page
165 Some(page.id.inner().clone())
167 // url sent by lemmy (old)
170 let thumbnail_url: Option<Url> = page.image.map(|i| i.url);
171 let (metadata_res, pictrs_thumbnail) = if let Some(url) = &url {
172 fetch_site_data(context.client(), &context.settings(), Some(url)).await
174 (None, thumbnail_url)
176 let (embed_title, embed_description, embed_html) = metadata_res
177 .map(|u| (u.title, u.description, u.html))
178 .unwrap_or((None, None, None));
179 let body_slurs_removed =
180 read_from_string_or_source_opt(&page.content, &page.media_type, &page.source)
181 .map(|s| remove_slurs(&s, &context.settings().slur_regex()));
184 name: page.name.clone(),
185 url: url.map(Into::into),
186 body: body_slurs_removed,
187 creator_id: creator.id,
188 community_id: community.id,
190 locked: page.comments_enabled.map(|e| !e),
191 published: page.published.map(|u| u.naive_local()),
192 updated: page.updated.map(|u| u.naive_local()),
194 nsfw: page.sensitive,
195 stickied: page.stickied,
199 thumbnail_url: pictrs_thumbnail.map(|u| u.into()),
200 ap_id: Some(page.id.clone().into()),
204 // if is mod action, only update locked/stickied fields, nothing else
206 name: page.name.clone(),
207 creator_id: creator.id,
208 community_id: community.id,
209 locked: page.comments_enabled.map(|e| !e),
210 stickied: page.stickied,
211 updated: page.updated.map(|u| u.naive_local()),
212 ap_id: Some(page.id.clone().into()),
217 // read existing, local post if any (for generating mod log)
218 let old_post = ObjectId::<ApubPost>::new(page.id.clone())
219 .dereference_local::<LemmyError>(context)
222 let post = blocking(context.pool(), move |conn| Post::upsert(conn, &form)).await??;
224 // write mod log entries for sticky/lock
225 if Page::is_stickied_changed(&old_post, &page.stickied) {
226 let form = ModStickyPostForm {
227 mod_person_id: creator.id,
229 stickied: Some(post.stickied),
231 blocking(context.pool(), move |conn| {
232 ModStickyPost::create(conn, &form)
236 if Page::is_locked_changed(&old_post, &page.comments_enabled) {
237 let form = ModLockPostForm {
238 mod_person_id: creator.id,
240 locked: Some(post.locked),
242 blocking(context.pool(), move |conn| ModLockPost::create(conn, &form)).await??;
254 community::tests::parse_lemmy_community,
255 person::tests::parse_lemmy_person,
259 protocol::tests::file_to_json_object,
261 use lemmy_db_schema::source::site::Site;
262 use serial_test::serial;
266 async fn test_parse_lemmy_post() {
267 let context = init_context();
268 let (person, site) = parse_lemmy_person(&context).await;
269 let community = parse_lemmy_community(&context).await;
271 let json = file_to_json_object("assets/lemmy/objects/page.json").unwrap();
272 let url = Url::parse("https://enterprise.lemmy.ml/post/55143").unwrap();
273 let mut request_counter = 0;
274 ApubPost::verify(&json, &url, &context, &mut request_counter)
277 let post = ApubPost::from_apub(json, &context, &mut request_counter)
281 assert_eq!(post.ap_id, url.into());
282 assert_eq!(post.name, "Post title");
283 assert!(post.body.is_some());
284 assert_eq!(post.body.as_ref().unwrap().len(), 45);
285 assert!(!post.locked);
286 assert!(post.stickied);
287 assert_eq!(request_counter, 0);
289 Post::delete(&*context.pool().get().unwrap(), post.id).unwrap();
290 Person::delete(&*context.pool().get().unwrap(), person.id).unwrap();
291 Community::delete(&*context.pool().get().unwrap(), community.id).unwrap();
292 Site::delete(&*context.pool().get().unwrap(), site.id).unwrap();