use crate::PerformCrud;
+use activitypub_federation::http_signatures::generate_actor_keypair;
use actix_web::web::Data;
-use lemmy_api_common::{blocking, honeypot_check, password_length_check, person::*};
-use lemmy_apub::{
- generate_followers_url,
- generate_inbox_url,
- generate_local_apub_endpoint,
- generate_shared_inbox_url,
- EndpointType,
+use lemmy_api_common::{
+ context::LemmyContext,
+ person::{LoginResponse, Register},
+ utils::{
+ generate_inbox_url,
+ generate_local_apub_endpoint,
+ generate_shared_inbox_url,
+ honeypot_check,
+ local_site_to_slur_regex,
+ password_length_check,
+ sanitize_html,
+ send_new_applicant_email_to_admins,
+ send_verification_email,
+ EndpointType,
+ },
};
use lemmy_db_schema::{
- newtypes::CommunityId,
+ aggregates::structs::PersonAggregates,
source::{
- community::{
- Community,
- CommunityFollower,
- CommunityFollowerForm,
- CommunityForm,
- CommunityModerator,
- CommunityModeratorForm,
- },
- local_user::{LocalUser, LocalUserForm},
- person::{Person, PersonForm},
- site::Site,
+ captcha_answer::{CaptchaAnswer, CheckCaptchaAnswer},
+ local_user::{LocalUser, LocalUserInsertForm},
+ person::{Person, PersonInsertForm},
+ registration_application::{RegistrationApplication, RegistrationApplicationInsertForm},
},
- traits::{Crud, Followable, Joinable},
- ListingType,
- SortType,
+ traits::Crud,
+ RegistrationMode,
};
-use lemmy_db_views_actor::person_view::PersonViewSafe;
+use lemmy_db_views::structs::{LocalUserView, SiteView};
use lemmy_utils::{
- apub::generate_actor_keypair,
claims::Claims,
- utils::{check_slurs, is_valid_actor_name},
- ApiError,
- ConnectionId,
- LemmyError,
+ error::{LemmyError, LemmyErrorExt, LemmyErrorType},
+ utils::{
+ slurs::{check_slurs, check_slurs_opt},
+ validation::is_valid_actor_name,
+ },
};
-use lemmy_websocket::{messages::CheckCaptcha, LemmyContext};
#[async_trait::async_trait(?Send)]
impl PerformCrud for Register {
type Response = LoginResponse;
- async fn perform(
- &self,
- context: &Data<LemmyContext>,
- _websocket_id: Option<ConnectionId>,
- ) -> Result<LoginResponse, LemmyError> {
+ #[tracing::instrument(skip(self, context))]
+ async fn perform(&self, context: &Data<LemmyContext>) -> Result<LoginResponse, LemmyError> {
let data: &Register = self;
- // Make sure site has open registration
- if let Ok(site) = blocking(context.pool(), Site::read_simple).await? {
- if !site.open_registration {
- return Err(ApiError::err_plain("registration_closed").into());
- }
+ let site_view = SiteView::read_local(&mut context.pool()).await?;
+ let local_site = site_view.local_site;
+ let require_registration_application =
+ local_site.registration_mode == RegistrationMode::RequireApplication;
+
+ if local_site.registration_mode == RegistrationMode::Closed {
+ return Err(LemmyErrorType::RegistrationClosed)?;
}
password_length_check(&data.password)?;
honeypot_check(&data.honeypot)?;
+ if local_site.require_email_verification && data.email.is_none() {
+ return Err(LemmyErrorType::EmailRequired)?;
+ }
+
+ if local_site.site_setup && require_registration_application && data.answer.is_none() {
+ return Err(LemmyErrorType::RegistrationApplicationAnswerRequired)?;
+ }
+
// Make sure passwords match
if data.password != data.password_verify {
- return Err(ApiError::err_plain("passwords_dont_match").into());
+ return Err(LemmyErrorType::PasswordsDoNotMatch)?;
}
- // Check if there are admins. False if admins exist
- let no_admins = blocking(context.pool(), move |conn| {
- PersonViewSafe::admins(conn).map(|a| a.is_empty())
- })
- .await??;
-
- // If its not the admin, check the captcha
- if !no_admins && context.settings().captcha.enabled {
- let check = context
- .chat_server()
- .send(CheckCaptcha {
- uuid: data
- .captcha_uuid
- .to_owned()
- .unwrap_or_else(|| "".to_string()),
- answer: data
- .captcha_answer
- .to_owned()
- .unwrap_or_else(|| "".to_string()),
- })
+ if local_site.site_setup && local_site.captcha_enabled {
+ if let Some(captcha_uuid) = &data.captcha_uuid {
+ let uuid = uuid::Uuid::parse_str(captcha_uuid)?;
+ let check = CaptchaAnswer::check_captcha(
+ &mut context.pool(),
+ CheckCaptchaAnswer {
+ uuid,
+ answer: data.captcha_answer.clone().unwrap_or_default(),
+ },
+ )
.await?;
- if !check {
- return Err(ApiError::err_plain("captcha_incorrect").into());
+ if !check {
+ return Err(LemmyErrorType::CaptchaIncorrect)?;
+ }
+ } else {
+ return Err(LemmyErrorType::CaptchaIncorrect)?;
}
}
- check_slurs(&data.username, &context.settings().slur_regex())?;
+ let slur_regex = local_site_to_slur_regex(&local_site);
+ check_slurs(&data.username, &slur_regex)?;
+ check_slurs_opt(&data.answer, &slur_regex)?;
+ let username = sanitize_html(&data.username);
let actor_keypair = generate_actor_keypair()?;
- if !is_valid_actor_name(&data.username, context.settings().actor_name_max_length) {
- return Err(ApiError::err_plain("invalid_username").into());
- }
+ is_valid_actor_name(&data.username, local_site.actor_name_max_length as usize)?;
let actor_id = generate_local_apub_endpoint(
EndpointType::Person,
&data.username,
&context.settings().get_protocol_and_hostname(),
)?;
+ if let Some(email) = &data.email {
+ if LocalUser::is_email_taken(&mut context.pool(), email).await? {
+ return Err(LemmyErrorType::EmailAlreadyExists)?;
+ }
+ }
+
// We have to create both a person, and local_user
// Register the new person
- let person_form = PersonForm {
- name: data.username.to_owned(),
- actor_id: Some(actor_id.clone()),
- private_key: Some(Some(actor_keypair.private_key)),
- public_key: Some(Some(actor_keypair.public_key)),
- inbox_url: Some(generate_inbox_url(&actor_id)?),
- shared_inbox_url: Some(Some(generate_shared_inbox_url(&actor_id)?)),
- admin: Some(no_admins),
- ..PersonForm::default()
- };
+ let person_form = PersonInsertForm::builder()
+ .name(username)
+ .actor_id(Some(actor_id.clone()))
+ .private_key(Some(actor_keypair.private_key))
+ .public_key(actor_keypair.public_key)
+ .inbox_url(Some(generate_inbox_url(&actor_id)?))
+ .shared_inbox_url(Some(generate_shared_inbox_url(&actor_id)?))
+ // If its the initial site setup, they are an admin
+ .admin(Some(!local_site.site_setup))
+ .instance_id(site_view.site.instance_id)
+ .build();
// insert the person
- let inserted_person = blocking(context.pool(), move |conn| {
- Person::create(conn, &person_form)
- })
- .await?
- .map_err(|e| ApiError::err("user_already_exists", e))?;
+ let inserted_person = Person::create(&mut context.pool(), &person_form)
+ .await
+ .with_lemmy_type(LemmyErrorType::UserAlreadyExists)?;
+
+ // Automatically set their application as accepted, if they created this with open registration.
+ // Also fixes a bug which allows users to log in when registrations are changed to closed.
+ let accepted_application = Some(!require_registration_application);
// Create the local user
- // TODO some of these could probably use the DB defaults
- let local_user_form = LocalUserForm {
- person_id: inserted_person.id,
- email: Some(data.email.to_owned()),
- password_encrypted: data.password.to_owned(),
- show_nsfw: Some(data.show_nsfw),
- show_bot_accounts: Some(true),
- theme: Some("browser".into()),
- default_sort_type: Some(SortType::Active as i16),
- default_listing_type: Some(ListingType::Subscribed as i16),
- lang: Some("browser".into()),
- show_avatars: Some(true),
- show_scores: Some(true),
- show_read_posts: Some(true),
- show_new_post_notifs: Some(false),
- send_notifications_to_email: Some(false),
- };
+ let local_user_form = LocalUserInsertForm::builder()
+ .person_id(inserted_person.id)
+ .email(data.email.as_deref().map(str::to_lowercase))
+ .password_encrypted(data.password.to_string())
+ .show_nsfw(Some(data.show_nsfw))
+ .accepted_application(accepted_application)
+ .default_listing_type(Some(local_site.default_post_listing_type))
+ .build();
+
+ let inserted_local_user = LocalUser::create(&mut context.pool(), &local_user_form).await?;
+
+ if local_site.site_setup && require_registration_application {
+ // Create the registration application
+ let form = RegistrationApplicationInsertForm {
+ local_user_id: inserted_local_user.id,
+ // We already made sure answer was not null above
+ answer: data.answer.clone().expect("must have an answer"),
+ };
- let inserted_local_user = match blocking(context.pool(), move |conn| {
- LocalUser::register(conn, &local_user_form)
- })
- .await?
- {
- Ok(lu) => lu,
- Err(e) => {
- let err_type = if e.to_string()
- == "duplicate key value violates unique constraint \"local_user_email_key\""
- {
- "email_already_exists"
- } else {
- "user_already_exists"
- };
+ RegistrationApplication::create(&mut context.pool(), &form).await?;
+ }
- // If the local user creation errored, then delete that person
- blocking(context.pool(), move |conn| {
- Person::delete(conn, inserted_person.id)
- })
- .await??;
+ // Email the admins
+ if local_site.application_email_admins {
+ send_new_applicant_email_to_admins(&data.username, &mut context.pool(), context.settings())
+ .await?;
+ }
- return Err(ApiError::err(err_type, e).into());
- }
+ let mut login_response = LoginResponse {
+ jwt: None,
+ registration_created: false,
+ verify_email_sent: false,
};
- let main_community_keypair = generate_actor_keypair()?;
-
- // Create the main community if it doesn't exist
- let protocol_and_hostname = context.settings().get_protocol_and_hostname();
- let main_community = match blocking(context.pool(), move |conn| {
- Community::read(conn, CommunityId(2))
- })
- .await?
+ // Log the user in directly if the site is not setup, or email verification and application aren't required
+ if !local_site.site_setup
+ || (!require_registration_application && !local_site.require_email_verification)
{
- Ok(c) => c,
- Err(_e) => {
- let default_community_name = "main";
- let actor_id = generate_local_apub_endpoint(
- EndpointType::Community,
- default_community_name,
- &protocol_and_hostname,
- )?;
- let community_form = CommunityForm {
- name: default_community_name.to_string(),
- title: "The Default Community".to_string(),
- description: Some("The Default Community".to_string()),
- actor_id: Some(actor_id.to_owned()),
- private_key: Some(main_community_keypair.private_key),
- public_key: Some(main_community_keypair.public_key),
- followers_url: Some(generate_followers_url(&actor_id)?),
- inbox_url: Some(generate_inbox_url(&actor_id)?),
- shared_inbox_url: Some(Some(generate_shared_inbox_url(&actor_id)?)),
- ..CommunityForm::default()
+ login_response.jwt = Some(
+ Claims::jwt(
+ inserted_local_user.id.0,
+ &context.secret().jwt_secret,
+ &context.settings().hostname,
+ )?
+ .into(),
+ );
+ } else {
+ if local_site.require_email_verification {
+ let local_user_view = LocalUserView {
+ local_user: inserted_local_user,
+ person: inserted_person,
+ counts: PersonAggregates::default(),
};
- blocking(context.pool(), move |conn| {
- Community::create(conn, &community_form)
- })
- .await??
+ // we check at the beginning of this method that email is set
+ let email = local_user_view
+ .local_user
+ .email
+ .clone()
+ .expect("email was provided");
+
+ send_verification_email(
+ &local_user_view,
+ &email,
+ &mut context.pool(),
+ context.settings(),
+ )
+ .await?;
+ login_response.verify_email_sent = true;
}
- };
-
- // Sign them up for main community no matter what
- let community_follower_form = CommunityFollowerForm {
- community_id: main_community.id,
- person_id: inserted_person.id,
- pending: false,
- };
-
- let follow = move |conn: &'_ _| CommunityFollower::follow(conn, &community_follower_form);
- blocking(context.pool(), follow)
- .await?
- .map_err(|e| ApiError::err("community_follower_already_exists", e))?;
- // If its an admin, add them as a mod and follower to main
- if no_admins {
- let community_moderator_form = CommunityModeratorForm {
- community_id: main_community.id,
- person_id: inserted_person.id,
- };
-
- let join = move |conn: &'_ _| CommunityModerator::join(conn, &community_moderator_form);
- blocking(context.pool(), join)
- .await?
- .map_err(|e| ApiError::err("community_moderator_already_exists", e))?;
+ if require_registration_application {
+ login_response.registration_created = true;
+ }
}
- // Return the jwt
- Ok(LoginResponse {
- jwt: Claims::jwt(
- inserted_local_user.id.0,
- &context.secret().jwt_secret,
- &context.settings().hostname,
- )?,
- })
+ Ok(login_response)
}
}
projects / lemmy.git / blobdiff