mirror of
https://git.joinplu.me/Plume/Plume.git
synced 2025-03-01 12:51:00 +00:00
* Allow receiving objects with new unknown key * Rotate key after sending Delete activity * Do the right check
123 lines
5.1 KiB
Rust
123 lines
5.1 KiB
Rust
use activitypub::object::Note;
|
|
use rocket::{
|
|
request::LenientForm,
|
|
response::Redirect
|
|
};
|
|
use rocket_i18n::I18n;
|
|
use validator::Validate;
|
|
use template_utils::Ructe;
|
|
|
|
use std::time::Duration;
|
|
|
|
use plume_common::{utils, activity_pub::{broadcast, ApRequest,
|
|
ActivityStream, inbox::Deletable}};
|
|
use plume_models::{
|
|
blogs::Blog,
|
|
comments::*,
|
|
db_conn::DbConn,
|
|
instance::Instance,
|
|
mentions::Mention,
|
|
posts::Post,
|
|
safe_string::SafeString,
|
|
tags::Tag,
|
|
users::User
|
|
};
|
|
use Worker;
|
|
use routes::errors::ErrorPage;
|
|
|
|
#[derive(Default, FromForm, Debug, Validate, Serialize)]
|
|
pub struct NewCommentForm {
|
|
pub responding_to: Option<i32>,
|
|
#[validate(length(min = "1", message = "Your comment can't be empty"))]
|
|
pub content: String,
|
|
pub warning: String,
|
|
}
|
|
|
|
#[post("/~/<blog_name>/<slug>/comment", data = "<form>")]
|
|
pub fn create(blog_name: String, slug: String, form: LenientForm<NewCommentForm>, user: User, conn: DbConn, worker: Worker, intl: I18n)
|
|
-> Result<Redirect, Ructe> {
|
|
let blog = Blog::find_by_fqn(&*conn, &blog_name).expect("comments::create: blog error");
|
|
let post = Post::find_by_slug(&*conn, &slug, blog.id).expect("comments::create: post error");
|
|
form.validate()
|
|
.map(|_| {
|
|
let (html, mentions, _hashtags) = utils::md_to_html(
|
|
form.content.as_ref(),
|
|
&Instance::get_local(&conn).expect("comments::create: local instance error").public_domain
|
|
);
|
|
let comm = Comment::insert(&*conn, NewComment {
|
|
content: SafeString::new(html.as_ref()),
|
|
in_response_to_id: form.responding_to,
|
|
post_id: post.id,
|
|
author_id: user.id,
|
|
ap_url: None,
|
|
sensitive: !form.warning.is_empty(),
|
|
spoiler_text: form.warning.clone(),
|
|
public_visibility: true
|
|
}).expect("comments::create: insert error").update_ap_url(&*conn).expect("comments::create: update ap url error");
|
|
let new_comment = comm.create_activity(&*conn).expect("comments::create: activity error");
|
|
|
|
// save mentions
|
|
for ment in mentions {
|
|
Mention::from_activity(
|
|
&*conn,
|
|
&Mention::build_activity(&*conn, &ment).expect("comments::create: build mention error"),
|
|
post.id,
|
|
true,
|
|
true
|
|
).expect("comments::create: mention save error");
|
|
}
|
|
|
|
// federate
|
|
let dest = User::one_by_instance(&*conn).expect("comments::create: dest error");
|
|
let user_clone = user.clone();
|
|
worker.execute(move || broadcast(&user_clone, new_comment, dest));
|
|
|
|
Redirect::to(uri!(super::posts::details: blog = blog_name, slug = slug, responding_to = _))
|
|
})
|
|
.map_err(|errors| {
|
|
// TODO: de-duplicate this code
|
|
let comments = CommentTree::from_post(&*conn, &post, Some(&user)).expect("comments::create: comments error");
|
|
|
|
let previous = form.responding_to.and_then(|r| Comment::get(&*conn, r).ok());
|
|
|
|
render!(posts::details(
|
|
&(&*conn, &intl.catalog, Some(user.clone())),
|
|
post.clone(),
|
|
blog,
|
|
&*form,
|
|
errors,
|
|
Tag::for_post(&*conn, post.id).expect("comments::create: tags error"),
|
|
comments,
|
|
previous,
|
|
post.count_likes(&*conn).expect("comments::create: count likes error"),
|
|
post.count_reshares(&*conn).expect("comments::create: count reshares error"),
|
|
user.has_liked(&*conn, &post).expect("comments::create: liked error"),
|
|
user.has_reshared(&*conn, &post).expect("comments::create: reshared error"),
|
|
user.is_following(&*conn, post.get_authors(&*conn).expect("comments::create: authors error")[0].id)
|
|
.expect("comments::create: following error"),
|
|
post.get_authors(&*conn).expect("comments::create: authors error")[0].clone()
|
|
))
|
|
})
|
|
}
|
|
|
|
#[post("/~/<blog>/<slug>/comment/<id>/delete")]
|
|
pub fn delete(blog: String, slug: String, id: i32, user: User, conn: DbConn, worker: Worker) -> Result<Redirect, ErrorPage> {
|
|
if let Ok(comment) = Comment::get(&*conn, id) {
|
|
if comment.author_id == user.id {
|
|
let dest = User::one_by_instance(&*conn)?;
|
|
let delete_activity = comment.delete(&*conn)?;
|
|
let user_c = user.clone();
|
|
worker.execute(move || broadcast(&user_c, delete_activity, dest));
|
|
worker.execute_after(Duration::from_secs(10*60), move || {user.rotate_keypair(&conn).expect("Failed to rotate keypair");});
|
|
}
|
|
}
|
|
Ok(Redirect::to(uri!(super::posts::details: blog = blog, slug = slug, responding_to = _)))
|
|
}
|
|
|
|
#[get("/~/<_blog>/<_slug>/comment/<id>")]
|
|
pub fn activity_pub(_blog: String, _slug: String, id: i32, _ap: ApRequest, conn: DbConn) -> Option<ActivityStream<Note>> {
|
|
Comment::get(&*conn, id)
|
|
.and_then(|c| c.to_activity(&*conn))
|
|
.ok()
|
|
.map(ActivityStream::new)
|
|
}
|