X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=sidebyside;f=server%2Fmiddlewares%2Fvalidators%2Ffollows.ts;h=2e5a02307743d16ef3bef12dfadf48f7e4377b1b;hb=cce1b3dfd386c77a02f2b4f18f60bd916a60a2d3;hp=bdf39eb9c543389b58139d87e8e5339e822b6c54;hpb=48dce1c90dff4e90a4bcffefaecf157336cf904b;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/validators/follows.ts b/server/middlewares/validators/follows.ts index bdf39eb9c..2e5a02307 100644 --- a/server/middlewares/validators/follows.ts +++ b/server/middlewares/validators/follows.ts @@ -4,17 +4,20 @@ import { isTestInstance } from '../../helpers/core-utils' import { isEachUniqueHostValid, isHostValid } from '../../helpers/custom-validators/servers' import { logger } from '../../helpers/logger' import { getServerActor } from '../../helpers/utils' -import { CONFIG } from '../../initializers' +import { SERVER_ACTOR_NAME, WEBSERVER } from '../../initializers/constants' import { ActorFollowModel } from '../../models/activitypub/actor-follow' import { areValidationErrors } from './utils' +import { ActorModel } from '../../models/activitypub/actor' +import { loadActorUrlOrGetFromWebfinger } from '../../helpers/webfinger' +import { isValidActorHandle } from '../../helpers/custom-validators/activitypub/actor' const followValidator = [ body('hosts').custom(isEachUniqueHostValid).withMessage('Should have an array of unique hosts'), (req: express.Request, res: express.Response, next: express.NextFunction) => { // Force https if the administrator wants to make friends - if (isTestInstance() === false && CONFIG.WEBSERVER.SCHEME === 'http') { - return res.status(400) + if (isTestInstance() === false && WEBSERVER.SCHEME === 'http') { + return res.status(500) .json({ error: 'Cannot follow on a non HTTPS web server.' }) @@ -33,18 +36,18 @@ const removeFollowingValidator = [ param('host').custom(isHostValid).withMessage('Should have a valid host'), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking unfollow parameters', { parameters: req.params }) + logger.debug('Checking unfollowing parameters', { parameters: req.params }) if (areValidationErrors(req, res)) return const serverActor = await getServerActor() - const follow = await ActorFollowModel.loadByActorAndTargetHost(serverActor.id, req.params.host) + const follow = await ActorFollowModel.loadByActorAndTargetNameAndHostForAPI(serverActor.id, SERVER_ACTOR_NAME, req.params.host) if (!follow) { return res .status(404) .json({ - error: `Follower ${req.params.host} not found.` + error: `Following ${req.params.host} not found.` }) .end() } @@ -54,9 +57,57 @@ const removeFollowingValidator = [ } ] +const getFollowerValidator = [ + param('nameWithHost').custom(isValidActorHandle).withMessage('Should have a valid nameWithHost'), + + async (req: express.Request, res: express.Response, next: express.NextFunction) => { + logger.debug('Checking get follower parameters', { parameters: req.params }) + + if (areValidationErrors(req, res)) return + + let follow: ActorFollowModel + try { + const actorUrl = await loadActorUrlOrGetFromWebfinger(req.params.nameWithHost) + const actor = await ActorModel.loadByUrl(actorUrl) + + const serverActor = await getServerActor() + follow = await ActorFollowModel.loadByActorAndTarget(actor.id, serverActor.id) + } catch (err) { + logger.warn('Cannot get actor from handle.', { handle: req.params.nameWithHost, err }) + } + + if (!follow) { + return res + .status(404) + .json({ + error: `Follower ${req.params.nameWithHost} not found.` + }) + .end() + } + + res.locals.follow = follow + return next() + } +] + +const acceptOrRejectFollowerValidator = [ + (req: express.Request, res: express.Response, next: express.NextFunction) => { + logger.debug('Checking accept/reject follower parameters', { parameters: req.params }) + + const follow = res.locals.follow + if (follow.state !== 'pending') { + return res.status(400).json({ error: 'Follow is not in pending state.' }).end() + } + + return next() + } +] + // --------------------------------------------------------------------------- export { followValidator, - removeFollowingValidator + removeFollowingValidator, + getFollowerValidator, + acceptOrRejectFollowerValidator }