Migrate server to ESM

Sorry for the very big commit that may lead to git log issues and merge
conflicts, but it's a major step forward:

 * Server can be faster at startup because imports() are async and we can
   easily lazy import big modules
 * Angular doesn't seem to support ES import (with .js extension), so we
   had to correctly organize peertube into a monorepo:
    * Use yarn workspace feature
    * Use typescript reference projects for dependencies
    * Shared projects have been moved into "packages", each one is now a
      node module (with a dedicated package.json/tsconfig.json)
    * server/tools have been moved into apps/ and is now a dedicated app
      bundled and published on NPM so users don't have to build peertube
      cli tools manually
    * server/tests have been moved into packages/ so we don't compile
      them every time we want to run the server
 * Use isolatedModule option:
   * Had to move from const enum to const
     (https://www.typescriptlang.org/docs/handbook/enums.html#objects-vs-enums)
   * Had to explictely specify "type" imports when used in decorators
 * Prefer tsx (that uses esbuild under the hood) instead of ts-node to
   load typescript files (tests with mocha or scripts):
     * To reduce test complexity as esbuild doesn't support decorator
       metadata, we only test server files that do not import server
       models
     * We still build tests files into js files for a faster CI
 * Remove unmaintained peertube CLI import script
 * Removed some barrels to speed up execution (less imports)

1 files changed, 0 insertions, 156 deletions

diff --git a/server/middlewares/activitypub.ts b/server/middlewares/activitypub.ts
deleted file mode 100644
index 261b9f690..000000000
--- a/server/middlewares/activitypub.ts
+++ /dev/null
@@ -1,156 +0,0 @@
-import { NextFunction, Request, Response } from 'express'
-import { isActorDeleteActivityValid } from '@server/helpers/custom-validators/activitypub/actor'
-import { getAPId } from '@server/lib/activitypub/activity'
-import { wrapWithSpanAndContext } from '@server/lib/opentelemetry/tracing'
-import { ActivityDelete, ActivityPubSignature, HttpStatusCode } from '@shared/models'
-import { logger } from '../helpers/logger'
-import { isHTTPSignatureVerified, isJsonLDSignatureVerified, parseHTTPSignature } from '../helpers/peertube-crypto'
-import { ACCEPT_HEADERS, ACTIVITY_PUB, HTTP_SIGNATURE } from '../initializers/constants'
-import { getOrCreateAPActor, loadActorUrlOrGetFromWebfinger } from '../lib/activitypub/actors'
-
-async function checkSignature (req: Request, res: Response, next: NextFunction) {
-  try {
-    const httpSignatureChecked = await checkHttpSignature(req, res)
-    if (httpSignatureChecked !== true) return
-
-    const actor = res.locals.signature.actor
-
-    // Forwarded activity
-    const bodyActor = req.body.actor
-    const bodyActorId = getAPId(bodyActor)
-    if (bodyActorId && bodyActorId !== actor.url) {
-      const jsonLDSignatureChecked = await checkJsonLDSignature(req, res)
-      if (jsonLDSignatureChecked !== true) return
-    }
-
-    return next()
-  } catch (err) {
-    const activity: ActivityDelete = req.body
-    if (isActorDeleteActivityValid(activity) && activity.object === activity.actor) {
-      logger.debug('Handling signature error on actor delete activity', { err })
-      return res.status(HttpStatusCode.NO_CONTENT_204).end()
-    }
-
-    logger.warn('Error in ActivityPub signature checker.', { err })
-    return res.fail({
-      status: HttpStatusCode.FORBIDDEN_403,
-      message: 'ActivityPub signature could not be checked'
-    })
-  }
-}
-
-function executeIfActivityPub (req: Request, res: Response, next: NextFunction) {
-  const accepted = req.accepts(ACCEPT_HEADERS)
-  if (accepted === false || ACTIVITY_PUB.POTENTIAL_ACCEPT_HEADERS.includes(accepted) === false) {
-    // Bypass this route
-    return next('route')
-  }
-
-  logger.debug('ActivityPub request for %s.', req.url)
-
-  return next()
-}
-
-// ---------------------------------------------------------------------------
-
-export {
-  checkSignature,
-  executeIfActivityPub,
-  checkHttpSignature
-}
-
-// ---------------------------------------------------------------------------
-
-async function checkHttpSignature (req: Request, res: Response) {
-  return wrapWithSpanAndContext('peertube.activitypub.checkHTTPSignature', async () => {
-    // FIXME: compatibility with http-signature < v1.3
-    const sig = req.headers[HTTP_SIGNATURE.HEADER_NAME] as string
-    if (sig && sig.startsWith('Signature ') === true) req.headers[HTTP_SIGNATURE.HEADER_NAME] = sig.replace(/^Signature /, '')
-
-    let parsed: any
-
-    try {
-      parsed = parseHTTPSignature(req, HTTP_SIGNATURE.CLOCK_SKEW_SECONDS)
-    } catch (err) {
-      logger.warn('Invalid signature because of exception in signature parser', { reqBody: req.body, err })
-
-      res.fail({
-        status: HttpStatusCode.FORBIDDEN_403,
-        message: err.message
-      })
-      return false
-    }
-
-    const keyId = parsed.keyId
-    if (!keyId) {
-      res.fail({
-        status: HttpStatusCode.FORBIDDEN_403,
-        message: 'Invalid key ID',
-        data: {
-          keyId
-        }
-      })
-      return false
-    }
-
-    logger.debug('Checking HTTP signature of actor %s...', keyId)
-
-    let [ actorUrl ] = keyId.split('#')
-    if (actorUrl.startsWith('acct:')) {
-      actorUrl = await loadActorUrlOrGetFromWebfinger(actorUrl.replace(/^acct:/, ''))
-    }
-
-    const actor = await getOrCreateAPActor(actorUrl)
-
-    const verified = isHTTPSignatureVerified(parsed, actor)
-    if (verified !== true) {
-      logger.warn('Signature from %s is invalid', actorUrl, { parsed })
-
-      res.fail({
-        status: HttpStatusCode.FORBIDDEN_403,
-        message: 'Invalid signature',
-        data: {
-          actorUrl
-        }
-      })
-      return false
-    }
-
-    res.locals.signature = { actor }
-    return true
-  })
-}
-
-async function checkJsonLDSignature (req: Request, res: Response) {
-  return wrapWithSpanAndContext('peertube.activitypub.JSONLDSignature', async () => {
-    const signatureObject: ActivityPubSignature = req.body.signature
-
-    if (!signatureObject?.creator) {
-      res.fail({
-        status: HttpStatusCode.FORBIDDEN_403,
-        message: 'Object and creator signature do not match'
-      })
-      return false
-    }
-
-    const [ creator ] = signatureObject.creator.split('#')
-
-    logger.debug('Checking JsonLD signature of actor %s...', creator)
-
-    const actor = await getOrCreateAPActor(creator)
-    const verified = await isJsonLDSignatureVerified(actor, req.body)
-
-    if (verified !== true) {
-      logger.warn('Signature not verified.', req.body)
-
-      res.fail({
-        status: HttpStatusCode.FORBIDDEN_403,
-        message: 'Signature could not be verified'
-      })
-      return false
-    }
-
-    res.locals.signature = { actor }
-    return true
-  })
-}