1 files changed, 485 insertions, 0 deletions

diff --git a/server/server/controllers/activitypub/client.ts b/server/server/controllers/activitypub/client.ts
new file mode 100644
index 000000000..5d5e43bf5
--- /dev/null
+++ b/server/server/controllers/activitypub/client.ts
@@ -0,0 +1,485 @@
+import cors from 'cors'
+import express from 'express'
+import { VideoCommentObject, VideoPlaylistPrivacy, VideoPrivacy, VideoRateType } from '@peertube/peertube-models'
+import { activityPubCollectionPagination } from '@server/lib/activitypub/collection.js'
+import { getContextFilter } from '@server/lib/activitypub/context.js'
+import { getServerActor } from '@server/models/application/application.js'
+import { MAccountId, MActorId, MChannelId, MVideoId } from '@server/types/models/index.js'
+import { activityPubContextify } from '../../helpers/activity-pub-utils.js'
+import { ROUTE_CACHE_LIFETIME, WEBSERVER } from '../../initializers/constants.js'
+import { audiencify, getAudience } from '../../lib/activitypub/audience.js'
+import { buildAnnounceWithVideoAudience, buildLikeActivity } from '../../lib/activitypub/send/index.js'
+import { buildCreateActivity } from '../../lib/activitypub/send/send-create.js'
+import { buildDislikeActivity } from '../../lib/activitypub/send/send-dislike.js'
+import {
+  getLocalVideoCommentsActivityPubUrl,
+  getLocalVideoDislikesActivityPubUrl,
+  getLocalVideoLikesActivityPubUrl,
+  getLocalVideoSharesActivityPubUrl
+} from '../../lib/activitypub/url.js'
+import { cacheRoute } from '../../middlewares/cache/cache.js'
+import {
+  activityPubRateLimiter,
+  asyncMiddleware,
+  ensureIsLocalChannel,
+  executeIfActivityPub,
+  localAccountValidator,
+  videoChannelsNameWithHostValidator,
+  videosCustomGetValidator,
+  videosShareValidator
+} from '../../middlewares/index.js'
+import {
+  getAccountVideoRateValidatorFactory,
+  getVideoLocalViewerValidator,
+  videoCommentGetValidator
+} from '../../middlewares/validators/index.js'
+import { videoFileRedundancyGetValidator, videoPlaylistRedundancyGetValidator } from '../../middlewares/validators/redundancy.js'
+import { videoPlaylistElementAPGetValidator, videoPlaylistsGetValidator } from '../../middlewares/validators/videos/video-playlists.js'
+import { AccountVideoRateModel } from '../../models/account/account-video-rate.js'
+import { AccountModel } from '../../models/account/account.js'
+import { ActorFollowModel } from '../../models/actor/actor-follow.js'
+import { VideoCommentModel } from '../../models/video/video-comment.js'
+import { VideoPlaylistModel } from '../../models/video/video-playlist.js'
+import { VideoShareModel } from '../../models/video/video-share.js'
+import { activityPubResponse } from './utils.js'
+
+const activityPubClientRouter = express.Router()
+activityPubClientRouter.use(cors())
+
+// Intercept ActivityPub client requests
+
+activityPubClientRouter.get(
+  [ '/accounts?/:name', '/accounts?/:name/video-channels', '/a/:name', '/a/:name/video-channels' ],
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(localAccountValidator),
+  asyncMiddleware(accountController)
+)
+activityPubClientRouter.get('/accounts?/:name/followers',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(localAccountValidator),
+  asyncMiddleware(accountFollowersController)
+)
+activityPubClientRouter.get('/accounts?/:name/following',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(localAccountValidator),
+  asyncMiddleware(accountFollowingController)
+)
+activityPubClientRouter.get('/accounts?/:name/playlists',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(localAccountValidator),
+  asyncMiddleware(accountPlaylistsController)
+)
+activityPubClientRouter.get('/accounts?/:name/likes/:videoId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  cacheRoute(ROUTE_CACHE_LIFETIME.ACTIVITY_PUB.VIDEOS),
+  asyncMiddleware(getAccountVideoRateValidatorFactory('like')),
+  asyncMiddleware(getAccountVideoRateFactory('like'))
+)
+activityPubClientRouter.get('/accounts?/:name/dislikes/:videoId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  cacheRoute(ROUTE_CACHE_LIFETIME.ACTIVITY_PUB.VIDEOS),
+  asyncMiddleware(getAccountVideoRateValidatorFactory('dislike')),
+  asyncMiddleware(getAccountVideoRateFactory('dislike'))
+)
+
+activityPubClientRouter.get(
+  [ '/videos/watch/:id', '/w/:id' ],
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  cacheRoute(ROUTE_CACHE_LIFETIME.ACTIVITY_PUB.VIDEOS),
+  asyncMiddleware(videosCustomGetValidator('all')),
+  asyncMiddleware(videoController)
+)
+activityPubClientRouter.get('/videos/watch/:id/activity',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosCustomGetValidator('all')),
+  asyncMiddleware(videoController)
+)
+activityPubClientRouter.get('/videos/watch/:id/announces',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosCustomGetValidator('only-immutable-attributes')),
+  asyncMiddleware(videoAnnouncesController)
+)
+activityPubClientRouter.get('/videos/watch/:id/announces/:actorId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosShareValidator),
+  asyncMiddleware(videoAnnounceController)
+)
+activityPubClientRouter.get('/videos/watch/:id/likes',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosCustomGetValidator('only-immutable-attributes')),
+  asyncMiddleware(videoLikesController)
+)
+activityPubClientRouter.get('/videos/watch/:id/dislikes',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosCustomGetValidator('only-immutable-attributes')),
+  asyncMiddleware(videoDislikesController)
+)
+activityPubClientRouter.get('/videos/watch/:id/comments',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videosCustomGetValidator('only-immutable-attributes')),
+  asyncMiddleware(videoCommentsController)
+)
+activityPubClientRouter.get('/videos/watch/:videoId/comments/:commentId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoCommentGetValidator),
+  asyncMiddleware(videoCommentController)
+)
+activityPubClientRouter.get('/videos/watch/:videoId/comments/:commentId/activity',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoCommentGetValidator),
+  asyncMiddleware(videoCommentController)
+)
+
+activityPubClientRouter.get(
+  [ '/video-channels/:nameWithHost', '/video-channels/:nameWithHost/videos', '/c/:nameWithHost', '/c/:nameWithHost/videos' ],
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoChannelsNameWithHostValidator),
+  ensureIsLocalChannel,
+  asyncMiddleware(videoChannelController)
+)
+activityPubClientRouter.get('/video-channels/:nameWithHost/followers',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoChannelsNameWithHostValidator),
+  ensureIsLocalChannel,
+  asyncMiddleware(videoChannelFollowersController)
+)
+activityPubClientRouter.get('/video-channels/:nameWithHost/following',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoChannelsNameWithHostValidator),
+  ensureIsLocalChannel,
+  asyncMiddleware(videoChannelFollowingController)
+)
+activityPubClientRouter.get('/video-channels/:nameWithHost/playlists',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoChannelsNameWithHostValidator),
+  ensureIsLocalChannel,
+  asyncMiddleware(videoChannelPlaylistsController)
+)
+
+activityPubClientRouter.get('/redundancy/videos/:videoId/:resolution([0-9]+)(-:fps([0-9]+))?',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoFileRedundancyGetValidator),
+  asyncMiddleware(videoRedundancyController)
+)
+activityPubClientRouter.get('/redundancy/streaming-playlists/:streamingPlaylistType/:videoId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoPlaylistRedundancyGetValidator),
+  asyncMiddleware(videoRedundancyController)
+)
+
+activityPubClientRouter.get(
+  [ '/video-playlists/:playlistId', '/videos/watch/playlist/:playlistId', '/w/p/:playlistId' ],
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoPlaylistsGetValidator('all')),
+  asyncMiddleware(videoPlaylistController)
+)
+activityPubClientRouter.get('/video-playlists/:playlistId/videos/:playlistElementId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(videoPlaylistElementAPGetValidator),
+  asyncMiddleware(videoPlaylistElementController)
+)
+
+activityPubClientRouter.get('/videos/local-viewer/:localViewerId',
+  executeIfActivityPub,
+  activityPubRateLimiter,
+  asyncMiddleware(getVideoLocalViewerValidator),
+  asyncMiddleware(getVideoLocalViewerController)
+)
+
+// ---------------------------------------------------------------------------
+
+export {
+  activityPubClientRouter
+}
+
+// ---------------------------------------------------------------------------
+
+async function accountController (req: express.Request, res: express.Response) {
+  const account = res.locals.account
+
+  return activityPubResponse(activityPubContextify(await account.toActivityPubObject(), 'Actor', getContextFilter()), res)
+}
+
+async function accountFollowersController (req: express.Request, res: express.Response) {
+  const account = res.locals.account
+  const activityPubResult = await actorFollowers(req, account.Actor)
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+async function accountFollowingController (req: express.Request, res: express.Response) {
+  const account = res.locals.account
+  const activityPubResult = await actorFollowing(req, account.Actor)
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+async function accountPlaylistsController (req: express.Request, res: express.Response) {
+  const account = res.locals.account
+  const activityPubResult = await actorPlaylists(req, { account })
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+async function videoChannelPlaylistsController (req: express.Request, res: express.Response) {
+  const channel = res.locals.videoChannel
+  const activityPubResult = await actorPlaylists(req, { channel })
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+function getAccountVideoRateFactory (rateType: VideoRateType) {
+  return (req: express.Request, res: express.Response) => {
+    const accountVideoRate = res.locals.accountVideoRate
+
+    const byActor = accountVideoRate.Account.Actor
+    const APObject = rateType === 'like'
+      ? buildLikeActivity(accountVideoRate.url, byActor, accountVideoRate.Video)
+      : buildDislikeActivity(accountVideoRate.url, byActor, accountVideoRate.Video)
+
+    return activityPubResponse(activityPubContextify(APObject, 'Rate', getContextFilter()), res)
+  }
+}
+
+async function videoController (req: express.Request, res: express.Response) {
+  const video = res.locals.videoAll
+
+  if (redirectIfNotOwned(video.url, res)) return
+
+  // We need captions to render AP object
+  const videoAP = await video.lightAPToFullAP(undefined)
+
+  const audience = getAudience(videoAP.VideoChannel.Account.Actor, videoAP.privacy === VideoPrivacy.PUBLIC)
+  const videoObject = audiencify(await videoAP.toActivityPubObject(), audience)
+
+  if (req.path.endsWith('/activity')) {
+    const data = buildCreateActivity(videoAP.url, video.VideoChannel.Account.Actor, videoObject, audience)
+    return activityPubResponse(activityPubContextify(data, 'Video', getContextFilter()), res)
+  }
+
+  return activityPubResponse(activityPubContextify(videoObject, 'Video', getContextFilter()), res)
+}
+
+async function videoAnnounceController (req: express.Request, res: express.Response) {
+  const share = res.locals.videoShare
+
+  if (redirectIfNotOwned(share.url, res)) return
+
+  const { activity } = await buildAnnounceWithVideoAudience(share.Actor, share, res.locals.videoAll, undefined)
+
+  return activityPubResponse(activityPubContextify(activity, 'Announce', getContextFilter()), res)
+}
+
+async function videoAnnouncesController (req: express.Request, res: express.Response) {
+  const video = res.locals.onlyImmutableVideo
+
+  if (redirectIfNotOwned(video.url, res)) return
+
+  const handler = async (start: number, count: number) => {
+    const result = await VideoShareModel.listAndCountByVideoId(video.id, start, count)
+    return {
+      total: result.total,
+      data: result.data.map(r => r.url)
+    }
+  }
+  const json = await activityPubCollectionPagination(getLocalVideoSharesActivityPubUrl(video), handler, req.query.page)
+
+  return activityPubResponse(activityPubContextify(json, 'Collection', getContextFilter()), res)
+}
+
+async function videoLikesController (req: express.Request, res: express.Response) {
+  const video = res.locals.onlyImmutableVideo
+
+  if (redirectIfNotOwned(video.url, res)) return
+
+  const json = await videoRates(req, 'like', video, getLocalVideoLikesActivityPubUrl(video))
+
+  return activityPubResponse(activityPubContextify(json, 'Collection', getContextFilter()), res)
+}
+
+async function videoDislikesController (req: express.Request, res: express.Response) {
+  const video = res.locals.onlyImmutableVideo
+
+  if (redirectIfNotOwned(video.url, res)) return
+
+  const json = await videoRates(req, 'dislike', video, getLocalVideoDislikesActivityPubUrl(video))
+
+  return activityPubResponse(activityPubContextify(json, 'Collection', getContextFilter()), res)
+}
+
+async function videoCommentsController (req: express.Request, res: express.Response) {
+  const video = res.locals.onlyImmutableVideo
+
+  if (redirectIfNotOwned(video.url, res)) return
+
+  const handler = async (start: number, count: number) => {
+    const result = await VideoCommentModel.listAndCountByVideoForAP({ video, start, count })
+
+    return {
+      total: result.total,
+      data: result.data.map(r => r.url)
+    }
+  }
+  const json = await activityPubCollectionPagination(getLocalVideoCommentsActivityPubUrl(video), handler, req.query.page)
+
+  return activityPubResponse(activityPubContextify(json, 'Collection', getContextFilter()), res)
+}
+
+async function videoChannelController (req: express.Request, res: express.Response) {
+  const videoChannel = res.locals.videoChannel
+
+  return activityPubResponse(activityPubContextify(await videoChannel.toActivityPubObject(), 'Actor', getContextFilter()), res)
+}
+
+async function videoChannelFollowersController (req: express.Request, res: express.Response) {
+  const videoChannel = res.locals.videoChannel
+  const activityPubResult = await actorFollowers(req, videoChannel.Actor)
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+async function videoChannelFollowingController (req: express.Request, res: express.Response) {
+  const videoChannel = res.locals.videoChannel
+  const activityPubResult = await actorFollowing(req, videoChannel.Actor)
+
+  return activityPubResponse(activityPubContextify(activityPubResult, 'Collection', getContextFilter()), res)
+}
+
+async function videoCommentController (req: express.Request, res: express.Response) {
+  const videoComment = res.locals.videoCommentFull
+
+  if (redirectIfNotOwned(videoComment.url, res)) return
+
+  const threadParentComments = await VideoCommentModel.listThreadParentComments(videoComment, undefined)
+  const isPublic = true // Comments are always public
+  let videoCommentObject = videoComment.toActivityPubObject(threadParentComments)
+
+  if (videoComment.Account) {
+    const audience = getAudience(videoComment.Account.Actor, isPublic)
+    videoCommentObject = audiencify(videoCommentObject, audience)
+
+    if (req.path.endsWith('/activity')) {
+      const data = buildCreateActivity(videoComment.url, videoComment.Account.Actor, videoCommentObject as VideoCommentObject, audience)
+      return activityPubResponse(activityPubContextify(data, 'Comment', getContextFilter()), res)
+    }
+  }
+
+  return activityPubResponse(activityPubContextify(videoCommentObject, 'Comment', getContextFilter()), res)
+}
+
+async function videoRedundancyController (req: express.Request, res: express.Response) {
+  const videoRedundancy = res.locals.videoRedundancy
+
+  if (redirectIfNotOwned(videoRedundancy.url, res)) return
+
+  const serverActor = await getServerActor()
+
+  const audience = getAudience(serverActor)
+  const object = audiencify(videoRedundancy.toActivityPubObject(), audience)
+
+  if (req.path.endsWith('/activity')) {
+    const data = buildCreateActivity(videoRedundancy.url, serverActor, object, audience)
+    return activityPubResponse(activityPubContextify(data, 'CacheFile', getContextFilter()), res)
+  }
+
+  return activityPubResponse(activityPubContextify(object, 'CacheFile', getContextFilter()), res)
+}
+
+async function videoPlaylistController (req: express.Request, res: express.Response) {
+  const playlist = res.locals.videoPlaylistFull
+
+  if (redirectIfNotOwned(playlist.url, res)) return
+
+  // We need more attributes
+  playlist.OwnerAccount = await AccountModel.load(playlist.ownerAccountId)
+
+  const json = await playlist.toActivityPubObject(req.query.page, null)
+  const audience = getAudience(playlist.OwnerAccount.Actor, playlist.privacy === VideoPlaylistPrivacy.PUBLIC)
+  const object = audiencify(json, audience)
+
+  return activityPubResponse(activityPubContextify(object, 'Playlist', getContextFilter()), res)
+}
+
+function videoPlaylistElementController (req: express.Request, res: express.Response) {
+  const videoPlaylistElement = res.locals.videoPlaylistElementAP
+
+  if (redirectIfNotOwned(videoPlaylistElement.url, res)) return
+
+  const json = videoPlaylistElement.toActivityPubObject()
+  return activityPubResponse(activityPubContextify(json, 'Playlist', getContextFilter()), res)
+}
+
+function getVideoLocalViewerController (req: express.Request, res: express.Response) {
+  const localViewer = res.locals.localViewerFull
+
+  return activityPubResponse(activityPubContextify(localViewer.toActivityPubObject(), 'WatchAction', getContextFilter()), res)
+}
+
+// ---------------------------------------------------------------------------
+
+function actorFollowing (req: express.Request, actor: MActorId) {
+  const handler = (start: number, count: number) => {
+    return ActorFollowModel.listAcceptedFollowingUrlsForApi([ actor.id ], undefined, start, count)
+  }
+
+  return activityPubCollectionPagination(WEBSERVER.URL + req.path, handler, req.query.page)
+}
+
+function actorFollowers (req: express.Request, actor: MActorId) {
+  const handler = (start: number, count: number) => {
+    return ActorFollowModel.listAcceptedFollowerUrlsForAP([ actor.id ], undefined, start, count)
+  }
+
+  return activityPubCollectionPagination(WEBSERVER.URL + req.path, handler, req.query.page)
+}
+
+function actorPlaylists (req: express.Request, options: { account: MAccountId } | { channel: MChannelId }) {
+  const handler = (start: number, count: number) => {
+    return VideoPlaylistModel.listPublicUrlsOfForAP(options, start, count)
+  }
+
+  return activityPubCollectionPagination(WEBSERVER.URL + req.path, handler, req.query.page)
+}
+
+function videoRates (req: express.Request, rateType: VideoRateType, video: MVideoId, url: string) {
+  const handler = async (start: number, count: number) => {
+    const result = await AccountVideoRateModel.listAndCountAccountUrlsByVideoId(rateType, video.id, start, count)
+    return {
+      total: result.total,
+      data: result.data.map(r => r.url)
+    }
+  }
+  return activityPubCollectionPagination(url, handler, req.query.page)
+}
+
+function redirectIfNotOwned (url: string, res: express.Response) {
+  if (url.startsWith(WEBSERVER.URL) === false) {
+    res.redirect(url)
+    return true
+  }
+
+  return false
+}