9c77022513
* Make userapi responsible for checking access tokens There's still plenty of dependencies on account/device DBs, but this is a start. This is a breaking change as it adds a required config value `listen.user_api`. * Cleanup * Review comments and test fix
121 lines
3.5 KiB
Go
121 lines
3.5 KiB
Go
// Copyright 2017 Vector Creations Ltd
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package routing
|
|
|
|
import (
|
|
"encoding/json"
|
|
"io/ioutil"
|
|
"net/http"
|
|
|
|
"github.com/matrix-org/dendrite/clientapi/auth/storage/accounts"
|
|
"github.com/matrix-org/dendrite/clientapi/jsonerror"
|
|
"github.com/matrix-org/dendrite/clientapi/producers"
|
|
"github.com/matrix-org/dendrite/userapi/api"
|
|
"github.com/matrix-org/gomatrixserverlib"
|
|
|
|
"github.com/matrix-org/util"
|
|
)
|
|
|
|
// GetAccountData implements GET /user/{userId}/[rooms/{roomid}/]account_data/{type}
|
|
func GetAccountData(
|
|
req *http.Request, accountDB accounts.Database, device *api.Device,
|
|
userID string, roomID string, dataType string,
|
|
) util.JSONResponse {
|
|
if userID != device.UserID {
|
|
return util.JSONResponse{
|
|
Code: http.StatusForbidden,
|
|
JSON: jsonerror.Forbidden("userID does not match the current user"),
|
|
}
|
|
}
|
|
|
|
localpart, _, err := gomatrixserverlib.SplitID('@', userID)
|
|
if err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("gomatrixserverlib.SplitID failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
if data, err := accountDB.GetAccountDataByType(
|
|
req.Context(), localpart, roomID, dataType,
|
|
); err == nil {
|
|
return util.JSONResponse{
|
|
Code: http.StatusOK,
|
|
JSON: data,
|
|
}
|
|
}
|
|
|
|
return util.JSONResponse{
|
|
Code: http.StatusNotFound,
|
|
JSON: jsonerror.Forbidden("data not found"),
|
|
}
|
|
}
|
|
|
|
// SaveAccountData implements PUT /user/{userId}/[rooms/{roomId}/]account_data/{type}
|
|
func SaveAccountData(
|
|
req *http.Request, accountDB accounts.Database, device *api.Device,
|
|
userID string, roomID string, dataType string, syncProducer *producers.SyncAPIProducer,
|
|
) util.JSONResponse {
|
|
if userID != device.UserID {
|
|
return util.JSONResponse{
|
|
Code: http.StatusForbidden,
|
|
JSON: jsonerror.Forbidden("userID does not match the current user"),
|
|
}
|
|
}
|
|
|
|
localpart, _, err := gomatrixserverlib.SplitID('@', userID)
|
|
if err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("gomatrixserverlib.SplitID failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
defer req.Body.Close() // nolint: errcheck
|
|
|
|
if req.Body == http.NoBody {
|
|
return util.JSONResponse{
|
|
Code: http.StatusBadRequest,
|
|
JSON: jsonerror.NotJSON("Content not JSON"),
|
|
}
|
|
}
|
|
|
|
body, err := ioutil.ReadAll(req.Body)
|
|
if err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("ioutil.ReadAll failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
if !json.Valid(body) {
|
|
return util.JSONResponse{
|
|
Code: http.StatusBadRequest,
|
|
JSON: jsonerror.BadJSON("Bad JSON content"),
|
|
}
|
|
}
|
|
|
|
if err := accountDB.SaveAccountData(
|
|
req.Context(), localpart, roomID, dataType, string(body),
|
|
); err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("accountDB.SaveAccountData failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
if err := syncProducer.SendData(userID, roomID, dataType); err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("syncProducer.SendData failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
return util.JSONResponse{
|
|
Code: http.StatusOK,
|
|
JSON: struct{}{},
|
|
}
|
|
}
|