/* * Copyright (C) 2022-2023 Jordan Bancino <@jordan:bancino.net> * * Permission is hereby granted, free of charge, to any person * obtaining a copy of this software and associated documentation files * (the "Software"), to deal in the Software without restriction, * including without limitation the rights to use, copy, modify, merge, * publish, distribute, sublicense, and/or sell copies of the Software, * and to permit persons to whom the Software is furnished to do so, * subject to the following conditions: * * The above copyright notice and this permission notice shall be * included in all copies or portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE * SOFTWARE. */ #include #include #include #include #include #include #include #include static char * GetServerName(Db * db) { char *name; Config *config = ConfigLock(db); if (!config) { return NULL; } name = StrDuplicate(config->serverName); ConfigUnlock(config); return name; } ROUTE_IMPL(RouteFilter, path, argp) { RouteArgs *args = argp; Db *db = args->matrixArgs->db; HashMap *request = NULL; HashMap *response = NULL; User *user = NULL; UserId *id = NULL; char *token = NULL; char *serverName = NULL; char *userParam = ArrayGet(path, 0); if (!userParam) { /* Should be impossible */ HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR); return MatrixErrorCreate(M_UNKNOWN, NULL); } serverName = GetServerName(db); if (!serverName) { HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR); response = MatrixErrorCreate(M_UNKNOWN, NULL); goto finish; } id = UserIdParse(userParam, serverName); if (!id) { HttpResponseStatus(args->context, HTTP_BAD_REQUEST); response = MatrixErrorCreate(M_INVALID_PARAM, NULL); goto finish; } if (!StrEquals(id->server, serverName)) { HttpResponseStatus(args->context, HTTP_UNAUTHORIZED); response = MatrixErrorCreate(M_UNAUTHORIZED, NULL); goto finish; } response = MatrixGetAccessToken(args->context, &token); if (response) { goto finish; } user = UserAuthenticate(db, token); if (!user) { HttpResponseStatus(args->context, HTTP_UNAUTHORIZED); response = MatrixErrorCreate(M_UNKNOWN_TOKEN, NULL); goto finish; } if (!StrEquals(id->localpart, UserGetName(user))) { HttpResponseStatus(args->context, HTTP_UNAUTHORIZED); response = MatrixErrorCreate(M_INVALID_PARAM, NULL); goto finish; } if (ArraySize(path) == 2 && HttpRequestMethodGet(args->context) == HTTP_GET) { DbRef *ref = DbLock(db, 3, "filters", UserGetName(user), ArrayGet(path, 1)); if (!ref) { HttpResponseStatus(args->context, HTTP_NOT_FOUND); response = MatrixErrorCreate(M_NOT_FOUND, NULL); goto finish; } response = JsonDuplicate(DbJson(ref)); DbUnlock(db, ref); } else if (ArraySize(path) == 1 && HttpRequestMethodGet(args->context) == HTTP_POST) { DbRef *ref; char *filterId; Filter filter = { 0 }; char *parseErr; HashMap *filterJson; request = JsonDecode(HttpServerStream(args->context)); if (!request) { HttpResponseStatus(args->context, HTTP_BAD_REQUEST); response = MatrixErrorCreate(M_NOT_JSON, NULL); goto finish; } if (!FilterFromJson(request, &filter, &parseErr)) { response = MatrixErrorCreate(M_BAD_JSON, parseErr); goto finish; } filterId = StrRandom(12); if (!filterId) { HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR); response = MatrixErrorCreate(M_UNKNOWN, NULL); goto finish; } ref = DbCreate(db, 3, "filters", UserGetName(user), filterId); if (!ref) { Free(filterId); HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR); response = MatrixErrorCreate(M_UNKNOWN, NULL); goto finish; } filterJson = FilterToJson(&filter); DbJsonSet(ref, filterJson); DbUnlock(db, ref); Free(filterJson); response = HashMapCreate(); HashMapSet(response, "filter_id", JsonValueString(filterId)); Free(filterId); FilterFree(&filter); } else { HttpResponseStatus(args->context, HTTP_BAD_REQUEST); response = MatrixErrorCreate(M_UNRECOGNIZED, NULL); } finish: Free(serverName); UserIdFree(id); UserUnlock(user); JsonFree(request); return response; }