From 2a87583d2f6eaa5239aaf0efe4ea018075626362 Mon Sep 17 00:00:00 2001
From: Jordan Bancino <jordan@bancino.net>
Date: Sat, 6 May 2023 22:06:23 +0000
Subject: [PATCH] Add /_matrix/client/v3/account/deactivate

---
 src/Routes/RouteDeactivate.c | 148 +++++++++++++++++++++++++++++++++++
 src/include/Routes.h         |   1 +
 2 files changed, 149 insertions(+)
 create mode 100644 src/Routes/RouteDeactivate.c

diff --git a/src/Routes/RouteDeactivate.c b/src/Routes/RouteDeactivate.c
new file mode 100644
index 0000000..4d0fcba
--- /dev/null
+++ b/src/Routes/RouteDeactivate.c
@@ -0,0 +1,148 @@
+/*
+ * Copyright (C) 2022-2023 Jordan Bancino <@jordan:bancino.net>
+ *
+ * Permission is hereby granted, free of charge, to any person
+ * obtaining a copy of this software and associated documentation files
+ * (the "Software"), to deal in the Software without restriction,
+ * including without limitation the rights to use, copy, modify, merge,
+ * publish, distribute, sublicense, and/or sell copies of the Software,
+ * and to permit persons to whom the Software is furnished to do so,
+ * subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT.  IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+ * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+#include <Routes.h>
+
+#include <string.h>
+
+#include <Array.h>
+#include <HashMap.h>
+#include <Json.h>
+#include <Str.h>
+#include <Memory.h>
+#include <User.h>
+#include <Uia.h>
+
+ROUTE_IMPL(RouteDeactivate, path, argp)
+{
+    RouteArgs *args = argp;
+    HashMap *response = NULL;
+    HashMap *request = NULL;
+    int uiaResult;
+
+    char *tokenstr = NULL;
+    Array *uiaFlows;
+
+    Db *db = args->matrixArgs->db;
+    User *user = NULL;
+    Config *config = ConfigLock(db);
+
+    (void) path;
+
+    if (!config)
+    {
+        Log(LOG_ERR, "Deactivate endpoint failed to lock configuration.");
+        HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR);
+        response = MatrixErrorCreate(M_UNKNOWN);
+        goto finish;
+    }
+
+    if (HttpRequestMethodGet(args->context) != HTTP_POST)
+    {
+        HttpResponseStatus(args->context, HTTP_BAD_REQUEST);
+        response = MatrixErrorCreate(M_UNRECOGNIZED);
+        goto finish;
+    }
+
+    request = JsonDecode(HttpServerStream(args->context));
+    if (!request)
+    {
+        HttpResponseStatus(args->context, HTTP_BAD_REQUEST);
+        response = MatrixErrorCreate(M_NOT_JSON);
+        goto finish;
+    }
+
+    uiaFlows = ArrayCreate();
+    response = MatrixGetAccessToken(args->context, &tokenstr);
+
+    if (response)
+    {
+        /* No access token provided, require password */
+        Array *passwordFlow = ArrayCreate();
+        ArrayAdd(passwordFlow, UiaStageBuild("m.login.password", NULL));
+        ArrayAdd(uiaFlows, passwordFlow);
+    }
+    else
+    {
+        /* Access token provided, no further authentication needed. */
+        ArrayAdd(uiaFlows, UiaDummyFlow());
+        JsonFree(response);
+    }
+
+    uiaResult = UiaComplete(uiaFlows, args->context, db, request, &response, config);
+    UiaFlowsFree(uiaFlows);
+
+    if (uiaResult < 0)
+    {
+        HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR);
+        response = MatrixErrorCreate(M_UNKNOWN);
+        goto finish;
+    }
+    else if (!uiaResult)
+    {
+        goto finish;
+    }
+
+    if (tokenstr)
+    {
+        user = UserAuthenticate(db, tokenstr);
+    }
+    else
+    {
+        /* No access token, we have to get the user off UIA */
+        char * session = JsonValueAsString(JsonGet(request, 2, "auth", "session"));
+        DbRef *sessionRef = DbLock(db, 2, "user_interactive", session);
+        char *userId = JsonValueAsString(HashMapGet(DbJson(sessionRef), "user"));
+
+        user = UserLock(db, userId);
+        DbUnlock(db, sessionRef);
+    }
+
+    if (!user)
+    {
+        HttpResponseStatus(args->context, HTTP_UNAUTHORIZED);
+        response = MatrixErrorCreate(M_UNKNOWN_TOKEN);
+        goto finish;
+    }
+
+    if (!UserDeleteTokens(user, NULL) || !UserDeactivate(user))
+    {
+        HttpResponseStatus(args->context, HTTP_INTERNAL_SERVER_ERROR);
+        response = MatrixErrorCreate(M_UNKNOWN);
+        goto finish;
+    }
+
+    response = HashMapCreate();
+
+    /*
+     * "This must be success if the homeserver has no identifiers to
+     * unbind for the user."
+     */
+    HashMapSet(response, "id_server_unbind_result", JsonValueString("success"));
+
+finish:
+    JsonFree(request);
+    UserUnlock(user);
+    ConfigUnlock(config);
+    return response;
+}
diff --git a/src/include/Routes.h b/src/include/Routes.h
index 14f4603..956a193 100644
--- a/src/include/Routes.h
+++ b/src/include/Routes.h
@@ -85,6 +85,7 @@ ROUTE(RouteRegister);
 ROUTE(RouteRefresh);
 ROUTE(RouteWhoami);
 ROUTE(RouteChangePwd);
+ROUTE(RouteDeactivate);
 ROUTE(RouteTokenValid);
 ROUTE(RouteUserProfile);
 ROUTE(RouteRequestToken);