// Matrix Construct // // Copyright (C) Matrix Construct Developers, Authors & Contributors // Copyright (C) 2016-2018 Jason Volk // // Permission to use, copy, modify, and/or distribute this software for any // purpose with or without fee is hereby granted, provided that the above // copyright notice and this permission notice is present in all copies. The // full license for this software is available in the LICENSE file. using namespace ircd; mapi::header IRCD_MODULE { "federation send" }; m::resource send_resource { "/_matrix/federation/v1/send/", { "federation send", resource::DIRECTORY, } }; conf::item allow_self { { "name", "ircd.federation.send.allow_self" }, { "default", false }, }; conf::item eval_max_per_node { { "name", "ircd.federation.send.eval.max_per_node" }, { "default", 1L }, }; conf::item fetch_state { { "name", "ircd.federation.send.fetch_state" }, { "default", true }, }; conf::item fetch_prev { { "name", "ircd.federation.send.fetch_prev" }, { "default", true }, }; void handle_edu(client &client, const m::resource::request::object &request, const string_view &txn_id, const m::edu &edu) { m::event event; json::get<"origin"_>(event) = request.origin; json::get<"origin_server_ts"_>(event) = at<"origin_server_ts"_>(request); json::get<"content"_>(event) = at<"content"_>(edu); json::get<"type"_>(event) = at<"edu_type"_>(edu); json::get<"depth"_>(event) = json::undefined_number; m::vm::opts vmopts; vmopts.nothrows = -1U; vmopts.nothrows &= ~m::vm::fault::INTERRUPT; vmopts.node_id = request.origin; vmopts.txn_id = txn_id; vmopts.edu = true; vmopts.notify_clients = false; vmopts.notify_servers = false; m::vm::eval eval { event, vmopts }; } void handle_pdus(client &client, const m::resource::request::object &request, const string_view &txn_id, const json::array &pdus) { m::vm::opts vmopts; vmopts.warnlog = 0; vmopts.infolog_accept = true; vmopts.nothrows = -1U; vmopts.nothrows &= ~m::vm::fault::INTERRUPT; vmopts.node_id = request.origin; vmopts.txn_id = txn_id; vmopts.fetch_prev = bool(fetch_state); vmopts.fetch_state = bool(fetch_prev); m::vm::eval eval { pdus, vmopts }; } json::object handle_txn(client &client, const m::resource::request::object &request, const string_view &txn_id, unique_mutable_buffer &buf) try { const auto &pdus { json::get<"pdus"_>(request) }; const auto &edus { json::get<"edus"_>(request) }; handle_pdus(client, request, txn_id, pdus); for(const json::object &edu : edus) handle_edu(client, request, txn_id, edu); return json::empty_object; } catch(const ctx::interrupted &) { throw; } catch(const std::exception &e) { log::critical { m::log, "Unhandled error processing txn '%s' from '%s' :%s", txn_id, request.origin, e.what(), }; throw; } m::resource::response handle_put(client &client, const m::resource::request::object &request) { if(request.parv.size() < 1) throw m::NEED_MORE_PARAMS { "txn_id path parameter required" }; char txn_id_buf[128]; const auto txn_id { url::decode(txn_id_buf, request.parv[0]) }; const string_view &origin { json::at<"origin"_>(request) }; char rembuf[64]; log::debug { m::log, "%s :%s | %s --> edus:%zu pdus:%zu", txn_id, origin, string(rembuf, remote(client)), json::get<"edus"_>(request).count(), json::get<"pdus"_>(request).count(), }; if(origin && origin != request.origin) throw m::ACCESS_DENIED { "txn[%s] originating from '%s' not accepted when relayed by '%s'", txn_id, origin, request.origin, }; // Don't accept sends to ourself for whatever reason (i.e a 127.0.0.1 // leaked into the target list). This should be a 500 so it's not // considered success or cached as failure by the sender's state. if(unlikely(my_host(request.origin)) && !bool(allow_self)) throw m::error { "M_SEND_TO_SELF", "Tried to send %s from myself to myself.", txn_id }; size_t evals{0}; const bool txn_in_progress { !m::vm::eval::for_each([&txn_id, &request, &evals] (const auto &eval) { assert(eval.opts); const bool match_node { eval.opts->node_id == request.origin }; const bool match_txn { match_node && eval.opts->txn_id == txn_id }; evals += match_node; return !match_txn; // false to break; for_each() returns false }) }; if(txn_in_progress) return m::resource::response { client, http::ACCEPTED }; if(evals >= size_t(eval_max_per_node)) return m::resource::response { client, http::TOO_MANY_REQUESTS }; // Lazy-allocated response buffer; only for error transcription unique_mutable_buffer response_buffer; const json::object &response { handle_txn(client, request, txn_id, response_buffer) }; return m::resource::response { client, response }; } m::resource::method method_put { send_resource, "PUT", handle_put, { method_put.VERIFY_ORIGIN, // Coarse timeout 90s, //TODO: conf // Payload maximum 4_MiB // larger = HTTP 413 //TODO: conf } };