2018-07-11 12:07:44 +02:00
|
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
// you may not use this file except in compliance with the License.
|
|
|
|
// You may obtain a copy of the License at
|
|
|
|
//
|
|
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
//
|
|
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
// See the License for the specific language governing permissions and
|
|
|
|
// limitations under the License.
|
|
|
|
|
|
|
|
package routing
|
|
|
|
|
|
|
|
import (
|
|
|
|
"net/http"
|
2018-08-06 15:09:25 +02:00
|
|
|
"time"
|
2018-07-11 12:07:44 +02:00
|
|
|
|
|
|
|
"github.com/matrix-org/dendrite/clientapi/jsonerror"
|
|
|
|
"github.com/matrix-org/dendrite/clientapi/producers"
|
|
|
|
"github.com/matrix-org/dendrite/common"
|
|
|
|
"github.com/matrix-org/dendrite/common/config"
|
|
|
|
"github.com/matrix-org/dendrite/roomserver/api"
|
|
|
|
"github.com/matrix-org/gomatrixserverlib"
|
|
|
|
"github.com/matrix-org/util"
|
|
|
|
)
|
|
|
|
|
|
|
|
// MakeLeave implements the /make_leave API
|
|
|
|
func MakeLeave(
|
|
|
|
httpReq *http.Request,
|
|
|
|
request *gomatrixserverlib.FederationRequest,
|
2020-02-11 12:18:12 +01:00
|
|
|
cfg *config.Dendrite,
|
2020-05-01 11:48:17 +02:00
|
|
|
rsAPI api.RoomserverInternalAPI,
|
2018-07-11 12:07:44 +02:00
|
|
|
roomID, userID string,
|
|
|
|
) util.JSONResponse {
|
|
|
|
_, domain, err := gomatrixserverlib.SplitID('@', userID)
|
|
|
|
if err != nil {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.BadJSON("Invalid UserID"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if domain != request.Origin() {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusForbidden,
|
|
|
|
JSON: jsonerror.Forbidden("The leave must be sent by the server of the user"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Try building an event for the server
|
|
|
|
builder := gomatrixserverlib.EventBuilder{
|
|
|
|
Sender: userID,
|
|
|
|
RoomID: roomID,
|
|
|
|
Type: "m.room.member",
|
|
|
|
StateKey: &userID,
|
|
|
|
}
|
2019-08-06 16:07:36 +02:00
|
|
|
err = builder.SetContent(map[string]interface{}{"membership": gomatrixserverlib.Leave})
|
2018-07-11 12:07:44 +02:00
|
|
|
if err != nil {
|
2020-03-02 17:20:44 +01:00
|
|
|
util.GetLogger(httpReq.Context()).WithError(err).Error("builder.SetContent failed")
|
|
|
|
return jsonerror.InternalServerError()
|
2018-07-11 12:07:44 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
var queryRes api.QueryLatestEventsAndStateResponse
|
2020-05-01 11:48:17 +02:00
|
|
|
event, err := common.BuildEvent(httpReq.Context(), &builder, cfg, time.Now(), rsAPI, &queryRes)
|
2018-07-11 12:07:44 +02:00
|
|
|
if err == common.ErrRoomNoExists {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusNotFound,
|
|
|
|
JSON: jsonerror.NotFound("Room does not exist"),
|
|
|
|
}
|
|
|
|
} else if err != nil {
|
2020-03-02 17:20:44 +01:00
|
|
|
util.GetLogger(httpReq.Context()).WithError(err).Error("common.BuildEvent failed")
|
|
|
|
return jsonerror.InternalServerError()
|
2018-07-11 12:07:44 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
// Check that the leave is allowed or not
|
|
|
|
stateEvents := make([]*gomatrixserverlib.Event, len(queryRes.StateEvents))
|
|
|
|
for i := range queryRes.StateEvents {
|
2020-03-16 18:29:52 +01:00
|
|
|
stateEvents[i] = &queryRes.StateEvents[i].Event
|
2018-07-11 12:07:44 +02:00
|
|
|
}
|
|
|
|
provider := gomatrixserverlib.NewAuthEvents(stateEvents)
|
|
|
|
if err = gomatrixserverlib.Allowed(*event, &provider); err != nil {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusForbidden,
|
|
|
|
JSON: jsonerror.Forbidden(err.Error()),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusOK,
|
|
|
|
JSON: map[string]interface{}{"event": builder},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// SendLeave implements the /send_leave API
|
|
|
|
func SendLeave(
|
|
|
|
httpReq *http.Request,
|
|
|
|
request *gomatrixserverlib.FederationRequest,
|
2020-02-11 12:18:12 +01:00
|
|
|
cfg *config.Dendrite,
|
2018-07-11 12:07:44 +02:00
|
|
|
producer *producers.RoomserverProducer,
|
|
|
|
keys gomatrixserverlib.KeyRing,
|
|
|
|
roomID, eventID string,
|
|
|
|
) util.JSONResponse {
|
2020-03-27 17:28:22 +01:00
|
|
|
verReq := api.QueryRoomVersionForRoomRequest{RoomID: roomID}
|
|
|
|
verRes := api.QueryRoomVersionForRoomResponse{}
|
2020-05-01 11:48:17 +02:00
|
|
|
if err := producer.RsAPI.QueryRoomVersionForRoom(httpReq.Context(), &verReq, &verRes); err != nil {
|
2020-03-27 17:28:22 +01:00
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.UnsupportedRoomVersion(err.Error()),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Decode the event JSON from the request.
|
|
|
|
event, err := gomatrixserverlib.NewEventFromUntrustedJSON(request.Content(), verRes.RoomVersion)
|
|
|
|
if err != nil {
|
2018-07-11 12:07:44 +02:00
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.NotJSON("The request body could not be decoded into valid JSON. " + err.Error()),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Check that the room ID is correct.
|
|
|
|
if event.RoomID() != roomID {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.BadJSON("The room ID in the request path must match the room ID in the leave event JSON"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Check that the event ID is correct.
|
|
|
|
if event.EventID() != eventID {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.BadJSON("The event ID in the request path must match the event ID in the leave event JSON"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Check that the event is from the server sending the request.
|
|
|
|
if event.Origin() != request.Origin() {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusForbidden,
|
|
|
|
JSON: jsonerror.Forbidden("The leave must be sent by the server it originated on"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Check that the event is signed by the server sending the request.
|
2020-03-27 17:28:22 +01:00
|
|
|
redacted := event.Redact()
|
2018-07-11 12:07:44 +02:00
|
|
|
verifyRequests := []gomatrixserverlib.VerifyJSONRequest{{
|
2020-04-20 18:42:34 +02:00
|
|
|
ServerName: event.Origin(),
|
|
|
|
Message: redacted.JSON(),
|
|
|
|
AtTS: event.OriginServerTS(),
|
|
|
|
StrictValidityChecking: true,
|
2018-07-11 12:07:44 +02:00
|
|
|
}}
|
|
|
|
verifyResults, err := keys.VerifyJSONs(httpReq.Context(), verifyRequests)
|
|
|
|
if err != nil {
|
2020-03-02 17:20:44 +01:00
|
|
|
util.GetLogger(httpReq.Context()).WithError(err).Error("keys.VerifyJSONs failed")
|
|
|
|
return jsonerror.InternalServerError()
|
2018-07-11 12:07:44 +02:00
|
|
|
}
|
|
|
|
if verifyResults[0].Error != nil {
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusForbidden,
|
|
|
|
JSON: jsonerror.Forbidden("The leave must be signed by the server it originated on"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// check membership is set to leave
|
|
|
|
mem, err := event.Membership()
|
|
|
|
if err != nil {
|
2020-03-02 17:20:44 +01:00
|
|
|
util.GetLogger(httpReq.Context()).WithError(err).Error("event.Membership failed")
|
|
|
|
return jsonerror.InternalServerError()
|
2019-08-06 16:07:36 +02:00
|
|
|
} else if mem != gomatrixserverlib.Leave {
|
2018-07-11 12:07:44 +02:00
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusBadRequest,
|
|
|
|
JSON: jsonerror.BadJSON("The membership in the event content must be set to leave"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Send the events to the room server.
|
|
|
|
// We are responsible for notifying other servers that the user has left
|
|
|
|
// the room, so set SendAsServer to cfg.Matrix.ServerName
|
2020-03-27 17:28:22 +01:00
|
|
|
_, err = producer.SendEvents(
|
|
|
|
httpReq.Context(),
|
|
|
|
[]gomatrixserverlib.HeaderedEvent{
|
|
|
|
event.Headered(verRes.RoomVersion),
|
|
|
|
},
|
|
|
|
cfg.Matrix.ServerName,
|
|
|
|
nil,
|
|
|
|
)
|
2018-07-11 12:07:44 +02:00
|
|
|
if err != nil {
|
2020-03-02 17:20:44 +01:00
|
|
|
util.GetLogger(httpReq.Context()).WithError(err).Error("producer.SendEvents failed")
|
|
|
|
return jsonerror.InternalServerError()
|
2018-07-11 12:07:44 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
return util.JSONResponse{
|
|
|
|
Code: http.StatusOK,
|
|
|
|
JSON: struct{}{},
|
|
|
|
}
|
|
|
|
}
|