Skip to content
Snippets Groups Projects
membership.rs 37.4 KiB
Newer Older
use ruma::{
    api::{
        client::{
            error::ErrorKind,
Jonathan de Jong's avatar
Jonathan de Jong committed
            membership::{
                ban_user, forget_room, get_member_events, invite_user, join_room_by_id,
                join_room_by_id_or_alias, joined_members, joined_rooms, kick_user, leave_room,
                unban_user, IncomingThirdPartySigned,
        federation::{self, membership::create_invite},
    },
    events::{
Jonas Platte's avatar
Jonas Platte committed
        room::{
            create::RoomCreateEventContent,
            member::{MembershipState, RoomMemberEventContent},
        },
Timo Kösters's avatar
Timo Kösters committed
        RoomEventType, StateEventType,
    serde::{to_canonical_value, Base64, CanonicalJsonObject, CanonicalJsonValue},
    state_res::{self, RoomVersion},
    uint, EventId, RoomId, RoomVersionId, ServerName, UserId,
Jonas Platte's avatar
Jonas Platte committed
use serde_json::value::{to_raw_value, RawValue as RawJsonValue};
    collections::{hash_map::Entry, BTreeMap, HashMap, HashSet},
Jonas Platte's avatar
Jonas Platte committed
    iter,
    sync::{Arc, RwLock},
use crate::{Result, services, PduEvent, service::pdu::{gen_event_id_canonical_json, PduBuilder}, Error, api::{server_server, client_server}, utils, Ruma};

use super::get_alias_helper;

/// # `POST /_matrix/client/r0/rooms/{roomId}/join`
///
/// Tries to join the sender user into a room.
///
/// - If the server knowns about this room: creates the join event and does auth rules locally
/// - If the server does not know about the room: asks other servers over federation
pub async fn join_room_by_id_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<join_room_by_id::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<join_room_by_id::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");

    let mut servers = Vec::new(); // There is no body.server_name for /roomId/join
    servers.extend(
        services().rooms
        .state_cache
            .invite_state(sender_user, &body.room_id)?
            .unwrap_or_default()
            .iter()
            .filter_map(|event| serde_json::from_str(event.json().get()).ok())
            .filter_map(|event: serde_json::Value| event.get("sender").cloned())
            .filter_map(|sender| sender.as_str().map(|s| s.to_owned()))
            .filter_map(|sender| UserId::parse(sender).ok())
            .map(|user| user.server_name().to_owned()),
    );

    servers.push(body.room_id.server_name().to_owned());
Jonathan de Jong's avatar
Jonathan de Jong committed
    let ret = join_room_by_id_helper(
Jonas Platte's avatar
Jonas Platte committed
        body.sender_user.as_deref(),
        body.third_party_signed.as_ref(),
    )
Jonathan de Jong's avatar
Jonathan de Jong committed
    .await;

    ret
/// # `POST /_matrix/client/r0/join/{roomIdOrAlias}`
///
/// Tries to join the sender user into a room.
///
/// - If the server knowns about this room: creates the join event and does auth rules locally
/// - If the server does not know about the room: asks other servers over federation
pub async fn join_room_by_id_or_alias_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<join_room_by_id_or_alias::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<join_room_by_id_or_alias::v3::Response> {
    let sender_user = body.sender_user.as_deref().expect("user is authenticated");
    let body = body.body;
    let (servers, room_id) = match Box::<RoomId>::try_from(body.room_id_or_alias) {
            let mut servers = body.server_name.clone();
            servers.extend(
                services().rooms
                .state_cache
                    .invite_state(sender_user, &room_id)?
                    .unwrap_or_default()
                    .iter()
                    .filter_map(|event| serde_json::from_str(event.json().get()).ok())
                    .filter_map(|event: serde_json::Value| event.get("sender").cloned())
                    .filter_map(|sender| sender.as_str().map(|s| s.to_owned()))
                    .filter_map(|sender| UserId::parse(sender).ok())
                    .map(|user| user.server_name().to_owned()),
            );
            servers.push(room_id.server_name().to_owned());
        Err(room_alias) => {
            let response = get_alias_helper(&room_alias).await?;
            (response.servers.into_iter().collect(), response.room_id)
    let join_room_response = join_room_by_id_helper(
        Some(sender_user),
        &room_id,
        &servers,
        body.third_party_signed.as_ref(),
    )
    .await?;

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(join_room_by_id_or_alias::v3::Response {
        room_id: join_room_response.room_id,
    })
/// # `POST /_matrix/client/r0/rooms/{roomId}/leave`
///
/// Tries to leave the sender user from a room.
///
/// - This should always work if the user is currently joined.
pub async fn leave_room_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<leave_room::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<leave_room::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    leave_room(sender_user, &body.room_id).await?;
Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(leave_room::v3::Response::new())
/// # `POST /_matrix/client/r0/rooms/{roomId}/invite`
///
/// Tries to send an invite event into the room.
pub async fn invite_user_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<invite_user::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<invite_user::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
Jonathan de Jong's avatar
Jonathan de Jong committed
    if let invite_user::v3::IncomingInvitationRecipient::UserId { user_id } = &body.recipient {
        invite_helper(sender_user, user_id, &body.room_id, false).await?;
Jonathan de Jong's avatar
Jonathan de Jong committed
        Ok(invite_user::v3::Response {})
    } else {
        Err(Error::BadRequest(ErrorKind::NotFound, "User not found."))
    }
}

/// # `POST /_matrix/client/r0/rooms/{roomId}/kick`
///
/// Tries to send a kick event into the room.
pub async fn kick_user_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<kick_user::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<kick_user::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
Jonas Platte's avatar
Jonas Platte committed
    let mut event: RoomMemberEventContent = serde_json::from_str(
        services().rooms
        .state_accessor
            .room_state_get(
                &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
                &StateEventType::RoomMember,
                &body.user_id.to_string(),
            )?
            .ok_or(Error::BadRequest(
                ErrorKind::BadState,
                "Cannot kick member that's not in the room.",
            ))?
Jonas Platte's avatar
Jonas Platte committed
            .get(),
    )
    .map_err(|_| Error::bad_database("Invalid member event in database."))?;

Jonas Platte's avatar
Jonas Platte committed
    event.membership = MembershipState::Leave;
    // TODO: reason

Timo Kösters's avatar
Timo Kösters committed
    let mutex_state = Arc::clone(
        services().globals
Timo Kösters's avatar
Timo Kösters committed
            .roomid_mutex_state
Timo Kösters's avatar
Timo Kösters committed
            .write()
            .unwrap()
            .entry(body.room_id.clone())
            .or_default(),
    );
Timo Kösters's avatar
Timo Kösters committed
    let state_lock = mutex_state.lock().await;
    services().rooms.timeline.build_and_append_pdu(
Timo Kösters's avatar
Timo Kösters committed
        PduBuilder {
Timo Kösters's avatar
Timo Kösters committed
            event_type: RoomEventType::RoomMember,
Jonas Platte's avatar
Jonas Platte committed
            content: to_raw_value(&event).expect("event is valid, we just created it"),
Timo Kösters's avatar
Timo Kösters committed
            unsigned: None,
            state_key: Some(body.user_id.to_string()),
Timo Kösters's avatar
Timo Kösters committed
            redacts: None,
        },
Timo Kösters's avatar
Timo Kösters committed
        &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
        &state_lock,
Timo Kösters's avatar
Timo Kösters committed
    )?;
Timo Kösters's avatar
Timo Kösters committed
    drop(state_lock);
Timo Kösters's avatar
Timo Kösters committed

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(kick_user::v3::Response::new())
/// # `POST /_matrix/client/r0/rooms/{roomId}/ban`
///
/// Tries to send a ban event into the room.
pub async fn ban_user_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<ban_user::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<ban_user::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    let event = services()
        .state_accessor
        .room_state_get(
            &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
            &StateEventType::RoomMember,
            &body.user_id.to_string(),
        )?
        .map_or(
Jonas Platte's avatar
Jonas Platte committed
            Ok(RoomMemberEventContent {
Jonas Platte's avatar
Jonas Platte committed
                membership: MembershipState::Ban,
                displayname: services().users.displayname(&body.user_id)?,
                avatar_url: services().users.avatar_url(&body.user_id)?,
                is_direct: None,
                third_party_invite: None,
                blurhash: services().users.blurhash(&body.user_id)?,
                join_authorized_via_users_server: None,
Jonas Platte's avatar
Jonas Platte committed
                serde_json::from_str(event.content.get())
                    .map(|event: RoomMemberEventContent| RoomMemberEventContent {
                        membership: MembershipState::Ban,
                        ..event
                    })
                    .map_err(|_| Error::bad_database("Invalid member event in database."))
Timo Kösters's avatar
Timo Kösters committed
    let mutex_state = Arc::clone(
        services().globals
Timo Kösters's avatar
Timo Kösters committed
            .roomid_mutex_state
Timo Kösters's avatar
Timo Kösters committed
            .write()
            .unwrap()
            .entry(body.room_id.clone())
            .or_default(),
    );
Timo Kösters's avatar
Timo Kösters committed
    let state_lock = mutex_state.lock().await;
Timo Kösters's avatar
Timo Kösters committed

    services().rooms.timeline.build_and_append_pdu(
Timo Kösters's avatar
Timo Kösters committed
        PduBuilder {
Timo Kösters's avatar
Timo Kösters committed
            event_type: RoomEventType::RoomMember,
Jonas Platte's avatar
Jonas Platte committed
            content: to_raw_value(&event).expect("event is valid, we just created it"),
Timo Kösters's avatar
Timo Kösters committed
            unsigned: None,
            state_key: Some(body.user_id.to_string()),
            redacts: None,
        },
Timo Kösters's avatar
Timo Kösters committed
        &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
        &state_lock,
Timo Kösters's avatar
Timo Kösters committed
    )?;
Timo Kösters's avatar
Timo Kösters committed
    drop(state_lock);
Timo Kösters's avatar
Timo Kösters committed

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(ban_user::v3::Response::new())
/// # `POST /_matrix/client/r0/rooms/{roomId}/unban`
///
/// Tries to send an unban event into the room.
pub async fn unban_user_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<unban_user::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<unban_user::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
Jonas Platte's avatar
Jonas Platte committed
    let mut event: RoomMemberEventContent = serde_json::from_str(
        services().rooms
        .state_accessor
            .room_state_get(
                &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
                &StateEventType::RoomMember,
                &body.user_id.to_string(),
            )?
            .ok_or(Error::BadRequest(
                ErrorKind::BadState,
                "Cannot unban a user who is not banned.",
            ))?
Jonas Platte's avatar
Jonas Platte committed
            .get(),
    )
    .map_err(|_| Error::bad_database("Invalid member event in database."))?;

Jonas Platte's avatar
Jonas Platte committed
    event.membership = MembershipState::Leave;
Timo Kösters's avatar
Timo Kösters committed
    let mutex_state = Arc::clone(
        services().globals
Timo Kösters's avatar
Timo Kösters committed
            .roomid_mutex_state
Timo Kösters's avatar
Timo Kösters committed
            .write()
            .unwrap()
            .entry(body.room_id.clone())
            .or_default(),
    );
Timo Kösters's avatar
Timo Kösters committed
    let state_lock = mutex_state.lock().await;
Timo Kösters's avatar
Timo Kösters committed

    services().rooms.timeline.build_and_append_pdu(
Timo Kösters's avatar
Timo Kösters committed
        PduBuilder {
Timo Kösters's avatar
Timo Kösters committed
            event_type: RoomEventType::RoomMember,
Jonas Platte's avatar
Jonas Platte committed
            content: to_raw_value(&event).expect("event is valid, we just created it"),
Timo Kösters's avatar
Timo Kösters committed
            unsigned: None,
            state_key: Some(body.user_id.to_string()),
            redacts: None,
        },
Timo Kösters's avatar
Timo Kösters committed
        &body.room_id,
Timo Kösters's avatar
Timo Kösters committed
        &state_lock,
Timo Kösters's avatar
Timo Kösters committed
    )?;
Timo Kösters's avatar
Timo Kösters committed
    drop(state_lock);
Timo Kösters's avatar
Timo Kösters committed

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(unban_user::v3::Response::new())
/// # `POST /_matrix/client/r0/rooms/{roomId}/forget`
///
/// Forgets about a room.
///
/// - If the sender user currently left the room: Stops sender user from receiving information about the room
///
/// Note: Other devices of the user have no way of knowing the room was forgotten, so this has to
/// be called from every device
pub async fn forget_room_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<forget_room::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<forget_room::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    services().rooms.state_cache.forget(&body.room_id, sender_user)?;
Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(forget_room::v3::Response::new())
/// # `POST /_matrix/client/r0/joined_rooms`
///
/// Lists all rooms the user has joined.
pub async fn joined_rooms_route(
Jonathan de Jong's avatar
Jonathan de Jong committed
    body: Ruma<joined_rooms::v3::Request>,
) -> Result<joined_rooms::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(joined_rooms::v3::Response {
        joined_rooms: services()
            .state_cache
            .rooms_joined(sender_user)
            .filter_map(|r| r.ok())
            .collect(),
/// # `POST /_matrix/client/r0/rooms/{roomId}/members`
///
/// Lists all joined users in a room (TODO: at a specific point in time, with a specific membership).
///
/// - Only works if the user is currently joined
pub async fn get_member_events_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<get_member_events::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<get_member_events::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    // TODO: check history visibility?
    if !services().rooms.state_cache.is_joined(sender_user, &body.room_id)? {
        return Err(Error::BadRequest(
            ErrorKind::Forbidden,
            "You don't have permission to view this room.",
        ));
    }

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(get_member_events::v3::Response {
        chunk: services()
            .state_accessor
            .room_state_full(&body.room_id)
            .await?
            .iter()
Timo Kösters's avatar
Timo Kösters committed
            .filter(|(key, _)| key.0 == StateEventType::RoomMember)
            .map(|(_, pdu)| pdu.to_member_event().into())
            .collect(),
/// # `POST /_matrix/client/r0/rooms/{roomId}/joined_members`
///
/// Lists all members of a room.
///
/// - The sender user must be in the room
/// - TODO: An appservice just needs a puppet joined
pub async fn joined_members_route(
Timo Kösters's avatar
Timo Kösters committed
    body: Ruma<joined_members::v3::IncomingRequest>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<joined_members::v3::Response> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    if !services().rooms.state_cache.is_joined(sender_user, &body.room_id)? {
        return Err(Error::BadRequest(
            ErrorKind::Forbidden,
            "You aren't a member of the room.",
        ));
    }

    let mut joined = BTreeMap::new();
    for user_id in services().rooms.state_cache.room_members(&body.room_id).filter_map(|r| r.ok()) {
        let display_name = services().users.displayname(&user_id)?;
        let avatar_url = services().users.avatar_url(&user_id)?;

        joined.insert(
            user_id,
Jonathan de Jong's avatar
Jonathan de Jong committed
            joined_members::v3::RoomMember {
                display_name,
                avatar_url,
            },
        );
    }

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(joined_members::v3::Response { joined })
    sender_user: Option<&UserId>,
    servers: &[Box<ServerName>],
    _third_party_signed: Option<&IncomingThirdPartySigned>,
Jonathan de Jong's avatar
Jonathan de Jong committed
) -> Result<join_room_by_id::v3::Response> {
    let sender_user = sender_user.expect("user is authenticated");
Timo Kösters's avatar
Timo Kösters committed
    let mutex_state = Arc::clone(
        services().globals
Timo Kösters's avatar
Timo Kösters committed
            .roomid_mutex_state
Timo Kösters's avatar
Timo Kösters committed
            .write()
            .unwrap()
Jonas Platte's avatar
Jonas Platte committed
            .entry(room_id.to_owned())
Timo Kösters's avatar
Timo Kösters committed
            .or_default(),
    );
Timo Kösters's avatar
Timo Kösters committed
    let state_lock = mutex_state.lock().await;
Timo Kösters's avatar
Timo Kösters committed

    // Ask a remote server if we don't have this room
    if !services().rooms.metadata.exists(room_id)? {
        let mut make_join_response_and_server = Err(Error::BadServerResponse(
            "No server available to assist in joining.",
        ));

        for remote_server in servers {
            let make_join_response = services()
                .sending
                .send_federation_request(
                    remote_server,
Jonathan de Jong's avatar
Jonathan de Jong committed
                    federation::membership::prepare_join_event::v1::Request {
                        room_id,
                        user_id: sender_user,
                        ver: &services().globals.supported_room_versions(),

            make_join_response_and_server = make_join_response.map(|r| (r, remote_server));

            if make_join_response_and_server.is_ok() {
                break;
            }
        }

        let (make_join_response, remote_server) = make_join_response_and_server?;
        let room_version = match make_join_response.room_version {
            Some(room_version) if services().globals.supported_room_versions().contains(&room_version) => room_version,
            _ => return Err(Error::BadServerResponse("Room version is not supported")),
        };

Jonas Platte's avatar
Jonas Platte committed
        let mut join_event_stub: CanonicalJsonObject =
            serde_json::from_str(make_join_response.event.get()).map_err(|_| {
                Error::BadServerResponse("Invalid make_join event json received from server.")
            })?;
        // TODO: Is origin needed?
        join_event_stub.insert(
            "origin".to_owned(),
            CanonicalJsonValue::String(services().globals.server_name().as_str().to_owned()),
        );
        join_event_stub.insert(
            "origin_server_ts".to_owned(),
            CanonicalJsonValue::Integer(
                utils::millis_since_unix_epoch()
                    .try_into()
                    .expect("Timestamp is valid js_int value"),
            ),
        join_event_stub.insert(
            "content".to_owned(),
Jonas Platte's avatar
Jonas Platte committed
            to_canonical_value(RoomMemberEventContent {
                membership: MembershipState::Join,
                displayname: services().users.displayname(sender_user)?,
                avatar_url: services().users.avatar_url(sender_user)?,
                is_direct: None,
                third_party_invite: None,
                blurhash: services().users.blurhash(sender_user)?,
                join_authorized_via_users_server: None,
            })
            .expect("event is valid, we just created it"),
        );
        // We don't leave the event id in the pdu because that's only allowed in v1 or v2 rooms
        join_event_stub.remove("event_id");
        // In order to create a compatible ref hash (EventID) the `hashes` field needs to be present
        ruma::signatures::hash_and_sign_event(
            services().globals.server_name().as_str(),
            services().globals.keypair(),
            &room_version,
        )
        .expect("event is valid, we just created it");

        let event_id = format!(
            ruma::signatures::reference_hash(&join_event_stub, &room_version)
                .expect("ruma can calculate reference hashes")
        );
        let event_id = <&EventId>::try_from(event_id.as_str())
            .expect("ruma's reference hashes are valid event ids");
        // Add event_id back
            CanonicalJsonValue::String(event_id.as_str().to_owned()),

        // It has enough fields to be called a proper event now
        let join_event = join_event_stub;
        let send_join_response = services()
            .sending
            .send_federation_request(
                remote_server,
                federation::membership::create_join_event::v2::Request {
                    room_id,
                    event_id,
Jonas Platte's avatar
Jonas Platte committed
                    pdu: &PduEvent::convert_to_outgoing_federation_event(join_event.clone()),
                },
            )
            .await?;
        services().rooms.short.get_or_create_shortroomid(room_id)?;
        let parsed_pdu = PduEvent::from_id_val(event_id, join_event.clone())
            .map_err(|_| Error::BadServerResponse("Invalid join event PDU."))?;
        let mut state = HashMap::new();
Timo Kösters's avatar
Timo Kösters committed
        let pub_key_map = RwLock::new(BTreeMap::new());
        services().rooms.event_handler.fetch_join_signing_keys(
            &send_join_response,
            &room_version,
            &pub_key_map,
        .await?;

        for result in send_join_response
            .room_state
            .state
            .iter()
            .map(|pdu| validate_and_add_event_id(pdu, &room_version, &pub_key_map))
Timo Kösters's avatar
Timo Kösters committed
            let (event_id, value) = match result {
                Ok(t) => t,
            let pdu = PduEvent::from_id_val(&event_id, value.clone()).map_err(|e| {
                warn!("{:?}: {}", value, e);
                Error::BadServerResponse("Invalid PDU in send_join response.")
            })?;
Timo Kösters's avatar
Timo Kösters committed
            services().rooms.outlier.add_pdu_outlier(&event_id, &value)?;
            if let Some(state_key) = &pdu.state_key {
                let shortstatekey = services().rooms.short.get_or_create_shortstatekey(
Timo Kösters's avatar
Timo Kösters committed
                    &pdu.kind.to_string().into(),
                    state_key,
                )?;
                state.insert(shortstatekey, pdu.event_id.clone());
        let incoming_shortstatekey = services().rooms.short.get_or_create_shortstatekey(
Timo Kösters's avatar
Timo Kösters committed
            &parsed_pdu.kind.to_string().into(),
                .as_ref()
                .expect("Pdu is a membership state event"),
        )?;

        state.insert(incoming_shortstatekey, parsed_pdu.event_id.clone());
        let create_shortstatekey = services()
Timo Kösters's avatar
Timo Kösters committed
            .get_shortstatekey(&StateEventType::RoomCreate, "")?
            .expect("Room exists");

        if state.get(&create_shortstatekey).is_none() {
            return Err(Error::BadServerResponse("State contained no create event."));
        }

        for result in send_join_response
            .room_state
            .auth_chain
            .iter()
            .map(|pdu| validate_and_add_event_id(pdu, &room_version, &pub_key_map))
Timo Kösters's avatar
Timo Kösters committed
        {
            let (event_id, value) = match result {
                Ok(t) => t,
                Err(_) => continue,
            };

Timo Kösters's avatar
Timo Kösters committed
            services().rooms.outlier.add_pdu_outlier(&event_id, &value)?;
Timo Kösters's avatar
Timo Kösters committed
        let shortstatehash = services().rooms.state.set_event_state(
            event_id,
            room_id,
            state
                .into_iter()
                .map(|(k, id)| services().rooms.state_compressor.compress_state_event(k, &id))
                .collect::<Result<_>>()?,
        )?;

        // We append to state before appending the pdu, so we don't have a moment in time with the
        // pdu without it's state. This is okay because append_pdu can't fail.
Timo Kösters's avatar
Timo Kösters committed
        services().rooms.timeline.append_pdu(
            &parsed_pdu,
            join_event,
Timo Kösters's avatar
Timo Kösters committed
            vec![(*parsed_pdu.event_id).to_owned()],
            &state_lock

        // We set the room state after inserting the pdu, so that we never have a moment in time
        // where events in the current room state do not exist
Timo Kösters's avatar
Timo Kösters committed
        services().rooms.state.set_room_state(room_id, shortstatehash, &state_lock)?;
Timo Kösters's avatar
Timo Kösters committed

        let statehashid = services().rooms.state.append_to_state(&parsed_pdu)?;
    } else {
Jonas Platte's avatar
Jonas Platte committed
        let event = RoomMemberEventContent {
            membership: MembershipState::Join,
            displayname: services().users.displayname(sender_user)?,
            avatar_url: services().users.avatar_url(sender_user)?,
            is_direct: None,
            third_party_invite: None,
            blurhash: services().users.blurhash(sender_user)?,
            join_authorized_via_users_server: None,
Timo Kösters's avatar
Timo Kösters committed
        services().rooms.timeline.build_and_append_pdu(
Timo Kösters's avatar
Timo Kösters committed
            PduBuilder {
Timo Kösters's avatar
Timo Kösters committed
                event_type: RoomEventType::RoomMember,
Jonas Platte's avatar
Jonas Platte committed
                content: to_raw_value(&event).expect("event is valid, we just created it"),
Timo Kösters's avatar
Timo Kösters committed
                unsigned: None,
                state_key: Some(sender_user.to_string()),
Timo Kösters's avatar
Timo Kösters committed
                redacts: None,
            },
Timo Kösters's avatar
Timo Kösters committed
            &state_lock,
Timo Kösters's avatar
Timo Kösters committed
        )?;
Timo Kösters's avatar
Timo Kösters committed
    drop(state_lock);
Timo Kösters's avatar
Timo Kösters committed

Jonathan de Jong's avatar
Jonathan de Jong committed
    Ok(join_room_by_id::v3::Response::new(room_id.to_owned()))
fn validate_and_add_event_id(
Jonas Platte's avatar
Jonas Platte committed
    pdu: &RawJsonValue,
    room_version: &RoomVersionId,
    pub_key_map: &RwLock<BTreeMap<String, BTreeMap<String, Base64>>>,
Jonas Platte's avatar
Jonas Platte committed
) -> Result<(Box<EventId>, CanonicalJsonObject)> {
Jonas Platte's avatar
Jonas Platte committed
    let mut value: CanonicalJsonObject = serde_json::from_str(pdu.get()).map_err(|e| {
        error!("Invalid PDU in server response: {:?}: {:?}", pdu, e);
        Error::BadServerResponse("Invalid PDU in server response")
    })?;
    let event_id = EventId::parse(format!(
        ruma::signatures::reference_hash(&value, room_version)
            .expect("ruma can calculate reference hashes")
    ))
    .expect("ruma's reference hashes are valid event ids");

    let back_off = |id| match services().globals.bad_event_ratelimiter.write().unwrap().entry(id) {
        Entry::Vacant(e) => {
            e.insert((Instant::now(), 1));
        }
        Entry::Occupied(mut e) => *e.get_mut() = (Instant::now(), e.get().1 + 1),
    };

    if let Some((time, tries)) = services()
        .globals
        .bad_event_ratelimiter
        .read()
        .unwrap()
        .get(&event_id)
    {
        // Exponential backoff
        let mut min_elapsed_duration = Duration::from_secs(30) * (*tries) * (*tries);
        if min_elapsed_duration > Duration::from_secs(60 * 60 * 24) {
            min_elapsed_duration = Duration::from_secs(60 * 60 * 24);
        }

        if time.elapsed() < min_elapsed_duration {
            debug!("Backing off from {}", event_id);
            return Err(Error::BadServerResponse("bad event, still backing off"));
        }
    }
    if let Err(e) = ruma::signatures::verify_event(
        &*pub_key_map
            .read()
            .map_err(|_| Error::bad_database("RwLock is poisoned."))?,
        &value,
        room_version,
    ) {
        warn!("Event {} failed verification {:?} {}", event_id, pdu, e);
        return Err(Error::BadServerResponse("Event failed verification."));
    }

    value.insert(
        "event_id".to_owned(),
        CanonicalJsonValue::String(event_id.as_str().to_owned()),
    );

    Ok((event_id, value))
}
pub(crate) async fn invite_helper<'a>(
    sender_user: &UserId,
    user_id: &UserId,
    room_id: &RoomId,
    is_direct: bool,
) -> Result<()> {
    if user_id.server_name() != services().globals.server_name() {
        let (pdu_json, invite_room_state) = {
Timo Kösters's avatar
Timo Kösters committed
            let mutex_state = Arc::clone(
                services().globals
Timo Kösters's avatar
Timo Kösters committed
                    .roomid_mutex_state
Jonas Platte's avatar
Jonas Platte committed
                    .entry(room_id.to_owned())
Timo Kösters's avatar
Timo Kösters committed
            let state_lock = mutex_state.lock().await;
Jonas Platte's avatar
Jonas Platte committed
            let content = to_raw_value(&RoomMemberEventContent {
                avatar_url: None,
                displayname: None,
                is_direct: Some(is_direct),
                membership: MembershipState::Invite,
                third_party_invite: None,
                blurhash: None,
                join_authorized_via_users_server: None,
            })
            .expect("member event is valid value");
            let (pdu, pdu_json) = services().rooms.timeline.create_hash_and_sign_event(PduBuilder {
                event_type: RoomEventType::RoomMember,
                content,
                unsigned: None,
                state_key: Some(user_id.to_string()),
                redacts: None,
Timo Kösters's avatar
Timo Kösters committed
            }, sender_user, room_id, &state_lock)?;
            let invite_room_state = services().rooms.state.calculate_invite_state(&pdu)?;
Timo Kösters's avatar
Timo Kösters committed
            drop(state_lock);
            (pdu_json, invite_room_state)
Timo Kösters's avatar
Timo Kösters committed

        // Generate event id
        let expected_event_id = format!(
            "${}",
            ruma::signatures::reference_hash(&pdu_json, &services().rooms.state.get_room_version(&room_id)?)
                .expect("ruma can calculate reference hashes")
        );
        let expected_event_id = <&EventId>::try_from(expected_event_id.as_str())
            .expect("ruma's reference hashes are valid event ids");
        let response = services()
            .sending
            .send_federation_request(
                user_id.server_name(),
                create_invite::v2::Request {
Jonas Platte's avatar
Jonas Platte committed
                    room_id,
                    event_id: expected_event_id,
Timo Kösters's avatar
Timo Kösters committed
                    room_version: &services().rooms.state.get_room_version(&room_id)?,
Jonas Platte's avatar
Jonas Platte committed
                    event: &PduEvent::convert_to_outgoing_federation_event(pdu_json.clone()),
                    invite_room_state: &invite_room_state,
                },
            )
            .await?;

        let pub_key_map = RwLock::new(BTreeMap::new());

        // We do not add the event_id field to the pdu here because of signature and hashes checks
        let (event_id, value) = match gen_event_id_canonical_json(&response.event)
Nyaaori's avatar
Nyaaori committed
        {
            Ok(t) => t,
            Err(_) => {
                // Event could not be converted to canonical json
                return Err(Error::BadRequest(
                    ErrorKind::InvalidParam,
                    "Could not convert event to canonical json.",
                ));
            }
        };

        if expected_event_id != event_id {
            warn!("Server {} changed invite event, that's not allowed in the spec: ours: {:?}, theirs: {:?}", user_id.server_name(), pdu_json, value);
        }

Jonas Platte's avatar
Jonas Platte committed
        let origin: Box<ServerName> = serde_json::from_value(
            serde_json::to_value(value.get("origin").ok_or(Error::BadRequest(
                ErrorKind::InvalidParam,
                "Event needs an origin field.",
            ))?)
            .expect("CanonicalJson is valid json value"),
        )
        .map_err(|_| Error::BadRequest(ErrorKind::InvalidParam, "Origin field is invalid."))?;

Timo Kösters's avatar
Timo Kösters committed
        let pdu_id: Vec<u8> = services().rooms.event_handler.handle_incoming_pdu(
Timo Kösters's avatar
Timo Kösters committed
        .await?
        .ok_or(Error::BadRequest(
            ErrorKind::InvalidParam,
            "Could not accept incoming PDU as timeline event.",
        ))?;
Timo Kösters's avatar
Timo Kösters committed
        // Bind to variable because of lifetimes
        let servers = services().rooms.state_cache
            .room_servers(room_id)
            .filter_map(|r| r.ok())
            .filter(|server| &**server != services().globals.server_name());
        services().sending.send_pdu(servers, &pdu_id)?;
Timo Kösters's avatar
Timo Kösters committed
    if !services().rooms.state_cache.is_joined(sender_user, &room_id)? {
        return Err(Error::BadRequest(
            ErrorKind::Forbidden,
            "You don't have permission to view this room.",
        ));
    }

Timo Kösters's avatar
Timo Kösters committed
    let mutex_state = Arc::clone(
        services().globals
Timo Kösters's avatar
Timo Kösters committed
            .roomid_mutex_state
Jonas Platte's avatar
Jonas Platte committed
            .entry(room_id.to_owned())
Timo Kösters's avatar
Timo Kösters committed
    let state_lock = mutex_state.lock().await;
Timo Kösters's avatar
Timo Kösters committed
    services().rooms.timeline.build_and_append_pdu(
        PduBuilder {
Timo Kösters's avatar
Timo Kösters committed
            event_type: RoomEventType::RoomMember,
Jonas Platte's avatar
Jonas Platte committed
            content: to_raw_value(&RoomMemberEventContent {
                membership: MembershipState::Invite,
                displayname: services().users.displayname(user_id)?,
                avatar_url: services().users.avatar_url(user_id)?,
                is_direct: Some(is_direct),
                third_party_invite: None,
                blurhash: services().users.blurhash(user_id)?,
                join_authorized_via_users_server: None,
            })
            .expect("event is valid, we just created it"),
            unsigned: None,
            state_key: Some(user_id.to_string()),
            redacts: None,
        },
Timo Kösters's avatar
Timo Kösters committed
        &state_lock,
Timo Kösters's avatar
Timo Kösters committed
    drop(state_lock);
// Make a user leave all their joined rooms
pub async fn leave_all_rooms(user_id: &UserId) -> Result<()> {
    let all_rooms = services()
        .rooms
Timo Kösters's avatar
Timo Kösters committed
        .state_cache
        .rooms_joined(user_id)
Timo Kösters's avatar
Timo Kösters committed
        .chain(services().rooms.state_cache.rooms_invited(user_id).map(|t| t.map(|(r, _)| r)))
        .collect::<Vec<_>>();

    for room_id in all_rooms {
        let room_id = match room_id {
            Ok(room_id) => room_id,
            Err(_) => continue,
        };
        let _ = leave_room(user_id, &room_id).await;
pub async fn leave_room(
    user_id: &UserId,
    room_id: &RoomId,
) -> Result<()> {
    // Ask a remote server if we don't have this room
    if !services().rooms.metadata.exists(room_id)? && room_id.server_name() != services().globals.server_name() {
        if let Err(e) = remote_leave_room(user_id, room_id).await {
            warn!("Failed to leave room {} remotely: {}", user_id, e);
            // Don't tell the client about this error
        }
        let last_state = services().rooms.state_cache
            .invite_state(user_id, room_id)?
Timo Kösters's avatar
Timo Kösters committed
            .map_or_else(|| services().rooms.state_cache.left_state(user_id, room_id), |s| Ok(Some(s)))?;
        // We always drop the invite, we can't rely on other servers
        services().rooms.state_cache.update_membership(
            room_id,
            user_id,
            MembershipState::Leave,
            user_id,
            last_state,
            true,
        )?;
    } else {
        let mutex_state = Arc::clone(
            services().globals
                .roomid_mutex_state
                .write()
                .unwrap()
                .entry(room_id.to_owned())
                .or_default(),
        );
        let state_lock = mutex_state.lock().await;

        let mut event: RoomMemberEventContent = serde_json::from_str(
Timo Kösters's avatar
Timo Kösters committed
            services().rooms.state_accessor.room_state_get(room_id, &StateEventType::RoomMember, user_id.as_str())?
                .ok_or(Error::BadRequest(
                    ErrorKind::BadState,
                    "Cannot leave a room you are not a member of.",
                ))?
                .content
                .get(),
        )
        .map_err(|_| Error::bad_database("Invalid member event in database."))?;
        event.membership = MembershipState::Leave;
        services().rooms.timeline.build_and_append_pdu(
            PduBuilder {
                event_type: RoomEventType::RoomMember,
                content: to_raw_value(&event).expect("event is valid, we just created it"),
                unsigned: None,
                state_key: Some(user_id.to_string()),
                redacts: None,
            },
            user_id,
            room_id,
            &state_lock,
        )?;
async fn remote_leave_room(
    user_id: &UserId,
    room_id: &RoomId,
) -> Result<()> {
    let mut make_leave_response_and_server = Err(Error::BadServerResponse(
        "No server available to assist in leaving.",
    ));
    let invite_state = services()
        .rooms
Timo Kösters's avatar
Timo Kösters committed
        .state_cache
        .invite_state(user_id, room_id)?
        .ok_or(Error::BadRequest(
            ErrorKind::BadState,
            "User is not invited.",
        ))?;
    let servers: HashSet<_> = invite_state
        .iter()
        .filter_map(|event| serde_json::from_str(event.json().get()).ok())
        .filter_map(|event: serde_json::Value| event.get("sender").cloned())
        .filter_map(|sender| sender.as_str().map(|s| s.to_owned()))
        .filter_map(|sender| UserId::parse(sender).ok())
        .map(|user| user.server_name().to_owned())
        .collect();

    for remote_server in servers {
        let make_leave_response = services()
            .sending
            .send_federation_request(
                &remote_server,
                federation::membership::prepare_leave_event::v1::Request { room_id, user_id },
            )
            .await;
        make_leave_response_and_server = make_leave_response.map(|r| (r, remote_server));
        if make_leave_response_and_server.is_ok() {
            break;
    let (make_leave_response, remote_server) = make_leave_response_and_server?;
    let room_version_id = match make_leave_response.room_version {
        Some(version) if services().globals.supported_room_versions().contains(&version) => version,
        _ => return Err(Error::BadServerResponse("Room version is not supported")),
    };
    let mut leave_event_stub =
        serde_json::from_str::<CanonicalJsonObject>(make_leave_response.event.get()).map_err(
            |_| Error::BadServerResponse("Invalid make_leave event json received from server."),
        )?;
    // TODO: Is origin needed?
    leave_event_stub.insert(
        "origin".to_owned(),
        CanonicalJsonValue::String(services().globals.server_name().as_str().to_owned()),
    );
    leave_event_stub.insert(
        "origin_server_ts".to_owned(),
        CanonicalJsonValue::Integer(
            utils::millis_since_unix_epoch()
                .try_into()
                .expect("Timestamp is valid js_int value"),
        ),
    );
    // We don't leave the event id in the pdu because that's only allowed in v1 or v2 rooms
    leave_event_stub.remove("event_id");

    // In order to create a compatible ref hash (EventID) the `hashes` field needs to be present
    ruma::signatures::hash_and_sign_event(
        services().globals.server_name().as_str(),
        services().globals.keypair(),
        &mut leave_event_stub,
        &room_version_id,
    )
    .expect("event is valid, we just created it");
    // Generate event id
    let event_id = EventId::parse(format!(
        "${}",
        ruma::signatures::reference_hash(&leave_event_stub, &room_version_id)
            .expect("ruma can calculate reference hashes")
    ))
    .expect("ruma's reference hashes are valid event ids");
    // Add event_id back
    leave_event_stub.insert(
        "event_id".to_owned(),
        CanonicalJsonValue::String(event_id.as_str().to_owned()),
    );
    // It has enough fields to be called a proper event now
    let leave_event = leave_event_stub;
    services().sending
        .send_federation_request(
            &remote_server,
            federation::membership::create_leave_event::v2::Request {
                room_id,
                event_id: &event_id,
                pdu: &PduEvent::convert_to_outgoing_federation_event(leave_event.clone()),
            },
        )
        .await?;