char
/
conduit
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
conduit/src/client_server/session.rs

219 lines
7.0 KiB
Rust
Raw Normal View History

Sqlite
2021-07-14 07:07:08 +00:00
use super::{DEVICE_ID_LENGTH, TOKEN_LENGTH};
use crate::{database::DatabaseGuard, utils, ConduitResult, Error, Ruma};
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
use ruma::{
api::client::{
error::ErrorKind,
improvement: faster incoming transaction handling
2021-08-19 09:01:18 +00:00
r0::{
session::{get_login_types, login, logout, logout_all},
uiaa::IncomingUserIdentifier,
},
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
},
UserId,
};
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
use serde::Deserialize;
feat: add threadpool for iterator threads, bug fixes, tracing_flame support
2021-07-29 06:36:01 +00:00
use tracing::info;
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
#[derive(Debug, Deserialize)]
struct Claims {
sub: String,
exp: usize,
}
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
#[cfg(feature = "conduit_bin")]
use rocket::{get, post};
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
/// # `GET /_matrix/client/r0/login`
///
docs: documentation for every endpoint
2021-08-31 17:14:37 +00:00
/// Get the supported login types of this server. One of these should be used as the `type` field
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
/// when logging in.
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
#[cfg_attr(feature = "conduit_bin", get("/_matrix/client/r0/login"))]
feat: opentelemetry/jaeger support
2021-02-28 11:41:03 +00:00
#[tracing::instrument]
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
pub async fn get_login_types_route() -> ConduitResult<get_login_types::Response> {
improvement: update ruma
2021-04-22 09:26:20 +00:00
Ok(
get_login_types::Response::new(vec![get_login_types::LoginType::Password(
Default::default(),
)])
.into(),
)
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
}
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
/// # `POST /_matrix/client/r0/login`
///
/// Authenticates the user and returns an access token it can use in subsequent requests.
///
docs: documentation for every endpoint
2021-08-31 17:14:37 +00:00
/// - The user needs to authenticate using their password (or if enabled using a json web token)
/// - If `device_id` is known: invalidates old access token of that device
/// - If `device_id` is unknown: creates a new device
/// - Returns access token that is associated with the user and device
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
///
/// Note: You can use [`GET /_matrix/client/r0/login`](fn.get_supported_versions_route.html) to see
/// supported login types.
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
#[cfg_attr(
feature = "conduit_bin",
post("/_matrix/client/r0/login", data = "<body>")
)]
feat: opentelemetry/jaeger support
2021-02-28 11:41:03 +00:00
#[tracing::instrument(skip(db, body))]
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
pub async fn login_route(
Sqlite
2021-07-14 07:07:08 +00:00
db: DatabaseGuard,
Update ruma version
2020-09-08 15:32:03 +00:00
body: Ruma<login::Request<'_>>,
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
) -> ConduitResult<login::Response> {
// Validate login method
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
// TODO: Other login methods
let user_id = match &body.login_info {
chore: update ruma
2021-03-18 18:38:08 +00:00
login::IncomingLoginInfo::Password {
identifier,
password,
} => {
improvement: faster incoming transaction handling
2021-08-19 09:01:18 +00:00
let username = if let IncomingUserIdentifier::MatrixId(matrix_id) = identifier {
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
matrix_id
} else {
return Err(Error::BadRequest(ErrorKind::Forbidden, "Bad login type."));
};
let user_id =
UserId::parse_with_server_name(username.to_owned(), db.globals.server_name())
.map_err(|_| {
Error::BadRequest(ErrorKind::InvalidUsername, "Username is invalid.")
})?;
let hash = db.users.password_hash(&user_id)?.ok_or(Error::BadRequest(
ErrorKind::Forbidden,
"Wrong username or password.",
))?;
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
if hash.is_empty() {
return Err(Error::BadRequest(
ErrorKind::UserDeactivated,
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
"The user has been deactivated",
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
));
}
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
let hash_matches = argon2::verify_encoded(&hash, password.as_bytes()).unwrap_or(false);
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
if !hash_matches {
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
return Err(Error::BadRequest(
ErrorKind::Forbidden,
"Wrong username or password.",
));
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
}
user_id
Add 'm.login.token' authentication
2021-02-07 16:38:45 +00:00
}
login::IncomingLoginInfo::Token { token } => {
if let Some(jwt_decoding_key) = db.globals.jwt_decoding_key() {
let token = jsonwebtoken::decode::<Claims>(
&token,
&jwt_decoding_key,
&jsonwebtoken::Validation::default(),
)
.map_err(|_| Error::BadRequest(ErrorKind::InvalidUsername, "Token is invalid."))?;
let username = token.claims.sub;
UserId::parse_with_server_name(username, db.globals.server_name()).map_err(
|_| Error::BadRequest(ErrorKind::InvalidUsername, "Username is invalid."),
)?
} else {
return Err(Error::BadRequest(
ErrorKind::Unknown,
"Token login is not supported (server has no jwt decoding key).",
));
}
}
};
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
// Generate new device id if the user didn't specify one
let device_id = body
.device_id
.clone()
.unwrap_or_else(|| utils::random_string(DEVICE_ID_LENGTH).into());
// Generate a new token for the device
let token = utils::random_string(TOKEN_LENGTH);
Simplify device creation logic during login
2021-01-17 15:39:47 +00:00
// Determine if device_id was provided and exists in the db for this user
let device_exists = body.device_id.as_ref().map_or(false, |device_id| {
db.users
.all_device_ids(&user_id)
Make clippy happy (needless-return, etc.)
2021-03-04 12:35:12 +00:00
.any(|x| x.as_ref().map_or(false, |v| v == device_id))
Simplify device creation logic during login
2021-01-17 15:39:47 +00:00
});
improvement: Handle optional device_id field during login remove debug logging
2021-01-17 05:15:45 +00:00
Simplify device creation logic during login
2021-01-17 15:39:47 +00:00
if device_exists {
db.users.set_token(&user_id, &device_id, &token)?;
} else {
improvement: Handle optional device_id field during login remove debug logging
2021-01-17 05:15:45 +00:00
db.users.create_device(
&user_id,
&device_id,
&token,
body.initial_device_display_name.clone(),
)?;
}
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
improvement: more logging
2020-11-15 11:17:21 +00:00
info!("{} logged in", user_id);
improvement: make better use of sqlite connections
2021-08-02 08:13:34 +00:00
db.flush()?;
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
Ok(login::Response {
user_id,
access_token: token,
home_server: Some(db.globals.server_name().to_owned()),
device_id,
well_known: None,
}
.into())
}
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
/// # `POST /_matrix/client/r0/logout`
///
/// Log out the current device.
///
docs: documentation for every endpoint
2021-08-31 17:14:37 +00:00
/// - Invalidates access token
/// - Deletes device metadata (device id, device display name, last seen ip, last seen ts)
/// - Forgets to-device events
/// - Triggers device list updates
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
#[cfg_attr(
feature = "conduit_bin",
post("/_matrix/client/r0/logout", data = "<body>")
)]
feat: opentelemetry/jaeger support
2021-02-28 11:41:03 +00:00
#[tracing::instrument(skip(db, body))]
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
pub async fn logout_route(
Sqlite
2021-07-14 07:07:08 +00:00
db: DatabaseGuard,
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
body: Ruma<logout::Request>,
) -> ConduitResult<logout::Response> {
fix: use device_id when registering TIL body.device_id != (*body).device_id, which is pretty bad, so I renamed body.device_id to body.sender_device
2020-10-18 18:33:12 +00:00
let sender_user = body.sender_user.as_ref().expect("user is authenticated");
let sender_device = body.sender_device.as_ref().expect("user is authenticated");
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
fix: use device_id when registering TIL body.device_id != (*body).device_id, which is pretty bad, so I renamed body.device_id to body.sender_device
2020-10-18 18:33:12 +00:00
db.users.remove_device(&sender_user, sender_device)?;
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
improvement: make better use of sqlite connections
2021-08-02 08:13:34 +00:00
db.flush()?;
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
Keep track of State at event for state resolution feat: first steps towards joining rooms over federation Add state-res as a dependency of conduit Add reverse_topological_power_sort before append_pdu Implement statehashstatid_pduid tree for keeping track of state Clean up implementation of state_hash as key for tracking state
2020-08-06 12:29:59 +00:00
Ok(logout::Response::new().into())
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
}
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
/// # `POST /_matrix/client/r0/logout/all`
///
/// Log out all devices of this user.
///
/// - Invalidates all access tokens
docs: documentation for every endpoint
2021-08-31 17:14:37 +00:00
/// - Deletes all device metadata (device id, device display name, last seen ip, last seen ts)
/// - Forgets all to-device events
/// - Triggers device list updates
docs: endpoint documentation
2020-07-31 12:40:28 +00:00
///
/// Note: This is equivalent to calling [`GET /_matrix/client/r0/logout`](fn.logout_route.html)
/// from each device of this user.
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
#[cfg_attr(
feature = "conduit_bin",
post("/_matrix/client/r0/logout/all", data = "<body>")
)]
feat: opentelemetry/jaeger support
2021-02-28 11:41:03 +00:00
#[tracing::instrument(skip(db, body))]
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
pub async fn logout_all_route(
Sqlite
2021-07-14 07:07:08 +00:00
db: DatabaseGuard,
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
body: Ruma<logout_all::Request>,
) -> ConduitResult<logout_all::Response> {
fix: use device_id when registering TIL body.device_id != (*body).device_id, which is pretty bad, so I renamed body.device_id to body.sender_device
2020-10-18 18:33:12 +00:00
let sender_user = body.sender_user.as_ref().expect("user is authenticated");
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
Fix lots of clippy lints
2021-06-17 18:34:14 +00:00
for device_id in db.users.all_device_ids(sender_user).flatten() {
db.users.remove_device(&sender_user, &device_id)?;
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
}
improvement: make better use of sqlite connections
2021-08-02 08:13:34 +00:00
db.flush()?;
improvement: flush after every request that manipulates the db
2020-10-21 19:28:02 +00:00
Keep track of State at event for state resolution feat: first steps towards joining rooms over federation Add state-res as a dependency of conduit Add reverse_topological_power_sort before append_pdu Implement statehashstatid_pduid tree for keeping track of state Clean up implementation of state_hash as key for tracking state
2020-08-06 12:29:59 +00:00
Ok(logout_all::Response::new().into())
refactor: put endpoints into modules
2020-07-30 16:14:47 +00:00
}