alice.pds.demo.boltless.dev
This repository has no description
1package state
2
3import (
4 "context"
5 "database/sql"
6 "errors"
7 "net/http"
8 "strings"
9
10 "github.com/go-chi/chi/v5"
11 "tangled.org/core/appview/db"
12 "tangled.org/core/appview/focus"
13 "tangled.org/core/appview/issues"
14 "tangled.org/core/appview/knotacl"
15 "tangled.org/core/appview/knots"
16 "tangled.org/core/appview/labels"
17 "tangled.org/core/appview/metrics"
18 "tangled.org/core/appview/middleware"
19 "tangled.org/core/appview/migration"
20 "tangled.org/core/appview/notifications"
21 whnotify "tangled.org/core/appview/notify/webhook"
22 "tangled.org/core/appview/pipelines"
23 "tangled.org/core/appview/pulls"
24 "tangled.org/core/appview/repo"
25 "tangled.org/core/appview/settings"
26 "tangled.org/core/appview/signup"
27 "tangled.org/core/appview/spindles"
28 "tangled.org/core/appview/state/userutil"
29 avstrings "tangled.org/core/appview/strings"
30 avtimeline "tangled.org/core/appview/timeline"
31 avxrpc "tangled.org/core/appview/xrpc"
32 "tangled.org/core/blog"
33 "tangled.org/core/log"
34 "tangled.org/core/xrpc/serviceauth"
35)
36
37func (s *State) Router() http.Handler {
38 router := chi.NewRouter()
39 middleware := middleware.New(
40 s.oauth,
41 s.db,
42 s.enforcer,
43 s.aclService,
44 s.repoResolver,
45 s.idResolver,
46 s.pages,
47 s.rdb,
48 s.logger,
49 )
50
51 router.Use(metrics.Middleware)
52 router.Use(knotacl.MemoMiddleware)
53
54 if err := db.ReapStaleRunningMigrations(context.Background(), s.db); err != nil {
55 s.logger.Warn("failed to reap stale running migrations", "err", err)
56 }
57 go func() {
58 if n, err := db.EnqueueEntityStateBackfill(context.Background(), s.db); err != nil {
59 s.logger.Warn("failed to enqueue entity state backfill", "err", err)
60 } else if n > 0 {
61 s.logger.Info("enqueued entity state backfill", "owners", n)
62 }
63 }()
64 m := migration.NewMigration(s.db, s.oauth, s.idResolver.Directory(), s.logger)
65 router.Use(m.BackgroundMigrationMiddleware)
66
67 router.Get("/pwa-manifest.json", s.WebAppManifest)
68 router.Get("/robots.txt", s.RobotsTxt)
69 router.Get("/.well-known/security.txt", s.SecurityTxt)
70
71 userRouter := s.UserRouter(&middleware)
72 standardRouter := s.StandardRouter(&middleware)
73 keysRouter := s.KeysRouter(&middleware)
74
75 router.HandleFunc("/*", func(w http.ResponseWriter, r *http.Request) {
76 pat := chi.URLParam(r, "*")
77 pathParts := strings.SplitN(pat, "/", 2)
78
79 if len(pathParts) > 0 {
80 firstPart := pathParts[0]
81
82 if userutil.IsDid(firstPart) {
83 repo, err := db.GetRepoByDid(s.db, firstPart)
84 switch {
85 case err == nil:
86 remaining := ""
87 if len(pathParts) > 1 {
88 remaining = "/" + pathParts[1]
89 }
90 rewritten := "/" + repo.Did + "/" + repo.Rkey + remaining
91 r2 := r.Clone(r.Context())
92 r2.URL.Path = rewritten
93 r2.URL.RawPath = rewritten
94 userRouter.ServeHTTP(w, r2)
95 case errors.Is(err, sql.ErrNoRows):
96 userRouter.ServeHTTP(w, r)
97 default:
98 s.logger.Error("db error looking up repo DID", "repoDid", firstPart, "err", err)
99 http.Error(w, "internal server error", http.StatusInternalServerError)
100 }
101 return
102 }
103
104 if strings.HasSuffix(firstPart, ".keys") {
105 keysRouter.ServeHTTP(w, r)
106 return
107 }
108
109 if userutil.IsHandle(firstPart) {
110 userRouter.ServeHTTP(w, r)
111 return
112 }
113
114 // if using a flattened DID (like you would in go modules), unflatten
115 if userutil.IsFlattenedDid(firstPart) {
116 unflattenedDid := userutil.UnflattenDid(firstPart)
117 redirectPath := strings.Join(append([]string{unflattenedDid}, pathParts[1:]...), "/")
118
119 redirectURL := *r.URL
120 redirectURL.Path = "/" + redirectPath
121
122 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
123 return
124 }
125
126 // if using a handle with @, rewrite to work without @
127 if normalized := strings.TrimPrefix(firstPart, "@"); userutil.IsHandle(normalized) {
128 redirectPath := strings.Join(append([]string{normalized}, pathParts[1:]...), "/")
129
130 redirectURL := *r.URL
131 redirectURL.Path = "/" + redirectPath
132
133 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
134 return
135 }
136
137 }
138
139 standardRouter.ServeHTTP(w, r)
140 })
141
142 return router
143}
144
145func (s *State) KeysRouter(mw *middleware.Middleware) http.Handler {
146 r := chi.NewRouter()
147 r.Use(mw.InjectBaseParams)
148
149 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
150 r.Get("/", s.Keys)
151 })
152
153 return r
154}
155
156func (s *State) UserRouter(mw *middleware.Middleware) http.Handler {
157 r := chi.NewRouter()
158 r.Use(mw.InjectBaseParams)
159
160 // TODO: workflow status update requests (30s polling)
161
162 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
163 r.Get("/", s.Profile)
164 r.Get("/feed.atom", s.AtomFeedPage)
165
166 r.With(mw.ResolveRepo()).Route("/{repo}", func(r chi.Router) {
167 r.Use(mw.GoImport())
168
169 // These routes get proxied to the knot
170 r.Get("/info/refs", s.InfoRefs)
171 r.Post("/git-upload-archive", s.UploadArchive)
172 r.Post("/git-upload-pack", s.UploadPack)
173 r.Post("/git-receive-pack", s.ReceivePack)
174
175 r.Group(func(r chi.Router) {
176 r.Use(mw.CanonicalizeRepoURL())
177 r.Mount("/issues", s.IssuesRouter(mw))
178 r.Mount("/pulls", s.PullsRouter(mw))
179 r.Mount("/pipelines", s.PipelinesRouter(mw))
180 r.Mount("/labels", s.LabelsRouter())
181 r.Mount("/", s.RepoRouter(mw))
182 })
183 })
184 })
185
186 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
187 w.WriteHeader(http.StatusNotFound)
188 s.pages.Error404(w)
189 })
190
191 return r
192}
193
194func (s *State) StandardRouter(mw *middleware.Middleware) http.Handler {
195 r := chi.NewRouter()
196 r.Use(mw.InjectBaseParams)
197
198 r.Handle("/static/*", s.pages.Static())
199
200 tl := avtimeline.New(s.oauth, s.db, s.config, s.pages, s.logger, blog.PostsFS)
201 r.Get("/", tl.HomeOrTimeline)
202 r.Get("/home", tl.Home)
203 r.Get("/timeline", tl.Timeline)
204 r.Get("/upgradeBanner", s.UpgradeBanner)
205 r.Post("/newsletter/signup", s.NewsletterSignup)
206 r.Post("/newsletter/dismiss", s.NewsletterDismiss)
207
208 // special-case handler for serving tangled.org/core
209 r.Get("/core", s.Core())
210
211 r.Get("/login", s.Login)
212 r.Post("/login", s.Login)
213 r.Post("/logout", s.Logout)
214
215 r.With(middleware.Paginate).Get("/search", s.Search)
216 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick", s.SearchQuick)
217 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick/mobile", s.SearchQuickMobile)
218
219 r.Post("/account/switch", s.SwitchAccount)
220 r.With(middleware.AuthMiddleware(s.oauth)).Delete("/account/{did}", s.RemoveAccount)
221
222 r.Route("/repo", func(r chi.Router) {
223 r.Route("/new", func(r chi.Router) {
224 r.Use(middleware.AuthMiddleware(s.oauth))
225 r.Get("/", s.NewRepo)
226 r.Post("/", s.NewRepo)
227 })
228 // r.Post("/import", s.ImportRepo)
229 })
230
231 r.With(middleware.Paginate).Get("/goodfirstissues", s.GoodFirstIssues)
232
233 r.With(middleware.AuthMiddleware(s.oauth)).Route("/follow", func(r chi.Router) {
234 r.Post("/", s.Follow)
235 r.Delete("/", s.Follow)
236 })
237
238 r.With(middleware.AuthMiddleware(s.oauth)).Route("/vouch", func(r chi.Router) {
239 r.Post("/", s.Vouch)
240 r.Post("/skip", s.SkipVouchSuggestion)
241 })
242
243 r.With(middleware.AuthMiddleware(s.oauth)).Route("/star", func(r chi.Router) {
244 r.Post("/", s.Star)
245 r.Delete("/", s.Star)
246 })
247
248 r.With(middleware.AuthMiddleware(s.oauth)).Route("/react", func(r chi.Router) {
249 r.Post("/", s.React)
250 r.Delete("/", s.React)
251 })
252
253 r.With(middleware.AuthMiddleware(s.oauth)).Route("/comment", func(r chi.Router) {
254 r.Get("/", s.CommentBodyFragment)
255 r.Get("/edit", s.EditCommentFragment)
256 r.Get("/reply", s.NewReplyCommentFragment)
257 r.Get("/reply/placeholder", s.ReplyPlaceholderFragment)
258 r.Post("/", s.NewComment)
259 r.Patch("/", s.EditComment)
260 r.Delete("/", s.DeleteComment)
261 })
262
263 r.With(middleware.AuthMiddleware(s.oauth)).Route("/markup", func(r chi.Router) {
264 r.Post("/preview", s.MarkdownPreview)
265 })
266 r.Get("/profile/popover", s.ProfilePopover)
267
268 r.Route("/profile", func(r chi.Router) {
269 r.Use(middleware.AuthMiddleware(s.oauth))
270 r.Get("/edit-bio", s.EditBioFragment)
271 r.Get("/edit-pins", s.EditPinsFragment)
272 r.Post("/bio", s.UpdateProfileBio)
273 r.Post("/pins", s.UpdateProfilePins)
274 r.Post("/avatar", s.UploadProfileAvatar)
275 r.Delete("/avatar", s.RemoveProfileAvatar)
276 r.Post("/punchcard", s.UpdateProfilePunchcardSetting)
277 r.Post("/theme", s.UpdateProfileThemeSetting)
278 })
279
280 r.With(middleware.AuthMiddleware(s.oauth)).Route("/welcome", func(r chi.Router) {
281 r.Get("/", s.OnboardingResume)
282 r.Get("/profile", s.OnboardingProfile)
283 r.Post("/profile", s.OnboardingSaveProfile)
284 r.Get("/keys", s.OnboardingKeys)
285 r.Get("/social", s.OnboardingSocial)
286 r.Get("/repo", s.OnboardingRepo)
287 r.Post("/next", s.OnboardingNext)
288 r.Post("/skip", s.OnboardingSkip)
289 r.Post("/complete", s.OnboardingComplete)
290 })
291
292 r.Mount("/settings", s.SettingsRouter())
293 r.Mount("/strings", s.StringsRouter(mw))
294
295 r.Mount("/settings/knots", s.KnotsRouter())
296 r.Mount("/settings/spindles", s.SpindlesRouter())
297
298 r.Mount("/notifications", s.NotificationsRouter(mw))
299 r.Mount("/focus", s.FocusRouter(mw))
300
301 r.Mount("/signup", s.SignupRouter())
302 if s.config.Core.XrpcEnabled {
303 r.Mount("/xrpc", s.XrpcRouter())
304 }
305 r.Mount("/", s.oauth.Router())
306
307 r.Get("/terms", s.TermsOfService)
308 r.Get("/privacy", s.PrivacyPolicy)
309 r.Get("/brand", s.Brand)
310
311 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
312 w.WriteHeader(http.StatusNotFound)
313 s.pages.Error404(w)
314 })
315 return r
316}
317
318// Core serves tangled.org/core go-import meta tags, and redirects
319// to the core repository if accessed normally.
320func (s *State) Core() http.HandlerFunc {
321 return func(w http.ResponseWriter, r *http.Request) {
322 if r.URL.Query().Get("go-get") == "1" {
323 w.Header().Set("Content-Type", "text/html")
324 w.Write([]byte(`<meta name="go-import" content="tangled.org/core git https://tangled.org/@tangled.org/core">`))
325 return
326 }
327
328 http.Redirect(w, r, "/@tangled.org/core", http.StatusFound)
329 }
330}
331
332func (s *State) SettingsRouter() http.Handler {
333 settings := &settings.Settings{
334 Db: s.db,
335 OAuth: s.oauth,
336 Pages: s.pages,
337 Config: s.config,
338 CfClient: s.cfClient,
339 Logger: log.SubLogger(s.logger, "settings"),
340 IdResolver: s.idResolver,
341 }
342
343 return settings.Router()
344}
345
346func (s *State) SpindlesRouter() http.Handler {
347 logger := log.SubLogger(s.logger, "spindles")
348
349 spindles := &spindles.Spindles{
350 Db: s.db,
351 OAuth: s.oauth,
352 Pages: s.pages,
353 Config: s.config,
354 Enforcer: s.enforcer,
355 IdResolver: s.idResolver,
356 Logger: logger,
357 }
358
359 return spindles.Router()
360}
361
362func (s *State) KnotsRouter() http.Handler {
363 logger := log.SubLogger(s.logger, "knots")
364
365 knots := &knots.Knots{
366 Db: s.db,
367 OAuth: s.oauth,
368 Pages: s.pages,
369 Config: s.config,
370 Enforcer: s.enforcer,
371 Acl: s.aclService,
372 IdResolver: s.idResolver,
373 Knotstream: s.knotstream,
374 Logger: logger,
375 }
376
377 return knots.Router()
378}
379
380func (s *State) StringsRouter(mw *middleware.Middleware) http.Handler {
381 logger := log.SubLogger(s.logger, "strings")
382
383 strs := &avstrings.Strings{
384 Db: s.db,
385 OAuth: s.oauth,
386 Pages: s.pages,
387 IdResolver: s.idResolver,
388 Notifier: s.notifier,
389 Logger: logger,
390 }
391
392 return strs.Router(mw)
393}
394
395func (s *State) IssuesRouter(mw *middleware.Middleware) http.Handler {
396 issues := issues.New(
397 s.oauth,
398 s.repoResolver,
399 s.aclService,
400 s.pages,
401 s.idResolver,
402 s.mentionsResolver,
403 s.db,
404 s.config,
405 s.notifier,
406 s.indexer.Issues,
407 log.SubLogger(s.logger, "issues"),
408 )
409 return issues.Router(mw)
410}
411
412func (s *State) PullsRouter(mw *middleware.Middleware) http.Handler {
413 pulls := pulls.New(
414 s.oauth,
415 s.repoResolver,
416 s.pages,
417 s.idResolver,
418 s.mentionsResolver,
419 s.db,
420 s.config,
421 s.notifier,
422 s.aclService,
423 s.indexer.Pulls,
424 log.SubLogger(s.logger, "pulls"),
425 )
426 return pulls.Router(mw)
427}
428
429func (s *State) RepoRouter(mw *middleware.Middleware) http.Handler {
430 repo := repo.New(
431 s.oauth,
432 s.repoResolver,
433 s.pages,
434 s.idResolver,
435 s.db,
436 s.config,
437 s.notifier,
438 s.enforcer,
439 s.aclService,
440 log.SubLogger(s.logger, "repo"),
441 s.cfClient,
442 s.codesearch,
443 )
444 return repo.Router(mw)
445}
446
447func (s *State) PipelinesRouter(mw *middleware.Middleware) http.Handler {
448 pipes := pipelines.New(
449 s.oauth,
450 s.repoResolver,
451 s.pages,
452 s.idResolver,
453 s.db,
454 s.config,
455 s.enforcer,
456 log.SubLogger(s.logger, "pipelines"),
457 )
458 return pipes.Router(mw)
459}
460
461func (s *State) LabelsRouter() http.Handler {
462 ls := labels.New(
463 s.oauth,
464 s.pages,
465 s.db,
466 s.idResolver.Directory(),
467 s.aclService,
468 s.notifier,
469 log.SubLogger(s.logger, "labels"),
470 )
471 return ls.Router()
472}
473
474func (s *State) NotificationsRouter(mw *middleware.Middleware) http.Handler {
475 notifs := notifications.New(s.db, s.oauth, s.pages, log.SubLogger(s.logger, "notifications"))
476 return notifs.Router(mw)
477}
478
479func (s *State) FocusRouter(mw *middleware.Middleware) http.Handler {
480 f := focus.New(s.db, s.oauth, s.idResolver, s.pages, log.SubLogger(s.logger, "focus"))
481 return f.Router(mw)
482}
483
484func (s *State) SignupRouter() http.Handler {
485 sig := signup.New(s.config, s.db, s.posthog, s.idResolver, s.pages, log.SubLogger(s.logger, "signup"))
486 return sig.Router()
487}
488
489// XrpcRouter serves the org.tangled.* methods owned by the go service; callers
490// authenticate with atproto service auth, audience did:web:<appview host>
491func (s *State) XrpcRouter() http.Handler {
492 audience := serviceauth.DidWeb(s.config.Core.AppviewHost).String()
493 sa := serviceauth.NewServiceAuth(s.logger, s.idResolver.Directory(), audience)
494
495 xlogger := log.SubLogger(s.logger, "xrpc")
496 x := &avxrpc.Xrpc{
497 DB: s.db,
498 Config: s.config,
499 Logger: xlogger,
500 ServiceAuth: sa,
501 IdResolver: s.idResolver,
502 Cloudflare: s.cfClient,
503 CodeSearch: s.codesearch,
504 Webhooks: whnotify.NewNotifier(s.db, s.config.Core.BaseUrl(), s.config.Core.Dev),
505 DisallowedNicknames: userutil.LoadDisallowedNicknames(s.config.Core.DisallowedNicknamesFile, xlogger),
506 }
507 return x.Router()
508}