alice.pds.demo.boltless.dev
This repository has no description
1package state
2
3import (
4 "context"
5 "database/sql"
6 "errors"
7 "net/http"
8 "strings"
9
10 "github.com/go-chi/chi/v5"
11 "tangled.org/core/appview/db"
12 "tangled.org/core/appview/focus"
13 "tangled.org/core/appview/issues"
14 "tangled.org/core/appview/knotacl"
15 "tangled.org/core/appview/knots"
16 "tangled.org/core/appview/labels"
17 "tangled.org/core/appview/metrics"
18 "tangled.org/core/appview/middleware"
19 "tangled.org/core/appview/migration"
20 "tangled.org/core/appview/notifications"
21 "tangled.org/core/appview/pipelines"
22 "tangled.org/core/appview/pulls"
23 "tangled.org/core/appview/repo"
24 "tangled.org/core/appview/settings"
25 "tangled.org/core/appview/signup"
26 "tangled.org/core/appview/spindles"
27 "tangled.org/core/appview/state/userutil"
28 whnotify "tangled.org/core/appview/notify/webhook"
29 avstrings "tangled.org/core/appview/strings"
30 avtimeline "tangled.org/core/appview/timeline"
31 avxrpc "tangled.org/core/appview/xrpc"
32 "tangled.org/core/blog"
33 "tangled.org/core/log"
34 "tangled.org/core/xrpc/serviceauth"
35)
36
37func (s *State) Router() http.Handler {
38 router := chi.NewRouter()
39 middleware := middleware.New(
40 s.oauth,
41 s.db,
42 s.enforcer,
43 s.aclService,
44 s.repoResolver,
45 s.idResolver,
46 s.pages,
47 s.rdb,
48 s.logger,
49 )
50
51 router.Use(metrics.Middleware)
52 router.Use(knotacl.MemoMiddleware)
53
54 if err := db.ReapStaleRunningMigrations(context.Background(), s.db); err != nil {
55 s.logger.Warn("failed to reap stale running migrations", "err", err)
56 }
57 go func() {
58 if n, err := db.EnqueueEntityStateBackfill(context.Background(), s.db); err != nil {
59 s.logger.Warn("failed to enqueue entity state backfill", "err", err)
60 } else if n > 0 {
61 s.logger.Info("enqueued entity state backfill", "owners", n)
62 }
63 }()
64 m := migration.NewMigration(s.db, s.oauth, s.idResolver.Directory(), s.logger)
65 router.Use(m.BackgroundMigrationMiddleware)
66
67 router.Get("/pwa-manifest.json", s.WebAppManifest)
68 router.Get("/robots.txt", s.RobotsTxt)
69 router.Get("/.well-known/security.txt", s.SecurityTxt)
70
71 userRouter := s.UserRouter(&middleware)
72 standardRouter := s.StandardRouter(&middleware)
73 keysRouter := s.KeysRouter(&middleware)
74
75 router.HandleFunc("/*", func(w http.ResponseWriter, r *http.Request) {
76 pat := chi.URLParam(r, "*")
77 pathParts := strings.SplitN(pat, "/", 2)
78
79 if len(pathParts) > 0 {
80 firstPart := pathParts[0]
81
82 if userutil.IsDid(firstPart) {
83 repo, err := db.GetRepoByDid(s.db, firstPart)
84 switch {
85 case err == nil:
86 remaining := ""
87 if len(pathParts) > 1 {
88 remaining = "/" + pathParts[1]
89 }
90 rewritten := "/" + repo.Did + "/" + repo.Rkey + remaining
91 r2 := r.Clone(r.Context())
92 r2.URL.Path = rewritten
93 r2.URL.RawPath = rewritten
94 userRouter.ServeHTTP(w, r2)
95 case errors.Is(err, sql.ErrNoRows):
96 userRouter.ServeHTTP(w, r)
97 default:
98 s.logger.Error("db error looking up repo DID", "repoDid", firstPart, "err", err)
99 http.Error(w, "internal server error", http.StatusInternalServerError)
100 }
101 return
102 }
103
104 if strings.HasSuffix(firstPart, ".keys") {
105 keysRouter.ServeHTTP(w, r)
106 return
107 }
108
109 if userutil.IsHandle(firstPart) {
110 userRouter.ServeHTTP(w, r)
111 return
112 }
113
114 // if using a flattened DID (like you would in go modules), unflatten
115 if userutil.IsFlattenedDid(firstPart) {
116 unflattenedDid := userutil.UnflattenDid(firstPart)
117 redirectPath := strings.Join(append([]string{unflattenedDid}, pathParts[1:]...), "/")
118
119 redirectURL := *r.URL
120 redirectURL.Path = "/" + redirectPath
121
122 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
123 return
124 }
125
126 // if using a handle with @, rewrite to work without @
127 if normalized := strings.TrimPrefix(firstPart, "@"); userutil.IsHandle(normalized) {
128 redirectPath := strings.Join(append([]string{normalized}, pathParts[1:]...), "/")
129
130 redirectURL := *r.URL
131 redirectURL.Path = "/" + redirectPath
132
133 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
134 return
135 }
136
137 }
138
139 standardRouter.ServeHTTP(w, r)
140 })
141
142 return router
143}
144
145func (s *State) KeysRouter(mw *middleware.Middleware) http.Handler {
146 r := chi.NewRouter()
147 r.Use(mw.InjectBaseParams)
148
149 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
150 r.Get("/", s.Keys)
151 })
152
153 return r
154}
155
156func (s *State) UserRouter(mw *middleware.Middleware) http.Handler {
157 r := chi.NewRouter()
158 r.Use(mw.InjectBaseParams)
159
160 // TODO: workflow status update requests (30s polling)
161
162 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
163 r.Get("/", s.Profile)
164 r.Get("/feed.atom", s.AtomFeedPage)
165
166 r.With(mw.ResolveRepo()).Route("/{repo}", func(r chi.Router) {
167 r.Use(mw.GoImport())
168
169 // These routes get proxied to the knot
170 r.Get("/info/refs", s.InfoRefs)
171 r.Post("/git-upload-archive", s.UploadArchive)
172 r.Post("/git-upload-pack", s.UploadPack)
173 r.Post("/git-receive-pack", s.ReceivePack)
174
175 r.Group(func(r chi.Router) {
176 r.Use(mw.CanonicalizeRepoURL())
177 r.Mount("/issues", s.IssuesRouter(mw))
178 r.Mount("/pulls", s.PullsRouter(mw))
179 r.Mount("/pipelines", s.PipelinesRouter(mw))
180 r.Mount("/labels", s.LabelsRouter())
181 r.Mount("/", s.RepoRouter(mw))
182 })
183 })
184 })
185
186 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
187 w.WriteHeader(http.StatusNotFound)
188 s.pages.Error404(w)
189 })
190
191 return r
192}
193
194func (s *State) StandardRouter(mw *middleware.Middleware) http.Handler {
195 r := chi.NewRouter()
196 r.Use(mw.InjectBaseParams)
197
198 r.Handle("/static/*", s.pages.Static())
199
200 tl := avtimeline.New(s.oauth, s.db, s.config, s.pages, s.logger, blog.PostsFS)
201 r.Get("/", tl.HomeOrTimeline)
202 r.Get("/home", tl.Home)
203 r.Get("/timeline", tl.Timeline)
204 r.Get("/upgradeBanner", s.UpgradeBanner)
205 r.Post("/newsletter/signup", s.NewsletterSignup)
206 r.Post("/newsletter/dismiss", s.NewsletterDismiss)
207
208 // special-case handler for serving tangled.org/core
209 r.Get("/core", s.Core())
210
211 r.Get("/login", s.Login)
212 r.Post("/login", s.Login)
213 r.Post("/logout", s.Logout)
214
215 r.With(middleware.Paginate).Get("/search", s.Search)
216 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick", s.SearchQuick)
217 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick/mobile", s.SearchQuickMobile)
218
219 r.Post("/account/switch", s.SwitchAccount)
220 r.With(middleware.AuthMiddleware(s.oauth)).Delete("/account/{did}", s.RemoveAccount)
221
222 r.Route("/repo", func(r chi.Router) {
223 r.Route("/new", func(r chi.Router) {
224 r.Use(middleware.AuthMiddleware(s.oauth))
225 r.Get("/", s.NewRepo)
226 r.Post("/", s.NewRepo)
227 })
228 // r.Post("/import", s.ImportRepo)
229 })
230
231 r.With(middleware.Paginate).Get("/goodfirstissues", s.GoodFirstIssues)
232
233 r.With(middleware.AuthMiddleware(s.oauth)).Route("/follow", func(r chi.Router) {
234 r.Post("/", s.Follow)
235 r.Delete("/", s.Follow)
236 })
237
238 r.With(middleware.AuthMiddleware(s.oauth)).Route("/vouch", func(r chi.Router) {
239 r.Post("/", s.Vouch)
240 r.Post("/skip", s.SkipVouchSuggestion)
241 })
242
243 r.With(middleware.AuthMiddleware(s.oauth)).Route("/star", func(r chi.Router) {
244 r.Post("/", s.Star)
245 r.Delete("/", s.Star)
246 })
247
248 r.With(middleware.AuthMiddleware(s.oauth)).Route("/react", func(r chi.Router) {
249 r.Post("/", s.React)
250 r.Delete("/", s.React)
251 })
252
253 r.With(middleware.AuthMiddleware(s.oauth)).Route("/comment", func(r chi.Router) {
254 r.Get("/", s.CommentBodyFragment)
255 r.Get("/edit", s.EditCommentFragment)
256 r.Get("/reply", s.NewReplyCommentFragment)
257 r.Get("/reply/placeholder", s.ReplyPlaceholderFragment)
258 r.Post("/", s.NewComment)
259 r.Patch("/", s.EditComment)
260 r.Delete("/", s.DeleteComment)
261 })
262
263 r.With(middleware.AuthMiddleware(s.oauth)).Route("/markup", func(r chi.Router) {
264 r.Post("/preview", s.MarkdownPreview)
265 })
266 r.Get("/profile/popover", s.ProfilePopover)
267
268 r.Route("/profile", func(r chi.Router) {
269 r.Use(middleware.AuthMiddleware(s.oauth))
270 r.Get("/edit-bio", s.EditBioFragment)
271 r.Get("/edit-pins", s.EditPinsFragment)
272 r.Post("/bio", s.UpdateProfileBio)
273 r.Post("/pins", s.UpdateProfilePins)
274 r.Post("/avatar", s.UploadProfileAvatar)
275 r.Delete("/avatar", s.RemoveProfileAvatar)
276 r.Post("/punchcard", s.UpdateProfilePunchcardSetting)
277 r.Post("/theme", s.UpdateProfileThemeSetting)
278 })
279
280 r.With(middleware.AuthMiddleware(s.oauth)).Route("/welcome", func(r chi.Router) {
281 r.Get("/", s.OnboardingResume)
282 r.Get("/profile", s.OnboardingProfile)
283 r.Post("/profile", s.OnboardingSaveProfile)
284 r.Get("/keys", s.OnboardingKeys)
285 r.Get("/social", s.OnboardingSocial)
286 r.Get("/repo", s.OnboardingRepo)
287 r.Post("/next", s.OnboardingNext)
288 r.Post("/skip", s.OnboardingSkip)
289 r.Post("/complete", s.OnboardingComplete)
290 })
291
292 r.Mount("/settings", s.SettingsRouter())
293 r.Mount("/strings", s.StringsRouter(mw))
294
295 r.Mount("/settings/knots", s.KnotsRouter())
296 r.Mount("/settings/spindles", s.SpindlesRouter())
297
298 r.Mount("/notifications", s.NotificationsRouter(mw))
299 r.Mount("/focus", s.FocusRouter(mw))
300
301 r.Mount("/signup", s.SignupRouter())
302 r.Mount("/xrpc", s.XrpcRouter())
303 r.Mount("/", s.oauth.Router())
304
305 r.Get("/terms", s.TermsOfService)
306 r.Get("/privacy", s.PrivacyPolicy)
307 r.Get("/brand", s.Brand)
308
309 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
310 w.WriteHeader(http.StatusNotFound)
311 s.pages.Error404(w)
312 })
313 return r
314}
315
316// Core serves tangled.org/core go-import meta tags, and redirects
317// to the core repository if accessed normally.
318func (s *State) Core() http.HandlerFunc {
319 return func(w http.ResponseWriter, r *http.Request) {
320 if r.URL.Query().Get("go-get") == "1" {
321 w.Header().Set("Content-Type", "text/html")
322 w.Write([]byte(`<meta name="go-import" content="tangled.org/core git https://tangled.org/@tangled.org/core">`))
323 return
324 }
325
326 http.Redirect(w, r, "/@tangled.org/core", http.StatusFound)
327 }
328}
329
330func (s *State) SettingsRouter() http.Handler {
331 settings := &settings.Settings{
332 Db: s.db,
333 OAuth: s.oauth,
334 Pages: s.pages,
335 Config: s.config,
336 CfClient: s.cfClient,
337 Logger: log.SubLogger(s.logger, "settings"),
338 IdResolver: s.idResolver,
339 }
340
341 return settings.Router()
342}
343
344func (s *State) SpindlesRouter() http.Handler {
345 logger := log.SubLogger(s.logger, "spindles")
346
347 spindles := &spindles.Spindles{
348 Db: s.db,
349 OAuth: s.oauth,
350 Pages: s.pages,
351 Config: s.config,
352 Enforcer: s.enforcer,
353 IdResolver: s.idResolver,
354 Logger: logger,
355 }
356
357 return spindles.Router()
358}
359
360func (s *State) KnotsRouter() http.Handler {
361 logger := log.SubLogger(s.logger, "knots")
362
363 knots := &knots.Knots{
364 Db: s.db,
365 OAuth: s.oauth,
366 Pages: s.pages,
367 Config: s.config,
368 Enforcer: s.enforcer,
369 Acl: s.aclService,
370 IdResolver: s.idResolver,
371 Knotstream: s.knotstream,
372 Logger: logger,
373 }
374
375 return knots.Router()
376}
377
378func (s *State) StringsRouter(mw *middleware.Middleware) http.Handler {
379 logger := log.SubLogger(s.logger, "strings")
380
381 strs := &avstrings.Strings{
382 Db: s.db,
383 OAuth: s.oauth,
384 Pages: s.pages,
385 IdResolver: s.idResolver,
386 Notifier: s.notifier,
387 Logger: logger,
388 }
389
390 return strs.Router(mw)
391}
392
393func (s *State) IssuesRouter(mw *middleware.Middleware) http.Handler {
394 issues := issues.New(
395 s.oauth,
396 s.repoResolver,
397 s.aclService,
398 s.pages,
399 s.idResolver,
400 s.mentionsResolver,
401 s.db,
402 s.config,
403 s.notifier,
404 s.indexer.Issues,
405 log.SubLogger(s.logger, "issues"),
406 )
407 return issues.Router(mw)
408}
409
410func (s *State) PullsRouter(mw *middleware.Middleware) http.Handler {
411 pulls := pulls.New(
412 s.oauth,
413 s.repoResolver,
414 s.pages,
415 s.idResolver,
416 s.mentionsResolver,
417 s.db,
418 s.config,
419 s.notifier,
420 s.aclService,
421 s.indexer.Pulls,
422 log.SubLogger(s.logger, "pulls"),
423 )
424 return pulls.Router(mw)
425}
426
427func (s *State) RepoRouter(mw *middleware.Middleware) http.Handler {
428 repo := repo.New(
429 s.oauth,
430 s.repoResolver,
431 s.pages,
432 s.idResolver,
433 s.db,
434 s.config,
435 s.notifier,
436 s.enforcer,
437 s.aclService,
438 log.SubLogger(s.logger, "repo"),
439 s.cfClient,
440 s.codesearch,
441 )
442 return repo.Router(mw)
443}
444
445func (s *State) PipelinesRouter(mw *middleware.Middleware) http.Handler {
446 pipes := pipelines.New(
447 s.oauth,
448 s.repoResolver,
449 s.pages,
450 s.idResolver,
451 s.db,
452 s.config,
453 s.enforcer,
454 log.SubLogger(s.logger, "pipelines"),
455 )
456 return pipes.Router(mw)
457}
458
459func (s *State) LabelsRouter() http.Handler {
460 ls := labels.New(
461 s.oauth,
462 s.pages,
463 s.db,
464 s.idResolver.Directory(),
465 s.aclService,
466 s.notifier,
467 log.SubLogger(s.logger, "labels"),
468 )
469 return ls.Router()
470}
471
472func (s *State) NotificationsRouter(mw *middleware.Middleware) http.Handler {
473 notifs := notifications.New(s.db, s.oauth, s.pages, log.SubLogger(s.logger, "notifications"))
474 return notifs.Router(mw)
475}
476
477func (s *State) FocusRouter(mw *middleware.Middleware) http.Handler {
478 f := focus.New(s.db, s.oauth, s.idResolver, s.pages, log.SubLogger(s.logger, "focus"))
479 return f.Router(mw)
480}
481
482func (s *State) SignupRouter() http.Handler {
483 sig := signup.New(s.config, s.db, s.posthog, s.idResolver, s.pages, log.SubLogger(s.logger, "signup"))
484 return sig.Router()
485}
486
487// XrpcRouter serves the org.tangled.* methods owned by the go service; callers
488// authenticate with atproto service auth, audience did:web:<appview host>
489func (s *State) XrpcRouter() http.Handler {
490 audience := serviceauth.DidWeb(s.config.Core.AppviewHost).String()
491 sa := serviceauth.NewServiceAuth(s.logger, s.idResolver.Directory(), audience)
492
493 xlogger := log.SubLogger(s.logger, "xrpc")
494 x := &avxrpc.Xrpc{
495 DB: s.db,
496 Config: s.config,
497 Logger: xlogger,
498 ServiceAuth: sa,
499 IdResolver: s.idResolver,
500 Cloudflare: s.cfClient,
501 CodeSearch: s.codesearch,
502 Webhooks: whnotify.NewNotifier(s.db, s.config.Core.BaseUrl(), s.config.Core.Dev),
503 DisallowedNicknames: userutil.LoadDisallowedNicknames(s.config.Core.DisallowedNicknamesFile, xlogger),
504 }
505 return x.Router()
506}