alice.pds.demo.boltless.dev
This repository has no description
1package state
2
3import (
4 "context"
5 "database/sql"
6 "errors"
7 "net/http"
8 "strings"
9
10 "github.com/go-chi/chi/v5"
11 "tangled.org/core/appview/db"
12 "tangled.org/core/appview/focus"
13 "tangled.org/core/appview/issues"
14 "tangled.org/core/appview/knotacl"
15 "tangled.org/core/appview/knots"
16 "tangled.org/core/appview/labels"
17 "tangled.org/core/appview/metrics"
18 "tangled.org/core/appview/middleware"
19 "tangled.org/core/appview/migration"
20 "tangled.org/core/appview/notifications"
21 whnotify "tangled.org/core/appview/notify/webhook"
22 "tangled.org/core/appview/pipelines"
23 "tangled.org/core/appview/pulls"
24 "tangled.org/core/appview/repo"
25 "tangled.org/core/appview/settings"
26 "tangled.org/core/appview/signup"
27 "tangled.org/core/appview/spindles"
28 "tangled.org/core/appview/state/userutil"
29 avstrings "tangled.org/core/appview/strings"
30 avtimeline "tangled.org/core/appview/timeline"
31 avxrpc "tangled.org/core/appview/xrpc"
32 "tangled.org/core/blog"
33 "tangled.org/core/log"
34 "tangled.org/core/xrpc/serviceauth"
35)
36
37func (s *State) Router() http.Handler {
38 router := chi.NewRouter()
39 middleware := middleware.New(
40 s.oauth,
41 s.db,
42 s.enforcer,
43 s.aclService,
44 s.repoResolver,
45 s.idResolver,
46 s.pages,
47 s.rdb,
48 s.logger,
49 )
50
51 router.Use(metrics.Middleware)
52 router.Use(knotacl.MemoMiddleware)
53
54 if err := db.ReapStaleRunningMigrations(context.Background(), s.db); err != nil {
55 s.logger.Warn("failed to reap stale running migrations", "err", err)
56 }
57 go func() {
58 if n, err := db.EnqueueEntityStateBackfill(context.Background(), s.db); err != nil {
59 s.logger.Warn("failed to enqueue entity state backfill", "err", err)
60 } else if n > 0 {
61 s.logger.Info("enqueued entity state backfill", "owners", n)
62 }
63 }()
64 m := migration.NewMigration(s.db, s.oauth, s.idResolver.Directory(), s.logger)
65 router.Use(m.BackgroundMigrationMiddleware)
66
67 router.Get("/pwa-manifest.json", s.WebAppManifest)
68 router.Get("/robots.txt", s.RobotsTxt)
69 router.Get("/.well-known/security.txt", s.SecurityTxt)
70
71 userRouter := s.UserRouter(&middleware)
72 standardRouter := s.StandardRouter(&middleware)
73 keysRouter := s.KeysRouter(&middleware)
74
75 router.HandleFunc("/*", func(w http.ResponseWriter, r *http.Request) {
76 pat := chi.URLParam(r, "*")
77 pathParts := strings.SplitN(pat, "/", 2)
78
79 if len(pathParts) > 0 {
80 firstPart := pathParts[0]
81
82 if userutil.IsDid(firstPart) {
83 repo, err := db.GetRepoByDid(s.db, firstPart)
84 switch {
85 case err == nil:
86 remaining := ""
87 if len(pathParts) > 1 {
88 remaining = "/" + pathParts[1]
89 }
90 rewritten := "/" + repo.Did + "/" + repo.Rkey + remaining
91 r2 := r.Clone(r.Context())
92 r2.URL.Path = rewritten
93 r2.URL.RawPath = rewritten
94 userRouter.ServeHTTP(w, r2)
95 case errors.Is(err, sql.ErrNoRows):
96 userRouter.ServeHTTP(w, r)
97 default:
98 s.logger.Error("db error looking up repo DID", "repoDid", firstPart, "err", err)
99 http.Error(w, "internal server error", http.StatusInternalServerError)
100 }
101 return
102 }
103
104 if strings.HasSuffix(firstPart, ".keys") {
105 keysRouter.ServeHTTP(w, r)
106 return
107 }
108
109 if userutil.IsHandle(firstPart) {
110 userRouter.ServeHTTP(w, r)
111 return
112 }
113
114 // if using a flattened DID (like you would in go modules), unflatten
115 if userutil.IsFlattenedDid(firstPart) {
116 unflattenedDid := userutil.UnflattenDid(firstPart)
117 redirectPath := strings.Join(append([]string{unflattenedDid}, pathParts[1:]...), "/")
118
119 redirectURL := *r.URL
120 redirectURL.Path = "/" + redirectPath
121
122 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
123 return
124 }
125
126 // if using a handle with @, rewrite to work without @
127 if normalized := strings.TrimPrefix(firstPart, "@"); userutil.IsHandle(normalized) {
128 redirectPath := strings.Join(append([]string{normalized}, pathParts[1:]...), "/")
129
130 redirectURL := *r.URL
131 redirectURL.Path = "/" + redirectPath
132
133 http.Redirect(w, r, redirectURL.String(), http.StatusFound)
134 return
135 }
136
137 }
138
139 standardRouter.ServeHTTP(w, r)
140 })
141
142 return router
143}
144
145func (s *State) KeysRouter(mw *middleware.Middleware) http.Handler {
146 r := chi.NewRouter()
147 r.Use(mw.InjectBaseParams)
148
149 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
150 r.Get("/", s.Keys)
151 })
152
153 return r
154}
155
156func (s *State) UserRouter(mw *middleware.Middleware) http.Handler {
157 r := chi.NewRouter()
158 r.Use(mw.InjectBaseParams)
159
160 // TODO: workflow status update requests (30s polling)
161
162 r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
163 r.Get("/", s.Profile)
164 r.Get("/feed.atom", s.AtomFeedPage)
165
166 r.With(mw.ResolveRepo()).Route("/{repo}", func(r chi.Router) {
167 r.Use(mw.GoImport())
168
169 // These routes get proxied to the knot
170 r.Get("/info/refs", s.InfoRefs)
171 r.Post("/git-upload-archive", s.UploadArchive)
172 r.Post("/git-upload-pack", s.UploadPack)
173 r.Post("/git-receive-pack", s.ReceivePack)
174
175 r.Group(func(r chi.Router) {
176 r.Use(mw.CanonicalizeRepoURL())
177 r.Mount("/issues", s.IssuesRouter(mw))
178 r.Mount("/pulls", s.PullsRouter(mw))
179 r.Mount("/pipelines", s.PipelinesRouter(mw))
180 r.Mount("/labels", s.LabelsRouter())
181 r.Mount("/", s.RepoRouter(mw))
182 })
183 })
184 })
185
186 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
187 w.WriteHeader(http.StatusNotFound)
188 s.pages.Error404(w)
189 })
190
191 return r
192}
193
194func (s *State) StandardRouter(mw *middleware.Middleware) http.Handler {
195 r := chi.NewRouter()
196 r.Use(mw.InjectBaseParams)
197
198 r.Handle("/static/*", s.pages.Static())
199
200 tl := avtimeline.New(s.oauth, s.db, s.config, s.pages, s.logger, blog.PostsFS)
201 r.Get("/", tl.HomeOrTimeline)
202 r.Get("/home", tl.Home)
203 r.Get("/timeline", tl.Timeline)
204 r.Get("/upgradeBanner", s.UpgradeBanner)
205 r.Post("/newsletter/signup", s.NewsletterSignup)
206 r.Post("/newsletter/dismiss", s.NewsletterDismiss)
207
208 // special-case handler for serving tangled.org/core
209 r.Get("/core", s.Core())
210
211 r.Get("/login", s.Login)
212 r.Post("/login", s.Login)
213 r.Post("/logout", s.Logout)
214
215 r.With(middleware.Paginate).Get("/search", s.Search)
216 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick", s.SearchQuick)
217 r.With(middleware.AuthMiddleware(s.oauth)).Get("/search/quick/mobile", s.SearchQuickMobile)
218
219 r.Post("/account/switch", s.SwitchAccount)
220 r.With(middleware.AuthMiddleware(s.oauth)).Delete("/account/{did}", s.RemoveAccount)
221
222 r.Route("/repo", func(r chi.Router) {
223 r.Route("/new", func(r chi.Router) {
224 r.Use(middleware.AuthMiddleware(s.oauth))
225 r.Get("/", s.NewRepo)
226 r.Post("/", s.NewRepo)
227 })
228 // r.Post("/import", s.ImportRepo)
229 })
230
231 r.With(middleware.Paginate).Get("/goodfirstissues", s.GoodFirstIssues)
232
233 r.With(middleware.AuthMiddleware(s.oauth)).Route("/follow", func(r chi.Router) {
234 r.Post("/", s.Follow)
235 r.Delete("/", s.Follow)
236 })
237
238 r.With(middleware.AuthMiddleware(s.oauth)).Route("/vouch", func(r chi.Router) {
239 r.Post("/", s.Vouch)
240 r.Post("/skip", s.SkipVouchSuggestion)
241 })
242
243 r.With(middleware.AuthMiddleware(s.oauth)).Route("/star", func(r chi.Router) {
244 r.Post("/", s.Star)
245 r.Delete("/", s.Star)
246 })
247
248 r.With(middleware.AuthMiddleware(s.oauth)).Route("/react", func(r chi.Router) {
249 r.Post("/", s.React)
250 r.Delete("/", s.React)
251 })
252
253 r.With(middleware.AuthMiddleware(s.oauth)).Route("/comment", func(r chi.Router) {
254 r.Get("/", s.CommentBodyFragment)
255 r.Get("/edit", s.EditCommentFragment)
256 r.Get("/reply", s.NewReplyCommentFragment)
257 r.Get("/reply/placeholder", s.ReplyPlaceholderFragment)
258 r.Post("/", s.NewComment)
259 r.Patch("/", s.EditComment)
260 r.Delete("/", s.DeleteComment)
261 })
262
263 r.With(middleware.AuthMiddleware(s.oauth)).Route("/markup", func(r chi.Router) {
264 r.Post("/preview", s.MarkdownPreview)
265 r.Post("/upload", s.MarkupUpload)
266 })
267 r.Get("/profile/popover", s.ProfilePopover)
268
269 r.Route("/profile", func(r chi.Router) {
270 r.Use(middleware.AuthMiddleware(s.oauth))
271 r.Get("/edit-bio", s.EditBioFragment)
272 r.Get("/edit-pins", s.EditPinsFragment)
273 r.Post("/bio", s.UpdateProfileBio)
274 r.Post("/pins", s.UpdateProfilePins)
275 r.Post("/avatar", s.UploadProfileAvatar)
276 r.Delete("/avatar", s.RemoveProfileAvatar)
277 r.Post("/punchcard", s.UpdateProfilePunchcardSetting)
278 r.Post("/theme", s.UpdateProfileThemeSetting)
279 })
280
281 r.With(middleware.AuthMiddleware(s.oauth)).Route("/welcome", func(r chi.Router) {
282 r.Get("/", s.OnboardingResume)
283 r.Get("/profile", s.OnboardingProfile)
284 r.Post("/profile", s.OnboardingSaveProfile)
285 r.Get("/keys", s.OnboardingKeys)
286 r.Get("/social", s.OnboardingSocial)
287 r.Get("/repo", s.OnboardingRepo)
288 r.Post("/next", s.OnboardingNext)
289 r.Post("/skip", s.OnboardingSkip)
290 r.Post("/complete", s.OnboardingComplete)
291 })
292
293 r.Mount("/settings", s.SettingsRouter())
294 r.Mount("/strings", s.StringsRouter(mw))
295
296 r.Mount("/settings/knots", s.KnotsRouter())
297 r.Mount("/settings/spindles", s.SpindlesRouter())
298
299 r.Mount("/notifications", s.NotificationsRouter(mw))
300 r.Mount("/focus", s.FocusRouter(mw))
301
302 r.Mount("/signup", s.SignupRouter())
303 if s.config.Core.XrpcEnabled {
304 r.Mount("/xrpc", s.XrpcRouter())
305 }
306 r.Mount("/", s.oauth.Router())
307
308 r.Get("/terms", s.TermsOfService)
309 r.Get("/privacy", s.PrivacyPolicy)
310 r.Get("/brand", s.Brand)
311
312 r.NotFound(func(w http.ResponseWriter, r *http.Request) {
313 w.WriteHeader(http.StatusNotFound)
314 s.pages.Error404(w)
315 })
316 return r
317}
318
319// Core serves tangled.org/core go-import meta tags, and redirects
320// to the core repository if accessed normally.
321func (s *State) Core() http.HandlerFunc {
322 return func(w http.ResponseWriter, r *http.Request) {
323 if r.URL.Query().Get("go-get") == "1" {
324 w.Header().Set("Content-Type", "text/html")
325 w.Write([]byte(`<meta name="go-import" content="tangled.org/core git https://tangled.org/@tangled.org/core">`))
326 return
327 }
328
329 http.Redirect(w, r, "/@tangled.org/core", http.StatusFound)
330 }
331}
332
333func (s *State) SettingsRouter() http.Handler {
334 settings := &settings.Settings{
335 Db: s.db,
336 OAuth: s.oauth,
337 Pages: s.pages,
338 Config: s.config,
339 CfClient: s.cfClient,
340 Logger: log.SubLogger(s.logger, "settings"),
341 IdResolver: s.idResolver,
342 }
343
344 return settings.Router()
345}
346
347func (s *State) SpindlesRouter() http.Handler {
348 logger := log.SubLogger(s.logger, "spindles")
349
350 spindles := &spindles.Spindles{
351 Db: s.db,
352 OAuth: s.oauth,
353 Pages: s.pages,
354 Config: s.config,
355 Enforcer: s.enforcer,
356 IdResolver: s.idResolver,
357 Logger: logger,
358 }
359
360 return spindles.Router()
361}
362
363func (s *State) KnotsRouter() http.Handler {
364 logger := log.SubLogger(s.logger, "knots")
365
366 knots := &knots.Knots{
367 Db: s.db,
368 OAuth: s.oauth,
369 Pages: s.pages,
370 Config: s.config,
371 Enforcer: s.enforcer,
372 Acl: s.aclService,
373 IdResolver: s.idResolver,
374 Knotstream: s.knotstream,
375 Logger: logger,
376 }
377
378 return knots.Router()
379}
380
381func (s *State) StringsRouter(mw *middleware.Middleware) http.Handler {
382 logger := log.SubLogger(s.logger, "strings")
383
384 strs := &avstrings.Strings{
385 Db: s.db,
386 OAuth: s.oauth,
387 Pages: s.pages,
388 IdResolver: s.idResolver,
389 Notifier: s.notifier,
390 Logger: logger,
391 }
392
393 return strs.Router(mw)
394}
395
396func (s *State) IssuesRouter(mw *middleware.Middleware) http.Handler {
397 issues := issues.New(
398 s.oauth,
399 s.repoResolver,
400 s.aclService,
401 s.pages,
402 s.idResolver,
403 s.mentionsResolver,
404 s.db,
405 s.config,
406 s.notifier,
407 s.indexer.Issues,
408 log.SubLogger(s.logger, "issues"),
409 )
410 return issues.Router(mw)
411}
412
413func (s *State) PullsRouter(mw *middleware.Middleware) http.Handler {
414 pulls := pulls.New(
415 s.oauth,
416 s.repoResolver,
417 s.pages,
418 s.idResolver,
419 s.mentionsResolver,
420 s.db,
421 s.config,
422 s.notifier,
423 s.aclService,
424 s.indexer.Pulls,
425 log.SubLogger(s.logger, "pulls"),
426 )
427 return pulls.Router(mw)
428}
429
430func (s *State) RepoRouter(mw *middleware.Middleware) http.Handler {
431 repo := repo.New(
432 s.oauth,
433 s.repoResolver,
434 s.pages,
435 s.idResolver,
436 s.db,
437 s.config,
438 s.notifier,
439 s.enforcer,
440 s.aclService,
441 log.SubLogger(s.logger, "repo"),
442 s.cfClient,
443 s.codesearch,
444 )
445 return repo.Router(mw)
446}
447
448func (s *State) PipelinesRouter(mw *middleware.Middleware) http.Handler {
449 pipes := pipelines.New(
450 s.oauth,
451 s.repoResolver,
452 s.pages,
453 s.idResolver,
454 s.db,
455 s.config,
456 s.enforcer,
457 log.SubLogger(s.logger, "pipelines"),
458 )
459 return pipes.Router(mw)
460}
461
462func (s *State) LabelsRouter() http.Handler {
463 ls := labels.New(
464 s.oauth,
465 s.pages,
466 s.db,
467 s.idResolver.Directory(),
468 s.aclService,
469 s.notifier,
470 log.SubLogger(s.logger, "labels"),
471 )
472 return ls.Router()
473}
474
475func (s *State) NotificationsRouter(mw *middleware.Middleware) http.Handler {
476 notifs := notifications.New(s.db, s.oauth, s.pages, log.SubLogger(s.logger, "notifications"))
477 return notifs.Router(mw)
478}
479
480func (s *State) FocusRouter(mw *middleware.Middleware) http.Handler {
481 f := focus.New(s.db, s.oauth, s.idResolver, s.pages, log.SubLogger(s.logger, "focus"))
482 return f.Router(mw)
483}
484
485func (s *State) SignupRouter() http.Handler {
486 sig := signup.New(s.config, s.db, s.posthog, s.idResolver, s.pages, log.SubLogger(s.logger, "signup"))
487 return sig.Router()
488}
489
490// XrpcRouter serves the org.tangled.* methods owned by the go service; callers
491// authenticate with atproto service auth, audience did:web:<appview host>
492func (s *State) XrpcRouter() http.Handler {
493 audience := serviceauth.DidWeb(s.config.Core.AppviewHost).String()
494 sa := serviceauth.NewServiceAuth(s.logger, s.idResolver.Directory(), audience)
495
496 xlogger := log.SubLogger(s.logger, "xrpc")
497 x := &avxrpc.Xrpc{
498 DB: s.db,
499 Config: s.config,
500 Logger: xlogger,
501 ServiceAuth: sa,
502 IdResolver: s.idResolver,
503 Cloudflare: s.cfClient,
504 CodeSearch: s.codesearch,
505 Webhooks: whnotify.NewNotifier(s.db, s.config.Core.BaseUrl(), s.config.Core.Dev),
506 DisallowedNicknames: userutil.LoadDisallowedNicknames(s.config.Core.DisallowedNicknamesFile, xlogger),
507 }
508 return x.Router()
509}