use apb::{server::Inbox, Activity, ActivityType}; use axum::{extract::{Query, State}, http::StatusCode, Json}; use crate::{errors::UpubError, server::{auth::{AuthIdentity, Identity}, Context}, url}; use super::{JsonLD, Pagination}; pub async fn get( State(ctx): State, ) -> crate::Result> { crate::server::builders::collection(&url!(ctx, "/inbox"), None) } pub async fn page( State(ctx): State, AuthIdentity(auth): AuthIdentity, Query(page): Query, ) -> crate::Result> { crate::server::builders::paginate( url!(ctx, "/inbox/page"), auth.filter_condition(), ctx.db(), page, auth.my_id(), ) .await } macro_rules! pretty_json { ($json:ident) => { serde_json::to_string_pretty(&$json).expect("failed serializing to string serde_json::Value") } } pub async fn post( State(ctx): State, AuthIdentity(auth): AuthIdentity, Json(activity): Json ) -> crate::Result<()> { let Identity::Remote(server) = auth else { if activity.activity_type() != Some(ActivityType::Delete) { // this is spammy af, ignore them! tracing::warn!("refusing unauthorized activity: {}", pretty_json!(activity)); } if matches!(auth, Identity::Anonymous) { return Err(UpubError::unauthorized()); } else { return Err(UpubError::forbidden()); } }; let Some(actor) = activity.actor().id() else { return Err(UpubError::bad_request()); }; // TODO add whitelist of relays if !server.ends_with(&Context::server(&actor)) { return Err(UpubError::unauthorized()); } // TODO we could process Links and bare Objects maybe, but probably out of AP spec? match activity.activity_type().ok_or_else(UpubError::bad_request)? { ActivityType::Activity => { tracing::warn!("skipping unprocessable base activity: {}", pretty_json!(activity)); Err(StatusCode::UNPROCESSABLE_ENTITY.into()) // won't ingest useless stuff }, ActivityType::Create => Ok(ctx.create(server, activity).await?), ActivityType::Like => Ok(ctx.like(server, activity).await?), ActivityType::Follow => Ok(ctx.follow(server, activity).await?), ActivityType::Announce => Ok(ctx.announce(server, activity).await?), ActivityType::Accept(_) => Ok(ctx.accept(server, activity).await?), ActivityType::Reject(_) => Ok(ctx.reject(server, activity).await?), ActivityType::Undo => Ok(ctx.undo(server, activity).await?), ActivityType::Delete => Ok(ctx.delete(server, activity).await?), ActivityType::Update => Ok(ctx.update(server, activity).await?), _x => { tracing::info!("received unimplemented activity on inbox: {}", pretty_json!(activity)); Err(StatusCode::NOT_IMPLEMENTED.into()) }, } }