Pim Kunis
bcc6cbb24b
Refactor room server to automatically determine auth events Add documentation in various places
407 lines
13 KiB
Elixir
407 lines
13 KiB
Elixir
defmodule MatrixServer.RoomServer do
|
|
@moduledoc """
|
|
A GenServer to hold and manipulate the state of a Matrix room.
|
|
|
|
Each RoomServer corresponds to one Matrix room that the homeserver participates in.
|
|
The RoomServers are supervised by a DynamicSupervisor RoomServer.Supervisor.
|
|
"""
|
|
|
|
@typep t :: map()
|
|
|
|
use GenServer
|
|
|
|
import Ecto.Query
|
|
import Ecto.Changeset
|
|
|
|
alias MatrixServer.{Repo, Room, Event, StateResolution, Account, JoinedRoom}
|
|
alias MatrixServer.Types.UserId
|
|
alias MatrixServer.StateResolution.Authorization
|
|
alias MatrixServerWeb.Client.Request.CreateRoom
|
|
|
|
@registry MatrixServer.RoomServer.Registry
|
|
@supervisor MatrixServer.RoomServer.Supervisor
|
|
|
|
### Interface
|
|
|
|
def start_link(opts) do
|
|
{name, opts} = Keyword.pop(opts, :name)
|
|
GenServer.start_link(__MODULE__, opts, name: name)
|
|
end
|
|
|
|
@doc """
|
|
Get the PID of the RoomServer for a room.
|
|
|
|
If the given room has no running RoomServer yet, it is created.
|
|
If the given room does not exist, an error is returned.
|
|
"""
|
|
@spec get_room_server(String.t()) :: {:error, :not_found} | DynamicSupervisor.on_start_child()
|
|
def get_room_server(room_id) do
|
|
# TODO: Might be wise to use a transaction here to prevent race conditions.
|
|
case Repo.one(from r in Room, where: r.id == ^room_id) do
|
|
%Room{state: serialized_state_set} = room ->
|
|
case Registry.lookup(@registry, room_id) do
|
|
[{pid, _}] ->
|
|
{:ok, pid}
|
|
|
|
[] ->
|
|
opts = [
|
|
name: {:via, Registry, {@registry, room_id}},
|
|
room: room,
|
|
serialized_state_set: serialized_state_set
|
|
]
|
|
|
|
DynamicSupervisor.start_child(@supervisor, {__MODULE__, opts})
|
|
end
|
|
|
|
nil ->
|
|
{:error, :not_found}
|
|
end
|
|
end
|
|
|
|
@doc """
|
|
Create a new Matrix room.
|
|
|
|
The new room is created with the given `account` as creator.
|
|
Events are inserted into the new room depending on the input `input` and according
|
|
to the [Matrix documentation](https://matrix.org/docs/spec/client_server/r0.6.1#post-matrix-client-r0-createroom).
|
|
"""
|
|
@spec create_room(pid(), Account.t(), CreateRoom.t()) :: {:ok, String.t()} | {:error, atom()}
|
|
def create_room(pid, account, input) do
|
|
GenServer.call(pid, {:create_room, account, input})
|
|
end
|
|
|
|
@doc """
|
|
Check whether the given server participates in a room.
|
|
|
|
Check whether any participant of the room has a server name matching
|
|
the given `domain`.
|
|
"""
|
|
@spec server_in_room?(pid(), String.t()) :: boolean()
|
|
def server_in_room?(pid, domain) do
|
|
GenServer.call(pid, {:server_in_room?, domain})
|
|
end
|
|
|
|
@doc """
|
|
Get the state of a room, before the given event was inserted.
|
|
|
|
Return a list of all state events and the auth chain.
|
|
"""
|
|
@spec get_state_at_event(pid(), Event.t()) :: {[Event.t()], [Event.t()]}
|
|
def get_state_at_event(pid, event) do
|
|
GenServer.call(pid, {:get_state_at_event, event})
|
|
end
|
|
|
|
@doc """
|
|
Same as `get_state_at_event/2`, except returns the lists as event IDs.
|
|
"""
|
|
@spec get_state_ids_at_event(pid(), Event.t()) :: {[String.t()], [String.t()]}
|
|
def get_state_ids_at_event(pid, event) do
|
|
GenServer.call(pid, {:get_state_ids_at_event, event})
|
|
end
|
|
|
|
@doc """
|
|
Invite the a user to this room.
|
|
"""
|
|
@spec invite(pid(), Account.t(), String.t()) :: :ok | {:error, atom()}
|
|
def invite(pid, account, user_id) do
|
|
GenServer.call(pid, {:invite, account, user_id})
|
|
end
|
|
|
|
### Implementation
|
|
|
|
@impl true
|
|
def init(opts) do
|
|
room = Keyword.fetch!(opts, :room)
|
|
serialized_state_set = Keyword.fetch!(opts, :serialized_state_set)
|
|
state_event_ids = Enum.map(serialized_state_set, fn [_, _, event_id] -> event_id end)
|
|
|
|
state_set =
|
|
Event
|
|
|> where([e], e.event_id in ^state_event_ids)
|
|
|> Repo.all()
|
|
|> Enum.into(%{}, fn %Event{type: type, state_key: state_key} = event ->
|
|
{{type, state_key}, event}
|
|
end)
|
|
|
|
{:ok, %{room: room, state_set: state_set}}
|
|
end
|
|
|
|
@impl true
|
|
def handle_call(
|
|
{:create_room, account, input},
|
|
_from,
|
|
%{room: %Room{id: room_id} = room} = state
|
|
) do
|
|
# TODO: power_level_content_override, initial_state, invite, invite_3pid
|
|
case Repo.transaction(create_room_insert_events(room, account, input)) do
|
|
{:ok, state_set} -> {:reply, {:ok, room_id}, %{state | state_set: state_set}}
|
|
{:error, reason} -> {:reply, {:error, reason}, state}
|
|
_ -> {:reply, {:error, :unknown}, state}
|
|
end
|
|
end
|
|
|
|
def handle_call({:server_in_room?, domain}, _from, %{state_set: state_set} = state) do
|
|
result =
|
|
Enum.any?(state_set, fn
|
|
{{"m.room.member", user_id}, %Event{content: %{"membership" => "join"}}} ->
|
|
MatrixServer.get_domain(user_id) == domain
|
|
|
|
_ ->
|
|
false
|
|
end)
|
|
|
|
{:reply, result, state}
|
|
end
|
|
|
|
def handle_call({:get_state_at_event, %Event{room_id: room_id} = event}, _from, state) do
|
|
room_events =
|
|
Event
|
|
|> where([e], e.room_id == ^room_id)
|
|
|> select([e], {e.event_id, e})
|
|
|> Repo.all()
|
|
|> Enum.into(%{})
|
|
|
|
state_set = StateResolution.resolve(event, false)
|
|
state_events = Map.values(state_set)
|
|
|
|
auth_chain =
|
|
state_set
|
|
|> Map.values()
|
|
|> StateResolution.full_auth_chain(room_events)
|
|
|> Enum.map(&room_events[&1])
|
|
|
|
{:reply, {state_events, auth_chain}, state}
|
|
end
|
|
|
|
def handle_call({:get_state_ids_at_event, %Event{room_id: room_id} = event}, _from, state) do
|
|
room_events =
|
|
Event
|
|
|> where([e], e.room_id == ^room_id)
|
|
|> select([e], {e.event_id, e})
|
|
|> Repo.all()
|
|
|> Enum.into(%{})
|
|
|
|
state_set = StateResolution.resolve(event, false)
|
|
state_events = Enum.map(state_set, fn {_, %Event{event_id: event_id}} -> event_id end)
|
|
|
|
auth_chain =
|
|
state_set
|
|
|> Map.values()
|
|
|> StateResolution.full_auth_chain(room_events)
|
|
|> MapSet.to_list()
|
|
|
|
{:reply, {state_events, auth_chain}, state}
|
|
end
|
|
|
|
def handle_call({:invite, account, user_id}, _from, %{room: room, state_set: state_set} = state) do
|
|
case Repo.transaction(invite_insert_event(room, state_set, account, user_id)) do
|
|
{:ok, state_set} -> {:reply, :ok, %{state | state_set: state_set}}
|
|
{:error, reason} -> {:reply, {:error, reason}, state}
|
|
end
|
|
end
|
|
|
|
@spec invite_insert_event(Room.t(), t(), Account.t(), String.t()) ::
|
|
(() -> {:ok, t()} | {:error, atom()})
|
|
defp invite_insert_event(room, state_set, account, user_id) do
|
|
invite_event = Event.invite(room, account, user_id)
|
|
|
|
fn ->
|
|
case finalize_and_insert_event(invite_event, state_set, room) do
|
|
{:ok, state_set, room} ->
|
|
_ = update_room_state_set(room, state_set)
|
|
state_set
|
|
|
|
{:error, reason} ->
|
|
Repo.rollback(reason)
|
|
end
|
|
end
|
|
end
|
|
|
|
@spec create_room_insert_events(Room.t(), Account.t(), CreateRoom.t()) ::
|
|
(() -> {:ok, t()} | {:error, atom()})
|
|
defp create_room_insert_events(room, account, %CreateRoom{
|
|
room_version: room_version,
|
|
preset: preset,
|
|
name: name,
|
|
topic: topic
|
|
}) do
|
|
events =
|
|
([
|
|
Event.create_room(room, account, room_version),
|
|
Event.join(room, account),
|
|
Event.power_levels(room, account)
|
|
] ++
|
|
room_creation_preset(account, preset, room) ++
|
|
[
|
|
if(name, do: Event.name(room, account, name)),
|
|
if(topic, do: Event.topic(room, account, topic))
|
|
])
|
|
|> Enum.reject(&Kernel.is_nil/1)
|
|
|
|
fn ->
|
|
result =
|
|
Enum.reduce_while(events, {%{}, room}, fn event, {state_set, room} ->
|
|
case finalize_and_insert_event(event, state_set, room) do
|
|
{:ok, state_set, room} -> {:cont, {state_set, room}}
|
|
{:error, reason} -> {:halt, {:error, reason}}
|
|
end
|
|
end)
|
|
|
|
case result do
|
|
{:error, reason} ->
|
|
Repo.rollback(reason)
|
|
|
|
{state_set, room} ->
|
|
_ = update_room_state_set(room, state_set)
|
|
state_set
|
|
end
|
|
end
|
|
end
|
|
|
|
@spec update_room_state_set(Room.t(), t()) :: Room.t()
|
|
defp update_room_state_set(room, state_set) do
|
|
serialized_state_set =
|
|
Enum.map(state_set, fn {{type, state_key}, event} ->
|
|
[type, state_key, event.event_id]
|
|
end)
|
|
|
|
Repo.update!(change(room, state: serialized_state_set))
|
|
end
|
|
|
|
# TODO: trusted_private_chat:
|
|
# All invitees are given the same power level as the room creator.
|
|
@spec room_creation_preset(Account.t(), String.t() | nil, Room.t()) :: [Event.t()]
|
|
defp room_creation_preset(account, nil, %Room{visibility: visibility} = room) do
|
|
preset =
|
|
case visibility do
|
|
:public -> "public_chat"
|
|
:private -> "private_chat"
|
|
end
|
|
|
|
room_creation_preset(account, preset, room)
|
|
end
|
|
|
|
defp room_creation_preset(account, preset, room) do
|
|
{join_rule, his_vis, guest_access} =
|
|
case preset do
|
|
"private_chat" -> {"invite", "shared", "can_join"}
|
|
"trusted_private_chat" -> {"invite", "shared", "can_join"}
|
|
"public_chat" -> {"public", "shared", "forbidden"}
|
|
end
|
|
|
|
[
|
|
Event.join_rules(room, account, join_rule),
|
|
Event.history_visibility(room, account, his_vis),
|
|
Event.guest_access(room, account, guest_access)
|
|
]
|
|
end
|
|
|
|
@spec finalize_and_insert_event(Event.t(), t(), Room.t()) ::
|
|
{:ok, t(), Room.t()} | {:error, atom()}
|
|
defp finalize_and_insert_event(
|
|
event,
|
|
state_set,
|
|
%Room{forward_extremities: forward_extremities} = room
|
|
) do
|
|
event =
|
|
event
|
|
|> Map.put(:auth_events, auth_events_for_event(event, state_set))
|
|
|> Map.put(:prev_events, forward_extremities)
|
|
|
|
case Event.post_process(event) do
|
|
{:ok, event} -> verify_and_insert_event(event, state_set, room)
|
|
_ -> {:error, :event_creation}
|
|
end
|
|
end
|
|
|
|
@spec auth_events_for_event(Event.t(), t()) :: [{String.t(), String.t()}]
|
|
defp auth_events_for_event(%Event{type: "m.room.create"}, _), do: []
|
|
|
|
defp auth_events_for_event(
|
|
%Event{sender: sender} = event,
|
|
state_set
|
|
) do
|
|
state_pairs =
|
|
[{"m.room.create", ""}, {"m.room.power_levels", ""}, {"m.room.member", to_string(sender)}] ++
|
|
auth_events_for_member_event(event)
|
|
|
|
state_set
|
|
|> Map.take(state_pairs)
|
|
|> Map.values()
|
|
|> Enum.map(& &1.event_id)
|
|
end
|
|
|
|
@spec auth_events_for_member_event(Event.t()) :: [{String.t(), String.t()}]
|
|
defp auth_events_for_member_event(
|
|
%Event{
|
|
type: "m.room.member",
|
|
state_key: state_key,
|
|
content: %{"membership" => membership}
|
|
} = event
|
|
) do
|
|
[
|
|
{"m.room.member", state_key},
|
|
if(membership in ["join", "invite"], do: {"m.room.join_rules", ""}),
|
|
third_party_invite_state_pair(event)
|
|
]
|
|
|> Enum.reject(&Kernel.is_nil/1)
|
|
end
|
|
|
|
defp auth_events_for_member_event(_), do: []
|
|
|
|
@spec third_party_invite_state_pair(Event.t()) :: {String.t(), String.t()} | nil
|
|
defp third_party_invite_state_pair(%Event{
|
|
content: %{
|
|
"membership" => "invite",
|
|
"third_party_invite" => %{"signed" => %{"token" => token}}
|
|
}
|
|
}) do
|
|
{"m.room.third_party_invite", token}
|
|
end
|
|
|
|
defp third_party_invite_state_pair(_), do: nil
|
|
|
|
@spec verify_and_insert_event(Event.t(), t(), Room.t()) ::
|
|
{:ok, t(), Room.t()} | {:error, atom()}
|
|
defp verify_and_insert_event(event, current_state_set, room) do
|
|
# TODO: Correct error values.
|
|
# Check the following things:
|
|
# 1. TODO: Is a valid event, otherwise it is dropped.
|
|
# 2. TODO: Passes signature checks, otherwise it is dropped.
|
|
# 3. TODO: Passes hash checks, otherwise it is redacted before being processed further.
|
|
# 4. Passes authorization rules based on the event's auth events, otherwise it is rejected.
|
|
# 5. Passes authorization rules based on the state at the event, otherwise it is rejected.
|
|
# 6. Passes authorization rules based on the current state of the room, otherwise it is "soft failed".
|
|
with true <- Event.prevalidate(event),
|
|
true <- Authorization.authorized_by_auth_events?(event),
|
|
state_set <- StateResolution.resolve(event, false),
|
|
true <- Authorization.authorized?(event, state_set),
|
|
true <- Authorization.authorized?(event, current_state_set) do
|
|
room = Room.update_forward_extremities(event, room)
|
|
event = Repo.insert!(event)
|
|
state_set = StateResolution.resolve_forward_extremities(event)
|
|
_ = update_joined_rooms(event, room)
|
|
|
|
{:ok, state_set, room}
|
|
else
|
|
_ -> {:error, :authorization}
|
|
end
|
|
end
|
|
|
|
@spec update_joined_rooms(Event.t(), Room.t()) :: JoinedRoom.t() | nil
|
|
defp update_joined_rooms(
|
|
%Event{
|
|
type: "m.room.member",
|
|
sender: %UserId{localpart: localpart, domain: domain},
|
|
content: %{"membership" => "join"}
|
|
},
|
|
%Room{id: room_id}
|
|
) do
|
|
# TODO: Also remove joined rooms.
|
|
if domain == MatrixServer.server_name() do
|
|
Repo.insert(%JoinedRoom{localpart: localpart, room_id: room_id})
|
|
end
|
|
end
|
|
|
|
defp update_joined_rooms(_, _), do: nil
|
|
end
|