use crate::{ check_community_ban, collect_moderated_communities, get_post, get_user_from_jwt, get_user_from_jwt_opt, is_mod_or_admin, Perform, }; use actix_web::web::Data; use lemmy_apub::{ApubLikeableType, ApubObjectType}; use lemmy_db::{ comment_report::*, comment_view::*, source::{comment::*, moderator::*, post::*, user::*}, views::site_view::SiteView, Crud, Likeable, ListingType, Reportable, Saveable, SortType, }; use lemmy_structs::{blocking, comment::*, send_local_notifs}; use lemmy_utils::{ apub::{make_apub_endpoint, EndpointType}, utils::{remove_slurs, scrape_text_for_mentions}, APIError, ConnectionId, LemmyError, }; use lemmy_websocket::{ messages::{SendComment, SendModRoomMessage, SendUserRoomMessage}, LemmyContext, UserOperation, }; use std::str::FromStr; #[async_trait::async_trait(?Send)] impl Perform for CreateComment { type Response = CommentResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &CreateComment = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let content_slurs_removed = remove_slurs(&data.content.to_owned()); let comment_form = CommentForm { content: content_slurs_removed, parent_id: data.parent_id.to_owned(), post_id: data.post_id, creator_id: user.id, removed: None, deleted: None, read: None, published: None, updated: None, ap_id: None, local: true, }; // Check for a community ban let post_id = data.post_id; let post = get_post(post_id, context.pool()).await?; check_community_ban(user.id, post.community_id, context.pool()).await?; // Check if post is locked, no new comments if post.locked { return Err(APIError::err("locked").into()); } // Create the comment let comment_form2 = comment_form.clone(); let inserted_comment = match blocking(context.pool(), move |conn| { Comment::create(&conn, &comment_form2) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_create_comment").into()), }; // Necessary to update the ap_id let inserted_comment_id = inserted_comment.id; let updated_comment: Comment = match blocking(context.pool(), move |conn| { let apub_id = make_apub_endpoint(EndpointType::Comment, &inserted_comment_id.to_string()).to_string(); Comment::update_ap_id(&conn, inserted_comment_id, apub_id) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_create_comment").into()), }; updated_comment.send_create(&user, context).await?; // Scan the comment for user mentions, add those rows let mentions = scrape_text_for_mentions(&comment_form.content); let recipient_ids = send_local_notifs( mentions, updated_comment.clone(), &user, post, context.pool(), true, ) .await?; // You like your own comment by default let like_form = CommentLikeForm { comment_id: inserted_comment.id, post_id: data.post_id, user_id: user.id, score: 1, }; let like = move |conn: &'_ _| CommentLike::like(&conn, &like_form); if blocking(context.pool(), like).await?.is_err() { return Err(APIError::err("couldnt_like_comment").into()); } updated_comment.send_like(&user, context).await?; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(&conn, inserted_comment.id, Some(user_id)) }) .await??; let mut res = CommentResponse { comment: comment_view, recipient_ids, form_id: data.form_id.to_owned(), }; context.chat_server().do_send(SendComment { op: UserOperation::CreateComment, comment: res.clone(), websocket_id, }); // strip out the recipient_ids, so that // users don't get double notifs res.recipient_ids = Vec::new(); Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for EditComment { type Response = CommentResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &EditComment = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let edit_id = data.edit_id; let orig_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, edit_id, None) }) .await??; check_community_ban(user.id, orig_comment.community_id, context.pool()).await?; // Verify that only the creator can edit if user.id != orig_comment.creator_id { return Err(APIError::err("no_comment_edit_allowed").into()); } // Do the update let content_slurs_removed = remove_slurs(&data.content.to_owned()); let edit_id = data.edit_id; let updated_comment = match blocking(context.pool(), move |conn| { Comment::update_content(conn, edit_id, &content_slurs_removed) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_update_comment").into()), }; // Send the apub update updated_comment.send_update(&user, context).await?; // Do the mentions / recipients let post_id = orig_comment.post_id; let post = get_post(post_id, context.pool()).await?; let updated_comment_content = updated_comment.content.to_owned(); let mentions = scrape_text_for_mentions(&updated_comment_content); let recipient_ids = send_local_notifs( mentions, updated_comment, &user, post, context.pool(), false, ) .await?; let edit_id = data.edit_id; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(conn, edit_id, Some(user_id)) }) .await??; let mut res = CommentResponse { comment: comment_view, recipient_ids, form_id: data.form_id.to_owned(), }; context.chat_server().do_send(SendComment { op: UserOperation::EditComment, comment: res.clone(), websocket_id, }); // strip out the recipient_ids, so that // users don't get double notifs res.recipient_ids = Vec::new(); Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for DeleteComment { type Response = CommentResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &DeleteComment = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let edit_id = data.edit_id; let orig_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, edit_id, None) }) .await??; check_community_ban(user.id, orig_comment.community_id, context.pool()).await?; // Verify that only the creator can delete if user.id != orig_comment.creator_id { return Err(APIError::err("no_comment_edit_allowed").into()); } // Do the delete let deleted = data.deleted; let updated_comment = match blocking(context.pool(), move |conn| { Comment::update_deleted(conn, edit_id, deleted) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_update_comment").into()), }; // Send the apub message if deleted { updated_comment.send_delete(&user, context).await?; } else { updated_comment.send_undo_delete(&user, context).await?; } // Refetch it let edit_id = data.edit_id; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(conn, edit_id, Some(user_id)) }) .await??; // Build the recipients let post_id = comment_view.post_id; let post = get_post(post_id, context.pool()).await?; let mentions = vec![]; let recipient_ids = send_local_notifs( mentions, updated_comment, &user, post, context.pool(), false, ) .await?; let mut res = CommentResponse { comment: comment_view, recipient_ids, form_id: None, }; context.chat_server().do_send(SendComment { op: UserOperation::DeleteComment, comment: res.clone(), websocket_id, }); // strip out the recipient_ids, so that // users don't get double notifs res.recipient_ids = Vec::new(); Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for RemoveComment { type Response = CommentResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &RemoveComment = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let edit_id = data.edit_id; let orig_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, edit_id, None) }) .await??; check_community_ban(user.id, orig_comment.community_id, context.pool()).await?; // Verify that only a mod or admin can remove is_mod_or_admin(context.pool(), user.id, orig_comment.community_id).await?; // Do the remove let removed = data.removed; let updated_comment = match blocking(context.pool(), move |conn| { Comment::update_removed(conn, edit_id, removed) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_update_comment").into()), }; // Mod tables let form = ModRemoveCommentForm { mod_user_id: user.id, comment_id: data.edit_id, removed: Some(removed), reason: data.reason.to_owned(), }; blocking(context.pool(), move |conn| { ModRemoveComment::create(conn, &form) }) .await??; // Send the apub message if removed { updated_comment.send_remove(&user, context).await?; } else { updated_comment.send_undo_remove(&user, context).await?; } // Refetch it let edit_id = data.edit_id; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(conn, edit_id, Some(user_id)) }) .await??; // Build the recipients let post_id = comment_view.post_id; let post = get_post(post_id, context.pool()).await?; let mentions = vec![]; let recipient_ids = send_local_notifs( mentions, updated_comment, &user, post, context.pool(), false, ) .await?; let mut res = CommentResponse { comment: comment_view, recipient_ids, form_id: None, }; context.chat_server().do_send(SendComment { op: UserOperation::RemoveComment, comment: res.clone(), websocket_id, }); // strip out the recipient_ids, so that // users don't get double notifs res.recipient_ids = Vec::new(); Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for MarkCommentAsRead { type Response = CommentResponse; async fn perform( &self, context: &Data, _websocket_id: Option, ) -> Result { let data: &MarkCommentAsRead = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let edit_id = data.edit_id; let orig_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, edit_id, None) }) .await??; check_community_ban(user.id, orig_comment.community_id, context.pool()).await?; // Verify that only the recipient can mark as read // Needs to fetch the parent comment / post to get the recipient let parent_id = orig_comment.parent_id; match parent_id { Some(pid) => { let parent_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, pid, None) }) .await??; if user.id != parent_comment.creator_id { return Err(APIError::err("no_comment_edit_allowed").into()); } } None => { let parent_post_id = orig_comment.post_id; let parent_post = blocking(context.pool(), move |conn| Post::read(conn, parent_post_id)).await??; if user.id != parent_post.creator_id { return Err(APIError::err("no_comment_edit_allowed").into()); } } } // Do the mark as read let read = data.read; match blocking(context.pool(), move |conn| { Comment::update_read(conn, edit_id, read) }) .await? { Ok(comment) => comment, Err(_e) => return Err(APIError::err("couldnt_update_comment").into()), }; // Refetch it let edit_id = data.edit_id; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(conn, edit_id, Some(user_id)) }) .await??; let res = CommentResponse { comment: comment_view, recipient_ids: Vec::new(), form_id: None, }; Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for SaveComment { type Response = CommentResponse; async fn perform( &self, context: &Data, _websocket_id: Option, ) -> Result { let data: &SaveComment = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let comment_saved_form = CommentSavedForm { comment_id: data.comment_id, user_id: user.id, }; if data.save { let save_comment = move |conn: &'_ _| CommentSaved::save(conn, &comment_saved_form); if blocking(context.pool(), save_comment).await?.is_err() { return Err(APIError::err("couldnt_save_comment").into()); } } else { let unsave_comment = move |conn: &'_ _| CommentSaved::unsave(conn, &comment_saved_form); if blocking(context.pool(), unsave_comment).await?.is_err() { return Err(APIError::err("couldnt_save_comment").into()); } } let comment_id = data.comment_id; let user_id = user.id; let comment_view = blocking(context.pool(), move |conn| { CommentView::read(conn, comment_id, Some(user_id)) }) .await??; Ok(CommentResponse { comment: comment_view, recipient_ids: Vec::new(), form_id: None, }) } } #[async_trait::async_trait(?Send)] impl Perform for CreateCommentLike { type Response = CommentResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &CreateCommentLike = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let mut recipient_ids = Vec::new(); // Don't do a downvote if site has downvotes disabled if data.score == -1 { let site_view = blocking(context.pool(), move |conn| SiteView::read(conn)).await??; if !site_view.site.enable_downvotes { return Err(APIError::err("downvotes_disabled").into()); } } let comment_id = data.comment_id; let orig_comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, comment_id, None) }) .await??; let post_id = orig_comment.post_id; let post = get_post(post_id, context.pool()).await?; check_community_ban(user.id, post.community_id, context.pool()).await?; let comment_id = data.comment_id; let comment = blocking(context.pool(), move |conn| Comment::read(conn, comment_id)).await??; // Add to recipient ids match comment.parent_id { Some(parent_id) => { let parent_comment = blocking(context.pool(), move |conn| Comment::read(conn, parent_id)).await??; if parent_comment.creator_id != user.id { let parent_user = blocking(context.pool(), move |conn| { User_::read(conn, parent_comment.creator_id) }) .await??; recipient_ids.push(parent_user.id); } } None => { recipient_ids.push(post.creator_id); } } let like_form = CommentLikeForm { comment_id: data.comment_id, post_id, user_id: user.id, score: data.score, }; // Remove any likes first let user_id = user.id; blocking(context.pool(), move |conn| { CommentLike::remove(conn, user_id, comment_id) }) .await??; // Only add the like if the score isnt 0 let do_add = like_form.score != 0 && (like_form.score == 1 || like_form.score == -1); if do_add { let like_form2 = like_form.clone(); let like = move |conn: &'_ _| CommentLike::like(conn, &like_form2); if blocking(context.pool(), like).await?.is_err() { return Err(APIError::err("couldnt_like_comment").into()); } if like_form.score == 1 { comment.send_like(&user, context).await?; } else if like_form.score == -1 { comment.send_dislike(&user, context).await?; } } else { comment.send_undo_like(&user, context).await?; } // Have to refetch the comment to get the current state let comment_id = data.comment_id; let user_id = user.id; let liked_comment = blocking(context.pool(), move |conn| { CommentView::read(conn, comment_id, Some(user_id)) }) .await??; let mut res = CommentResponse { comment: liked_comment, recipient_ids, form_id: None, }; context.chat_server().do_send(SendComment { op: UserOperation::CreateCommentLike, comment: res.clone(), websocket_id, }); // strip out the recipient_ids, so that // users don't get double notifs res.recipient_ids = Vec::new(); Ok(res) } } #[async_trait::async_trait(?Send)] impl Perform for GetComments { type Response = GetCommentsResponse; async fn perform( &self, context: &Data, _websocket_id: Option, ) -> Result { let data: &GetComments = &self; let user = get_user_from_jwt_opt(&data.auth, context.pool()).await?; let user_id = user.map(|u| u.id); let type_ = ListingType::from_str(&data.type_)?; let sort = SortType::from_str(&data.sort)?; let community_id = data.community_id; let community_name = data.community_name.to_owned(); let page = data.page; let limit = data.limit; let comments = blocking(context.pool(), move |conn| { CommentQueryBuilder::create(conn) .listing_type(type_) .sort(&sort) .for_community_id(community_id) .for_community_name(community_name) .my_user_id(user_id) .page(page) .limit(limit) .list() }) .await?; let comments = match comments { Ok(comments) => comments, Err(_) => return Err(APIError::err("couldnt_get_comments").into()), }; Ok(GetCommentsResponse { comments }) } } /// Creates a comment report and notifies the moderators of the community #[async_trait::async_trait(?Send)] impl Perform for CreateCommentReport { type Response = CreateCommentReportResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &CreateCommentReport = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; // check size of report and check for whitespace let reason = data.reason.trim(); if reason.is_empty() { return Err(APIError::err("report_reason_required").into()); } if reason.len() > 1000 { return Err(APIError::err("report_too_long").into()); } let user_id = user.id; let comment_id = data.comment_id; let comment = blocking(context.pool(), move |conn| { CommentView::read(&conn, comment_id, None) }) .await??; check_community_ban(user_id, comment.community_id, context.pool()).await?; let report_form = CommentReportForm { creator_id: user_id, comment_id, original_comment_text: comment.content, reason: data.reason.to_owned(), }; let report = match blocking(context.pool(), move |conn| { CommentReport::report(conn, &report_form) }) .await? { Ok(report) => report, Err(_e) => return Err(APIError::err("couldnt_create_report").into()), }; let res = CreateCommentReportResponse { success: true }; context.chat_server().do_send(SendUserRoomMessage { op: UserOperation::CreateCommentReport, response: res.clone(), recipient_id: user.id, websocket_id, }); context.chat_server().do_send(SendModRoomMessage { op: UserOperation::CreateCommentReport, response: report, community_id: comment.community_id, websocket_id, }); Ok(res) } } /// Resolves or unresolves a comment report and notifies the moderators of the community #[async_trait::async_trait(?Send)] impl Perform for ResolveCommentReport { type Response = ResolveCommentReportResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &ResolveCommentReport = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let report_id = data.report_id; let report = blocking(context.pool(), move |conn| { CommentReportView::read(&conn, report_id) }) .await??; let user_id = user.id; is_mod_or_admin(context.pool(), user_id, report.community_id).await?; let resolved = data.resolved; let resolve_fun = move |conn: &'_ _| { if resolved { CommentReport::resolve(conn, report_id, user_id) } else { CommentReport::unresolve(conn, report_id, user_id) } }; if blocking(context.pool(), resolve_fun).await?.is_err() { return Err(APIError::err("couldnt_resolve_report").into()); }; let report_id = data.report_id; let res = ResolveCommentReportResponse { report_id, resolved, }; context.chat_server().do_send(SendModRoomMessage { op: UserOperation::ResolveCommentReport, response: res.clone(), community_id: report.community_id, websocket_id, }); Ok(res) } } /// Lists comment reports for a community if an id is supplied /// or returns all comment reports for communities a user moderates #[async_trait::async_trait(?Send)] impl Perform for ListCommentReports { type Response = ListCommentReportsResponse; async fn perform( &self, context: &Data, websocket_id: Option, ) -> Result { let data: &ListCommentReports = &self; let user = get_user_from_jwt(&data.auth, context.pool()).await?; let user_id = user.id; let community_id = data.community; let community_ids = collect_moderated_communities(user_id, community_id, context.pool()).await?; let page = data.page; let limit = data.limit; let comments = blocking(context.pool(), move |conn| { CommentReportQueryBuilder::create(conn) .community_ids(community_ids) .page(page) .limit(limit) .list() }) .await??; let res = ListCommentReportsResponse { comments }; context.chat_server().do_send(SendUserRoomMessage { op: UserOperation::ListCommentReports, response: res.clone(), recipient_id: user.id, websocket_id, }); Ok(res) } }