Check follow constraints when getting a video
[oweals/peertube.git] / server / controllers / api / server / follows.ts
1 import * as express from 'express'
2 import { UserRight } from '../../../../shared/models/users'
3 import { logger } from '../../../helpers/logger'
4 import { getFormattedObjects, getServerActor } from '../../../helpers/utils'
5 import { sequelizeTypescript, SERVER_ACTOR_NAME } from '../../../initializers'
6 import { sendUndoFollow } from '../../../lib/activitypub/send'
7 import {
8   asyncMiddleware,
9   authenticate,
10   ensureUserHasRight,
11   paginationValidator,
12   removeFollowingValidator,
13   setBodyHostsPort,
14   setDefaultPagination,
15   setDefaultSort
16 } from '../../../middlewares'
17 import { followersSortValidator, followingSortValidator, followValidator } from '../../../middlewares/validators'
18 import { ActorFollowModel } from '../../../models/activitypub/actor-follow'
19 import { JobQueue } from '../../../lib/job-queue'
20 import { removeRedundancyOf } from '../../../lib/redundancy'
21
22 const serverFollowsRouter = express.Router()
23 serverFollowsRouter.get('/following',
24   paginationValidator,
25   followingSortValidator,
26   setDefaultSort,
27   setDefaultPagination,
28   asyncMiddleware(listFollowing)
29 )
30
31 serverFollowsRouter.post('/following',
32   authenticate,
33   ensureUserHasRight(UserRight.MANAGE_SERVER_FOLLOW),
34   followValidator,
35   setBodyHostsPort,
36   asyncMiddleware(followInstance)
37 )
38
39 serverFollowsRouter.delete('/following/:host',
40   authenticate,
41   ensureUserHasRight(UserRight.MANAGE_SERVER_FOLLOW),
42   asyncMiddleware(removeFollowingValidator),
43   asyncMiddleware(removeFollow)
44 )
45
46 serverFollowsRouter.get('/followers',
47   paginationValidator,
48   followersSortValidator,
49   setDefaultSort,
50   setDefaultPagination,
51   asyncMiddleware(listFollowers)
52 )
53
54 // ---------------------------------------------------------------------------
55
56 export {
57   serverFollowsRouter
58 }
59
60 // ---------------------------------------------------------------------------
61
62 async function listFollowing (req: express.Request, res: express.Response, next: express.NextFunction) {
63   const serverActor = await getServerActor()
64   const resultList = await ActorFollowModel.listFollowingForApi(
65     serverActor.id,
66     req.query.start,
67     req.query.count,
68     req.query.sort,
69     req.query.search
70   )
71
72   return res.json(getFormattedObjects(resultList.data, resultList.total))
73 }
74
75 async function listFollowers (req: express.Request, res: express.Response, next: express.NextFunction) {
76   const serverActor = await getServerActor()
77   const resultList = await ActorFollowModel.listFollowersForApi(
78     serverActor.id,
79     req.query.start,
80     req.query.count,
81     req.query.sort,
82     req.query.search
83   )
84
85   return res.json(getFormattedObjects(resultList.data, resultList.total))
86 }
87
88 async function followInstance (req: express.Request, res: express.Response, next: express.NextFunction) {
89   const hosts = req.body.hosts as string[]
90   const follower = await getServerActor()
91
92   for (const host of hosts) {
93     const payload = {
94       host,
95       name: SERVER_ACTOR_NAME,
96       followerActorId: follower.id
97     }
98
99     JobQueue.Instance.createJob({ type: 'activitypub-follow', payload })
100       .catch(err => logger.error('Cannot create follow job for %s.', host, err))
101   }
102
103   return res.status(204).end()
104 }
105
106 async function removeFollow (req: express.Request, res: express.Response, next: express.NextFunction) {
107   const follow: ActorFollowModel = res.locals.follow
108
109   await sequelizeTypescript.transaction(async t => {
110     if (follow.state === 'accepted') await sendUndoFollow(follow, t)
111
112     // Disable redundancy on unfollowed instances
113     const server = follow.ActorFollowing.Server
114     server.redundancyAllowed = false
115     await server.save({ transaction: t })
116
117     // Async, could be long
118     removeRedundancyOf(server.id)
119       .catch(err => logger.error('Cannot remove redundancy of %s.', server.host, err))
120
121     await follow.destroy({ transaction: t })
122   })
123
124   return res.status(204).end()
125 }