realy/socketapi/handleReq.go

package socketapi

import (
	"bytes"
	"errors"

	"github.com/dgraph-io/badger/v4"

	"realy.mleku.dev/chk"
	"realy.mleku.dev/context"
	"realy.mleku.dev/envelopes/authenvelope"
	"realy.mleku.dev/envelopes/closedenvelope"
	"realy.mleku.dev/envelopes/eoseenvelope"
	"realy.mleku.dev/envelopes/eventenvelope"
	"realy.mleku.dev/envelopes/reqenvelope"
	"realy.mleku.dev/event"
	"realy.mleku.dev/filter"
	"realy.mleku.dev/hex"
	"realy.mleku.dev/kind"
	"realy.mleku.dev/kinds"
	"realy.mleku.dev/log"
	"realy.mleku.dev/publish"
	"realy.mleku.dev/realy/interfaces"
	"realy.mleku.dev/realy/pointers"
	"realy.mleku.dev/reason"
	"realy.mleku.dev/tag"
)

func (a *A) HandleReq(
	c context.T, req []byte, srv interfaces.Server,
	remote string) (r []byte) {

	sto := srv.Storage()
	var err error
	var rem []byte
	env := reqenvelope.New()
	if rem, err = env.Unmarshal(req); chk.E(err) {
		return reason.Error.F(err.Error())
	}
	if len(rem) > 0 {
		log.I.F("extra '%s'", rem)
	}
	allowed := env.Filters
	var accepted, modified bool
	allowed, accepted, modified = srv.AcceptReq(c, a.Listener.Req(), env.Subscription.T,
		env.Filters, []byte(a.Listener.Authed()), remote)
	if !accepted || allowed == nil || modified {
		if srv.AuthRequired() && !a.Listener.AuthRequested() {
			a.Listener.RequestAuth()
			if err = closedenvelope.NewFrom(env.Subscription,
				reason.AuthRequired.F("auth required for request processing")).Write(a.Listener); chk.E(err) {
			}
			log.T.F("requesting auth from client from %s, challenge '%s'",
				a.Listener.RealRemote(), a.Listener.Challenge())
			if err = authenvelope.NewChallengeWith(a.Listener.Challenge()).Write(a.Listener); chk.E(err) {
				return
			}
			if !modified {
				return
			}
		}
	}
	var notice []byte
	if allowed != env.Filters {
		defer func() {
			if srv.AuthRequired() &&
				!a.Listener.AuthRequested() {
				a.Listener.RequestAuth()
				if notice, err = a.AuthRequiredResponse(env, remote); chk.E(err) {
					return
				}
				return
			}
		}()
	}
	if allowed == nil {
		return
	}
	for _, f := range allowed.F {
		var i uint
		if pointers.Present(f.Limit) {
			if *f.Limit == 0 {
				continue
			}
			i = *f.Limit
		}
		if srv.AuthRequired() && f.Kinds.IsPrivileged() {
			log.T.F("privileged request\n%s", f.Serialize())
			senders := f.Authors
			receivers := f.Tags.GetAll(tag.New("#p"))
			switch {
			case len(a.Listener.Authed()) == 0:
				if notice, err = a.AuthRequiredResponse(env, remote); chk.E(err) {
					return
				}
				return notice
			case senders.Contains(a.Listener.AuthedBytes()) ||
				receivers.ContainsAny([]byte("#p"), tag.New(a.Listener.AuthedBytes())):
				log.T.F("user %0x from %s allowed to query for privileged event",
					a.Listener.AuthedBytes(), remote)
			default:
				return reason.Restricted.F("authenticated user %0x does not have authorization for "+
					"requested filters", a.Listener.AuthedBytes())
			}
		}
		var events event.Ts
		log.D.F("query from %s %0x,%s", remote, a.Listener.AuthedBytes(), f.Serialize())
		if events, err = sto.QueryEvents(c, f); err != nil {
			log.E.F("eventstore: %v", err)
			if errors.Is(err, badger.ErrDBClosed) {
				return
			}
			continue
		}
		aut := a.Listener.AuthedBytes()
		// remove events from muted authors if we have the authed user's mute list.
		if a.Listener.IsAuthed() {
			var mutes event.Ts
			if mutes, err = sto.QueryEvents(c, &filter.T{Authors: tag.New(aut),
				Kinds: kinds.New(kind.MuteList)}); !chk.E(err) {
				var mutePubs [][]byte
				for _, ev := range mutes {
					for _, t := range ev.Tags.ToSliceOfTags() {
						if bytes.Equal(t.Key(), []byte("p")) {
							var p []byte
							if p, err = hex.Dec(string(t.Value())); chk.E(err) {
								continue
							}
							mutePubs = append(mutePubs, p)
						}
					}
				}
				var tmp event.Ts
				for _, ev := range events {
					for _, pk := range mutePubs {
						if bytes.Equal(ev.Pubkey, pk) {
							continue
						}
						tmp = append(tmp, ev)
					}
				}
				// remove privileged events
				events = tmp
			}
		}
		// remove privileged events as they come through in scrape queries
		var tmp event.Ts
		for _, ev := range events {
			// if auth is required, kind is privileged and there is no authed pubkey, skip
			if srv.AuthRequired() && ev.Kind.IsPrivileged() && len(aut) == 0 {
				if notice, err = a.AuthRequiredResponse(env, remote); chk.E(err) {
					return
				}
				return notice
			}
			// if the authed pubkey is not present in the pubkey or p tags, skip
			receivers := f.Tags.GetAll(tag.New("#p"))
			if ev.Kind.IsPrivileged() && (!bytes.Equal(ev.Pubkey, aut) ||
				!receivers.ContainsAny([]byte("#p"), tag.New(a.Listener.AuthedBytes()))) {
				if notice, err = a.AuthRequiredResponse(env, remote); chk.E(err) {
					return
				}
				return notice
			}
			tmp = append(tmp, ev)
		}
		events = tmp
		// write out the events to the socket
		for _, ev := range events {
			i--
			if i < 0 {
				break
			}
			var res *eventenvelope.Result
			if res, err = eventenvelope.NewResultWith(env.Subscription.T,
				ev); chk.E(err) {
				return
			}
			if err = res.Write(a.Listener); chk.E(err) {
				return
			}
		}
	}
	if err = eoseenvelope.NewFrom(env.Subscription).Write(a.Listener); chk.E(err) {
		return
	}
	if env.Filters != allowed {
		return
	}
	receiver := make(event.C, 32)
	publish.P.Receive(&W{
		Listener: a.Listener,
		Id:       env.Subscription.String(),
		Receiver: receiver,
		Filters:  env.Filters,
	})
	return
}

func (a *A) AuthRequiredResponse(env *reqenvelope.T, remote string) (notice []byte, err error) {
	if err = closedenvelope.NewFrom(env.Subscription,
		reason.AuthRequired.F(privilegedClosedNotice)).Write(a.Listener); chk.E(err) {
	}
	log.I.F("requesting auth from client from %s", remote)
	if err = authenvelope.NewChallengeWith(a.Listener.Challenge()).Write(a.Listener); chk.E(err) {
		return
	}
	notice = reason.Restricted.F(privilegedNotice)
	return
}

var privilegedNotice = "this realy does not serve DMs or Application Specific Data " +
	"to unauthenticated users or to npubs not found in the event tags or author fields, does your " +
	"client implement NIP-42?"

var privilegedClosedNotice = "auth required for processing request due to presence of privileged kinds (DMs, app specific data)"