GoBlog/webmention.go

package main

import (
	"database/sql"
	"errors"
	"fmt"
	"net/http"
	"net/http/httptest"
	"strings"
	"time"

	"git.jlel.se/jlelse/GoBlog/pkgs/contenttype"
)

type webmentionStatus string

const (
	webmentionStatusVerified webmentionStatus = "verified"
	webmentionStatusApproved webmentionStatus = "approved"

	webmentionPath = "/webmention"
)

type mention struct {
	ID      int
	Source  string
	Target  string
	Created int64
	Title   string
	Content string
	Author  string
	Status  webmentionStatus
}

func (a *goBlog) initWebmention() {
	// Add hooks
	hookFunc := func(p *post) {
		if p.Status == statusPublished {
			_ = a.sendWebmentions(p)
		}
	}
	a.pPostHooks = append(a.pPostHooks, hookFunc)
	a.pUpdateHooks = append(a.pUpdateHooks, hookFunc)
	a.pDeleteHooks = append(a.pDeleteHooks, hookFunc)
	// Start verifier
	a.initWebmentionQueue()
}

func (a *goBlog) handleWebmention(w http.ResponseWriter, r *http.Request) {
	m, err := extractMention(r)
	if err != nil {
		a.serveError(w, r, err.Error(), http.StatusBadRequest)
		return
	}
	if !isAllowedHost(httptest.NewRequest(http.MethodGet, m.Target, nil), a.cfg.Server.publicHostname) {
		a.serveError(w, r, "target not allowed", http.StatusBadRequest)
		return
	}
	if err = a.queueMention(m); err != nil {
		a.serveError(w, r, err.Error(), http.StatusInternalServerError)
		return
	}
	w.WriteHeader(http.StatusAccepted)
	_, _ = fmt.Fprint(w, "Webmention accepted")
}

func extractMention(r *http.Request) (*mention, error) {
	if !strings.Contains(r.Header.Get(contentType), contenttype.WWWForm) {
		return nil, errors.New("unsupported Content-Type")
	}
	err := r.ParseForm()
	if err != nil {
		return nil, err
	}
	source := r.Form.Get("source")
	target := unescapedPath(r.Form.Get("target"))
	if source == "" || target == "" || !isAbsoluteURL(source) || !isAbsoluteURL(target) {
		return nil, errors.New("invalid request")
	}
	return &mention{
		Source:  source,
		Target:  target,
		Created: time.Now().Unix(),
	}, nil
}

func (db *database) webmentionExists(source, target string) bool {
	result := 0
	row, err := db.queryRow("select exists(select 1 from webmentions where source = ? and target = ?)", source, target)
	if err != nil {
		return false
	}
	if err = row.Scan(&result); err != nil {
		return false
	}
	return result == 1
}

func (a *goBlog) createWebmention(source, target string) (err error) {
	return a.queueMention(&mention{
		Source:  source,
		Target:  unescapedPath(target),
		Created: time.Now().Unix(),
	})
}

func (db *database) deleteWebmention(id int) error {
	_, err := db.exec("delete from webmentions where id = @id", sql.Named("id", id))
	return err
}

func (db *database) approveWebmention(id int) error {
	_, err := db.exec("update webmentions set status = ? where id = ?", webmentionStatusApproved, id)
	return err
}

func (a *goBlog) reverifyWebmention(id int) error {
	m, err := a.db.getWebmentions(&webmentionsRequestConfig{
		id:    id,
		limit: 1,
	})
	if err != nil {
		return err
	}
	if len(m) > 0 {
		err = a.queueMention(m[0])
	}
	return err
}

type webmentionsRequestConfig struct {
	target        string
	status        webmentionStatus
	sourcelike    string
	id            int
	asc           bool
	offset, limit int
}

func buildWebmentionsQuery(config *webmentionsRequestConfig) (query string, args []interface{}) {
	args = []interface{}{}
	filter := ""
	if config != nil {
		filter = "where 1 = 1"
		if config.target != "" {
			filter += " and target = @target"
			args = append(args, sql.Named("target", config.target))
		}
		if config.status != "" {
			filter += " and status = @status"
			args = append(args, sql.Named("status", config.status))
		}
		if config.sourcelike != "" {
			filter += " and source like @sourcelike"
			args = append(args, sql.Named("sourcelike", "%"+config.sourcelike+"%"))
		}
		if config.id != 0 {
			filter += " and id = @id"
			args = append(args, sql.Named("id", config.id))
		}
	}
	order := "desc"
	if config.asc {
		order = "asc"
	}
	query = "select id, source, target, created, title, content, author, status from webmentions " + filter + " order by created " + order
	if config.limit != 0 || config.offset != 0 {
		query += " limit @limit offset @offset"
		args = append(args, sql.Named("limit", config.limit), sql.Named("offset", config.offset))
	}
	return query, args
}

func (db *database) getWebmentions(config *webmentionsRequestConfig) ([]*mention, error) {
	mentions := []*mention{}
	query, args := buildWebmentionsQuery(config)
	rows, err := db.query(query, args...)
	if err != nil {
		return nil, err
	}
	for rows.Next() {
		m := &mention{}
		err = rows.Scan(&m.ID, &m.Source, &m.Target, &m.Created, &m.Title, &m.Content, &m.Author, &m.Status)
		if err != nil {
			return nil, err
		}
		mentions = append(mentions, m)
	}
	return mentions, nil
}

func (db *database) getWebmentionsByAddress(address string) []*mention {
	mentions, _ := db.getWebmentions(&webmentionsRequestConfig{
		target: address,
		status: webmentionStatusApproved,
		asc:    true,
	})
	return mentions
}

func (db *database) countWebmentions(config *webmentionsRequestConfig) (count int, err error) {
	query, params := buildWebmentionsQuery(config)
	query = "select count(*) from (" + query + ")"
	row, err := db.queryRow(query, params...)
	if err != nil {
		return
	}
	err = row.Scan(&count)
	return
}