2023-01-13 05:40:33 +01:00
|
|
|
import type Koa from "koa";
|
|
|
|
import Router from "@koa/router";
|
|
|
|
import { v4 as uuid } from "uuid";
|
|
|
|
import autwh from "autwh";
|
|
|
|
import { IsNull } from "typeorm";
|
|
|
|
import { publishMainStream } from "@/services/stream.js";
|
|
|
|
import config from "@/config/index.js";
|
|
|
|
import { fetchMeta } from "@/misc/fetch-meta.js";
|
|
|
|
import { Users, UserProfiles } from "@/models/index.js";
|
|
|
|
import type { ILocalUser } from "@/models/entities/user.js";
|
|
|
|
import signin from "../common/signin.js";
|
|
|
|
import { redisClient } from "../../../db/redis.js";
|
2017-01-21 05:17:35 +01:00
|
|
|
|
2022-02-03 09:12:51 +01:00
|
|
|
function getUserToken(ctx: Koa.BaseContext): string | null {
|
2023-01-13 05:40:33 +01:00
|
|
|
return ((ctx.headers["cookie"] || "").match(/igi=(\w+)/) || [null, null])[1];
|
2018-04-12 23:06:18 +02:00
|
|
|
}
|
2017-12-10 10:08:28 +01:00
|
|
|
|
2022-02-03 09:12:51 +01:00
|
|
|
function compareOrigin(ctx: Koa.BaseContext): boolean {
|
|
|
|
function normalizeUrl(url?: string): string {
|
2023-01-13 05:40:33 +01:00
|
|
|
return url == null
|
|
|
|
? ""
|
|
|
|
: url.endsWith("/")
|
|
|
|
? url.substr(0, url.length - 1)
|
|
|
|
: url;
|
2017-12-10 10:08:28 +01:00
|
|
|
}
|
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
const referer = ctx.headers["referer"];
|
2017-12-10 09:50:02 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
return normalizeUrl(referer) === normalizeUrl(config.url);
|
2018-04-12 23:06:18 +02:00
|
|
|
}
|
2017-12-10 09:50:02 +01:00
|
|
|
|
2018-04-12 23:06:18 +02:00
|
|
|
// Init router
|
|
|
|
const router = new Router();
|
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
router.get("/disconnect/twitter", async (ctx) => {
|
2018-04-12 23:06:18 +02:00
|
|
|
if (!compareOrigin(ctx)) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(400, "invalid origin");
|
2018-04-12 23:06:18 +02:00
|
|
|
return;
|
|
|
|
}
|
2017-01-21 11:26:45 +01:00
|
|
|
|
2018-04-12 23:06:18 +02:00
|
|
|
const userToken = getUserToken(ctx);
|
|
|
|
if (userToken == null) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(400, "signin required");
|
2018-04-12 23:06:18 +02:00
|
|
|
return;
|
|
|
|
}
|
2017-01-21 11:26:45 +01:00
|
|
|
|
2022-03-26 07:34:00 +01:00
|
|
|
const user = await Users.findOneByOrFail({
|
|
|
|
host: IsNull(),
|
2021-12-09 15:58:30 +01:00
|
|
|
token: userToken,
|
2021-02-13 07:33:38 +01:00
|
|
|
});
|
2019-04-07 14:50:36 +02:00
|
|
|
|
2022-03-26 07:34:00 +01:00
|
|
|
const profile = await UserProfiles.findOneByOrFail({ userId: user.id });
|
2020-01-31 23:16:52 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
profile.integrations.twitter = undefined;
|
2020-01-31 23:16:52 +01:00
|
|
|
|
|
|
|
await UserProfiles.update(user.id, {
|
|
|
|
integrations: profile.integrations,
|
2017-01-21 11:26:45 +01:00
|
|
|
});
|
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.body = "Twitterの連携を解除しました :v:";
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2018-04-12 23:06:18 +02:00
|
|
|
// Publish i updated event
|
2023-01-13 05:40:33 +01:00
|
|
|
publishMainStream(
|
|
|
|
user.id,
|
|
|
|
"meUpdated",
|
|
|
|
await Users.pack(user, user, {
|
|
|
|
detail: true,
|
|
|
|
includeSecrets: true,
|
|
|
|
}),
|
|
|
|
);
|
2018-04-12 23:06:18 +02:00
|
|
|
});
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
async function getTwAuth() {
|
2019-04-24 01:11:19 +02:00
|
|
|
const meta = await fetchMeta(true);
|
2017-01-21 05:17:35 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
if (
|
|
|
|
meta.enableTwitterIntegration &&
|
|
|
|
meta.twitterConsumerKey &&
|
|
|
|
meta.twitterConsumerSecret
|
|
|
|
) {
|
2018-11-07 05:14:52 +01:00
|
|
|
return autwh({
|
|
|
|
consumerKey: meta.twitterConsumerKey,
|
|
|
|
consumerSecret: meta.twitterConsumerSecret,
|
2021-12-09 15:58:30 +01:00
|
|
|
callbackUrl: `${config.url}/api/tw/cb`,
|
2018-11-07 05:14:52 +01:00
|
|
|
});
|
|
|
|
} else {
|
|
|
|
return null;
|
|
|
|
}
|
|
|
|
}
|
2017-12-10 10:08:28 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
router.get("/connect/twitter", async (ctx) => {
|
2018-11-07 05:14:52 +01:00
|
|
|
if (!compareOrigin(ctx)) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(400, "invalid origin");
|
2018-11-07 05:14:52 +01:00
|
|
|
return;
|
|
|
|
}
|
2017-12-10 10:08:28 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const userToken = getUserToken(ctx);
|
|
|
|
if (userToken == null) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(400, "signin required");
|
2018-11-07 05:14:52 +01:00
|
|
|
return;
|
|
|
|
}
|
2017-01-21 05:17:35 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const twAuth = await getTwAuth();
|
2019-04-12 18:43:22 +02:00
|
|
|
const twCtx = await twAuth!.begin();
|
2021-03-23 06:54:09 +01:00
|
|
|
redisClient.set(userToken, JSON.stringify(twCtx));
|
2018-11-07 05:14:52 +01:00
|
|
|
ctx.redirect(twCtx.url);
|
|
|
|
});
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
router.get("/signin/twitter", async (ctx) => {
|
2018-11-07 05:14:52 +01:00
|
|
|
const twAuth = await getTwAuth();
|
2019-04-12 18:43:22 +02:00
|
|
|
const twCtx = await twAuth!.begin();
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const sessid = uuid();
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2021-03-23 06:54:09 +01:00
|
|
|
redisClient.set(sessid, JSON.stringify(twCtx));
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.cookies.set("signin_with_twitter_sid", sessid, {
|
|
|
|
path: "/",
|
|
|
|
secure: config.url.startsWith("https"),
|
2021-12-09 15:58:30 +01:00
|
|
|
httpOnly: true,
|
2017-11-23 05:25:33 +01:00
|
|
|
});
|
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
ctx.redirect(twCtx.url);
|
|
|
|
});
|
2017-12-10 09:50:02 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
router.get("/tw/cb", async (ctx) => {
|
2018-11-07 05:14:52 +01:00
|
|
|
const userToken = getUserToken(ctx);
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const twAuth = await getTwAuth();
|
|
|
|
|
|
|
|
if (userToken == null) {
|
2023-01-13 05:40:33 +01:00
|
|
|
const sessid = ctx.cookies.get("signin_with_twitter_sid");
|
2018-11-07 05:14:52 +01:00
|
|
|
|
|
|
|
if (sessid == null) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(400, "invalid session");
|
2018-11-07 05:14:52 +01:00
|
|
|
return;
|
|
|
|
}
|
2017-11-23 07:59:32 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const get = new Promise<any>((res, rej) => {
|
2021-03-23 06:54:09 +01:00
|
|
|
redisClient.get(sessid, async (_, twCtx) => {
|
2018-11-07 05:14:52 +01:00
|
|
|
res(twCtx);
|
2018-04-13 23:41:33 +02:00
|
|
|
});
|
2018-11-07 05:14:52 +01:00
|
|
|
});
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const twCtx = await get;
|
2017-11-23 05:25:33 +01:00
|
|
|
|
2022-04-17 10:30:27 +02:00
|
|
|
const verifier = ctx.query.oauth_verifier;
|
2023-01-13 05:40:33 +01:00
|
|
|
if (!verifier || typeof verifier !== "string") {
|
|
|
|
ctx.throw(400, "invalid session");
|
2022-04-17 10:30:27 +02:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
const result = await twAuth!.done(JSON.parse(twCtx), verifier);
|
2017-11-23 07:59:32 +01:00
|
|
|
|
2019-04-10 08:04:27 +02:00
|
|
|
const link = await UserProfiles.createQueryBuilder()
|
2023-01-13 05:40:33 +01:00
|
|
|
.where("\"integrations\"->'twitter'->>'userId' = :id", {
|
|
|
|
id: result.userId,
|
|
|
|
})
|
2019-05-03 11:38:19 +02:00
|
|
|
.andWhere('"userHost" IS NULL')
|
2019-04-07 14:50:36 +02:00
|
|
|
.getOne();
|
2018-04-13 23:41:33 +02:00
|
|
|
|
2019-04-07 14:50:36 +02:00
|
|
|
if (link == null) {
|
2023-01-13 05:40:33 +01:00
|
|
|
ctx.throw(
|
|
|
|
404,
|
|
|
|
`@${result.screenName}と連携しているMisskeyアカウントはありませんでした...`,
|
|
|
|
);
|
2018-11-07 05:14:52 +01:00
|
|
|
return;
|
|
|
|
}
|
2018-04-13 23:41:33 +02:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
signin(
|
|
|
|
ctx,
|
|
|
|
(await Users.findOneBy({ id: link.userId })) as ILocalUser,
|
|
|
|
true,
|
|
|
|
);
|
2018-11-07 05:14:52 +01:00
|
|
|
} else {
|
|
|
|
const verifier = ctx.query.oauth_verifier;
|
2017-12-10 10:08:28 +01:00
|
|
|
|
2023-01-13 05:40:33 +01:00
|
|
|
if (!verifier || typeof verifier !== "string") {
|
|
|
|
ctx.throw(400, "invalid session");
|
2018-11-07 05:14:52 +01:00
|
|
|
return;
|
|
|
|
}
|
2017-12-10 10:08:28 +01:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
const get = new Promise<any>((res, rej) => {
|
2021-03-23 06:54:09 +01:00
|
|
|
redisClient.get(userToken, async (_, twCtx) => {
|
2018-11-07 05:14:52 +01:00
|
|
|
res(twCtx);
|
2018-04-13 23:27:17 +02:00
|
|
|
});
|
2018-11-07 05:14:52 +01:00
|
|
|
});
|
|
|
|
|
|
|
|
const twCtx = await get;
|
2018-04-13 23:27:17 +02:00
|
|
|
|
2019-04-12 18:43:22 +02:00
|
|
|
const result = await twAuth!.done(JSON.parse(twCtx), verifier);
|
2018-11-07 05:14:52 +01:00
|
|
|
|
2022-03-26 07:34:00 +01:00
|
|
|
const user = await Users.findOneByOrFail({
|
|
|
|
host: IsNull(),
|
2021-12-09 15:58:30 +01:00
|
|
|
token: userToken,
|
2021-02-13 07:33:38 +01:00
|
|
|
});
|
2019-04-07 14:50:36 +02:00
|
|
|
|
2022-03-26 07:34:00 +01:00
|
|
|
const profile = await UserProfiles.findOneByOrFail({ userId: user.id });
|
2020-01-31 23:16:52 +01:00
|
|
|
|
|
|
|
await UserProfiles.update(user.id, {
|
|
|
|
integrations: {
|
|
|
|
...profile.integrations,
|
|
|
|
twitter: {
|
|
|
|
accessToken: result.accessToken,
|
|
|
|
accessTokenSecret: result.accessTokenSecret,
|
|
|
|
userId: result.userId,
|
|
|
|
screenName: result.screenName,
|
2021-12-09 15:58:30 +01:00
|
|
|
},
|
2020-01-31 23:16:52 +01:00
|
|
|
},
|
2018-11-07 05:14:52 +01:00
|
|
|
});
|
2018-04-13 23:27:17 +02:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
ctx.body = `Twitter: @${result.screenName} を、Misskey: @${user.username} に接続しました!`;
|
2018-04-13 23:27:17 +02:00
|
|
|
|
2018-11-07 05:14:52 +01:00
|
|
|
// Publish i updated event
|
2023-01-13 05:40:33 +01:00
|
|
|
publishMainStream(
|
|
|
|
user.id,
|
|
|
|
"meUpdated",
|
|
|
|
await Users.pack(user, user, {
|
|
|
|
detail: true,
|
|
|
|
includeSecrets: true,
|
|
|
|
}),
|
|
|
|
);
|
2018-11-07 05:14:52 +01:00
|
|
|
}
|
|
|
|
});
|
2018-04-12 23:06:18 +02:00
|
|
|
|
2019-01-31 15:32:58 +01:00
|
|
|
export default router;
|