mirror of
https://github.com/matrix-org/dendrite
synced 2024-12-14 15:22:50 +00:00
4b09f445c9
* Initial pass at refactoring config (not finished) * Don't forget current state and EDU servers * More shifting around * Update server key API tests * Fix roomserver test * Fix more tests * Further tweaks * Fix current state server test (sort of) * Maybe fix appservices * Fix client API test * Include database connection string in database options * Fix sync API build * Update config test * Fix unit tests * Fix federation sender build * Fix gobind build * Set Listen address for all services in HTTP monolith mode * Validate config, reinstate appservice derived in directory, tweaks * Tweak federation API test * Set MaxOpenConnections/MaxIdleConnections to previous values * Update generate-config
162 lines
5 KiB
Go
162 lines
5 KiB
Go
// Copyright 2017 Vector Creations Ltd
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package routing
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/matrix-org/dendrite/clientapi/jsonerror"
|
|
"github.com/matrix-org/dendrite/internal/config"
|
|
"github.com/matrix-org/dendrite/keyserver/api"
|
|
"github.com/matrix-org/gomatrixserverlib"
|
|
"github.com/matrix-org/util"
|
|
"golang.org/x/crypto/ed25519"
|
|
)
|
|
|
|
type queryKeysRequest struct {
|
|
DeviceKeys map[string][]string `json:"device_keys"`
|
|
}
|
|
|
|
// QueryDeviceKeys returns device keys for users on this server.
|
|
// https://matrix.org/docs/spec/server_server/latest#post-matrix-federation-v1-user-keys-query
|
|
func QueryDeviceKeys(
|
|
httpReq *http.Request, request *gomatrixserverlib.FederationRequest, keyAPI api.KeyInternalAPI, thisServer gomatrixserverlib.ServerName,
|
|
) util.JSONResponse {
|
|
var qkr queryKeysRequest
|
|
err := json.Unmarshal(request.Content(), &qkr)
|
|
if err != nil {
|
|
return util.JSONResponse{
|
|
Code: http.StatusBadRequest,
|
|
JSON: jsonerror.BadJSON("The request body could not be decoded into valid JSON. " + err.Error()),
|
|
}
|
|
}
|
|
// make sure we only query users on our domain
|
|
for userID := range qkr.DeviceKeys {
|
|
_, serverName, err := gomatrixserverlib.SplitID('@', userID)
|
|
if err != nil {
|
|
delete(qkr.DeviceKeys, userID)
|
|
continue // ignore invalid users
|
|
}
|
|
if serverName != thisServer {
|
|
delete(qkr.DeviceKeys, userID)
|
|
continue
|
|
}
|
|
}
|
|
|
|
var queryRes api.QueryKeysResponse
|
|
keyAPI.QueryKeys(httpReq.Context(), &api.QueryKeysRequest{
|
|
UserToDevices: qkr.DeviceKeys,
|
|
}, &queryRes)
|
|
if queryRes.Error != nil {
|
|
util.GetLogger(httpReq.Context()).WithError(queryRes.Error).Error("Failed to QueryKeys")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
return util.JSONResponse{
|
|
Code: 200,
|
|
JSON: struct {
|
|
DeviceKeys interface{} `json:"device_keys"`
|
|
}{queryRes.DeviceKeys},
|
|
}
|
|
}
|
|
|
|
type claimOTKsRequest struct {
|
|
OneTimeKeys map[string]map[string]string `json:"one_time_keys"`
|
|
}
|
|
|
|
// ClaimOneTimeKeys claims OTKs for users on this server.
|
|
// https://matrix.org/docs/spec/server_server/latest#post-matrix-federation-v1-user-keys-claim
|
|
func ClaimOneTimeKeys(
|
|
httpReq *http.Request, request *gomatrixserverlib.FederationRequest, keyAPI api.KeyInternalAPI, thisServer gomatrixserverlib.ServerName,
|
|
) util.JSONResponse {
|
|
var cor claimOTKsRequest
|
|
err := json.Unmarshal(request.Content(), &cor)
|
|
if err != nil {
|
|
return util.JSONResponse{
|
|
Code: http.StatusBadRequest,
|
|
JSON: jsonerror.BadJSON("The request body could not be decoded into valid JSON. " + err.Error()),
|
|
}
|
|
}
|
|
// make sure we only claim users on our domain
|
|
for userID := range cor.OneTimeKeys {
|
|
_, serverName, err := gomatrixserverlib.SplitID('@', userID)
|
|
if err != nil {
|
|
delete(cor.OneTimeKeys, userID)
|
|
continue // ignore invalid users
|
|
}
|
|
if serverName != thisServer {
|
|
delete(cor.OneTimeKeys, userID)
|
|
continue
|
|
}
|
|
}
|
|
|
|
var claimRes api.PerformClaimKeysResponse
|
|
keyAPI.PerformClaimKeys(httpReq.Context(), &api.PerformClaimKeysRequest{
|
|
OneTimeKeys: cor.OneTimeKeys,
|
|
}, &claimRes)
|
|
if claimRes.Error != nil {
|
|
util.GetLogger(httpReq.Context()).WithError(claimRes.Error).Error("Failed to PerformClaimKeys")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
return util.JSONResponse{
|
|
Code: 200,
|
|
JSON: struct {
|
|
OneTimeKeys interface{} `json:"one_time_keys"`
|
|
}{claimRes.OneTimeKeys},
|
|
}
|
|
}
|
|
|
|
// LocalKeys returns the local keys for the server.
|
|
// See https://matrix.org/docs/spec/server_server/unstable.html#publishing-keys
|
|
func LocalKeys(cfg *config.FederationAPI) util.JSONResponse {
|
|
keys, err := localKeys(cfg, time.Now().Add(cfg.Matrix.KeyValidityPeriod))
|
|
if err != nil {
|
|
return util.ErrorResponse(err)
|
|
}
|
|
return util.JSONResponse{Code: http.StatusOK, JSON: keys}
|
|
}
|
|
|
|
func localKeys(cfg *config.FederationAPI, validUntil time.Time) (*gomatrixserverlib.ServerKeys, error) {
|
|
var keys gomatrixserverlib.ServerKeys
|
|
|
|
keys.ServerName = cfg.Matrix.ServerName
|
|
|
|
publicKey := cfg.Matrix.PrivateKey.Public().(ed25519.PublicKey)
|
|
|
|
keys.VerifyKeys = map[gomatrixserverlib.KeyID]gomatrixserverlib.VerifyKey{
|
|
cfg.Matrix.KeyID: {
|
|
Key: gomatrixserverlib.Base64Bytes(publicKey),
|
|
},
|
|
}
|
|
|
|
keys.TLSFingerprints = cfg.TLSFingerPrints
|
|
keys.OldVerifyKeys = map[gomatrixserverlib.KeyID]gomatrixserverlib.OldVerifyKey{}
|
|
keys.ValidUntilTS = gomatrixserverlib.AsTimestamp(validUntil)
|
|
|
|
toSign, err := json.Marshal(keys.ServerKeyFields)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
keys.Raw, err = gomatrixserverlib.SignJSON(
|
|
string(cfg.Matrix.ServerName), cfg.Matrix.KeyID, cfg.Matrix.PrivateKey, toSign,
|
|
)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &keys, nil
|
|
}
|