use activitypub_federation::config::Data; use actix_web::web::Json; use lemmy_api_common::{ build_response::build_post_response, context::LemmyContext, post::{EditPost, PostResponse}, request::fetch_link_metadata, send_activity::{ActivityChannel, SendActivityData}, utils::{ check_community_user_action, get_url_blocklist, local_site_to_slur_regex, process_markdown_opt, proxy_image_link_opt_apub, }, }; use lemmy_db_schema::{ source::{ actor_language::CommunityLanguage, local_site::LocalSite, post::{Post, PostUpdateForm}, }, traits::Crud, utils::{diesel_option_overwrite, naive_now}, }; use lemmy_db_views::structs::LocalUserView; use lemmy_utils::{ error::{LemmyError, LemmyErrorExt, LemmyErrorType}, utils::{ slurs::check_slurs_opt, validation::{ check_url_scheme, clean_url_params, is_url_blocked, is_valid_alt_text_field, is_valid_body_field, is_valid_post_title, }, }, }; use std::ops::Deref; #[tracing::instrument(skip(context))] pub async fn update_post( data: Json, context: Data, local_user_view: LocalUserView, ) -> Result, LemmyError> { let local_site = LocalSite::read(&mut context.pool()).await?; // TODO No good way to handle a clear. // Issue link: https://github.com/LemmyNet/lemmy/issues/2287 let url = data.url.as_ref().map(clean_url_params); let custom_thumbnail = data.custom_thumbnail.as_ref().map(clean_url_params); let url_blocklist = get_url_blocklist(&context).await?; let slur_regex = local_site_to_slur_regex(&local_site); check_slurs_opt(&data.name, &slur_regex)?; let body = process_markdown_opt(&data.body, &slur_regex, &url_blocklist, &context).await?; if let Some(name) = &data.name { is_valid_post_title(name)?; } is_valid_body_field(&body, true)?; is_valid_alt_text_field(&data.alt_text)?; is_url_blocked(&url, &url_blocklist)?; check_url_scheme(&url)?; check_url_scheme(&custom_thumbnail)?; let post_id = data.post_id; let orig_post = Post::read(&mut context.pool(), post_id).await?; check_community_user_action( &local_user_view.person, orig_post.community_id, &mut context.pool(), ) .await?; // Verify that only the creator can edit if !Post::is_post_creator(local_user_view.person.id, orig_post.creator_id) { Err(LemmyErrorType::NoPostEditAllowed)? } // Fetch post links and thumbnail if url was updated let (embed_title, embed_description, embed_video_url, metadata_thumbnail, metadata_content_type) = match &url { Some(url) => { // Only generate the thumbnail if there's no custom thumbnail provided, // otherwise it will save it in pictrs let generate_thumbnail = custom_thumbnail.is_none() || orig_post.thumbnail_url.is_none(); let metadata = fetch_link_metadata(url, generate_thumbnail, &context).await?; ( Some(metadata.opengraph_data.title), Some(metadata.opengraph_data.description), Some(metadata.opengraph_data.embed_video_url), Some(metadata.thumbnail), Some(metadata.content_type), ) } _ => Default::default(), }; let url = match url { Some(url) => Some(proxy_image_link_opt_apub(Some(url), &context).await?), _ => Default::default(), }; let custom_thumbnail = match custom_thumbnail { Some(custom_thumbnail) => { Some(proxy_image_link_opt_apub(Some(custom_thumbnail), &context).await?) } _ => Default::default(), }; let thumbnail_url = custom_thumbnail.or(metadata_thumbnail); let language_id = data.language_id; CommunityLanguage::is_allowed_community_language( &mut context.pool(), language_id, orig_post.community_id, ) .await?; let post_form = PostUpdateForm { name: data.name.clone(), url, url_content_type: metadata_content_type, body: diesel_option_overwrite(body), alt_text: diesel_option_overwrite(data.alt_text.clone()), nsfw: data.nsfw, embed_title, embed_description, embed_video_url, language_id: data.language_id, thumbnail_url, updated: Some(Some(naive_now())), ..Default::default() }; let post_id = data.post_id; let updated_post = Post::update(&mut context.pool(), post_id, &post_form) .await .with_lemmy_type(LemmyErrorType::CouldntUpdatePost)?; ActivityChannel::submit_activity(SendActivityData::UpdatePost(updated_post), &context).await?; build_post_response( context.deref(), orig_post.community_id, &local_user_view.person, post_id, ) .await }