ApiV2Controller.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use App\Http\Controllers\Controller;
  4. use App\Jobs\ImageOptimizePipeline\ImageOptimize;
  5. use App\Jobs\MediaPipeline\MediaDeletePipeline;
  6. use App\Jobs\VideoPipeline\VideoThumbnail;
  7. use App\Media;
  8. use App\Services\AccountService;
  9. use App\Services\InstanceService;
  10. use App\Services\MediaBlocklistService;
  11. use App\Services\MediaPathService;
  12. use App\Services\SearchApiV2Service;
  13. use App\Services\UserRoleService;
  14. use App\Services\UserStorageService;
  15. use App\Transformer\Api\Mastodon\v1\MediaTransformer;
  16. use App\User;
  17. use App\UserSetting;
  18. use App\Util\Media\Filter;
  19. use App\Util\Site\Nodeinfo;
  20. use Illuminate\Http\Request;
  21. use Illuminate\Support\Facades\Cache;
  22. use Illuminate\Support\Facades\Storage;
  23. use League\Fractal;
  24. use League\Fractal\Serializer\ArraySerializer;
  25. class ApiV2Controller extends Controller
  26. {
  27. const PF_API_ENTITY_KEY = '_pe';
  28. public function json($res, $code = 200, $headers = [])
  29. {
  30. return response()->json($res, $code, $headers, JSON_UNESCAPED_SLASHES);
  31. }
  32. public function instance(Request $request)
  33. {
  34. $contact = Cache::remember('api:v1:instance-data:contact', 604800, function () {
  35. if (config_cache('instance.admin.pid')) {
  36. return AccountService::getMastodon(config_cache('instance.admin.pid'), true);
  37. }
  38. $admin = User::whereIsAdmin(true)->first();
  39. return $admin && isset($admin->profile_id) ?
  40. AccountService::getMastodon($admin->profile_id, true) :
  41. null;
  42. });
  43. $rules = Cache::remember('api:v1:instance-data:rules', 604800, function () {
  44. return config_cache('app.rules') ?
  45. collect(json_decode(config_cache('app.rules'), true))
  46. ->map(function ($rule, $key) {
  47. $id = $key + 1;
  48. return [
  49. 'id' => "{$id}",
  50. 'text' => $rule,
  51. ];
  52. })
  53. ->toArray() : [];
  54. });
  55. $res = Cache::remember('api:v2:instance-data-response-v2', 1800, function () use ($contact, $rules) {
  56. return [
  57. 'domain' => config('pixelfed.domain.app'),
  58. 'title' => config_cache('app.name'),
  59. 'version' => '3.5.3 (compatible; Pixelfed '.config('pixelfed.version').')',
  60. 'source_url' => 'https://github.com/pixelfed/pixelfed',
  61. 'description' => config_cache('app.short_description'),
  62. 'usage' => [
  63. 'users' => [
  64. 'active_month' => (int) Nodeinfo::activeUsersMonthly(),
  65. ],
  66. ],
  67. 'thumbnail' => [
  68. 'url' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg')),
  69. 'blurhash' => InstanceService::headerBlurhash(),
  70. 'versions' => [
  71. '@1x' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg')),
  72. '@2x' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg')),
  73. ],
  74. ],
  75. 'languages' => [config('app.locale')],
  76. 'configuration' => [
  77. 'urls' => [
  78. 'streaming' => null,
  79. 'status' => null,
  80. ],
  81. 'vapid' => [
  82. 'public_key' => config('webpush.vapid.public_key'),
  83. ],
  84. 'accounts' => [
  85. 'max_featured_tags' => 0,
  86. ],
  87. 'statuses' => [
  88. 'max_characters' => (int) config_cache('pixelfed.max_caption_length'),
  89. 'max_media_attachments' => (int) config_cache('pixelfed.max_album_length'),
  90. 'characters_reserved_per_url' => 23,
  91. ],
  92. 'media_attachments' => [
  93. 'supported_mime_types' => explode(',', config_cache('pixelfed.media_types')),
  94. 'image_size_limit' => config_cache('pixelfed.max_photo_size') * 1024,
  95. 'image_matrix_limit' => 3686400,
  96. 'video_size_limit' => config_cache('pixelfed.max_photo_size') * 1024,
  97. 'video_frame_rate_limit' => 240,
  98. 'video_matrix_limit' => 3686400,
  99. ],
  100. 'polls' => [
  101. 'max_options' => 0,
  102. 'max_characters_per_option' => 0,
  103. 'min_expiration' => 0,
  104. 'max_expiration' => 0,
  105. ],
  106. 'translation' => [
  107. 'enabled' => false,
  108. ],
  109. ],
  110. 'registrations' => [
  111. 'enabled' => null,
  112. 'approval_required' => false,
  113. 'message' => null,
  114. 'url' => null,
  115. ],
  116. 'contact' => [
  117. 'email' => config('instance.email'),
  118. 'account' => $contact,
  119. ],
  120. 'rules' => $rules,
  121. ];
  122. });
  123. $res['registrations']['enabled'] = (bool) config_cache('pixelfed.open_registration');
  124. $res['registrations']['approval_required'] = (bool) config_cache('instance.curated_registration.enabled');
  125. return response()->json($res, 200, [], JSON_UNESCAPED_SLASHES);
  126. }
  127. /**
  128. * GET /api/v2/search
  129. *
  130. *
  131. * @return array
  132. */
  133. public function search(Request $request)
  134. {
  135. abort_if(! $request->user() || ! $request->user()->token(), 403);
  136. abort_unless($request->user()->tokenCan('read'), 403);
  137. $this->validate($request, [
  138. 'q' => 'required|string|min:1|max:100',
  139. 'account_id' => 'nullable|string',
  140. 'max_id' => 'nullable|string',
  141. 'min_id' => 'nullable|string',
  142. 'type' => 'nullable|in:accounts,hashtags,statuses',
  143. 'exclude_unreviewed' => 'nullable',
  144. 'resolve' => 'nullable',
  145. 'limit' => 'nullable|integer|max:40',
  146. 'offset' => 'nullable|integer',
  147. 'following' => 'nullable',
  148. ]);
  149. if ($request->user()->has_roles && ! UserRoleService::can('can-view-discover', $request->user()->id)) {
  150. return [
  151. 'accounts' => [],
  152. 'hashtags' => [],
  153. 'statuses' => [],
  154. ];
  155. }
  156. $mastodonMode = ! $request->has('_pe');
  157. return $this->json(SearchApiV2Service::query($request, $mastodonMode));
  158. }
  159. /**
  160. * GET /api/v2/streaming/config
  161. *
  162. *
  163. * @return object
  164. */
  165. public function getWebsocketConfig()
  166. {
  167. return config('broadcasting.default') === 'pusher' ? [
  168. 'host' => config('broadcasting.connections.pusher.options.host'),
  169. 'port' => config('broadcasting.connections.pusher.options.port'),
  170. 'key' => config('broadcasting.connections.pusher.key'),
  171. 'cluster' => config('broadcasting.connections.pusher.options.cluster'),
  172. ] : [];
  173. }
  174. /**
  175. * POST /api/v2/media
  176. *
  177. *
  178. * @return MediaTransformer
  179. */
  180. public function mediaUploadV2(Request $request)
  181. {
  182. abort_if(! $request->user() || ! $request->user()->token(), 403);
  183. abort_unless($request->user()->tokenCan('write'), 403);
  184. $this->validate($request, [
  185. 'file.*' => [
  186. 'required_without:file',
  187. 'mimetypes:'.config_cache('pixelfed.media_types'),
  188. 'max:'.config_cache('pixelfed.max_photo_size'),
  189. ],
  190. 'file' => [
  191. 'required_without:file.*',
  192. 'mimetypes:'.config_cache('pixelfed.media_types'),
  193. 'max:'.config_cache('pixelfed.max_photo_size'),
  194. ],
  195. 'filter_name' => 'nullable|string|max:24',
  196. 'filter_class' => 'nullable|alpha_dash|max:24',
  197. 'description' => 'nullable|string|max:'.config_cache('pixelfed.max_altext_length'),
  198. 'replace_id' => 'sometimes',
  199. ]);
  200. $user = $request->user();
  201. if ($user->last_active_at == null) {
  202. return [];
  203. }
  204. if (empty($request->file('file'))) {
  205. return response('', 422);
  206. }
  207. $limitKey = 'compose:rate-limit:media-upload:'.$user->id;
  208. $limitTtl = now()->addMinutes(15);
  209. $limitReached = Cache::remember($limitKey, $limitTtl, function () use ($user) {
  210. $dailyLimit = Media::whereUserId($user->id)->where('created_at', '>', now()->subDays(1))->count();
  211. return $dailyLimit >= 1250;
  212. });
  213. abort_if($limitReached == true, 429);
  214. $profile = $user->profile;
  215. $accountSize = UserStorageService::get($user->id);
  216. abort_if($accountSize === -1, 403, 'Invalid request.');
  217. $photo = $request->file('file');
  218. $fileSize = $photo->getSize();
  219. $sizeInKbs = (int) ceil($fileSize / 1000);
  220. $updatedAccountSize = (int) $accountSize + (int) $sizeInKbs;
  221. if ((bool) config_cache('pixelfed.enforce_account_limit') == true) {
  222. $limit = (int) config_cache('pixelfed.max_account_size');
  223. if ($updatedAccountSize >= $limit) {
  224. abort(403, 'Account size limit reached.');
  225. }
  226. }
  227. $filterClass = in_array($request->input('filter_class'), Filter::classes()) ? $request->input('filter_class') : null;
  228. $filterName = in_array($request->input('filter_name'), Filter::names()) ? $request->input('filter_name') : null;
  229. $mimes = explode(',', config_cache('pixelfed.media_types'));
  230. if (in_array($photo->getMimeType(), $mimes) == false) {
  231. abort(403, 'Invalid or unsupported mime type.');
  232. }
  233. $storagePath = MediaPathService::get($user, 2);
  234. $path = $photo->storePublicly($storagePath);
  235. $hash = \hash_file('sha256', $photo);
  236. $license = null;
  237. $mime = $photo->getMimeType();
  238. $settings = UserSetting::whereUserId($user->id)->first();
  239. if ($settings && ! empty($settings->compose_settings)) {
  240. $compose = $settings->compose_settings;
  241. if (isset($compose['default_license']) && $compose['default_license'] != 1) {
  242. $license = $compose['default_license'];
  243. }
  244. }
  245. abort_if(MediaBlocklistService::exists($hash) == true, 451);
  246. if ($request->has('replace_id')) {
  247. $rpid = $request->input('replace_id');
  248. $removeMedia = Media::whereNull('status_id')
  249. ->whereUserId($user->id)
  250. ->whereProfileId($profile->id)
  251. ->where('created_at', '>', now()->subHours(2))
  252. ->find($rpid);
  253. if ($removeMedia) {
  254. MediaDeletePipeline::dispatch($removeMedia)
  255. ->onQueue('mmo')
  256. ->delay(now()->addMinutes(15));
  257. }
  258. }
  259. $media = new Media();
  260. $media->status_id = null;
  261. $media->profile_id = $profile->id;
  262. $media->user_id = $user->id;
  263. $media->media_path = $path;
  264. $media->original_sha256 = $hash;
  265. $media->size = $photo->getSize();
  266. $media->mime = $mime;
  267. $media->caption = $request->input('description');
  268. $media->filter_class = $filterClass;
  269. $media->filter_name = $filterName;
  270. if ($license) {
  271. $media->license = $license;
  272. }
  273. $media->save();
  274. switch ($media->mime) {
  275. case 'image/jpeg':
  276. case 'image/png':
  277. ImageOptimize::dispatch($media)->onQueue('mmo');
  278. break;
  279. case 'video/mp4':
  280. VideoThumbnail::dispatch($media)->onQueue('mmo');
  281. $preview_url = '/storage/no-preview.png';
  282. $url = '/storage/no-preview.png';
  283. break;
  284. }
  285. $user->storage_used = (int) $updatedAccountSize;
  286. $user->storage_used_updated_at = now();
  287. $user->save();
  288. Cache::forget($limitKey);
  289. $fractal = new Fractal\Manager();
  290. $fractal->setSerializer(new ArraySerializer());
  291. $resource = new Fractal\Resource\Item($media, new MediaTransformer());
  292. $res = $fractal->createData($resource)->toArray();
  293. $res['preview_url'] = $media->url().'?v='.time();
  294. $res['url'] = null;
  295. return $this->json($res, 202);
  296. }
  297. }