ComposeController.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552
  1. <?php
  2. namespace App\Http\Controllers;
  3. use Illuminate\Http\Request;
  4. use Auth, Cache, Storage, URL;
  5. use Carbon\Carbon;
  6. use App\{
  7. Avatar,
  8. Like,
  9. Media,
  10. MediaTag,
  11. Notification,
  12. Profile,
  13. Place,
  14. Status,
  15. UserFilter
  16. };
  17. use App\Transformer\Api\{
  18. MediaTransformer,
  19. MediaDraftTransformer,
  20. StatusTransformer,
  21. StatusStatelessTransformer
  22. };
  23. use League\Fractal;
  24. use App\Util\Media\Filter;
  25. use League\Fractal\Serializer\ArraySerializer;
  26. use League\Fractal\Pagination\IlluminatePaginatorAdapter;
  27. use App\Jobs\AvatarPipeline\AvatarOptimize;
  28. use App\Jobs\ImageOptimizePipeline\ImageOptimize;
  29. use App\Jobs\ImageOptimizePipeline\ImageThumbnail;
  30. use App\Jobs\StatusPipeline\NewStatusPipeline;
  31. use App\Jobs\VideoPipeline\{
  32. VideoOptimize,
  33. VideoPostProcess,
  34. VideoThumbnail
  35. };
  36. use App\Services\NotificationService;
  37. use App\Services\MediaPathService;
  38. use App\Services\MediaBlocklistService;
  39. use App\Services\MediaStorageService;
  40. use App\Services\MediaTagService;
  41. use App\Services\ServiceService;
  42. use Illuminate\Support\Str;
  43. use App\Util\Lexer\Autolink;
  44. use App\Util\Lexer\Extractor;
  45. class ComposeController extends Controller
  46. {
  47. protected $fractal;
  48. public function __construct()
  49. {
  50. $this->middleware('auth');
  51. $this->fractal = new Fractal\Manager();
  52. $this->fractal->setSerializer(new ArraySerializer());
  53. }
  54. public function show(Request $request)
  55. {
  56. return view('status.compose');
  57. }
  58. public function mediaUpload(Request $request)
  59. {
  60. abort_if(!$request->user(), 403);
  61. $this->validate($request, [
  62. 'file.*' => function() {
  63. return [
  64. 'required',
  65. 'mimes:' . config('pixelfed.media_types'),
  66. 'max:' . config('pixelfed.max_photo_size'),
  67. ];
  68. },
  69. 'filter_name' => 'nullable|string|max:24',
  70. 'filter_class' => 'nullable|alpha_dash|max:24'
  71. ]);
  72. $user = Auth::user();
  73. $profile = $user->profile;
  74. if(config('pixelfed.enforce_account_limit') == true) {
  75. $size = Cache::remember($user->storageUsedKey(), now()->addDays(3), function() use($user) {
  76. return Media::whereUserId($user->id)->sum('size') / 1000;
  77. });
  78. $limit = (int) config('pixelfed.max_account_size');
  79. if ($size >= $limit) {
  80. abort(403, 'Account size limit reached.');
  81. }
  82. }
  83. $filterClass = in_array($request->input('filter_class'), Filter::classes()) ? $request->input('filter_class') : null;
  84. $filterName = in_array($request->input('filter_name'), Filter::names()) ? $request->input('filter_name') : null;
  85. $photo = $request->file('file');
  86. $mimes = explode(',', config('pixelfed.media_types'));
  87. abort_if(in_array($photo->getMimeType(), $mimes) == false, 400, 'Invalid media format');
  88. $storagePath = MediaPathService::get($user, 2);
  89. $path = $photo->store($storagePath);
  90. $hash = \hash_file('sha256', $photo);
  91. abort_if(MediaBlocklistService::exists($hash) == true, 451);
  92. $media = new Media();
  93. $media->status_id = null;
  94. $media->profile_id = $profile->id;
  95. $media->user_id = $user->id;
  96. $media->media_path = $path;
  97. $media->original_sha256 = $hash;
  98. $media->size = $photo->getSize();
  99. $media->mime = $photo->getMimeType();
  100. $media->filter_class = $filterClass;
  101. $media->filter_name = $filterName;
  102. $media->version = 3;
  103. $media->save();
  104. $preview_url = $media->url() . '?v=' . time();
  105. $url = $media->url() . '?v=' . time();
  106. switch ($media->mime) {
  107. case 'image/jpeg':
  108. case 'image/png':
  109. ImageOptimize::dispatch($media);
  110. break;
  111. case 'video/mp4':
  112. VideoThumbnail::dispatch($media);
  113. $preview_url = '/storage/no-preview.png';
  114. $url = '/storage/no-preview.png';
  115. break;
  116. default:
  117. break;
  118. }
  119. $resource = new Fractal\Resource\Item($media, new MediaTransformer());
  120. $res = $this->fractal->createData($resource)->toArray();
  121. $res['preview_url'] = $preview_url;
  122. $res['url'] = $url;
  123. return response()->json($res);
  124. }
  125. public function mediaUpdate(Request $request)
  126. {
  127. $this->validate($request, [
  128. 'id' => 'required',
  129. 'file' => function() {
  130. return [
  131. 'required',
  132. 'mimes:' . config('pixelfed.media_types'),
  133. 'max:' . config('pixelfed.max_photo_size'),
  134. ];
  135. },
  136. ]);
  137. $user = Auth::user();
  138. $photo = $request->file('file');
  139. $id = $request->input('id');
  140. $media = Media::whereUserId($user->id)
  141. ->whereProfileId($user->profile_id)
  142. ->whereNull('status_id')
  143. ->findOrFail($id);
  144. $media->save();
  145. $fragments = explode('/', $media->media_path);
  146. $name = last($fragments);
  147. array_pop($fragments);
  148. $dir = implode('/', $fragments);
  149. $path = $photo->storeAs($dir, $name);
  150. $res = [
  151. 'url' => $media->url() . '?v=' . time()
  152. ];
  153. ImageOptimize::dispatch($media);
  154. return $res;
  155. }
  156. public function mediaDelete(Request $request)
  157. {
  158. abort_if(!$request->user(), 403);
  159. $this->validate($request, [
  160. 'id' => 'required|integer|min:1|exists:media,id'
  161. ]);
  162. $media = Media::whereNull('status_id')
  163. ->whereUserId(Auth::id())
  164. ->findOrFail($request->input('id'));
  165. MediaStorageService::delete($media, true);
  166. $media->forceDelete();
  167. return response()->json([
  168. 'msg' => 'Successfully deleted',
  169. 'code' => 200
  170. ]);
  171. }
  172. public function searchTag(Request $request)
  173. {
  174. abort_if(!$request->user(), 403);
  175. $this->validate($request, [
  176. 'q' => 'required|string|min:1|max:50'
  177. ]);
  178. $q = $request->input('q');
  179. if(Str::of($q)->startsWith('@')) {
  180. if(strlen($q) < 3) {
  181. return [];
  182. }
  183. $q = mb_substr($q, 1);
  184. }
  185. $blocked = UserFilter::whereFilterableType('App\Profile')
  186. ->whereFilterType('block')
  187. ->whereFilterableId($request->user()->profile_id)
  188. ->pluck('user_id');
  189. $blocked->push($request->user()->profile_id);
  190. $results = Profile::select('id','domain','username')
  191. ->whereNotIn('id', $blocked)
  192. ->whereNull('domain')
  193. ->where('username','like','%'.$q.'%')
  194. ->limit(15)
  195. ->get()
  196. ->map(function($r) {
  197. return [
  198. 'id' => (string) $r->id,
  199. 'name' => $r->username,
  200. 'privacy' => true,
  201. 'avatar' => $r->avatarUrl()
  202. ];
  203. });
  204. return $results;
  205. }
  206. public function searchUntag(Request $request)
  207. {
  208. abort_if(!$request->user(), 403);
  209. $this->validate($request, [
  210. 'status_id' => 'required',
  211. 'profile_id' => 'required'
  212. ]);
  213. $user = $request->user();
  214. $status_id = $request->input('status_id');
  215. $profile_id = (int) $request->input('profile_id');
  216. abort_if((int) $user->profile_id !== $profile_id, 400);
  217. $tag = MediaTag::whereStatusId($status_id)
  218. ->whereProfileId($profile_id)
  219. ->first();
  220. if(!$tag) {
  221. return [];
  222. }
  223. Notification::whereItemType('App\MediaTag')
  224. ->whereItemId($tag->id)
  225. ->whereProfileId($profile_id)
  226. ->whereAction('tagged')
  227. ->delete();
  228. MediaTagService::untag($status_id, $profile_id);
  229. return [200];
  230. }
  231. public function searchLocation(Request $request)
  232. {
  233. abort_if(!Auth::check(), 403);
  234. $this->validate($request, [
  235. 'q' => 'required|string|max:100'
  236. ]);
  237. $q = filter_var($request->input('q'), FILTER_SANITIZE_STRING);
  238. $hash = hash('sha256', $q);
  239. $key = 'search:location:id:' . $hash;
  240. $places = Cache::remember($key, now()->addMinutes(15), function() use($q) {
  241. $q = '%' . $q . '%';
  242. return Place::where('name', 'like', $q)
  243. ->take(80)
  244. ->get()
  245. ->map(function($r) {
  246. return [
  247. 'id' => $r->id,
  248. 'name' => $r->name,
  249. 'country' => $r->country,
  250. 'url' => $r->url()
  251. ];
  252. });
  253. });
  254. return $places;
  255. }
  256. public function store(Request $request)
  257. {
  258. $this->validate($request, [
  259. 'caption' => 'nullable|string|max:'.config('pixelfed.max_caption_length', 500),
  260. 'media.*' => 'required',
  261. 'media.*.id' => 'required|integer|min:1',
  262. 'media.*.filter_class' => 'nullable|alpha_dash|max:30',
  263. 'media.*.license' => 'nullable|string|max:140',
  264. 'media.*.alt' => 'nullable|string|max:140',
  265. 'cw' => 'nullable|boolean',
  266. 'visibility' => 'required|string|in:public,private,unlisted|min:2|max:10',
  267. 'place' => 'nullable',
  268. 'comments_disabled' => 'nullable',
  269. 'tagged' => 'nullable',
  270. // 'optimize_media' => 'nullable'
  271. ]);
  272. if(config('costar.enabled') == true) {
  273. $blockedKeywords = config('costar.keyword.block');
  274. if($blockedKeywords !== null && $request->caption) {
  275. $keywords = config('costar.keyword.block');
  276. foreach($keywords as $kw) {
  277. if(Str::contains($request->caption, $kw) == true) {
  278. abort(400, 'Invalid object');
  279. }
  280. }
  281. }
  282. }
  283. $user = Auth::user();
  284. $profile = $user->profile;
  285. $visibility = $request->input('visibility');
  286. $medias = $request->input('media');
  287. $attachments = [];
  288. $status = new Status;
  289. $mimes = [];
  290. $place = $request->input('place');
  291. $cw = $request->input('cw');
  292. $tagged = $request->input('tagged');
  293. $optimize_media = (bool) $request->input('optimize_media');
  294. foreach($medias as $k => $media) {
  295. if($k + 1 > config('pixelfed.max_album_length')) {
  296. continue;
  297. }
  298. $m = Media::findOrFail($media['id']);
  299. if($m->profile_id !== $profile->id || $m->status_id) {
  300. abort(403, 'Invalid media id');
  301. }
  302. $m->filter_class = in_array($media['filter_class'], Filter::classes()) ? $media['filter_class'] : null;
  303. $m->license = $media['license'];
  304. $m->caption = isset($media['alt']) ? strip_tags($media['alt']) : null;
  305. $m->order = isset($media['cursor']) && is_int($media['cursor']) ? (int) $media['cursor'] : $k;
  306. // if($optimize_media == false) {
  307. // $m->skip_optimize = true;
  308. // ImageThumbnail::dispatch($m);
  309. // } else {
  310. // ImageOptimize::dispatch($m);
  311. // }
  312. if($cw == true || $profile->cw == true) {
  313. $m->is_nsfw = $cw;
  314. $status->is_nsfw = $cw;
  315. }
  316. $m->save();
  317. $attachments[] = $m;
  318. array_push($mimes, $m->mime);
  319. }
  320. $mediaType = StatusController::mimeTypeCheck($mimes);
  321. if(in_array($mediaType, ['photo', 'video', 'photo:album']) == false) {
  322. abort(400, __('exception.compose.invalid.album'));
  323. }
  324. if($place && is_array($place)) {
  325. $status->place_id = $place['id'];
  326. }
  327. if($request->filled('comments_disabled')) {
  328. $status->comments_disabled = (bool) $request->input('comments_disabled');
  329. }
  330. $status->caption = strip_tags($request->caption);
  331. $status->rendered = Autolink::create()->autolink($status->caption);
  332. $status->scope = 'draft';
  333. $status->profile_id = $profile->id;
  334. $status->save();
  335. foreach($attachments as $media) {
  336. $media->status_id = $status->id;
  337. $media->save();
  338. }
  339. $visibility = $profile->unlisted == true && $visibility == 'public' ? 'unlisted' : $visibility;
  340. $visibility = $profile->is_private ? 'private' : $visibility;
  341. $cw = $profile->cw == true ? true : $cw;
  342. $status->is_nsfw = $cw;
  343. $status->visibility = $visibility;
  344. $status->scope = $visibility;
  345. $status->type = $mediaType;
  346. $status->save();
  347. foreach($tagged as $tg) {
  348. $mt = new MediaTag;
  349. $mt->status_id = $status->id;
  350. $mt->media_id = $status->media->first()->id;
  351. $mt->profile_id = $tg['id'];
  352. $mt->tagged_username = $tg['name'];
  353. $mt->is_public = true;
  354. $mt->metadata = json_encode([
  355. '_v' => 1,
  356. ]);
  357. $mt->save();
  358. MediaTagService::set($mt->status_id, $mt->profile_id);
  359. MediaTagService::sendNotification($mt);
  360. }
  361. NewStatusPipeline::dispatch($status);
  362. Cache::forget('user:account:id:'.$profile->user_id);
  363. Cache::forget('_api:statuses:recent_9:'.$profile->id);
  364. Cache::forget('profile:status_count:'.$profile->id);
  365. Cache::forget('status:transformer:media:attachments:'.$status->id);
  366. Cache::forget($user->storageUsedKey());
  367. Cache::forget('profile:embed:' . $status->profile_id);
  368. return $status->url();
  369. }
  370. public function storeText(Request $request)
  371. {
  372. abort_unless(config('exp.top'), 404);
  373. $this->validate($request, [
  374. 'caption' => 'nullable|string|max:'.config('pixelfed.max_caption_length', 500),
  375. 'cw' => 'nullable|boolean',
  376. 'visibility' => 'required|string|in:public,private,unlisted|min:2|max:10',
  377. 'place' => 'nullable',
  378. 'comments_disabled' => 'nullable',
  379. 'tagged' => 'nullable',
  380. ]);
  381. if(config('costar.enabled') == true) {
  382. $blockedKeywords = config('costar.keyword.block');
  383. if($blockedKeywords !== null && $request->caption) {
  384. $keywords = config('costar.keyword.block');
  385. foreach($keywords as $kw) {
  386. if(Str::contains($request->caption, $kw) == true) {
  387. abort(400, 'Invalid object');
  388. }
  389. }
  390. }
  391. }
  392. $user = Auth::user();
  393. $profile = $user->profile;
  394. $visibility = $request->input('visibility');
  395. $status = new Status;
  396. $place = $request->input('place');
  397. $cw = $request->input('cw');
  398. $tagged = $request->input('tagged');
  399. if($place && is_array($place)) {
  400. $status->place_id = $place['id'];
  401. }
  402. if($request->filled('comments_disabled')) {
  403. $status->comments_disabled = (bool) $request->input('comments_disabled');
  404. }
  405. $status->caption = strip_tags($request->caption);
  406. $status->profile_id = $profile->id;
  407. $entities = Extractor::create()->extract($status->caption);
  408. $visibility = $profile->unlisted == true && $visibility == 'public' ? 'unlisted' : $visibility;
  409. $cw = $profile->cw == true ? true : $cw;
  410. $status->is_nsfw = $cw;
  411. $status->visibility = $visibility;
  412. $status->scope = $visibility;
  413. $status->type = 'text';
  414. $status->rendered = Autolink::create()->autolink($status->caption);
  415. $status->entities = json_encode(array_merge([
  416. 'timg' => [
  417. 'version' => 0,
  418. 'bg_id' => 1,
  419. 'font_size' => strlen($status->caption) <= 140 ? 'h1' : 'h3',
  420. 'length' => strlen($status->caption),
  421. ]
  422. ], $entities), JSON_UNESCAPED_SLASHES);
  423. $status->save();
  424. foreach($tagged as $tg) {
  425. $mt = new MediaTag;
  426. $mt->status_id = $status->id;
  427. $mt->media_id = $status->media->first()->id;
  428. $mt->profile_id = $tg['id'];
  429. $mt->tagged_username = $tg['name'];
  430. $mt->is_public = true;
  431. $mt->metadata = json_encode([
  432. '_v' => 1,
  433. ]);
  434. $mt->save();
  435. MediaTagService::set($mt->status_id, $mt->profile_id);
  436. MediaTagService::sendNotification($mt);
  437. }
  438. Cache::forget('user:account:id:'.$profile->user_id);
  439. Cache::forget('_api:statuses:recent_9:'.$profile->id);
  440. Cache::forget('profile:status_count:'.$profile->id);
  441. return $status->url();
  442. }
  443. public function mediaProcessingCheck(Request $request)
  444. {
  445. $this->validate($request, [
  446. 'id' => 'required|integer|min:1'
  447. ]);
  448. $media = Media::whereUserId($request->user()->id)
  449. ->whereNull('status_id')
  450. ->findOrFail($request->input('id'));
  451. if(config('pixelfed.media_fast_process')) {
  452. return [
  453. 'finished' => true
  454. ];
  455. }
  456. $finished = false;
  457. switch ($media->mime) {
  458. case 'image/jpeg':
  459. case 'image/png':
  460. case 'video/mp4':
  461. $finished = config('pixelfed.cloud_storage') ? (bool) $media->cdn_url : (bool) $media->processed_at;
  462. break;
  463. default:
  464. # code...
  465. break;
  466. }
  467. return [
  468. 'finished' => $finished
  469. ];
  470. }
  471. }