ApiV2Controller.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use Illuminate\Http\Request;
  4. use App\Http\Controllers\Controller;
  5. use App\Media;
  6. use App\UserSetting;
  7. use App\User;
  8. use Illuminate\Support\Facades\Cache;
  9. use Illuminate\Support\Facades\Storage;
  10. use App\Services\AccountService;
  11. use App\Services\BouncerService;
  12. use App\Services\InstanceService;
  13. use App\Services\MediaBlocklistService;
  14. use App\Services\MediaPathService;
  15. use App\Services\SearchApiV2Service;
  16. use App\Util\Media\Filter;
  17. use App\Jobs\MediaPipeline\MediaDeletePipeline;
  18. use App\Jobs\VideoPipeline\{
  19. VideoOptimize,
  20. VideoPostProcess,
  21. VideoThumbnail
  22. };
  23. use App\Jobs\ImageOptimizePipeline\ImageOptimize;
  24. use League\Fractal;
  25. use League\Fractal\Serializer\ArraySerializer;
  26. use League\Fractal\Pagination\IlluminatePaginatorAdapter;
  27. use App\Transformer\Api\Mastodon\v1\{
  28. AccountTransformer,
  29. MediaTransformer,
  30. NotificationTransformer,
  31. StatusTransformer,
  32. };
  33. use App\Transformer\Api\{
  34. RelationshipTransformer,
  35. };
  36. use App\Util\Site\Nodeinfo;
  37. use App\Services\UserRoleService;
  38. class ApiV2Controller extends Controller
  39. {
  40. const PF_API_ENTITY_KEY = "_pe";
  41. public function json($res, $code = 200, $headers = [])
  42. {
  43. return response()->json($res, $code, $headers, JSON_UNESCAPED_SLASHES);
  44. }
  45. public function instance(Request $request)
  46. {
  47. $contact = Cache::remember('api:v1:instance-data:contact', 604800, function () {
  48. if(config_cache('instance.admin.pid')) {
  49. return AccountService::getMastodon(config_cache('instance.admin.pid'), true);
  50. }
  51. $admin = User::whereIsAdmin(true)->first();
  52. return $admin && isset($admin->profile_id) ?
  53. AccountService::getMastodon($admin->profile_id, true) :
  54. null;
  55. });
  56. $rules = Cache::remember('api:v1:instance-data:rules', 604800, function () {
  57. return config_cache('app.rules') ?
  58. collect(json_decode(config_cache('app.rules'), true))
  59. ->map(function($rule, $key) {
  60. $id = $key + 1;
  61. return [
  62. 'id' => "{$id}",
  63. 'text' => $rule
  64. ];
  65. })
  66. ->toArray() : [];
  67. });
  68. $res = Cache::remember('api:v2:instance-data-response-v2', 1800, function () use($contact, $rules) {
  69. return [
  70. 'domain' => config('pixelfed.domain.app'),
  71. 'title' => config_cache('app.name'),
  72. 'version' => '3.5.3 (compatible; Pixelfed ' . config('pixelfed.version') .')',
  73. 'source_url' => 'https://github.com/pixelfed/pixelfed',
  74. 'description' => config_cache('app.short_description'),
  75. 'usage' => [
  76. 'users' => [
  77. 'active_month' => (int) Nodeinfo::activeUsersMonthly()
  78. ]
  79. ],
  80. 'thumbnail' => [
  81. 'url' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg')),
  82. 'blurhash' => InstanceService::headerBlurhash(),
  83. 'versions' => [
  84. '@1x' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg')),
  85. '@2x' => config_cache('app.banner_image') ?? url(Storage::url('public/headers/default.jpg'))
  86. ]
  87. ],
  88. 'languages' => [config('app.locale')],
  89. 'configuration' => [
  90. 'urls' => [
  91. 'streaming' => null,
  92. 'status' => null
  93. ],
  94. 'vapid' => [
  95. 'public_key' => config('webpush.vapid.public_key'),
  96. ],
  97. 'accounts' => [
  98. 'max_featured_tags' => 0,
  99. ],
  100. 'statuses' => [
  101. 'max_characters' => (int) config_cache('pixelfed.max_caption_length'),
  102. 'max_media_attachments' => (int) config_cache('pixelfed.max_album_length'),
  103. 'characters_reserved_per_url' => 23
  104. ],
  105. 'media_attachments' => [
  106. 'supported_mime_types' => explode(',', config_cache('pixelfed.media_types')),
  107. 'image_size_limit' => config_cache('pixelfed.max_photo_size') * 1024,
  108. 'image_matrix_limit' => 3686400,
  109. 'video_size_limit' => config_cache('pixelfed.max_photo_size') * 1024,
  110. 'video_frame_rate_limit' => 240,
  111. 'video_matrix_limit' => 3686400
  112. ],
  113. 'polls' => [
  114. 'max_options' => 0,
  115. 'max_characters_per_option' => 0,
  116. 'min_expiration' => 0,
  117. 'max_expiration' => 0,
  118. ],
  119. 'translation' => [
  120. 'enabled' => false,
  121. ],
  122. ],
  123. 'registrations' => [
  124. 'enabled' => null,
  125. 'approval_required' => false,
  126. 'message' => null,
  127. 'url' => null,
  128. ],
  129. 'contact' => [
  130. 'email' => config('instance.email'),
  131. 'account' => $contact
  132. ],
  133. 'rules' => $rules
  134. ];
  135. });
  136. $res['registrations']['enabled'] = (bool) config_cache('pixelfed.open_registration');
  137. $res['registrations']['approval_required'] = (bool) config_cache('instance.curated_registration.enabled');
  138. return response()->json($res, 200, [], JSON_UNESCAPED_SLASHES);
  139. }
  140. /**
  141. * GET /api/v2/search
  142. *
  143. *
  144. * @return array
  145. */
  146. public function search(Request $request)
  147. {
  148. abort_if(!$request->user() || !$request->user()->token(), 403);
  149. abort_unless($request->user()->tokenCan('read'), 403);
  150. $this->validate($request, [
  151. 'q' => 'required|string|min:1|max:100',
  152. 'account_id' => 'nullable|string',
  153. 'max_id' => 'nullable|string',
  154. 'min_id' => 'nullable|string',
  155. 'type' => 'nullable|in:accounts,hashtags,statuses',
  156. 'exclude_unreviewed' => 'nullable',
  157. 'resolve' => 'nullable',
  158. 'limit' => 'nullable|integer|max:40',
  159. 'offset' => 'nullable|integer',
  160. 'following' => 'nullable'
  161. ]);
  162. if($request->user()->has_roles && !UserRoleService::can('can-view-discover', $request->user()->id)) {
  163. return [
  164. 'accounts' => [],
  165. 'hashtags' => [],
  166. 'statuses' => []
  167. ];
  168. }
  169. $mastodonMode = !$request->has('_pe');
  170. return $this->json(SearchApiV2Service::query($request, $mastodonMode));
  171. }
  172. /**
  173. * GET /api/v2/streaming/config
  174. *
  175. *
  176. * @return object
  177. */
  178. public function getWebsocketConfig()
  179. {
  180. return config('broadcasting.default') === 'pusher' ? [
  181. 'host' => config('broadcasting.connections.pusher.options.host'),
  182. 'port' => config('broadcasting.connections.pusher.options.port'),
  183. 'key' => config('broadcasting.connections.pusher.key'),
  184. 'cluster' => config('broadcasting.connections.pusher.options.cluster')
  185. ] : [];
  186. }
  187. /**
  188. * POST /api/v2/media
  189. *
  190. *
  191. * @return MediaTransformer
  192. */
  193. public function mediaUploadV2(Request $request)
  194. {
  195. abort_if(!$request->user() || !$request->user()->token(), 403);
  196. abort_unless($request->user()->tokenCan('write'), 403);
  197. $this->validate($request, [
  198. 'file.*' => [
  199. 'required_without:file',
  200. 'mimetypes:' . config_cache('pixelfed.media_types'),
  201. 'max:' . config_cache('pixelfed.max_photo_size'),
  202. ],
  203. 'file' => [
  204. 'required_without:file.*',
  205. 'mimetypes:' . config_cache('pixelfed.media_types'),
  206. 'max:' . config_cache('pixelfed.max_photo_size'),
  207. ],
  208. 'filter_name' => 'nullable|string|max:24',
  209. 'filter_class' => 'nullable|alpha_dash|max:24',
  210. 'description' => 'nullable|string|max:' . config_cache('pixelfed.max_altext_length'),
  211. 'replace_id' => 'sometimes'
  212. ]);
  213. $user = $request->user();
  214. if($user->last_active_at == null) {
  215. return [];
  216. }
  217. if(empty($request->file('file'))) {
  218. return response('', 422);
  219. }
  220. $limitKey = 'compose:rate-limit:media-upload:' . $user->id;
  221. $limitTtl = now()->addMinutes(15);
  222. $limitReached = Cache::remember($limitKey, $limitTtl, function() use($user) {
  223. $dailyLimit = Media::whereUserId($user->id)->where('created_at', '>', now()->subDays(1))->count();
  224. return $dailyLimit >= 1250;
  225. });
  226. abort_if($limitReached == true, 429);
  227. $profile = $user->profile;
  228. if(config_cache('pixelfed.enforce_account_limit') == true) {
  229. $size = Cache::remember($user->storageUsedKey(), now()->addDays(3), function() use($user) {
  230. return Media::whereUserId($user->id)->sum('size') / 1000;
  231. });
  232. $limit = (int) config_cache('pixelfed.max_account_size');
  233. if ($size >= $limit) {
  234. abort(403, 'Account size limit reached.');
  235. }
  236. }
  237. $filterClass = in_array($request->input('filter_class'), Filter::classes()) ? $request->input('filter_class') : null;
  238. $filterName = in_array($request->input('filter_name'), Filter::names()) ? $request->input('filter_name') : null;
  239. $photo = $request->file('file');
  240. $mimes = explode(',', config_cache('pixelfed.media_types'));
  241. if(in_array($photo->getMimeType(), $mimes) == false) {
  242. abort(403, 'Invalid or unsupported mime type.');
  243. }
  244. $storagePath = MediaPathService::get($user, 2);
  245. $path = $photo->storePublicly($storagePath);
  246. $hash = \hash_file('sha256', $photo);
  247. $license = null;
  248. $mime = $photo->getMimeType();
  249. $settings = UserSetting::whereUserId($user->id)->first();
  250. if($settings && !empty($settings->compose_settings)) {
  251. $compose = $settings->compose_settings;
  252. if(isset($compose['default_license']) && $compose['default_license'] != 1) {
  253. $license = $compose['default_license'];
  254. }
  255. }
  256. abort_if(MediaBlocklistService::exists($hash) == true, 451);
  257. if($request->has('replace_id')) {
  258. $rpid = $request->input('replace_id');
  259. $removeMedia = Media::whereNull('status_id')
  260. ->whereUserId($user->id)
  261. ->whereProfileId($profile->id)
  262. ->where('created_at', '>', now()->subHours(2))
  263. ->find($rpid);
  264. if($removeMedia) {
  265. MediaDeletePipeline::dispatch($removeMedia)
  266. ->onQueue('mmo')
  267. ->delay(now()->addMinutes(15));
  268. }
  269. }
  270. $media = new Media();
  271. $media->status_id = null;
  272. $media->profile_id = $profile->id;
  273. $media->user_id = $user->id;
  274. $media->media_path = $path;
  275. $media->original_sha256 = $hash;
  276. $media->size = $photo->getSize();
  277. $media->mime = $mime;
  278. $media->caption = $request->input('description');
  279. $media->filter_class = $filterClass;
  280. $media->filter_name = $filterName;
  281. if($license) {
  282. $media->license = $license;
  283. }
  284. $media->save();
  285. switch ($media->mime) {
  286. case 'image/jpeg':
  287. case 'image/png':
  288. ImageOptimize::dispatch($media)->onQueue('mmo');
  289. break;
  290. case 'video/mp4':
  291. VideoThumbnail::dispatch($media)->onQueue('mmo');
  292. $preview_url = '/storage/no-preview.png';
  293. $url = '/storage/no-preview.png';
  294. break;
  295. }
  296. Cache::forget($limitKey);
  297. $fractal = new Fractal\Manager();
  298. $fractal->setSerializer(new ArraySerializer());
  299. $resource = new Fractal\Resource\Item($media, new MediaTransformer());
  300. $res = $fractal->createData($resource)->toArray();
  301. $res['preview_url'] = $media->url(). '?v=' . time();
  302. $res['url'] = null;
  303. return $this->json($res, 202);
  304. }
  305. }