ComposeController.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515
  1. <?php
  2. namespace App\Http\Controllers;
  3. use Illuminate\Http\Request;
  4. use Auth, Cache, Storage, URL;
  5. use Carbon\Carbon;
  6. use App\{
  7. Avatar,
  8. Like,
  9. Media,
  10. MediaTag,
  11. Notification,
  12. Profile,
  13. Place,
  14. Status,
  15. UserFilter
  16. };
  17. use App\Transformer\Api\{
  18. MediaTransformer,
  19. MediaDraftTransformer,
  20. StatusTransformer,
  21. StatusStatelessTransformer
  22. };
  23. use League\Fractal;
  24. use App\Util\Media\Filter;
  25. use League\Fractal\Serializer\ArraySerializer;
  26. use League\Fractal\Pagination\IlluminatePaginatorAdapter;
  27. use App\Jobs\AvatarPipeline\AvatarOptimize;
  28. use App\Jobs\ImageOptimizePipeline\ImageOptimize;
  29. use App\Jobs\ImageOptimizePipeline\ImageThumbnail;
  30. use App\Jobs\StatusPipeline\NewStatusPipeline;
  31. use App\Jobs\VideoPipeline\{
  32. VideoOptimize,
  33. VideoPostProcess,
  34. VideoThumbnail
  35. };
  36. use App\Services\NotificationService;
  37. use App\Services\MediaPathService;
  38. use App\Services\MediaBlocklistService;
  39. use App\Services\MediaTagService;
  40. use Illuminate\Support\Str;
  41. use App\Util\Lexer\Autolink;
  42. use App\Util\Lexer\Extractor;
  43. class ComposeController extends Controller
  44. {
  45. protected $fractal;
  46. public function __construct()
  47. {
  48. $this->middleware('auth');
  49. $this->fractal = new Fractal\Manager();
  50. $this->fractal->setSerializer(new ArraySerializer());
  51. }
  52. public function show(Request $request)
  53. {
  54. return view('status.compose');
  55. }
  56. public function mediaUpload(Request $request)
  57. {
  58. abort_if(!$request->user(), 403);
  59. $this->validate($request, [
  60. 'file.*' => function() {
  61. return [
  62. 'required',
  63. 'mimes:' . config('pixelfed.media_types'),
  64. 'max:' . config('pixelfed.max_photo_size'),
  65. ];
  66. },
  67. 'filter_name' => 'nullable|string|max:24',
  68. 'filter_class' => 'nullable|alpha_dash|max:24'
  69. ]);
  70. $user = Auth::user();
  71. $profile = $user->profile;
  72. if(config('pixelfed.enforce_account_limit') == true) {
  73. $size = Cache::remember($user->storageUsedKey(), now()->addDays(3), function() use($user) {
  74. return Media::whereUserId($user->id)->sum('size') / 1000;
  75. });
  76. $limit = (int) config('pixelfed.max_account_size');
  77. if ($size >= $limit) {
  78. abort(403, 'Account size limit reached.');
  79. }
  80. }
  81. $filterClass = in_array($request->input('filter_class'), Filter::classes()) ? $request->input('filter_class') : null;
  82. $filterName = in_array($request->input('filter_name'), Filter::names()) ? $request->input('filter_name') : null;
  83. $photo = $request->file('file');
  84. $mimes = explode(',', config('pixelfed.media_types'));
  85. if(in_array($photo->getMimeType(), $mimes) == false) {
  86. return;
  87. }
  88. $storagePath = MediaPathService::get($user, 2);
  89. $path = $photo->store($storagePath);
  90. $hash = \hash_file('sha256', $photo);
  91. abort_if(MediaBlocklistService::exists($hash) == true, 451);
  92. $media = new Media();
  93. $media->status_id = null;
  94. $media->profile_id = $profile->id;
  95. $media->user_id = $user->id;
  96. $media->media_path = $path;
  97. $media->original_sha256 = $hash;
  98. $media->size = $photo->getSize();
  99. $media->mime = $photo->getMimeType();
  100. $media->filter_class = $filterClass;
  101. $media->filter_name = $filterName;
  102. $media->save();
  103. // $url = URL::temporarySignedRoute(
  104. // 'temp-media', now()->addHours(1), ['profileId' => $profile->id, 'mediaId' => $media->id, 'timestamp' => time()]
  105. // );
  106. switch ($media->mime) {
  107. case 'image/jpeg':
  108. case 'image/png':
  109. ImageOptimize::dispatch($media);
  110. break;
  111. case 'video/mp4':
  112. VideoThumbnail::dispatch($media);
  113. $preview_url = '/storage/no-preview.png';
  114. $url = '/storage/no-preview.png';
  115. break;
  116. default:
  117. break;
  118. }
  119. $resource = new Fractal\Resource\Item($media, new MediaTransformer());
  120. $res = $this->fractal->createData($resource)->toArray();
  121. $res['preview_url'] = $media->url() . '?v=' . time();
  122. $res['url'] = $media->url() . '?v=' . time();
  123. return response()->json($res);
  124. }
  125. public function mediaUpdate(Request $request)
  126. {
  127. $this->validate($request, [
  128. 'id' => 'required',
  129. 'file' => function() {
  130. return [
  131. 'required',
  132. 'mimes:' . config('pixelfed.media_types'),
  133. 'max:' . config('pixelfed.max_photo_size'),
  134. ];
  135. },
  136. ]);
  137. $user = Auth::user();
  138. $photo = $request->file('file');
  139. $id = $request->input('id');
  140. $media = Media::whereUserId($user->id)
  141. ->whereProfileId($user->profile_id)
  142. ->whereNull('status_id')
  143. ->findOrFail($id);
  144. $media->version = 2;
  145. $media->save();
  146. $fragments = explode('/', $media->media_path);
  147. $name = last($fragments);
  148. array_pop($fragments);
  149. $dir = implode('/', $fragments);
  150. $path = $photo->storeAs($dir, $name);
  151. $res = [
  152. 'url' => $media->url() . '?v=' . time()
  153. ];
  154. ImageOptimize::dispatch($media);
  155. return $res;
  156. }
  157. public function mediaDelete(Request $request)
  158. {
  159. abort_if(!$request->user(), 403);
  160. $this->validate($request, [
  161. 'id' => 'required|integer|min:1|exists:media,id'
  162. ]);
  163. $media = Media::whereNull('status_id')
  164. ->whereUserId(Auth::id())
  165. ->findOrFail($request->input('id'));
  166. Storage::delete($media->media_path);
  167. Storage::delete($media->thumbnail_path);
  168. $media->forceDelete();
  169. return response()->json([
  170. 'msg' => 'Successfully deleted',
  171. 'code' => 200
  172. ]);
  173. }
  174. public function searchTag(Request $request)
  175. {
  176. abort_if(!$request->user(), 403);
  177. $this->validate($request, [
  178. 'q' => 'required|string|min:1|max:50'
  179. ]);
  180. $q = $request->input('q');
  181. if(Str::of($q)->startsWith('@')) {
  182. if(strlen($q) < 3) {
  183. return [];
  184. }
  185. $q = mb_substr($q, 1);
  186. }
  187. $blocked = UserFilter::whereFilterableType('App\Profile')
  188. ->whereFilterType('block')
  189. ->whereFilterableId($request->user()->profile_id)
  190. ->pluck('user_id');
  191. $blocked->push($request->user()->profile_id);
  192. $results = Profile::select('id','domain','username')
  193. ->whereNotIn('id', $blocked)
  194. ->whereNull('domain')
  195. ->where('username','like','%'.$q.'%')
  196. ->limit(15)
  197. ->get()
  198. ->map(function($r) {
  199. return [
  200. 'id' => (string) $r->id,
  201. 'name' => $r->username,
  202. 'privacy' => true,
  203. 'avatar' => $r->avatarUrl()
  204. ];
  205. });
  206. return $results;
  207. }
  208. public function searchUntag(Request $request)
  209. {
  210. abort_if(!$request->user(), 403);
  211. $this->validate($request, [
  212. 'status_id' => 'required',
  213. 'profile_id' => 'required'
  214. ]);
  215. $user = $request->user();
  216. $status_id = $request->input('status_id');
  217. $profile_id = (int) $request->input('profile_id');
  218. abort_if((int) $user->profile_id !== $profile_id, 400);
  219. $tag = MediaTag::whereStatusId($status_id)
  220. ->whereProfileId($profile_id)
  221. ->first();
  222. if(!$tag) {
  223. return [];
  224. }
  225. Notification::whereItemType('App\MediaTag')
  226. ->whereItemId($tag->id)
  227. ->whereProfileId($profile_id)
  228. ->whereAction('tagged')
  229. ->delete();
  230. MediaTagService::untag($status_id, $profile_id);
  231. return [200];
  232. }
  233. public function searchLocation(Request $request)
  234. {
  235. abort_if(!Auth::check(), 403);
  236. $this->validate($request, [
  237. 'q' => 'required|string|max:100'
  238. ]);
  239. $q = filter_var($request->input('q'), FILTER_SANITIZE_STRING);
  240. $hash = hash('sha256', $q);
  241. $key = 'search:location:id:' . $hash;
  242. $places = Cache::remember($key, now()->addMinutes(15), function() use($q) {
  243. $q = '%' . $q . '%';
  244. return Place::where('name', 'like', $q)
  245. ->take(80)
  246. ->get()
  247. ->map(function($r) {
  248. return [
  249. 'id' => $r->id,
  250. 'name' => $r->name,
  251. 'country' => $r->country,
  252. 'url' => $r->url()
  253. ];
  254. });
  255. });
  256. return $places;
  257. }
  258. public function store(Request $request)
  259. {
  260. $this->validate($request, [
  261. 'caption' => 'nullable|string|max:'.config('pixelfed.max_caption_length', 500),
  262. 'media.*' => 'required',
  263. 'media.*.id' => 'required|integer|min:1',
  264. 'media.*.filter_class' => 'nullable|alpha_dash|max:30',
  265. 'media.*.license' => 'nullable|string|max:140',
  266. 'media.*.alt' => 'nullable|string|max:140',
  267. 'cw' => 'nullable|boolean',
  268. 'visibility' => 'required|string|in:public,private,unlisted|min:2|max:10',
  269. 'place' => 'nullable',
  270. 'comments_disabled' => 'nullable',
  271. 'tagged' => 'nullable',
  272. // 'optimize_media' => 'nullable'
  273. ]);
  274. if(config('costar.enabled') == true) {
  275. $blockedKeywords = config('costar.keyword.block');
  276. if($blockedKeywords !== null && $request->caption) {
  277. $keywords = config('costar.keyword.block');
  278. foreach($keywords as $kw) {
  279. if(Str::contains($request->caption, $kw) == true) {
  280. abort(400, 'Invalid object');
  281. }
  282. }
  283. }
  284. }
  285. $user = Auth::user();
  286. $profile = $user->profile;
  287. $visibility = $request->input('visibility');
  288. $medias = $request->input('media');
  289. $attachments = [];
  290. $status = new Status;
  291. $mimes = [];
  292. $place = $request->input('place');
  293. $cw = $request->input('cw');
  294. $tagged = $request->input('tagged');
  295. $optimize_media = (bool) $request->input('optimize_media');
  296. foreach($medias as $k => $media) {
  297. if($k + 1 > config('pixelfed.max_album_length')) {
  298. continue;
  299. }
  300. $m = Media::findOrFail($media['id']);
  301. if($m->profile_id !== $profile->id || $m->status_id) {
  302. abort(403, 'Invalid media id');
  303. }
  304. $m->filter_class = in_array($media['filter_class'], Filter::classes()) ? $media['filter_class'] : null;
  305. $m->license = $media['license'];
  306. $m->caption = isset($media['alt']) ? strip_tags($media['alt']) : null;
  307. $m->order = isset($media['cursor']) && is_int($media['cursor']) ? (int) $media['cursor'] : $k;
  308. // if($optimize_media == false) {
  309. // $m->skip_optimize = true;
  310. // ImageThumbnail::dispatch($m);
  311. // } else {
  312. // ImageOptimize::dispatch($m);
  313. // }
  314. if($cw == true || $profile->cw == true) {
  315. $m->is_nsfw = $cw;
  316. $status->is_nsfw = $cw;
  317. }
  318. $m->save();
  319. $attachments[] = $m;
  320. array_push($mimes, $m->mime);
  321. }
  322. $mediaType = StatusController::mimeTypeCheck($mimes);
  323. if(in_array($mediaType, ['photo', 'video', 'photo:album']) == false) {
  324. abort(400, __('exception.compose.invalid.album'));
  325. }
  326. if($place && is_array($place)) {
  327. $status->place_id = $place['id'];
  328. }
  329. if($request->filled('comments_disabled')) {
  330. $status->comments_disabled = (bool) $request->input('comments_disabled');
  331. }
  332. $status->caption = strip_tags($request->caption);
  333. $status->scope = 'draft';
  334. $status->profile_id = $profile->id;
  335. $status->save();
  336. foreach($attachments as $media) {
  337. $media->status_id = $status->id;
  338. $media->save();
  339. }
  340. $visibility = $profile->unlisted == true && $visibility == 'public' ? 'unlisted' : $visibility;
  341. $cw = $profile->cw == true ? true : $cw;
  342. $status->is_nsfw = $cw;
  343. $status->visibility = $visibility;
  344. $status->scope = $visibility;
  345. $status->type = $mediaType;
  346. $status->save();
  347. foreach($tagged as $tg) {
  348. $mt = new MediaTag;
  349. $mt->status_id = $status->id;
  350. $mt->media_id = $status->media->first()->id;
  351. $mt->profile_id = $tg['id'];
  352. $mt->tagged_username = $tg['name'];
  353. $mt->is_public = true;
  354. $mt->metadata = json_encode([
  355. '_v' => 1,
  356. ]);
  357. $mt->save();
  358. MediaTagService::set($mt->status_id, $mt->profile_id);
  359. MediaTagService::sendNotification($mt);
  360. }
  361. NewStatusPipeline::dispatch($status);
  362. Cache::forget('user:account:id:'.$profile->user_id);
  363. Cache::forget('_api:statuses:recent_9:'.$profile->id);
  364. Cache::forget('profile:status_count:'.$profile->id);
  365. Cache::forget('status:transformer:media:attachments:'.$status->id);
  366. Cache::forget($user->storageUsedKey());
  367. return $status->url();
  368. }
  369. public function storeText(Request $request)
  370. {
  371. abort_unless(config('exp.top'), 404);
  372. $this->validate($request, [
  373. 'caption' => 'nullable|string|max:'.config('pixelfed.max_caption_length', 500),
  374. 'cw' => 'nullable|boolean',
  375. 'visibility' => 'required|string|in:public,private,unlisted|min:2|max:10',
  376. 'place' => 'nullable',
  377. 'comments_disabled' => 'nullable',
  378. 'tagged' => 'nullable',
  379. ]);
  380. if(config('costar.enabled') == true) {
  381. $blockedKeywords = config('costar.keyword.block');
  382. if($blockedKeywords !== null && $request->caption) {
  383. $keywords = config('costar.keyword.block');
  384. foreach($keywords as $kw) {
  385. if(Str::contains($request->caption, $kw) == true) {
  386. abort(400, 'Invalid object');
  387. }
  388. }
  389. }
  390. }
  391. $user = Auth::user();
  392. $profile = $user->profile;
  393. $visibility = $request->input('visibility');
  394. $status = new Status;
  395. $place = $request->input('place');
  396. $cw = $request->input('cw');
  397. $tagged = $request->input('tagged');
  398. if($place && is_array($place)) {
  399. $status->place_id = $place['id'];
  400. }
  401. if($request->filled('comments_disabled')) {
  402. $status->comments_disabled = (bool) $request->input('comments_disabled');
  403. }
  404. $status->caption = strip_tags($request->caption);
  405. $status->profile_id = $profile->id;
  406. $entities = Extractor::create()->extract($status->caption);
  407. $visibility = $profile->unlisted == true && $visibility == 'public' ? 'unlisted' : $visibility;
  408. $cw = $profile->cw == true ? true : $cw;
  409. $status->is_nsfw = $cw;
  410. $status->visibility = $visibility;
  411. $status->scope = $visibility;
  412. $status->type = 'text';
  413. $status->rendered = Autolink::create()->autolink($status->caption);
  414. $status->entities = json_encode(array_merge([
  415. 'timg' => [
  416. 'version' => 0,
  417. 'bg_id' => 1,
  418. 'font_size' => strlen($status->caption) <= 140 ? 'h1' : 'h3',
  419. 'length' => strlen($status->caption),
  420. ]
  421. ], $entities), JSON_UNESCAPED_SLASHES);
  422. $status->save();
  423. foreach($tagged as $tg) {
  424. $mt = new MediaTag;
  425. $mt->status_id = $status->id;
  426. $mt->media_id = $status->media->first()->id;
  427. $mt->profile_id = $tg['id'];
  428. $mt->tagged_username = $tg['name'];
  429. $mt->is_public = true;
  430. $mt->metadata = json_encode([
  431. '_v' => 1,
  432. ]);
  433. $mt->save();
  434. MediaTagService::set($mt->status_id, $mt->profile_id);
  435. MediaTagService::sendNotification($mt);
  436. }
  437. Cache::forget('user:account:id:'.$profile->user_id);
  438. Cache::forget('_api:statuses:recent_9:'.$profile->id);
  439. Cache::forget('profile:status_count:'.$profile->id);
  440. return $status->url();
  441. }
  442. }