import * as Koa from 'koa'; import * as Router from 'koa-router'; import * as uuid from 'uuid'; import autwh from 'autwh'; import redis from '../../../db/redis'; import { publishMainStream } from '../../../services/stream'; import config from '../../../config'; import signin from '../common/signin'; import fetchMeta from '../../../misc/fetch-meta'; import { Users, UserProfiles } from '../../../models'; import { ILocalUser } from '../../../models/entities/user'; function getUserToken(ctx: Koa.BaseContext) { return ((ctx.headers['cookie'] || '').match(/i=(!\w+)/) || [null, null])[1]; } function compareOrigin(ctx: Koa.BaseContext) { function normalizeUrl(url: string) { return url.endsWith('/') ? url.substr(0, url.length - 1) : url; } const referer = ctx.headers['referer']; return (normalizeUrl(referer) == normalizeUrl(config.url)); } // Init router const router = new Router(); router.get('/disconnect/twitter', async ctx => { if (!compareOrigin(ctx)) { ctx.throw(400, 'invalid origin'); return; } const userToken = getUserToken(ctx); if (userToken == null) { ctx.throw(400, 'signin required'); return; } const user = await Users.findOne({ host: null, token: userToken }); await UserProfiles.update({ userId: user.id }, { twitter: false, twitterAccessToken: null, twitterAccessTokenSecret: null, twitterUserId: null, twitterScreenName: null, }); ctx.body = `Twitterの連携を解除しました :v:`; // Publish i updated event publishMainStream(user.id, 'meUpdated', await Users.pack(user, user, { detail: true, includeSecrets: true })); }); async function getTwAuth() { const meta = await fetchMeta(); if (meta.enableTwitterIntegration) { return autwh({ consumerKey: meta.twitterConsumerKey, consumerSecret: meta.twitterConsumerSecret, callbackUrl: `${config.url}/api/tw/cb` }); } else { return null; } } router.get('/connect/twitter', async ctx => { if (!compareOrigin(ctx)) { ctx.throw(400, 'invalid origin'); return; } const userToken = getUserToken(ctx); if (userToken == null) { ctx.throw(400, 'signin required'); return; } const twAuth = await getTwAuth(); const twCtx = await twAuth.begin(); redis.set(userToken, JSON.stringify(twCtx)); ctx.redirect(twCtx.url); }); router.get('/signin/twitter', async ctx => { const twAuth = await getTwAuth(); const twCtx = await twAuth.begin(); const sessid = uuid(); redis.set(sessid, JSON.stringify(twCtx)); const expires = 1000 * 60 * 60; // 1h ctx.cookies.set('signin_with_twitter_session_id', sessid, { path: '/', domain: config.host, secure: config.url.startsWith('https'), httpOnly: true, expires: new Date(Date.now() + expires), maxAge: expires }); ctx.redirect(twCtx.url); }); router.get('/tw/cb', async ctx => { const userToken = getUserToken(ctx); const twAuth = await getTwAuth(); if (userToken == null) { const sessid = ctx.cookies.get('signin_with_twitter_session_id'); if (sessid == null) { ctx.throw(400, 'invalid session'); return; } const get = new Promise((res, rej) => { redis.get(sessid, async (_, twCtx) => { res(twCtx); }); }); const twCtx = await get; const result = await twAuth.done(JSON.parse(twCtx), ctx.query.oauth_verifier); const link = await UserProfiles.createQueryBuilder() .where('twitter @> :twitter', { twitter: { userId: result.userId, }, }) .andWhere('userHost IS NULL') .getOne(); if (link == null) { ctx.throw(404, `@${result.screenName}と連携しているMisskeyアカウントはありませんでした...`); return; } signin(ctx, await Users.findOne(link.userId) as ILocalUser, true); } else { const verifier = ctx.query.oauth_verifier; if (verifier == null) { ctx.throw(400, 'invalid session'); return; } const get = new Promise((res, rej) => { redis.get(userToken, async (_, twCtx) => { res(twCtx); }); }); const twCtx = await get; const result = await twAuth.done(JSON.parse(twCtx), verifier); const user = await Users.findOne({ host: null, token: userToken }); await UserProfiles.update({ userId: user.id }, { twitter: true, twitterAccessToken: result.accessToken, twitterAccessTokenSecret: result.accessTokenSecret, twitterUserId: result.userId, twitterScreenName: result.screenName, }); ctx.body = `Twitter: @${result.screenName} を、Misskey: @${user.username} に接続しました!`; // Publish i updated event publishMainStream(user.id, 'meUpdated', await Users.pack(user, user, { detail: true, includeSecrets: true })); } }); export default router;