CI / Test (ubuntu-latest) (push) Canceled after 0s
CI / Test (windows-latest) (push) Canceled after 0s
CI / Storage tests on PostgreSQL (push) Canceled after 0s
CI / Complement (federation off) (push) Canceled after 0s
CI / golangci-lint (push) Canceled after 0s
CI / Smoke test the binary (push) Canceled after 0s
Implements PLAN.md Phase 6: the media repository. Clients upload files, reserve an mxc:// URI and upload to it later, download and ask for thumbnails, all through the authenticated media endpoints of Matrix 1.11; other servers download this server's media through the federation media endpoints, and media uploaded elsewhere is fetched over federation on first use and kept. internal/mediaapi is the component. Content goes into a BlobStore named by its SHA-256, so the same file uploaded twice is stored once and the hash doubles as the ETag; the metadata that maps an mxc:// URI onto a blob is in media_repository and media_thumbnails. The local-filesystem store writes to a temporary file and renames it into place once hashed, so nothing ever refers to half a file. A storage driver can bring its own store through storage.BlobProvider, which is where PocketBase's filesystem abstraction (local or S3) plugs in with Phase 10. Reserved uploads belong to the user who made them, take one upload, lapse after a day, and are capped per user; a download of one waits for its content, woken in memory the moment it arrives, for as long as timeout_ms allows. Thumbnails come from a fixed set of configured sizes, so a thousand requested sizes cannot mean a thousand resizes. They are made on first request and kept, never enlarge, honour a JPEG's EXIF orientation, and point at the original when it already fits. The pixel count is checked from the header before anything is decoded, at most four resizes run at once, and concurrent requests for the same thumbnail share one. Remote media is fetched through the signed client: the multipart/mixed answer of Matrix 1.11, with a fallback to the legacy download endpoint for servers that answer M_UNRECOGNIZED, and Location redirects followed by a dialer that refuses loopback, private and link-local addresses. Concurrent requests share one fetch, detached from the request that started it. With federation off nothing is fetched, and what was cached before is still served. Downloads carry a sandboxing CSP, nosniff, inline Content-Disposition only for the types the spec lists as safe, and private immutable caching. The unauthenticated legacy download endpoints are off by default behind media.legacy_unauthenticated_downloads. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
140 lines
4.6 KiB
Go
140 lines
4.6 KiB
Go
package setup
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/dariuszjaniak/warp/server/internal/buildinfo"
|
|
"github.com/dariuszjaniak/warp/server/internal/httputil"
|
|
)
|
|
|
|
// SpecVersions is what GET /_matrix/client/versions reports.
|
|
//
|
|
// Keep it honest: a version belongs here once the endpoints a client
|
|
// actually uses from it work. Accounts, sessions, devices, profiles,
|
|
// account data, rooms, the event stream and — with Phase 6 — media all
|
|
// do, which is enough for a client to be used. Advertising v1.11 or later
|
|
// is also what makes a client use the authenticated media endpoints, the
|
|
// only download endpoints Warp serves by default. What is still missing
|
|
// is end-to-end encryption (Phase 7) and push (Phase 8); a client
|
|
// discovers each of those from the endpoint it needs rather than from
|
|
// this list, which is why their absence does not make a version listed
|
|
// here a lie.
|
|
var SpecVersions = []string{"v1.13", "v1.14"}
|
|
|
|
// UnstableFeatures advertises MSC support. Simplified Sliding Sync
|
|
// (MSC4186) is Phase 10.
|
|
var UnstableFeatures = map[string]bool{}
|
|
|
|
type versionsResponse struct {
|
|
Versions []string `json:"versions"`
|
|
UnstableFeatures map[string]bool `json:"unstable_features,omitempty"`
|
|
}
|
|
|
|
// wellKnownClient is the /.well-known/matrix/client document.
|
|
type wellKnownClient struct {
|
|
Homeserver wellKnownBaseURL `json:"m.homeserver"`
|
|
IdentityServer *wellKnownBaseURL `json:"m.identity_server,omitempty"`
|
|
}
|
|
|
|
type wellKnownBaseURL struct {
|
|
BaseURL string `json:"base_url"`
|
|
}
|
|
|
|
type wellKnownServer struct {
|
|
Server string `json:"m.server"`
|
|
}
|
|
|
|
type healthResponse struct {
|
|
Status string `json:"status"`
|
|
Version string `json:"version"`
|
|
Database string `json:"database"`
|
|
Error string `json:"error,omitempty"`
|
|
}
|
|
|
|
// routes registers every endpoint this server serves.
|
|
func (s *Server) routes() *httputil.Router {
|
|
r := httputil.NewRouter(s.metrics.Instrument)
|
|
|
|
r.HandleFunc("GET /_matrix/client/versions", s.handleVersions)
|
|
r.HandleFunc("GET /.well-known/matrix/client", s.handleWellKnownClient)
|
|
|
|
// The server-side delegation document is part of the federation
|
|
// surface, so it goes through the gate and disappears with it.
|
|
r.Handle("GET /.well-known/matrix/server", s.federation.ProtectFunc(s.handleWellKnownServer))
|
|
|
|
s.clientAPI.RegisterRoutes(r)
|
|
if s.fedAPI != nil {
|
|
s.fedAPI.RegisterRoutes(r)
|
|
}
|
|
s.adminAPI.RegisterRoutes(r)
|
|
|
|
r.HandleFunc("GET /healthz", s.handleHealth)
|
|
if s.cfg.Metrics.Enabled {
|
|
r.Handle("GET "+s.cfg.Metrics.Path, s.metrics.Handler())
|
|
}
|
|
return r
|
|
}
|
|
|
|
// handleVersions implements GET /_matrix/client/versions.
|
|
func (s *Server) handleVersions(w http.ResponseWriter, _ *http.Request) error {
|
|
httputil.CacheFor(w, time.Hour)
|
|
httputil.WriteJSON(w, http.StatusOK, versionsResponse{
|
|
Versions: SpecVersions,
|
|
UnstableFeatures: UnstableFeatures,
|
|
})
|
|
return nil
|
|
}
|
|
|
|
// handleWellKnownClient implements GET /.well-known/matrix/client, the
|
|
// document a client fetches to turn "@me:warp.example" into an API URL.
|
|
func (s *Server) handleWellKnownClient(w http.ResponseWriter, _ *http.Request) error {
|
|
doc := wellKnownClient{
|
|
Homeserver: wellKnownBaseURL{BaseURL: s.cfg.ClientBaseURL()},
|
|
}
|
|
if url := s.cfg.Global.WellKnown.IdentityServerBaseURL; url != "" {
|
|
doc.IdentityServer = &wellKnownBaseURL{BaseURL: url}
|
|
}
|
|
httputil.CacheFor(w, time.Hour)
|
|
httputil.WriteJSON(w, http.StatusOK, doc)
|
|
return nil
|
|
}
|
|
|
|
// handleWellKnownServer implements GET /.well-known/matrix/server. With no
|
|
// address configured there is nothing to delegate and the right answer is
|
|
// 404: other servers then fall back to SRV and A record resolution.
|
|
func (s *Server) handleWellKnownServer(w http.ResponseWriter, _ *http.Request) error {
|
|
address := s.cfg.Global.WellKnown.ServerAddress
|
|
if address == "" {
|
|
return httputil.NotFound("No server delegation is configured")
|
|
}
|
|
httputil.CacheFor(w, time.Hour)
|
|
httputil.WriteJSON(w, http.StatusOK, wellKnownServer{Server: address})
|
|
return nil
|
|
}
|
|
|
|
// handleHealth implements GET /healthz: a liveness and readiness check in
|
|
// one. It reports 503 when the database is unreachable, which is what a
|
|
// load balancer needs to stop sending traffic here.
|
|
func (s *Server) handleHealth(w http.ResponseWriter, r *http.Request) error {
|
|
resp := healthResponse{
|
|
Status: "ok",
|
|
Version: buildinfo.Version,
|
|
Database: s.db.Driver(),
|
|
}
|
|
status := http.StatusOK
|
|
|
|
ctx, cancel := contextWithTimeout(r.Context(), 2*time.Second)
|
|
defer cancel()
|
|
if err := s.db.Ping(ctx); err != nil {
|
|
resp.Status = "unavailable"
|
|
resp.Error = "database unreachable"
|
|
status = http.StatusServiceUnavailable
|
|
httputil.LoggerFrom(r.Context()).Error("health check failed", "error", err)
|
|
}
|
|
|
|
httputil.NoCache(w)
|
|
httputil.WriteJSON(w, status, resp)
|
|
return nil
|
|
}
|