A lexicon-driven AppView for ATProto.
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370use axum::Json;use axum::extract::{Path, State};use axum::http::StatusCode;
use crate::AppState;use crate::db::{adapt_sql, now_rfc3339};use crate::domain::Domain;use crate::error::AppError;use crate::event_log::{EventLog, Severity, log_event};
use super::auth::UserAuth;use super::permissions::Permission;use super::types::{CreateDomainBody, DomainResponse};
fn domain_to_response(d: &Domain) -> DomainResponse { DomainResponse { id: d.id.clone(), url: d.url.clone(), is_primary: d.is_primary, created_at: d.created_at.clone(), updated_at: d.updated_at.clone(), }}
/// GET /admin/domainspub(super) async fn list( State(state): State<AppState>, auth: UserAuth,) -> Result<Json<Vec<DomainResponse>>, AppError> { auth.require(Permission::SettingsManage).await?;
let sql = adapt_sql( "SELECT id, url, is_primary, created_at, updated_at FROM happyview_domains ORDER BY created_at", state.db_backend, ); let rows: Vec<(String, String, i32, String, String)> = crate::db::query_as(&sql) .fetch_all(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to list domains: {e}")))?;
let domains: Vec<DomainResponse> = rows .into_iter() .map( |(id, url, is_primary, created_at, updated_at)| DomainResponse { id, url, is_primary: is_primary != 0, created_at, updated_at, }, ) .collect();
Ok(Json(domains))}
/// POST /admin/domainspub(super) async fn create( State(state): State<AppState>, auth: UserAuth, Json(body): Json<CreateDomainBody>,) -> Result<(StatusCode, Json<DomainResponse>), AppError> { auth.require(Permission::SettingsManage).await?;
let url = body.url.trim_end_matches('/').to_string();
let parsed = reqwest::Url::parse(&url).map_err(|_| AppError::BadRequest("invalid URL".into()))?;
if parsed.path() != "/" && !parsed.path().is_empty() { return Err(AppError::BadRequest("URL must not contain a path".into())); }
if parsed.host_str().is_none() { return Err(AppError::BadRequest("URL must contain a host".into())); }
let is_loopback = crate::auth::client_registry::is_loopback_url(&state.config.public_url);
if parsed.scheme() != "https" && !is_loopback { return Err(AppError::BadRequest("URL scheme must be https".into())); }
// Check for duplicates let existing: Option<(String,)> = crate::db::query_as(&adapt_sql( "SELECT id FROM happyview_domains WHERE url = ?", state.db_backend, )) .bind(&url) .fetch_optional(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to check domain: {e}")))?;
if existing.is_some() { return Err(AppError::BadRequest(format!( "domain '{url}' already exists" ))); }
let id = uuid::Uuid::new_v4().to_string(); let now = now_rfc3339();
let instance_keys = crate::oauth::client_keys::load_keys( &state.db, state.db_backend, state.config.token_encryption_key.as_ref(), crate::oauth::client_keys::INSTANCE_OWNER, ) .await?; let (domain_client_keys, domain_signing_kid) = match instance_keys .iter() .find(|k| k.status == crate::oauth::client_keys::KeyStatus::Current) { Some(k) => ( Some(vec![crate::oauth::client_keys::to_atrium_jwk(k)?]), Some(k.kid.clone()), ), None if !state.client_jwks.is_empty() => (Some(state.client_jwks.clone()), None), None => (None, None), };
let mut tx = state .db .begin() .await .map_err(|e| AppError::Internal(format!("failed to begin transaction: {e}")))?;
let sql = adapt_sql( "INSERT INTO happyview_domains (id, url, is_primary, created_at, updated_at) VALUES (?, ?, 0, ?, ?)", state.db_backend, ); crate::db::query(&sql) .bind(&id) .bind(&url) .bind(&now) .bind(&now) .execute(&mut *tx) .await .map_err(|e| AppError::Internal(format!("failed to create domain: {e}")))?;
let domain = Domain { id: id.clone(), url: url.clone(), is_primary: false, created_at: now.clone(), updated_at: now, };
// Build the base-path-aware URLs for this domain let domain_base_url = state.config.url_with_base_path(&url); let client_id_url = format!( "{}/oauth-client-metadata.json", domain_base_url.trim_end_matches('/') );
let domain_is_loopback = crate::auth::client_registry::is_loopback_url(&url); if domain_is_loopback { let (primary_client, primary_kid) = state.oauth.primary_client_and_kid(); state.oauth.register_domain_client( url.clone(), client_id_url.clone(), primary_client, primary_kid, ); } else { let registered_signing_kid = domain_signing_kid.clone(); let callback = format!("{}/auth/callback", domain_base_url.trim_end_matches('/')); match state.oauth.register_api_client( &client_id_url, &url, vec![callback], "atproto", &crate::auth::client_registry::ApiClientOAuthParams { plc_url: state.config.plc_url.clone(), state_store: state.oauth_state_store.clone(), session_store_pool: state.db.clone(), db_backend: state.db_backend, client_keys: domain_client_keys, signing_kid: domain_signing_kid.clone(), }, ) { Ok(()) => { if let Some(client) = state.oauth.get(&client_id_url) { state.oauth.remove(&client_id_url); state.oauth.register_domain_client( url.clone(), client_id_url.clone(), client, registered_signing_kid.clone(), ); } } Err(e) => { tracing::error!(domain = %url, error = %e, "Failed to create OAuth client for domain"); return Err(AppError::Internal(format!( "failed to create OAuth client for domain '{url}': {e}" ))); } } }
if let Err(e) = tx.commit().await { state.oauth.remove_domain_client(&url, &client_id_url); return Err(AppError::Internal(format!( "failed to commit domain creation: {e}" ))); }
// Update in-memory cache state.domain_cache.insert(domain.clone()).await;
log_event( &state.db, EventLog { event_type: "domain.created".to_string(), severity: Severity::Info, actor_did: Some(auth.did.clone()), subject: Some(url), detail: serde_json::json!({ "id": id }), }, state.db_backend, ) .await;
let response = domain_to_response(&domain); Ok((StatusCode::CREATED, Json(response)))}
/// DELETE /admin/domains/{id}pub(super) async fn delete( State(state): State<AppState>, auth: UserAuth, Path(id): Path<String>,) -> Result<StatusCode, AppError> { auth.require(Permission::SettingsManage).await?;
let sql = adapt_sql( "SELECT id, url, is_primary, created_at, updated_at FROM happyview_domains WHERE id = ?", state.db_backend, ); let row: Option<(String, String, i32, String, String)> = crate::db::query_as(&sql) .bind(&id) .fetch_optional(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to find domain: {e}")))?;
let (_, url, is_primary, _, _) = row.ok_or_else(|| AppError::NotFound("domain not found".into()))?;
if is_primary != 0 { return Err(AppError::BadRequest( "cannot delete the primary domain — set a different domain as primary first".into(), )); }
let delete_sql = adapt_sql( "DELETE FROM happyview_domains WHERE id = ?", state.db_backend, ); crate::db::query(&delete_sql) .bind(&id) .execute(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to delete domain: {e}")))?;
// Remove OAuth client and cache entry let domain_base_url = state.config.url_with_base_path(&url); let client_id_url = format!( "{}/oauth-client-metadata.json", domain_base_url.trim_end_matches('/') ); state.oauth.remove_domain_client(&url, &client_id_url); let host = url .strip_prefix("https://") .or_else(|| url.strip_prefix("http://")) .unwrap_or(&url); state.domain_cache.remove(host).await;
log_event( &state.db, EventLog { event_type: "domain.deleted".to_string(), severity: Severity::Info, actor_did: Some(auth.did.clone()), subject: Some(url), detail: serde_json::json!({ "id": id }), }, state.db_backend, ) .await;
Ok(StatusCode::NO_CONTENT)}
/// POST /admin/domains/{id}/primarypub(super) async fn set_primary( State(state): State<AppState>, auth: UserAuth, Path(id): Path<String>,) -> Result<StatusCode, AppError> { auth.require(Permission::SettingsManage).await?;
let sql = adapt_sql( "SELECT id, url, is_primary, created_at, updated_at FROM happyview_domains WHERE id = ?", state.db_backend, ); let row: Option<(String, String, i32, String, String)> = crate::db::query_as(&sql) .bind(&id) .fetch_optional(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to find domain: {e}")))?;
let (_, url, _, _, _) = row.ok_or_else(|| AppError::NotFound("domain not found".into()))?;
let now = now_rfc3339();
let unset_sql = adapt_sql( "UPDATE happyview_domains SET is_primary = 0, updated_at = ? WHERE is_primary = 1", state.db_backend, ); crate::db::query(&unset_sql) .bind(&now) .execute(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to unset primary: {e}")))?;
let set_sql = adapt_sql( "UPDATE happyview_domains SET is_primary = 1, updated_at = ? WHERE id = ?", state.db_backend, ); crate::db::query(&set_sql) .bind(&now) .bind(&id) .execute(&state.db) .await .map_err(|e| AppError::Internal(format!("failed to set primary: {e}")))?;
// Update cache let host = url .strip_prefix("https://") .or_else(|| url.strip_prefix("http://")) .unwrap_or(&url); state.domain_cache.set_primary(host).await;
// Update OAuth primary client. let promoted_base_url = state.config.url_with_base_path(&url); let promoted_client_id_url = format!( "{}/oauth-client-metadata.json", promoted_base_url.trim_end_matches('/') ); if let Some((client, kid)) = state.oauth.get_with_kid(&promoted_client_id_url) { state.oauth.set_primary_client_with_kid(client, kid); }
log_event( &state.db, EventLog { event_type: "domain.primary_changed".to_string(), severity: Severity::Info, actor_did: Some(auth.did.clone()), subject: Some(url), detail: serde_json::json!({ "id": id }), }, state.db_backend, ) .await;
Ok(StatusCode::NO_CONTENT)}