b835de2dc4
* Able to authenticate user against IndieAuth. For #1273 * WIP server indieauth endpoint. For https://github.com/owncast/owncast/issues/1272 * Add migration to remove access tokens from user * Add authenticated bool to user for display purposes * Add indieauth modal and auth flair to display names. For #1273 * Validate URLs and display errors * Renames, cleanups * Handle relative auth endpoint paths. Add error handling for missing redirects. * Disallow using display names in use by registered users. Closes #1810 * Verify code verifier via code challenge on callback * Use relative path to authorization_endpoint * Post-rebase fixes * Use a timestamp instead of a bool for authenticated * Propertly handle and display error in modal * Use auth'ed timestamp to derive authenticated flag to display in chat * don't redirect unless a URL is present avoids redirecting to `undefined` if there was an error * improve error message if owncast server URL isn't set * fix IndieAuth PKCE implementation use SHA256 instead of SHA1, generates a longer code verifier (must be 43-128 chars long), fixes URL-safe SHA256 encoding * return real profile data for IndieAuth response * check the code verifier in the IndieAuth server * Linting * Add new chat settings modal anad split up indieauth ui * Remove logging error * Update the IndieAuth modal UI. For #1273 * Add IndieAuth repsonse error checking * Disable IndieAuth client if server URL is not set. * Add explicit error messages for specific error types * Fix bad logic * Return OAuth-keyed error responses for indieauth server * Display IndieAuth error in plain text with link to return to main page * Remove redundant check * Add additional detail to error * Hide IndieAuth details behind disclosure details * Break out migration into two steps because some people have been runing dev in production * Add auth option to user dropdown Co-authored-by: Aaron Parecki <aaron@parecki.com>
107 lines
4.3 KiB
SQL
107 lines
4.3 KiB
SQL
-- Queries added to query.sql must be compiled into Go code with sqlc. Read README.md for details.
|
|
|
|
-- Federation related queries.
|
|
|
|
-- name: GetFollowerCount :one
|
|
SElECT count(*) FROM ap_followers WHERE approved_at is not null;
|
|
|
|
-- name: GetLocalPostCount :one
|
|
SElECT count(*) FROM ap_outbox;
|
|
|
|
-- name: GetFederationFollowersWithOffset :many
|
|
SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at is not null ORDER BY created_at DESC LIMIT $1 OFFSET $2;
|
|
|
|
-- name: GetRejectedAndBlockedFollowers :many
|
|
SELECT iri, name, username, image, created_at, disabled_at FROM ap_followers WHERE disabled_at is not null;
|
|
|
|
-- name: GetFederationFollowerApprovalRequests :many
|
|
SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at IS null AND disabled_at is null;
|
|
|
|
-- name: ApproveFederationFollower :exec
|
|
UPDATE ap_followers SET approved_at = $1, disabled_at = null WHERE iri = $2;
|
|
|
|
-- name: RejectFederationFollower :exec
|
|
UPDATE ap_followers SET approved_at = null, disabled_at = $1 WHERE iri = $2;
|
|
|
|
-- name: GetFollowerByIRI :one
|
|
SELECT iri, inbox, name, username, image, request, request_object, created_at, approved_at, disabled_at FROM ap_followers WHERE iri = $1;
|
|
|
|
-- name: GetOutboxWithOffset :many
|
|
SELECT value FROM ap_outbox LIMIT $1 OFFSET $2;
|
|
|
|
-- name: GetObjectFromOutboxByID :one
|
|
SELECT value FROM ap_outbox WHERE iri = $1;
|
|
|
|
-- name: GetObjectFromOutboxByIRI :one
|
|
SELECT value, live_notification, created_at FROM ap_outbox WHERE iri = $1;
|
|
|
|
-- name: RemoveFollowerByIRI :exec
|
|
DELETE FROM ap_followers WHERE iri = $1;
|
|
|
|
-- name: AddFollower :exec
|
|
INSERT INTO ap_followers(iri, inbox, request, request_object, name, username, image, approved_at) values($1, $2, $3, $4, $5, $6, $7, $8);
|
|
|
|
-- name: AddToOutbox :exec
|
|
INSERT INTO ap_outbox(iri, value, type, live_notification) values($1, $2, $3, $4);
|
|
|
|
-- name: AddToAcceptedActivities :exec
|
|
INSERT INTO ap_accepted_activities(iri, actor, type, timestamp) values($1, $2, $3, $4);
|
|
|
|
-- name: GetInboundActivityCount :one
|
|
SELECT count(*) FROM ap_accepted_activities;
|
|
|
|
-- name: GetInboundActivitiesWithOffset :many
|
|
SELECT iri, actor, type, timestamp FROM ap_accepted_activities ORDER BY timestamp DESC LIMIT $1 OFFSET $2;
|
|
|
|
-- name: DoesInboundActivityExist :one
|
|
SELECT count(*) FROM ap_accepted_activities WHERE iri = $1 AND actor = $2 AND TYPE = $3;
|
|
|
|
-- name: UpdateFollowerByIRI :exec
|
|
UPDATE ap_followers SET inbox = $1, name = $2, username = $3, image = $4 WHERE iri = $5;
|
|
|
|
-- name: BanIPAddress :exec
|
|
INSERT INTO ip_bans(ip_address, notes) values($1, $2);
|
|
|
|
-- name: RemoveIPAddressBan :exec
|
|
DELETE FROM ip_bans WHERE ip_address = $1;
|
|
|
|
-- name: IsIPAddressBlocked :one
|
|
SELECT count(*) FROM ip_bans WHERE ip_address = $1;
|
|
|
|
-- name: GetIPAddressBans :many
|
|
SELECT * FROM ip_bans;
|
|
-- name: AddNotification :exec
|
|
INSERT INTO notifications (channel, destination) VALUES($1, $2);
|
|
|
|
-- name: GetNotificationDestinationsForChannel :many
|
|
SELECT destination FROM notifications WHERE channel = $1;
|
|
|
|
-- name: RemoveNotificationDestinationForChannel :exec
|
|
DELETE FROM notifications WHERE channel = $1 AND destination = $2;
|
|
-- name: AddAuthForUser :exec
|
|
INSERT INTO auth(user_id, token, type) values($1, $2, $3);
|
|
|
|
-- name: GetUserByAuth :one
|
|
SELECT users.id, display_name, display_color, users.created_at, disabled_at, previous_names, namechanged_at, authenticated_at, scopes FROM auth, users WHERE token = $1 AND auth.type = $2 AND users.id = auth.user_id;
|
|
|
|
-- name: AddAccessTokenForUser :exec
|
|
INSERT INTO user_access_tokens(token, user_id) values($1, $2);
|
|
|
|
-- name: GetUserByAccessToken :one
|
|
SELECT users.id, display_name, display_color, users.created_at, disabled_at, previous_names, namechanged_at, authenticated_at, scopes FROM users, user_access_tokens WHERE token = $1 AND users.id = user_id;
|
|
|
|
-- name: GetUserDisplayNameByToken :one
|
|
SELECT display_name FROM users, user_access_tokens WHERE token = $1 AND users.id = user_id AND disabled_at = NULL;
|
|
|
|
-- name: SetAccessTokenToOwner :exec
|
|
UPDATE user_access_tokens SET user_id = $1 WHERE token = $2;
|
|
|
|
-- name: SetUserAsAuthenticated :exec
|
|
UPDATE users SET authenticated_at = CURRENT_TIMESTAMP WHERE id = $1;
|
|
|
|
-- name: IsDisplayNameAvailable :one
|
|
SELECT count(*) FROM users WHERE display_name = $1 AND authenticated_at is not null AND disabled_at is NULL;
|
|
|
|
-- name: ChangeDisplayName :exec
|
|
UPDATE users SET display_name = $1, previous_names = previous_names || $2, namechanged_at = $3 WHERE id = $4;
|