thepraandClaude Opus 5.5
075c22228a
The tree had not compiled since its first commit: Group, DmGroup and
IGroupUsersService were referenced and never written, an IDE rename had
turned the user-settings DTO into the ViewAvatarServer enum, and the settings
were saved as an entity they no longer were.
Built now:
- Group (an ActivityPub Group actor with its own keys, members, invitation
code and optional password) and DmGroup (a conversation), with
/clientapi/group/{list,insert,update,join,leave,approve}.
- Posts and DMs: /clientapi/post/{list,insert,delete}, /clientapi/dm/{list,insert};
DM recipients are local usernames or user@host handles resolved by WebFinger.
- Invitation sign-up and login against the group's invitation code, checking
the password before any account is created.
- Federation: WebFinger, NodeInfo 2.0, actors at /peasants/{name} (Person,
Group, and an Application instance actor) with SPKI keys, draft-cavage
RSA-SHA256 HTTP signatures both ways, an inbox handling Follow (+Accept),
Undo, Create, Delete and Update, an outbox, notes at /posts/{id}, and a
persisted, retried, signed delivery queue. A post to a group is announced
by the group to its followers (FEP-1b12).
- The unused, broken typed ActivityPub models are replaced by a renderer;
NSign's HMAC setup, which could not federate, is gone.
Upgrade: net10.0, MongoDB.Entities 25.1 (instance DB API, Standard GUIDs),
Swashbuckle 10 / OpenApi 2, Serilog.AspNetCore 10, MailKit 4.18,
PasswordGenerator 3. The JWT keys are 64 bytes (IdentityModel 8 refuses
shorter for HS512). Production runs its own mongod on 127.0.0.1:27022, as
Sintopia's apps do, and deploys to privapub.thepra.dev from the build runner.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012CzABvBkbcFqoHdmi8b9WB
83 lines
2.5 KiB
C#
83 lines
2.5 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.Extensions.Localization;
|
|
using PrivaPub.ClientModels;
|
|
using PrivaPub.Extensions;
|
|
using PrivaPub.Resources;
|
|
using PrivaPub.Services.ClientToServer.Private;
|
|
using PrivaPub.ClientModels.User.Avatar;
|
|
|
|
namespace PrivaPub.Controllers.ClientToServer
|
|
{
|
|
[ApiController,
|
|
Route("clientapi/avatar/private"),
|
|
Authorize(Policy = Policies.IsUser)]
|
|
public class PrivateAvatarController : ControllerBase
|
|
{
|
|
readonly ILogger<PrivateAvatarController> _logger;
|
|
readonly IPrivateAvatarUsersService _privateAvatarUsersService;
|
|
readonly IStringLocalizer _localizer;
|
|
|
|
public PrivateAvatarController(IPrivateAvatarUsersService privateAvatarUsersService,
|
|
IStringLocalizer<GenericRes> localizer,
|
|
ILogger<PrivateAvatarController> logger)
|
|
{
|
|
_privateAvatarUsersService = privateAvatarUsersService;
|
|
_localizer = localizer;
|
|
_logger = logger;
|
|
}
|
|
|
|
[HttpGet, Route("/clientapi/avatar/private/list")]
|
|
public async Task<IActionResult> GetAvatars(CancellationToken token)
|
|
{
|
|
var result = await _privateAvatarUsersService.GetRootAvatars(User.GetUserId(), token);
|
|
return result.IsValid ? Ok(result.Data) : StatusCode(result.StatusCode, result);
|
|
}
|
|
|
|
[HttpPost, Route("/clientapi/avatar/private/insert")]
|
|
public async Task<IActionResult> InsertAvatar(InsertAvatarForm model)
|
|
{
|
|
var result = new WebResult();
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(result.Invalidate(_localizer["Invalid model."]));
|
|
try
|
|
{
|
|
model.RootId = User.GetUserId();
|
|
result = await _privateAvatarUsersService.InsertAvatar(model);
|
|
if (!result.IsValid)
|
|
return StatusCode(result.StatusCode, result);
|
|
|
|
return Ok(result.Data);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
_logger.LogError(ex, $"{nameof(PrivateAvatarController)}.{nameof(InsertAvatar)}()");
|
|
return BadRequest(result.Invalidate(ex.Message));
|
|
}
|
|
}
|
|
|
|
[HttpPost, Route("/clientapi/avatar/private/update")]
|
|
public async Task<IActionResult> UpdateAvatar(UpdateAvatarForm model)
|
|
{
|
|
var result = new WebResult();
|
|
if (!ModelState.IsValid)
|
|
return BadRequest(result.Invalidate(_localizer["Invalid model."]));
|
|
try
|
|
{
|
|
model.RootId = User.GetUserId();
|
|
result = await _privateAvatarUsersService.UpdateAvatar(model);
|
|
if (!result.IsValid)
|
|
return StatusCode(result.StatusCode, result);
|
|
|
|
return Ok(result.Data);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
_logger.LogError(ex, $"{nameof(PrivateAvatarController)}.{nameof(UpdateAvatar)}()");
|
|
return BadRequest(result.Invalidate(ex.Message));
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|