2021-08-27 08:32:44 -04:00
|
|
|
import express from 'express'
|
2020-03-23 20:12:30 -04:00
|
|
|
import { body, param, query } from 'express-validator'
|
2020-06-12 10:01:42 -04:00
|
|
|
import { VIDEO_CHANNELS } from '@server/initializers/constants'
|
2020-06-18 04:45:25 -04:00
|
|
|
import { MChannelAccountDefault, MUser } from '@server/types/models'
|
2018-10-05 05:15:06 -04:00
|
|
|
import { UserRight } from '../../../../shared'
|
2021-07-16 04:42:24 -04:00
|
|
|
import { HttpStatusCode } from '../../../../shared/models/http/http-error-codes'
|
2020-06-12 10:01:42 -04:00
|
|
|
import { isBooleanValid, toBooleanOrNull } from '../../../helpers/custom-validators/misc'
|
2017-11-27 08:44:51 -05:00
|
|
|
import {
|
2018-05-07 05:31:23 -04:00
|
|
|
isVideoChannelDescriptionValid,
|
2021-08-05 07:54:35 -04:00
|
|
|
isVideoChannelDisplayNameValid,
|
|
|
|
isVideoChannelSupportValid,
|
|
|
|
isVideoChannelUsernameValid
|
2018-10-05 05:15:06 -04:00
|
|
|
} from '../../../helpers/custom-validators/video-channels'
|
|
|
|
import { logger } from '../../../helpers/logger'
|
2021-05-11 05:15:29 -04:00
|
|
|
import { ActorModel } from '../../../models/actor/actor'
|
2018-10-05 05:15:06 -04:00
|
|
|
import { VideoChannelModel } from '../../../models/video/video-channel'
|
2021-06-03 11:33:44 -04:00
|
|
|
import { areValidationErrors, doesLocalVideoChannelNameExist, doesVideoChannelNameWithHostExist } from '../shared'
|
2017-10-24 13:41:09 -04:00
|
|
|
|
|
|
|
const videoChannelsAddValidator = [
|
2021-08-05 07:54:35 -04:00
|
|
|
body('name').custom(isVideoChannelUsernameValid).withMessage('Should have a valid channel name'),
|
|
|
|
body('displayName').custom(isVideoChannelDisplayNameValid).withMessage('Should have a valid display name'),
|
2018-02-15 08:46:26 -05:00
|
|
|
body('description').optional().custom(isVideoChannelDescriptionValid).withMessage('Should have a valid description'),
|
|
|
|
body('support').optional().custom(isVideoChannelSupportValid).withMessage('Should have a valid support text'),
|
2017-10-24 13:41:09 -04:00
|
|
|
|
2018-10-01 09:18:07 -04:00
|
|
|
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
|
2017-10-24 13:41:09 -04:00
|
|
|
logger.debug('Checking videoChannelsAdd parameters', { parameters: req.body })
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
if (areValidationErrors(req, res)) return
|
|
|
|
|
2018-10-01 09:18:07 -04:00
|
|
|
const actor = await ActorModel.loadLocalByName(req.body.name)
|
|
|
|
if (actor) {
|
2021-05-31 19:36:53 -04:00
|
|
|
res.fail({
|
|
|
|
status: HttpStatusCode.CONFLICT_409,
|
|
|
|
message: 'Another actor (account/channel) with this name on this instance already exists or has already existed.'
|
|
|
|
})
|
2018-10-01 09:18:07 -04:00
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2019-11-29 10:35:27 -05:00
|
|
|
const count = await VideoChannelModel.countByAccount(res.locals.oauth.token.User.Account.id)
|
2019-12-05 04:18:33 -05:00
|
|
|
if (count >= VIDEO_CHANNELS.MAX_PER_USER) {
|
2021-05-31 19:36:53 -04:00
|
|
|
res.fail({ message: `You cannot create more than ${VIDEO_CHANNELS.MAX_PER_USER} channels` })
|
2019-11-29 10:35:27 -05:00
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
return next()
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
]
|
|
|
|
|
|
|
|
const videoChannelsUpdateValidator = [
|
2018-08-17 09:45:42 -04:00
|
|
|
param('nameWithHost').exists().withMessage('Should have an video channel name with host'),
|
2019-05-31 10:30:11 -04:00
|
|
|
body('displayName')
|
|
|
|
.optional()
|
2021-08-05 07:54:35 -04:00
|
|
|
.custom(isVideoChannelDisplayNameValid).withMessage('Should have a valid display name'),
|
2019-05-31 10:30:11 -04:00
|
|
|
body('description')
|
|
|
|
.optional()
|
|
|
|
.custom(isVideoChannelDescriptionValid).withMessage('Should have a valid description'),
|
|
|
|
body('support')
|
|
|
|
.optional()
|
|
|
|
.custom(isVideoChannelSupportValid).withMessage('Should have a valid support text'),
|
|
|
|
body('bulkVideosSupportUpdate')
|
|
|
|
.optional()
|
|
|
|
.custom(isBooleanValid).withMessage('Should have a valid bulkVideosSupportUpdate boolean field'),
|
2017-10-24 13:41:09 -04:00
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
|
2017-10-24 13:41:09 -04:00
|
|
|
logger.debug('Checking videoChannelsUpdate parameters', { parameters: req.body })
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
if (areValidationErrors(req, res)) return
|
2019-03-19 04:26:50 -04:00
|
|
|
if (!await doesVideoChannelNameWithHostExist(req.params.nameWithHost, res)) return
|
2017-11-27 11:30:46 -05:00
|
|
|
|
|
|
|
// We need to make additional checks
|
2017-12-27 14:03:37 -05:00
|
|
|
if (res.locals.videoChannel.Actor.isOwned() === false) {
|
2021-05-31 19:36:53 -04:00
|
|
|
return res.fail({
|
|
|
|
status: HttpStatusCode.FORBIDDEN_403,
|
|
|
|
message: 'Cannot update video channel of another server'
|
|
|
|
})
|
2017-11-27 11:30:46 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
if (res.locals.videoChannel.Account.userId !== res.locals.oauth.token.User.id) {
|
2021-05-31 19:36:53 -04:00
|
|
|
return res.fail({
|
|
|
|
status: HttpStatusCode.FORBIDDEN_403,
|
|
|
|
message: 'Cannot update video channel of another user'
|
|
|
|
})
|
2017-11-27 11:30:46 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
return next()
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
]
|
|
|
|
|
|
|
|
const videoChannelsRemoveValidator = [
|
2018-08-17 09:45:42 -04:00
|
|
|
param('nameWithHost').exists().withMessage('Should have an video channel name with host'),
|
2017-10-24 13:41:09 -04:00
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
|
2017-10-24 13:41:09 -04:00
|
|
|
logger.debug('Checking videoChannelsRemove parameters', { parameters: req.params })
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
if (areValidationErrors(req, res)) return
|
2019-03-19 04:26:50 -04:00
|
|
|
if (!await doesVideoChannelNameWithHostExist(req.params.nameWithHost, res)) return
|
2017-11-27 11:30:46 -05:00
|
|
|
|
2017-12-14 04:07:57 -05:00
|
|
|
if (!checkUserCanDeleteVideoChannel(res.locals.oauth.token.User, res.locals.videoChannel, res)) return
|
2017-11-27 11:30:46 -05:00
|
|
|
if (!await checkVideoChannelIsNotTheLastOne(res)) return
|
|
|
|
|
|
|
|
return next()
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
]
|
|
|
|
|
2018-08-17 09:45:42 -04:00
|
|
|
const videoChannelsNameWithHostValidator = [
|
|
|
|
param('nameWithHost').exists().withMessage('Should have an video channel name with host'),
|
2017-10-24 13:41:09 -04:00
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
|
2018-08-17 09:45:42 -04:00
|
|
|
logger.debug('Checking videoChannelsNameWithHostValidator parameters', { parameters: req.params })
|
2017-10-24 13:41:09 -04:00
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
if (areValidationErrors(req, res)) return
|
2018-04-25 04:21:38 -04:00
|
|
|
|
2019-03-19 04:26:50 -04:00
|
|
|
if (!await doesVideoChannelNameWithHostExist(req.params.nameWithHost, res)) return
|
2017-11-27 11:30:46 -05:00
|
|
|
|
|
|
|
return next()
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
]
|
|
|
|
|
2018-08-16 09:25:20 -04:00
|
|
|
const localVideoChannelValidator = [
|
2021-08-05 07:54:35 -04:00
|
|
|
param('name').custom(isVideoChannelDisplayNameValid).withMessage('Should have a valid video channel name'),
|
2018-08-16 09:25:20 -04:00
|
|
|
|
|
|
|
async (req: express.Request, res: express.Response, next: express.NextFunction) => {
|
|
|
|
logger.debug('Checking localVideoChannelValidator parameters', { parameters: req.params })
|
|
|
|
|
|
|
|
if (areValidationErrors(req, res)) return
|
2019-03-19 04:26:50 -04:00
|
|
|
if (!await doesLocalVideoChannelNameExist(req.params.name, res)) return
|
2018-08-16 09:25:20 -04:00
|
|
|
|
|
|
|
return next()
|
|
|
|
}
|
|
|
|
]
|
|
|
|
|
2020-03-23 20:12:30 -04:00
|
|
|
const videoChannelStatsValidator = [
|
2020-06-12 10:01:42 -04:00
|
|
|
query('withStats')
|
|
|
|
.optional()
|
|
|
|
.customSanitizer(toBooleanOrNull)
|
|
|
|
.custom(isBooleanValid).withMessage('Should have a valid stats flag'),
|
2020-03-23 20:12:30 -04:00
|
|
|
|
|
|
|
(req: express.Request, res: express.Response, next: express.NextFunction) => {
|
|
|
|
if (areValidationErrors(req, res)) return
|
|
|
|
return next()
|
|
|
|
}
|
|
|
|
]
|
|
|
|
|
2021-06-17 10:02:38 -04:00
|
|
|
const videoChannelsListValidator = [
|
|
|
|
query('search').optional().not().isEmpty().withMessage('Should have a valid search'),
|
|
|
|
|
|
|
|
(req: express.Request, res: express.Response, next: express.NextFunction) => {
|
|
|
|
logger.debug('Checking video channels search query', { parameters: req.query })
|
|
|
|
|
|
|
|
if (areValidationErrors(req, res)) return
|
|
|
|
|
|
|
|
return next()
|
|
|
|
}
|
|
|
|
]
|
|
|
|
|
2017-10-24 13:41:09 -04:00
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
|
|
|
export {
|
|
|
|
videoChannelsAddValidator,
|
|
|
|
videoChannelsUpdateValidator,
|
|
|
|
videoChannelsRemoveValidator,
|
2018-08-17 09:45:42 -04:00
|
|
|
videoChannelsNameWithHostValidator,
|
2021-06-17 10:02:38 -04:00
|
|
|
videoChannelsListValidator,
|
2020-03-23 20:12:30 -04:00
|
|
|
localVideoChannelValidator,
|
|
|
|
videoChannelStatsValidator
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
2019-08-20 07:52:49 -04:00
|
|
|
function checkUserCanDeleteVideoChannel (user: MUser, videoChannel: MChannelAccountDefault, res: express.Response) {
|
2017-12-14 11:38:41 -05:00
|
|
|
if (videoChannel.Actor.isOwned() === false) {
|
2021-05-31 19:36:53 -04:00
|
|
|
res.fail({
|
|
|
|
status: HttpStatusCode.FORBIDDEN_403,
|
|
|
|
message: 'Cannot remove video channel of another server.'
|
|
|
|
})
|
2017-11-27 11:30:46 -05:00
|
|
|
return false
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
// Check if the user can delete the video channel
|
|
|
|
// The user can delete it if s/he is an admin
|
2017-11-10 08:48:08 -05:00
|
|
|
// Or if s/he is the video channel's account
|
2017-11-27 11:30:46 -05:00
|
|
|
if (user.hasRight(UserRight.REMOVE_ANY_VIDEO_CHANNEL) === false && videoChannel.Account.userId !== user.id) {
|
2021-05-31 19:36:53 -04:00
|
|
|
res.fail({
|
|
|
|
status: HttpStatusCode.FORBIDDEN_403,
|
|
|
|
message: 'Cannot remove video channel of another user'
|
|
|
|
})
|
2017-11-27 11:30:46 -05:00
|
|
|
return false
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
return true
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|
|
|
|
|
2017-11-27 11:30:46 -05:00
|
|
|
async function checkVideoChannelIsNotTheLastOne (res: express.Response) {
|
2017-12-12 11:53:50 -05:00
|
|
|
const count = await VideoChannelModel.countByAccount(res.locals.oauth.token.User.Account.id)
|
2017-11-27 11:30:46 -05:00
|
|
|
|
|
|
|
if (count <= 1) {
|
2021-05-31 19:36:53 -04:00
|
|
|
res.fail({
|
|
|
|
status: HttpStatusCode.CONFLICT_409,
|
|
|
|
message: 'Cannot remove the last channel of this user'
|
|
|
|
})
|
2017-11-27 11:30:46 -05:00
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
|
|
|
return true
|
2017-10-24 13:41:09 -04:00
|
|
|
}
|