astro-atmosphere-comments 0.4.2 → 0.6.0

package/routes/delete.ts

@@ -1,41 +0,0 @@
-// Deletes one of the signed-in reader's own comments: a post of theirs that
-// is a reply somewhere under one of the site's announcements. Nothing else,
-// even though the permission behind it covers all of the reader's posts.
-// Body: { post }. Readers who haven't allowed deleting yet get
-// "needs-permission", and the page offers to ask their account host for it.
-import type { APIRoute } from "astro";
-import { json } from "../lib/http";
-import { allows, deleteRecord, isPostUri, isSitePost, postsAsReader, rateLimit, reader } from "../lib/reader";
-import { forgetThread } from "../lib/thread";
-
-const tooMany = rateLimit(10, 60);
-
-export const POST: APIRoute = async ({ request, url, cookies }) => {
-  const signedIn = await reader(request, url, cookies);
-  if (signedIn instanceof Response) return signedIn;
-
-  let body: { post?: unknown };
-  try {
-    body = await request.json();
-  } catch {
-    return json({ error: "bad-request" }, 400);
-  }
-  const { post } = body;
-  if (!isPostUri(post) || !post.startsWith(`at://${signedIn.did}/`)) return json({ error: "not-allowed" }, 400);
-  if (!allows(signedIn, "app.bsky.feed.post", "delete")) return json({ error: "needs-permission" }, 403);
-  if (tooMany(signedIn.did)) return json({ error: "too-many" }, 429);
-
-  try {
-    const [view] = await postsAsReader(signedIn.session, [post]);
-    if (!view) return json({ error: "not-found" }, 404);
-    // Only a reply under one of the site's announcements, never a post of its own.
-    const root = view.record?.reply?.root?.uri;
-    if (!isSitePost(root)) return json({ error: "not-allowed" }, 400);
-    await deleteRecord(signedIn, view.uri);
-    forgetThread(root);
-    return json({ deleted: view.uri });
-  } catch (error) {
-    console.warn("[atmosphere] delete failed:", error instanceof Error ? error.message : error);
-    return json({ error: "post-failed" }, 502);
-  }
-};

package/routes/follow.ts

@@ -1,71 +0,0 @@
-// Following one of the site's own accounts (allowedAuthors) as the signed-in
-// reader, or unfollowing it. Nothing else can be followed through the site.
-// GET ?subject=<did>: { following }. POST { subject, on }: follows or
-// unfollows. Readers who haven't allowed following yet get "needs-permission",
-// and the page sends them to approve it.
-import type { APIRoute } from "astro";
-import { json } from "../lib/http";
-import { allows, createRecord, deleteRecord, rateLimit, reader } from "../lib/reader";
-import settings from "../lib/settings";
-
-const tooMany = rateLimit(10, 60);
-
-// Whether the reader follows `subject`: the follow record's address, or "".
-// From Bluesky's public AppView, so no extra permission is needed to know.
-async function followRecord(readerDid: string, subject: string): Promise<string> {
-  const query = new URLSearchParams({ actor: readerDid, others: subject });
-  const response = await fetch(`https://public.api.bsky.app/xrpc/app.bsky.graph.getRelationships?${query}`, {
-    signal: AbortSignal.timeout(5000),
-  });
-  if (!response.ok) throw new Error(`getRelationships ${response.status}`);
-  const data = (await response.json()) as { relationships?: Array<{ did?: string; following?: string }> };
-  return data.relationships?.find((relationship) => relationship.did === subject)?.following ?? "";
-}
-
-export const GET: APIRoute = async ({ request, url, cookies }) => {
-  const subject = url.searchParams.get("subject") ?? "";
-  if (!settings.allowedAuthors.includes(subject)) return json({ error: "not-allowed" }, 400);
-  const signedIn = await reader(request, url, cookies);
-  if (signedIn instanceof Response) return signedIn;
-  try {
-    return json({ following: !!(await followRecord(signedIn.did, subject)) });
-  } catch {
-    return json({ error: "unavailable" }, 502);
-  }
-};
-
-export const POST: APIRoute = async ({ request, url, cookies }) => {
-  const signedIn = await reader(request, url, cookies);
-  if (signedIn instanceof Response) return signedIn;
-
-  let body: { subject?: unknown; on?: unknown };
-  try {
-    body = await request.json();
-  } catch {
-    return json({ error: "bad-request" }, 400);
-  }
-  const { subject, on } = body;
-  // Only the site's own accounts, and never yourself.
-  if (typeof subject !== "string" || !settings.allowedAuthors.includes(subject) || subject === signedIn.did || typeof on !== "boolean") {
-    return json({ error: "not-allowed" }, 400);
-  }
-  if (!allows(signedIn, "app.bsky.graph.follow", on ? "create" : "delete")) return json({ error: "needs-permission" }, 403);
-  if (tooMany(signedIn.did)) return json({ error: "too-many" }, 429);
-
-  try {
-    const existing = await followRecord(signedIn.did, subject);
-    if (on && !existing) {
-      await createRecord(signedIn, "app.bsky.graph.follow", {
-        $type: "app.bsky.graph.follow",
-        subject,
-        createdAt: new Date().toISOString(),
-      });
-    } else if (!on && existing) {
-      await deleteRecord(signedIn, existing);
-    }
-    return json({ following: on });
-  } catch (error) {
-    console.warn("[atmosphere] follow failed:", error instanceof Error ? error.message : error);
-    return json({ error: "post-failed" }, 502);
-  }
-};

package/routes/jwks.json.ts

@@ -1,13 +0,0 @@
-// The public half of the site's signing key, so account hosts can check that
-// requests claiming to come from this site really do.
-import type { APIRoute } from "astro";
-import { privateKey } from "../lib/oauth";
-
-export const GET: APIRoute = async () => {
-  try {
-    const key = await privateKey();
-    return Response.json({ keys: [key.publicJwk] }, { headers: { "Cache-Control": "public, max-age=600" } });
-  } catch {
-    return new Response("Not configured", { status: 404 });
-  }
-};

package/routes/login.ts

@@ -1,58 +0,0 @@
-// Starts signing in: the reader typed their handle (or DID) into the comment
-// box. Their own account host is found from it, and they are sent there to
-// approve this site's request to post comments for them.
-import type { APIRoute } from "astro";
-import { safeReturnPath, withStatus } from "../lib/http";
-import { DELETE_SCOPE, FOLLOW_SCOPE, oauthClient, SCOPE } from "../lib/oauth";
-import { signedInDid } from "../lib/visitor";
-
-// The extra permissions a reader can add: deleting their comments, following.
-const EXTRA_SCOPES: Record<string, string> = { delete: DELETE_SCOPE, follow: FOLLOW_SCOPE };
-
-export const POST: APIRoute = async ({ request, url, redirect, cookies }) => {
-  const form = await request.formData();
-  const returnTo = safeReturnPath(form.get("returnTo"));
-  const handle = String(form.get("handle") ?? "")
-    .trim()
-    .replace(/^@/, "")
-    .toLowerCase();
-  if (!handle || handle.length > 253 || !/^(did:[a-z0-9:._%-]+|[a-z0-9.-]+\.[a-z0-9-]+)$/.test(handle)) {
-    return redirect(withStatus(returnTo, "invalid-handle"), 303);
-  }
-
-  try {
-    const client = await oauthClient(url.origin);
-    // A new approval replaces the old one, so keep any extra permission the
-    // reader already gave (asking to follow mustn't take away deleting).
-    const extras = new Set<string>();
-    const wanted = String(form.get("permission") ?? "");
-    if (EXTRA_SCOPES[wanted]) extras.add(EXTRA_SCOPES[wanted]);
-    const did = await signedInDid(cookies);
-    if (did) {
-      try {
-        const granted = (await (await client.restore(did, false)).getTokenInfo(false)).scope.split(" ").map((scope) => {
-          const [name, query = ""] = scope.split("?");
-          return { name, actions: new URLSearchParams(query).getAll("action") };
-        });
-        // As in allows() (lib/reader.ts): no actions listed means all of them.
-        const has = (collection: string, action: string) =>
-          granted.some(({ name, actions }) => (name === `repo:${collection}` || name === "repo:*") && (!actions.length || actions.includes(action)));
-        if (has("app.bsky.feed.post", "delete")) extras.add(DELETE_SCOPE);
-        if (has("app.bsky.graph.follow", "create")) extras.add(FOLLOW_SCOPE);
-      } catch {
-        // Not signed in any more: just what's asked for.
-      }
-    }
-    const authorizeUrl = await client.authorize(handle, {
-      // The page sends readers back here with permission=delete or =follow
-      // the first time they delete a comment or follow, if they haven't
-      // allowed that yet.
-      scope: [SCOPE, ...extras].join(" "),
-      state: JSON.stringify({ returnTo }),
-    });
-    return redirect(authorizeUrl.href, 303);
-  } catch (error) {
-    console.warn("[atmosphere] sign-in could not start:", error instanceof Error ? error.message : error);
-    return redirect(withStatus(returnTo, "account-not-found"), 303);
-  }
-};

package/routes/logout.ts

@@ -1,20 +0,0 @@
-// Signs the reader out on this site and asks their host to cancel this
-// site's permission to post for them.
-import type { APIRoute } from "astro";
-import { fromThisSite, json } from "../lib/http";
-import { oauthClient } from "../lib/oauth";
-import { signedInDid, signOut } from "../lib/visitor";
-
-export const POST: APIRoute = async ({ request, url, cookies }) => {
-  if (!fromThisSite(request, url)) return json({ error: "forbidden" }, 403);
-  const did = await signedInDid(cookies);
-  await signOut(cookies);
-  if (did) {
-    try {
-      await (await oauthClient(url.origin)).revoke(did);
-    } catch (error) {
-      console.warn("[atmosphere] revoke failed:", error instanceof Error ? error.message : error);
-    }
-  }
-  return json({ signedIn: false });
-};

package/routes/me.ts

@@ -1,12 +0,0 @@
-// Who is signed in on this browser, for the comment box.
-import type { APIRoute } from "astro";
-import { json } from "../lib/http";
-import { profileFor, publicProfile } from "../lib/profile";
-import { signedInDid } from "../lib/visitor";
-
-export const GET: APIRoute = async ({ cookies }) => {
-  const did = await signedInDid(cookies);
-  if (!did) return json({ signedIn: false });
-  const profile = await profileFor(did);
-  return json({ signedIn: true, ...publicProfile(profile) });
-};

package/routes/react.ts

@@ -1,48 +0,0 @@
-// Likes or reposts a post (the site's announcement, or a comment under it) as
-// the signed-in reader, or takes that back.
-// Body: { post, kind: "like" | "repost", on: boolean }.
-import type { APIRoute } from "astro";
-import { json } from "../lib/http";
-import { createRecord, deleteRecord, inSiteThread, isPostUri, isSitePost, postsAsReader, rateLimit, reader } from "../lib/reader";
-import { forgetThread } from "../lib/thread";
-
-const tooMany = rateLimit(20, 120);
-const COLLECTIONS = { like: "app.bsky.feed.like", repost: "app.bsky.feed.repost" } as const;
-
-export const POST: APIRoute = async ({ request, url, cookies }) => {
-  const signedIn = await reader(request, url, cookies);
-  if (signedIn instanceof Response) return signedIn;
-
-  let body: { post?: unknown; kind?: unknown; on?: unknown };
-  try {
-    body = await request.json();
-  } catch {
-    return json({ error: "bad-request" }, 400);
-  }
-  const { post, kind, on } = body;
-  if (!isPostUri(post) || (kind !== "like" && kind !== "repost") || typeof on !== "boolean") {
-    return json({ error: "bad-request" }, 400);
-  }
-  if (tooMany(signedIn.did)) return json({ error: "too-many" }, 429);
-
-  try {
-    const [view] = await postsAsReader(signedIn.session, [post]);
-    if (!view) return json({ error: "not-found" }, 404);
-    if (!inSiteThread(view)) return json({ error: "not-allowed" }, 400);
-    const existing = kind === "like" ? view.viewer?.like : view.viewer?.repost;
-    if (on && !existing) {
-      await createRecord(signedIn, COLLECTIONS[kind], {
-        $type: COLLECTIONS[kind],
-        subject: { uri: view.uri, cid: view.cid },
-        createdAt: new Date().toISOString(),
-      });
-    } else if (!on && existing) {
-      await deleteRecord(signedIn, existing);
-    }
-    forgetThread(isSitePost(view.uri) ? view.uri : (view.record?.reply?.root?.uri ?? ""));
-    return json({ kind, on });
-  } catch (error) {
-    console.warn(`[atmosphere] ${kind} failed:`, error instanceof Error ? error.message : error);
-    return json({ error: "post-failed" }, 502);
-  }
-};

package/routes/state.ts

@@ -1,24 +0,0 @@
-// Whether the signed-in reader has liked or reposted the announcement and the
-// comments under it, so the buttons start in the right state.
-// ?post=<uri>&post=<uri>… (at most 100); posts outside the site's threads
-// are left out of the answer.
-import type { APIRoute } from "astro";
-import { json } from "../lib/http";
-import { inSiteThread, isPostUri, postsAsReader, reader } from "../lib/reader";
-
-export const GET: APIRoute = async ({ request, url, cookies }) => {
-  const uris = [...new Set(url.searchParams.getAll("post"))].filter(isPostUri).slice(0, 100);
-  if (!uris.length) return json({ error: "bad-request" }, 400);
-  const signedIn = await reader(request, url, cookies);
-  if (signedIn instanceof Response) return signedIn;
-  try {
-    const views = await postsAsReader(signedIn.session, uris);
-    const posts: Record<string, { liked: boolean; reposted: boolean }> = {};
-    for (const view of views) {
-      if (inSiteThread(view)) posts[view.uri] = { liked: !!view.viewer?.like, reposted: !!view.viewer?.repost };
-    }
-    return json({ posts });
-  } catch {
-    return json({ error: "unavailable" }, 502);
-  }
-};