Files
tuwunel/src/service/server_keys/verify.rs
2025-09-05 05:45:41 +00:00

104 lines
2.8 KiB
Rust

use ruma::{
CanonicalJsonObject, CanonicalJsonValue, OwnedEventId, RoomVersionId, signatures::Verified,
};
use serde_json::value::RawValue as RawJsonValue;
use tuwunel_core::{
Err, Result, implement,
matrix::{event::gen_event_id_canonical_json, room_version},
};
#[implement(super::Service)]
pub async fn validate_and_add_event_id(
&self,
pdu: &RawJsonValue,
room_version_id: &RoomVersionId,
) -> Result<(OwnedEventId, CanonicalJsonObject)> {
let (event_id, mut value) = gen_event_id_canonical_json(pdu, room_version_id)?;
if let Err(e) = self
.verify_event(&value, Some(room_version_id))
.await
{
return Err!(BadServerResponse(debug_error!(
"Event {event_id} failed verification: {e:?}"
)));
}
// For v3+ rooms we add the event_id, but for v1/v2 rooms it's already present.
if !room_version::rules(room_version_id)?
.event_format
.require_event_id
{
value.insert("event_id".into(), CanonicalJsonValue::String(event_id.as_str().into()));
}
Ok((event_id, value))
}
#[implement(super::Service)]
pub async fn validate_and_add_event_id_no_fetch(
&self,
pdu: &RawJsonValue,
room_version_id: &RoomVersionId,
) -> Result<(OwnedEventId, CanonicalJsonObject)> {
let (event_id, mut value) = gen_event_id_canonical_json(pdu, room_version_id)?;
let room_version_rules = room_version::rules(room_version_id)?;
if !self
.required_keys_exist(&value, &room_version_rules)
.await
{
return Err!(BadServerResponse(debug_warn!(
"Event {event_id} cannot be verified: missing keys."
)));
}
if let Err(e) = self
.verify_event(&value, Some(room_version_id))
.await
{
return Err!(BadServerResponse(debug_error!(
"Event {event_id} failed verification: {e:?}"
)));
}
// For v3+ rooms we add the event_id, but for v1/v2 rooms it's already present.
if !room_version_rules.event_format.require_event_id {
value.insert("event_id".into(), CanonicalJsonValue::String(event_id.as_str().into()));
}
Ok((event_id, value))
}
#[implement(super::Service)]
pub async fn verify_event(
&self,
event: &CanonicalJsonObject,
room_version_id: Option<&RoomVersionId>,
) -> Result<Verified> {
let room_version_id = room_version_id.unwrap_or(&RoomVersionId::V11);
let room_version_rules = room_version::rules(room_version_id)?;
let event_keys = self
.get_event_keys(event, &room_version_rules)
.await?;
ruma::signatures::verify_event(&event_keys, event, &room_version_rules).map_err(Into::into)
}
#[implement(super::Service)]
pub async fn verify_json(
&self,
event: &CanonicalJsonObject,
room_version_id: Option<&RoomVersionId>,
) -> Result {
let room_version_id = room_version_id.unwrap_or(&RoomVersionId::V11);
let room_version_rules = room_version::rules(room_version_id)?;
let event_keys = self
.get_event_keys(event, &room_version_rules)
.await?;
ruma::signatures::verify_json(&event_keys, event).map_err(Into::into)
}