import { Router, Response, Request } from "express"; import multer from "multer"; import Jimp from "jimp"; import moment from "moment-timezone"; import { generateEditToken, generateEventID, generateRSAKeypair, hashString, } from "../util/generator.js"; import { validateEventData } from "../util/validation.js"; import { addToLog } from "../helpers.js"; import Event from "../models/Event.js"; import EventGroup from "../models/EventGroup.js"; import { broadcastCreateMessage, broadcastUpdateMessage, createActivityPubActor, createActivityPubEvent, createFeaturedPost, sendDirectMessage, updateActivityPubActor, updateActivityPubEvent, } from "../activitypub.js"; import { sendEmailFromTemplate } from "../lib/email.js"; import crypto from "crypto"; import ical from "ical"; import { markdownToSanitizedHTML } from "../util/markdown.js"; import { checkMagicLink, getConfigMiddleware } from "../lib/middleware.js"; const storage = multer.memoryStorage(); // Accept only JPEG, GIF or PNG images, up to 10MB const upload = multer({ storage: storage, limits: { fileSize: 10 * 1024 * 1024 }, fileFilter: function (_, file, cb) { const filetypes = /jpeg|jpg|png|gif/; const mimetype = filetypes.test(file.mimetype); if (!mimetype) { return cb(new Error("Only JPEG, PNG and GIF images are allowed.")); } cb(null, true); }, }); const icsUpload = multer({ storage: storage, limits: { fileSize: 10 * 1024 * 1024 }, fileFilter: function (_, file, cb) { const filetype = "text/calendar"; if (file.mimetype !== filetype) { return cb(new Error("Only ICS files are allowed.")); } cb(null, true); }, }); const router = Router(); router.use(getConfigMiddleware); router.post( "/event", upload.single("imageUpload"), checkMagicLink, async (req: Request, res: Response) => { const { data: eventData, errors } = validateEventData(req.body); if (errors && errors.length > 0) { return res.status(400).json({ errors }); } if (!eventData) { return res.status(400).json({ errors: [ { message: "No event data was provided.", }, ], }); } let eventID = generateEventID(); let editToken = generateEditToken(); let eventImageFilename; let isPartOfEventGroup = false; if (req.file?.buffer) { eventImageFilename = await Jimp.read(req.file.buffer) .then((img) => { img.resize(920, Jimp.AUTO) // resize .quality(80) // set JPEG quality .write("./public/events/" + eventID + ".jpg"); // save return eventID + ".jpg"; }) .catch((err) => { addToLog( "Jimp", "error", "Attempt to edit image failed with error: " + err, ); }); } const startUTC = moment.tz(eventData.eventStart, eventData.timezone); const endUTC = moment.tz(eventData.eventEnd, eventData.timezone); let eventGroup; if (eventData?.eventGroupBoolean) { try { eventGroup = await EventGroup.findOne({ id: eventData.eventGroupID, editToken: eventData.eventGroupEditToken, }); if (eventGroup) { isPartOfEventGroup = true; } } catch (err) { console.error(err); addToLog( "createEvent", "error", "Attempt to find event group failed with error: " + err, ); } } // generate RSA keypair for ActivityPub let { publicKey, privateKey } = generateRSAKeypair(); const event = new Event({ id: eventID, type: "public", // This is for backwards compatibility name: eventData.eventName, location: eventData.eventLocation, start: startUTC, end: endUTC, timezone: eventData.timezone, description: eventData.eventDescription, image: eventImageFilename, creatorEmail: eventData.creatorEmail, url: eventData.eventURL, hostName: eventData.hostName, viewPassword: "", // Backwards compatibility editPassword: "", // Backwards compatibility editToken: editToken, showOnPublicList: eventData?.publicBoolean, eventGroup: isPartOfEventGroup ? eventGroup?._id : null, usersCanAttend: eventData.joinBoolean ? true : false, showUsersList: false, // Backwards compatibility usersCanComment: eventData.interactionBoolean ? true : false, maxAttendees: eventData.maxAttendees, firstLoad: true, activityPubActor: createActivityPubActor( eventID, res.locals.config?.general.domain, publicKey, markdownToSanitizedHTML(eventData.eventDescription), eventData.eventName, eventData.eventLocation, eventImageFilename, startUTC, endUTC, eventData.timezone, ), activityPubEvent: createActivityPubEvent( eventData.eventName, startUTC, endUTC, eventData.timezone, eventData.eventDescription, eventData.eventLocation, ), activityPubMessages: [ { id: `https://${res.locals.config?.general.domain}/${eventID}/m/featuredPost`, content: JSON.stringify( createFeaturedPost( eventID, eventData.eventName, startUTC, endUTC, eventData.timezone, eventData.eventDescription, eventData.eventLocation, ), ), }, ], publicKey, privateKey, }); try { const savedEvent = await event.save(); addToLog("createEvent", "success", "Event " + eventID + "created"); // Send email with edit link if (eventData.creatorEmail && req.app.locals.sendEmails) { sendEmailFromTemplate( eventData.creatorEmail, `${eventData.eventName}`, "createEvent", { eventID, editToken, siteName: res.locals.config?.general.site_name, siteLogo: res.locals.config?.general.email_logo_url, domain: res.locals.config?.general.domain, }, req, ); } // If the event was added to a group, send an email to any group // subscribers if (event.eventGroup && req.app.locals.sendEmails) { try { const eventGroup = await EventGroup.findOne({ _id: event.eventGroup.toString(), }); if (!eventGroup) { throw new Error( "Event group not found for event " + eventID, ); } const subscribers = eventGroup?.subscribers?.reduce( (acc: string[], current) => { if (current.email && !acc.includes(current.email)) { return [current.email, ...acc]; } return acc; }, [] as string[], ); subscribers?.forEach((emailAddress) => { sendEmailFromTemplate( emailAddress, `New event in ${eventGroup.name}`, "eventGroupUpdated", { siteName: res.locals.config?.general.site_name, siteLogo: res.locals.config?.general.email_logo_url, domain: res.locals.config?.general.domain, eventGroupName: eventGroup.name, eventName: event.name, eventID: event.id, eventGroupID: eventGroup.id, emailAddress: encodeURIComponent(emailAddress), }, req, ); }); } catch (err) { console.error(err); addToLog( "createEvent", "error", "Attempt to send event group emails failed with error: " + err, ); } } return res.json({ eventID: eventID, editToken: editToken, url: `/${eventID}?e=${editToken}`, }); } catch (err) { console.error(err); addToLog( "createEvent", "error", "Attempt to create event failed with error: " + err, ); return res.status(500).json({ errors: [ { message: err, }, ], }); } }, ); router.put( "/event/:eventID", upload.single("imageUpload"), async (req: Request, res: Response) => { const { data: eventData, errors } = validateEventData(req.body); if (errors && errors.length > 0) { return res.status(400).json({ errors }); } if (!eventData) { return res.status(400).json({ errors: [ { message: "No event data was provided.", }, ], }); } try { const submittedEditToken = req.body.editToken; const event = await Event.findOne({ id: req.params.eventID, }); if (!event) { return res.status(404).json({ errors: [ { message: "Event not found.", }, ], }); } if (event.editToken !== submittedEditToken) { // Token doesn't match addToLog( "editEvent", "error", `Attempt to edit event ${req.params.eventID} failed with error: token does not match`, ); return res.status(403).json({ errors: [ { message: "Edit token is invalid.", }, ], }); } // Token matches // If there is a new image, upload that first let eventID = req.params.eventID; let eventImageFilename = event.image; if (req.file?.buffer) { Jimp.read(req.file.buffer) .then((img) => { img.resize(920, Jimp.AUTO) // resize .quality(80) // set JPEG quality .write(`./public/events/${eventID}.jpg`); // save }) .catch((err) => { addToLog( "Jimp", "error", "Attempt to edit image failed with error: " + err, ); }); eventImageFilename = eventID + ".jpg"; } const startUTC = moment.tz( eventData.eventStart, eventData.timezone, ); const endUTC = moment.tz(eventData.eventEnd, eventData.timezone); let isPartOfEventGroup = false; let eventGroup; if (eventData.eventGroupBoolean) { eventGroup = await EventGroup.findOne({ id: eventData.eventGroupID, editToken: eventData.eventGroupEditToken, }); if (eventGroup) { isPartOfEventGroup = true; } } const updatedEvent = { name: eventData.eventName, location: eventData.eventLocation, start: startUTC.toDate(), end: endUTC.toDate(), timezone: eventData.timezone, description: eventData.eventDescription, url: eventData.eventURL, hostName: eventData.hostName, image: eventImageFilename, showOnPublicList: eventData.publicBoolean, usersCanAttend: eventData.joinBoolean, showUsersList: false, // Backwards compatibility usersCanComment: eventData.interactionBoolean, maxAttendees: eventData.maxAttendeesBoolean ? eventData.maxAttendees : undefined, eventGroup: isPartOfEventGroup ? eventGroup?._id : null, activityPubActor: event.activityPubActor ? updateActivityPubActor( JSON.parse(event.activityPubActor), eventData.eventDescription, eventData.eventName, eventData.eventLocation, eventImageFilename, startUTC, endUTC, eventData.timezone, ) : undefined, activityPubEvent: event.activityPubEvent ? updateActivityPubEvent( JSON.parse(event.activityPubEvent), eventData.eventName, startUTC, endUTC, eventData.timezone, ) : undefined, }; let diffText = "
This event was just updated with new information.