path: root/app/models/user.rb

# frozen_string_literal: true
# == Schema Information
#
# Table name: users
#
#  id                        :bigint(8)        not null, primary key
#  email                     :string           default(""), not null
#  created_at                :datetime         not null
#  updated_at                :datetime         not null
#  encrypted_password        :string           default(""), not null
#  reset_password_token      :string
#  reset_password_sent_at    :datetime
#  remember_created_at       :datetime
#  sign_in_count             :integer          default(0), not null
#  current_sign_in_at        :datetime
#  last_sign_in_at           :datetime
#  current_sign_in_ip        :inet
#  last_sign_in_ip           :inet
#  admin                     :boolean          default(FALSE), not null
#  confirmation_token        :string
#  confirmed_at              :datetime
#  confirmation_sent_at      :datetime
#  unconfirmed_email         :string
#  locale                    :string
#  encrypted_otp_secret      :string
#  encrypted_otp_secret_iv   :string
#  encrypted_otp_secret_salt :string
#  consumed_timestep         :integer
#  otp_required_for_login    :boolean          default(FALSE), not null
#  last_emailed_at           :datetime
#  otp_backup_codes          :string           is an Array
#  filtered_languages        :string           default([]), not null, is an Array
#  account_id                :bigint(8)        not null
#  disabled                  :boolean          default(FALSE), not null
#  moderator                 :boolean          default(FALSE), not null
#  invite_id                 :bigint(8)
#  remember_token            :string
#  chosen_languages          :string           is an Array
#  created_by_application_id :bigint(8)
#  approved                  :boolean          default(TRUE), not null
#  vars                      :jsonb            not null
#

class User < ApplicationRecord
  include Settings::Extend
  include UserRoles
  include LogHelper

  # The home and list feeds will be stored in Redis for this amount
  # of time, and status fan-out to followers will include only people
  # within this time frame. Lowering the duration may improve performance
  # if lots of people sign up, but not a lot of them check their feed
  # every day. Raising the duration reduces the amount of expensive
  # RegenerationWorker jobs that need to be run when those people come
  # to check their feed
  ACTIVE_DURATION = ENV.fetch('USER_ACTIVE_DAYS', 7).to_i.days.freeze

  spam_triggers = ENV.fetch('REGISTRATION_SPAM_TRIGGERS', '').split('|').map { |phrase| Regexp.escape(phrase.strip) }
  spam_triggers = spam_triggers.empty? ? /(?!)/ : /\b#{Regexp.union(spam_triggers)}\b/i

  SPAM_TRIGGERS = spam_triggers.freeze


  devise :two_factor_authenticatable,
         otp_secret_encryption_key: Rails.configuration.x.otp_secret

  devise :two_factor_backupable,
         otp_number_of_backup_codes: 10

  devise :registerable, :recoverable, :rememberable, :trackable, :validatable,
         :confirmable

  include Omniauthable
  include PamAuthenticable
  include LdapAuthenticable

  belongs_to :account, inverse_of: :user
  belongs_to :invite, counter_cache: :uses, optional: true
  belongs_to :created_by_application, class_name: 'Doorkeeper::Application', optional: true
  accepts_nested_attributes_for :account

  has_many :applications, class_name: 'Doorkeeper::Application', as: :owner
  has_many :backups, inverse_of: :user

  has_many :user_links, class_name: 'LinkedUser', foreign_key: :target_user_id, dependent: :destroy, inverse_of: :user
  has_many :linked_users, through: :user_links, source: :user

  has_one :invite_request, class_name: 'UserInviteRequest', inverse_of: :user, dependent: :destroy
  accepts_nested_attributes_for :invite_request, reject_if: ->(attributes) { attributes['text'].blank? }

  validates :locale, inclusion: I18n.available_locales.map(&:to_s), if: :locale?
  validates_with BlacklistedEmailValidator, on: :create
  validates_with EmailMxValidator, if: :validate_email_dns?
  validates :agreement, acceptance: { allow_nil: false, accept: [true, 'true', '1'] }, on: :create

  scope :recent, -> { order(id: :desc) }
  scope :pending, -> { where(approved: false) }
  scope :approved, -> { where(approved: true) }
  scope :confirmed, -> { where.not(confirmed_at: nil) }
  scope :enabled, -> { where(disabled: false) }
  scope :inactive, -> { where(arel_table[:current_sign_in_at].lt(ACTIVE_DURATION.ago)) }
  scope :active, -> { confirmed.where(arel_table[:current_sign_in_at].gteq(ACTIVE_DURATION.ago)).joins(:account).where.not(accounts: { suspended_at: nil }) }
  scope :matches_email, ->(value) { where(arel_table[:email].matches("#{value}%")) }
  scope :emailable, -> { confirmed.enabled.joins(:account).merge(Account.searchable) }

  before_validation :sanitize_languages
  before_create :set_approved

  # This avoids a deprecation warning from Rails 5.1
  # It seems possible that a future release of devise-two-factor will
  # handle this itself, and this can be removed from our User class.
  attribute :otp_secret

  has_many :session_activations, dependent: :destroy

  delegate :default_local,
    :always_local,
    :rawr_federated,
    :hide_stats,
    :hide_captions,
    :larger_menus,
    :larger_buttons,
    :larger_drawer,
    :larger_emoji,
    :remove_filtered,
    :hide_replies_muted,
    :hide_replies_blocked,
    :hide_replies_blocker,
    :hide_mntions_muted,
    :hide_mntions_blocked,
    :hide_mntions_blocker,
    :hide_mntions_packm8,
    :hide_mascot,
    :hide_interactions,
    :hide_public_profile,
    :hide_public_outbox,
    :max_public_history,
    :roar_lifespan,
    :delayed_roars,
    :delayed_for,
    :boost_interval,
    :boost_random,
    :boost_interval_from,
    :boost_interval_to,
    :show_cursor,

    :auto_play_gif,
    :default_sensitive,
    :unfollow_modal,
    :boost_modal,
    :favourite_modal,
    :delete_modal,
    :reduce_motion,
    :system_font_ui,
    :noindex,
    :flavour,
    :skin,
    :display_media,
    :hide_network,
    :hide_followers_count,
    :expand_spoilers,
    :default_language,
    :aggregate_reblogs,
    :show_application,
    :default_content_type,
    to: :settings,
    prefix: :setting,
    allow_nil: false

  attr_reader :invite_code
  attr_writer :external

  def vars
    self[:vars]
  end

  def confirmed?
    confirmed_at.present?
  end

  def invited?
    invite_id.present?
  end

  def valid_invitation?
    invite_id.present? && invite.valid_for_use?
  end

  def disable!
    update!(disabled: true,
            last_sign_in_at: current_sign_in_at,
            current_sign_in_at: nil)
  end

  def enable!
    update!(disabled: false)
  end

  def confirm
    new_user      = !confirmed?
    self.approved = true if open_registrations?

    super

    if new_user && approved?
      prepare_new_user!
    elsif new_user
      notify_staff_about_pending_account!
    end
  end

  def confirm!
    new_user      = !confirmed?
    self.approved = true if open_registrations?

    skip_confirmation!
    save!

    prepare_new_user! if new_user && approved?
  end

  def pending?
    !approved?
  end

  def active_for_authentication?
    super && approved?
  end

  def inactive_message
    !approved? ? :pending : super
  end

  def approve!
    return if approved?

    update!(approved: true)
    prepare_new_user!
  end

  def update_tracked_fields!(request)
    super
    prepare_returning_user!
  end

  def disable_two_factor!
    self.otp_required_for_login = false
    otp_backup_codes&.clear
    save!
  end

  def notify_staff_about_pending_account!
    LogWorker.perform_async("\xf0\x9f\x86\x95 New account <#{self.account.username}> is awaiting admin approval.\n\nReview (moderators only): https://#{Rails.configuration.x.web_domain || Rails.configuration.x.local_domain}/admin/pending_accounts")
    User.staff.includes(:account).each do |u|
      next unless u.allows_pending_account_emails?
      AdminMailer.new_pending_account(u.account, self).deliver_later
    end
  end

  def detect_spam!
    janitor = janitor_account || Account.representative

    intro = self.invite_request&.text
    # normalize it
    intro = intro.gsub(/[\u200b-\u200d\ufeff\u200e\u200f]/, '').strip.downcase unless intro.nil?

    return false unless intro.blank? || intro.split.count < 5 || SPAM_TRIGGERS.match?(intro)

    user_friendly_action_log(janitor, :reject_registration, self.account.username, "Registration was spam filtered.")
    Form::AccountBatch.new(current_account: janitor, account_ids: account_id, action: 'reject').save

    true
  rescue ActiveRecord::RecordNotFound, ActiveRecord::RecordInvalid
    false
  end

  def janitor_account
    account_id = ENV.fetch('JANITOR_USER', '').to_i
    return if account_id == 0
    Account.find_by(id: account_id)
  end

  def wants_larger_menus?
    @wants_larger_menus ||= (settings.larger_menus || false)
  end

  def wants_larger_buttons?
    @wants_larger_buttons ||= (settings.larger_buttons || false)
  end

  def wants_larger_drawer?
    @wants_larger_drawer ||= (settings.larger_drawer || false)
  end

  def wants_larger_emoji?
    @wants_larger_emoji ||= (settings.larger_emoji || false)
  end

  def hides_filtered_gap?
    @hides_filtered_gap ||= (settings.remove_filtered || false)
  end

  def hides_replies_of_muted?
    @hides_replies_of_muted ||= (settings.hide_replies_muted || true)
  end

  def hides_replies_of_blocked?
    @hides_replies_of_blocked ||= (settings.hide_replies_blocked || true)
  end

  def hides_replies_of_blocker?
    @hides_replies_of_blocker ||= (settings.hide_replies_blocker || true)
  end

  def hides_mentions_of_muted?
    @hides_mentions_of_muted ||= (settings.hide_mntions_muted || true)
  end

  def hides_mentions_of_blocked?
    @hides_mentions_of_blocked ||= (settings.hide_mntions_blocked || true)
  end

  def hides_mentions_of_blocker?
    @hides_mentions_of_blocker ||= (settings.hide_mntions_blocker || true)
  end

  def hides_mentions_outside_scope?
    @hides_mentions_outside_scope ||= (settings.hide_mntions_packm8 || true)
  end

  def hides_mascot?
    @hides_mascot ||= (settings.hide_mascot || false)
  end

  def hides_interactions?
    @hides_interactions ||= (settings.hide_interactions || false)
  end

  def hides_public_profile?
    @hides_public_profile ||= (settings.hide_public_profile || false)
  end

  def hides_public_outbox?
    @hides_public_outbox ||= (settings.hide_public_outbox || false)
  end

  def max_public_history
    @_max_public_history ||= [1, (settings.max_public_history || 6).to_i].max
  end

  def roar_lifespan
    @_roar_lifespan ||= [0, (settings.roar_lifespan || 0).to_i].max
  end

  def delayed_roars?
    @delayed_roars ||= (settings.delayed_roars || false)
  end

  def delayed_for
    @_delayed_for ||= [5, (settings.delayed_for || 60).to_i].max
  end

  def boost_interval?
    @boost_interval ||= (settings.boost_interval || false)
  end

  def boost_random?
    @boost_random ||= (settings.boost_random || false)
  end

  def boost_interval_from
    @boost_interval_from ||= [1, (settings.boost_interval_from || 1).to_i].max
  end

  def boost_interval_to
    @boost_interval_to ||= [2, (settings.boost_interval_to || 15).to_i].max
  end

  def shows_cursor?
    @show_cursor ||= (settings.show_cursor || false)
  end

  def defaults_to_local_only?
    @defaults_to_local_only ||= (settings.default_local || false)
  end

  def always_local_only?
    @always_local_only ||= (settings.always_local || false)
  end

  def wants_raw_federated?
    @wants_raw_federated ||= (settings.rawr_federated || false)
  end

  def hides_stats?
    @hides_stats ||= (settings.hide_stats || false)
  end

  def hides_captions?
    @hides_captions ||= (settings.hide_captions || false)
  end

  def defaults_to_sensitive?
    @defaults_to_sensitive ||= settings.default_sensitive
  end

  def default_visibility
    @default_visibility ||= setting_default_privacy
  end

  def default_language
    @_default_language ||= (settings.default_language || 'en')
  end

  def setting_default_privacy
    settings.default_privacy || 'local'
  end

  def allows_digest_emails?
    settings.notification_emails['digest']
  end

  def allows_report_emails?
    settings.notification_emails['report']
  end

  def allows_pending_account_emails?
    settings.notification_emails['pending_account']
  end

  def hides_network?
    @hides_network ||= settings.hide_network
  end

  def aggregates_reblogs?
    @aggregates_reblogs ||= settings.aggregate_reblogs
  end

  def shows_application?
    @shows_application ||= settings.show_application
  end

  def token_for_app(a)
    return nil if a.nil? || a.owner != self
    Doorkeeper::AccessToken
      .find_or_create_by(application_id: a.id, resource_owner_id: id) do |t|

      t.scopes = a.scopes
      t.expires_in = Doorkeeper.configuration.access_token_expires_in
      t.use_refresh_token = Doorkeeper.configuration.refresh_token_enabled?
    end
  end

  def activate_session(request)
    session_activations.activate(session_id: SecureRandom.hex,
                                 user_agent: request.user_agent,
                                 ip: request.remote_ip).session_id
  end

  def exclusive_session(id)
    session_activations.exclusive(id)
  end

  def session_active?(id)
    session_activations.active? id
  end

  def web_push_subscription(session)
    session.web_push_subscription.nil? ? nil : session.web_push_subscription
  end

  def invite_code=(code)
    self.invite  = Invite.find_by(code: code) if code.present?
    @invite_code = code
  end

  def password_required?
    return false if Devise.pam_authentication || Devise.ldap_authentication
    super
  end

  def send_reset_password_instructions
    return false if encrypted_password.blank? && (Devise.pam_authentication || Devise.ldap_authentication)
    super
  end

  def reset_password!(new_password, new_password_confirmation)
    return false if encrypted_password.blank? && (Devise.pam_authentication || Devise.ldap_authentication)
    super
  end

  def send_confirmation_instructions
    return false if detect_spam!
    super
  end

  def show_all_media?
    setting_display_media == 'show_all'
  end

  def hide_all_media?
    setting_display_media == 'hide_all'
  end

  protected

  def send_devise_notification(notification, *args)
    devise_mailer.send(notification, self, *args).deliver_later
  end

  private

  def set_approved
    self.approved = open_registrations? || valid_invitation? || external?
  end

  def open_registrations?
    Setting.registrations_mode == 'open'
  end

  def external?
    !!@external
  end

  def sanitize_languages
    return if chosen_languages.nil?
    chosen_languages.reject!(&:blank?)
    self.chosen_languages = nil if chosen_languages.empty?
  end

  def prepare_new_user!
    BootstrapTimelineWorker.perform_async(account_id)
    ActivityTracker.increment('activity:accounts:local')
    UserMailer.welcome(self).deliver_later
  end

  def prepare_returning_user!
    ActivityTracker.record('activity:logins', id)
    regenerate_feed! if needs_feed_update?
  end

  def regenerate_feed!
    return unless Redis.current.setnx("account:#{account_id}:regeneration", true)
    Redis.current.expire("account:#{account_id}:regeneration", 1.day.seconds)
    RegenerationWorker.perform_async(account_id)
  end

  def needs_feed_update?
    last_sign_in_at < ACTIVE_DURATION.ago
  end

  def validate_email_dns?
    email_changed? && !(Rails.env.test? || Rails.env.development?)
  end
end