.
+ PermissionError:
+ description: The given Matrix user doesn't have the permissions to do that.
+ schema:
+ type: object
+ title: Error
+ properties:
+ errcode:
+ type: string
+ title: Error code
+ description: A machine-readable error code
+ example: not_enough_permissions
+ enum:
+ - not_enough_permissions
+ error:
+ $ref: "#/definitions/HumanReadableError"
+
+definitions:
+ UserInfo:
+ type: object
+ properties:
+ mxid:
+ type: string
+ example: "@usern:example.com"
+ permissions:
+ type: string
+ example: user
+ enum:
+ - none
+ - relaybot
+ - user
+ - full
+ - admin
+ telegram:
+ type: object
+ properties:
+ id:
+ type: integer
+ example: 123456789
+ username:
+ type: string
+ example: username
+ first_name:
+ type: string
+ example: Usern
+ last_name:
+ type: string
+ example: A.
+ phone:
+ type: string
+ example: +123456789
+ is_bot:
+ type: boolean
+ example: false
+ UserChats:
+ type: array
+ items:
+ type: object
+ properties:
+ id:
+ type: integer
+ example: -123456789
+ description: A bot API style chat ID.
+ title:
+ type: string
+
+ PortalInfo:
+ type: object
+ properties:
+ mxid:
+ type: string
+ example: "!foo:example.com"
+ chat_id:
+ type: integer
+ example: -100123456789
+ peer_type:
+ type: string
+ enum:
+ - user
+ - chat
+ - channel
+ megagroup:
+ type: boolean
+ username:
+ type: string
+ title:
+ type: string
+ about:
+ type: string
+
+ AuthSuccess:
+ type: object
+ properties:
+ state:
+ type: string
+ description: The state/next step after the successful operation.
+ enum:
+ - code
+ - request
+ - password
+ - token
+ - logged-in
+ username:
+ type: string
+ description: The Telegram username the user is logged in as. Only applicable if state=logged-in
+
+ HumanReadableError:
+ type: string
+ description: A human-readable description of the error
+ example: A human-readable description of the error
+
+security:
+ - Bearer: []
+securityDefinitions:
+ Bearer:
+ description: Required authentication for all endpoints
+ name: Authorization
+ in: header
+ type: apiKey
diff --git a/mautrix_telegram/web/public/__init__.py b/mautrix_telegram/web/public/__init__.py
new file mode 100644
index 00000000..fb5f6de7
--- /dev/null
+++ b/mautrix_telegram/web/public/__init__.py
@@ -0,0 +1,114 @@
+# -*- coding: future_fstrings -*-
+# mautrix-telegram - A Matrix-Telegram puppeting bridge
+# Copyright (C) 2018 Tulir Asokan
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program. If not, see .
+from aiohttp import web
+from mako.template import Template
+import pkg_resources
+import logging
+import random
+import string
+import time
+
+from ...util import sign_token, verify_token
+from ...user import User
+from ..common import AuthAPI
+
+
+class PublicBridgeWebsite(AuthAPI):
+ log = logging.getLogger("mau.web.public")
+
+ def __init__(self, loop):
+ super().__init__(loop)
+ self.secret_key = "".join(
+ random.choice(string.ascii_lowercase + string.digits) for _ in range(64))
+
+ self.login = Template(
+ pkg_resources.resource_string("mautrix_telegram", "web/public/login.html.mako"))
+
+ self.app = web.Application(loop=loop)
+ self.app.router.add_route("GET", "/login", self.get_login)
+ self.app.router.add_route("POST", "/login", self.post_login)
+ self.app.router.add_static("/", pkg_resources.resource_filename("mautrix_telegram",
+ "web/public/"))
+
+ def make_token(self, mxid, expires_in=900):
+ return sign_token(self.secret_key, {
+ "mxid": mxid,
+ "expiry": int(time.time()) + expires_in,
+ })
+
+ def verify_token(self, token):
+ token = verify_token(self.secret_key, token)
+ if token and token.get("expiry", 0) > int(time.time()):
+ return token.get("mxid", None)
+ return None
+
+ async def get_login(self, request):
+ state = "bot_token" if request.rel_url.query.get("mode", "") == "bot" else "request"
+
+ mxid = self.verify_token(request.rel_url.query.get("token", None))
+ if not mxid:
+ return self.get_login_response(status=401, state="invalid-token")
+ user = User.get_by_mxid(mxid, create=False) if mxid else None
+
+ if not user:
+ return self.get_login_response(mxid=mxid, state=state)
+ elif not user.puppet_whitelisted:
+ return self.get_login_response(mxid=user.mxid, error="You are not whitelisted.",
+ status=403)
+ await user.ensure_started()
+ if not await user.is_logged_in():
+ return self.get_login_response(mxid=user.mxid, state=state)
+
+ return self.get_login_response(mxid=user.mxid, username=user.username)
+
+ def get_login_response(self, status=200, state="", username="", mxid="", message="", error="",
+ errcode=""):
+ return web.Response(status=status, content_type="text/html",
+ text=self.login.render(username=username, state=state, error=error,
+ message=message, mxid=mxid))
+
+ async def post_login(self, request):
+ mxid = self.verify_token(request.rel_url.query.get("token", None))
+ if not mxid:
+ return self.get_login_response(status=401, state="invalid-token")
+
+ data = await request.post()
+
+ user = await User.get_by_mxid(mxid).ensure_started(even_if_no_session=True)
+ if not user.puppet_whitelisted:
+ return self.get_login_response(mxid=user.mxid, error="You are not whitelisted.",
+ status=403)
+ elif await user.is_logged_in():
+ return self.get_login_response(mxid=user.mxid, username=user.username)
+
+ await user.ensure_started(even_if_no_session=True)
+
+ if "phone" in data:
+ return await self.post_login_phone(user, data["phone"])
+ elif "bot_token" in data:
+ return await self.post_login_token(user, data["bot_token"])
+ elif "code" in data:
+ resp = await self.post_login_code(user, data["code"],
+ password_in_data="password" in data)
+ if resp or "password" not in data:
+ return resp
+ elif "password" not in data:
+ return self.get_login_response(error="No data given.", status=400)
+
+ if "password" in data:
+ return await self.post_login_password(user, data["password"])
+ return self.get_login_response(error="This should never happen.", status=500)
diff --git a/mautrix_telegram/public/favicon.png b/mautrix_telegram/web/public/favicon.png
similarity index 100%
rename from mautrix_telegram/public/favicon.png
rename to mautrix_telegram/web/public/favicon.png
diff --git a/mautrix_telegram/public/login.css b/mautrix_telegram/web/public/login.css
similarity index 100%
rename from mautrix_telegram/public/login.css
rename to mautrix_telegram/web/public/login.css
diff --git a/mautrix_telegram/public/login.html.mako b/mautrix_telegram/web/public/login.html.mako
similarity index 92%
rename from mautrix_telegram/public/login.html.mako
rename to mautrix_telegram/web/public/login.html.mako
index 8c03cbdc..f00b6a69 100644
--- a/mautrix_telegram/public/login.html.mako
+++ b/mautrix_telegram/web/public/login.html.mako
@@ -76,6 +76,9 @@ along with this program. If not, see .
management command first.
% endif
+ % elif state == "invalid-token":
+ Invalid or expired token
+ Please ask the bridge bot for a new login link.
% else:
Log in to Telegram
% if error:
@@ -87,8 +90,7 @@ along with this program. If not, see .