Private
Public Access
ksmithandClaude Sonnet 5
072405eb2d
is_archived was previously only exposed on the admin-only AdminRoom schema and checked in one place (excluding a room from Browse rooms) -- for anyone already a member it was a complete no-op: still in their sidebar, still fully postable, no indication anywhere it was archived. Expose is_archived on the regular RoomRead/MyRoomItem schemas, drop archived rooms from the sidebar list (while keeping them directly reachable via URL so history stays readable), and reject new messages in one -- both the WS "message" handler and incoming webhooks -- with a clear "archived and read-only" response instead of silently no-op'ing or a confusing membership error. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
32 lines
1.3 KiB
Python
32 lines
1.3 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Request
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.database import get_db
|
|
from app.schemas.webhook import IncomingWebhookPost
|
|
from app.services.message_events import broadcast_new_message
|
|
from app.services.webhook_service import RoomArchivedError, WebhookNotFoundError, post_via_webhook
|
|
|
|
router = APIRouter(prefix="/api/webhooks", tags=["webhooks"])
|
|
|
|
|
|
@router.post("/incoming/{token}", status_code=204)
|
|
async def incoming_webhook_endpoint(
|
|
token: str,
|
|
data: IncomingWebhookPost,
|
|
request: Request,
|
|
db: AsyncSession = Depends(get_db),
|
|
) -> None:
|
|
# No auth dependency at all -- the token in the URL is the credential,
|
|
# per ARCHITECTURE.md's incoming-webhook design.
|
|
try:
|
|
message, room, sender = await post_via_webhook(db, token, data.content)
|
|
except WebhookNotFoundError:
|
|
raise HTTPException(status_code=404, detail="Unknown webhook")
|
|
except RoomArchivedError:
|
|
raise HTTPException(status_code=403, detail="This room has been archived and is read-only")
|
|
|
|
broadcaster = request.app.state.broadcaster
|
|
presence = request.app.state.presence
|
|
focus_presence = request.app.state.focus_presence
|
|
await broadcast_new_message(db, broadcaster, presence, focus_presence, room.id, message, sender)
|