frontend_proxy.py 8.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236
  1. #!/usr/bin/env python
  2. # -*- coding: utf-8 -*-
  3. # Copyright 2016 OpenMarket Ltd
  4. #
  5. # Licensed under the Apache License, Version 2.0 (the "License");
  6. # you may not use this file except in compliance with the License.
  7. # You may obtain a copy of the License at
  8. #
  9. # http://www.apache.org/licenses/LICENSE-2.0
  10. #
  11. # Unless required by applicable law or agreed to in writing, software
  12. # distributed under the License is distributed on an "AS IS" BASIS,
  13. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14. # See the License for the specific language governing permissions and
  15. # limitations under the License.
  16. import logging
  17. import sys
  18. import synapse
  19. from synapse import events
  20. from synapse.api.errors import SynapseError
  21. from synapse.app import _base
  22. from synapse.config._base import ConfigError
  23. from synapse.config.homeserver import HomeServerConfig
  24. from synapse.config.logger import setup_logging
  25. from synapse.crypto import context_factory
  26. from synapse.http.server import JsonResource
  27. from synapse.http.servlet import (
  28. RestServlet, parse_json_object_from_request,
  29. )
  30. from synapse.http.site import SynapseSite
  31. from synapse.metrics import RegistryProxy
  32. from synapse.metrics.resource import METRICS_PREFIX, MetricsResource
  33. from synapse.replication.slave.storage._base import BaseSlavedStore
  34. from synapse.replication.slave.storage.appservice import SlavedApplicationServiceStore
  35. from synapse.replication.slave.storage.client_ips import SlavedClientIpStore
  36. from synapse.replication.slave.storage.devices import SlavedDeviceStore
  37. from synapse.replication.slave.storage.registration import SlavedRegistrationStore
  38. from synapse.replication.tcp.client import ReplicationClientHandler
  39. from synapse.rest.client.v2_alpha._base import client_v2_patterns
  40. from synapse.server import HomeServer
  41. from synapse.storage.engines import create_engine
  42. from synapse.util.httpresourcetree import create_resource_tree
  43. from synapse.util.logcontext import LoggingContext
  44. from synapse.util.manhole import manhole
  45. from synapse.util.versionstring import get_version_string
  46. from twisted.internet import defer, reactor
  47. from twisted.web.resource import NoResource
  48. logger = logging.getLogger("synapse.app.frontend_proxy")
  49. class KeyUploadServlet(RestServlet):
  50. PATTERNS = client_v2_patterns("/keys/upload(/(?P<device_id>[^/]+))?$")
  51. def __init__(self, hs):
  52. """
  53. Args:
  54. hs (synapse.server.HomeServer): server
  55. """
  56. super(KeyUploadServlet, self).__init__()
  57. self.auth = hs.get_auth()
  58. self.store = hs.get_datastore()
  59. self.http_client = hs.get_simple_http_client()
  60. self.main_uri = hs.config.worker_main_http_uri
  61. @defer.inlineCallbacks
  62. def on_POST(self, request, device_id):
  63. requester = yield self.auth.get_user_by_req(request, allow_guest=True)
  64. user_id = requester.user.to_string()
  65. body = parse_json_object_from_request(request)
  66. if device_id is not None:
  67. # passing the device_id here is deprecated; however, we allow it
  68. # for now for compatibility with older clients.
  69. if (requester.device_id is not None and
  70. device_id != requester.device_id):
  71. logger.warning("Client uploading keys for a different device "
  72. "(logged in as %s, uploading for %s)",
  73. requester.device_id, device_id)
  74. else:
  75. device_id = requester.device_id
  76. if device_id is None:
  77. raise SynapseError(
  78. 400,
  79. "To upload keys, you must pass device_id when authenticating"
  80. )
  81. if body:
  82. # They're actually trying to upload something, proxy to main synapse.
  83. # Pass through the auth headers, if any, in case the access token
  84. # is there.
  85. auth_headers = request.requestHeaders.getRawHeaders(b"Authorization", [])
  86. headers = {
  87. "Authorization": auth_headers,
  88. }
  89. result = yield self.http_client.post_json_get_json(
  90. self.main_uri + request.uri,
  91. body,
  92. headers=headers,
  93. )
  94. defer.returnValue((200, result))
  95. else:
  96. # Just interested in counts.
  97. result = yield self.store.count_e2e_one_time_keys(user_id, device_id)
  98. defer.returnValue((200, {"one_time_key_counts": result}))
  99. class FrontendProxySlavedStore(
  100. SlavedDeviceStore,
  101. SlavedClientIpStore,
  102. SlavedApplicationServiceStore,
  103. SlavedRegistrationStore,
  104. BaseSlavedStore,
  105. ):
  106. pass
  107. class FrontendProxyServer(HomeServer):
  108. def setup(self):
  109. logger.info("Setting up.")
  110. self.datastore = FrontendProxySlavedStore(self.get_db_conn(), self)
  111. logger.info("Finished setting up.")
  112. def _listen_http(self, listener_config):
  113. port = listener_config["port"]
  114. bind_addresses = listener_config["bind_addresses"]
  115. site_tag = listener_config.get("tag", port)
  116. resources = {}
  117. for res in listener_config["resources"]:
  118. for name in res["names"]:
  119. if name == "metrics":
  120. resources[METRICS_PREFIX] = MetricsResource(RegistryProxy)
  121. elif name == "client":
  122. resource = JsonResource(self, canonical_json=False)
  123. KeyUploadServlet(self).register(resource)
  124. resources.update({
  125. "/_matrix/client/r0": resource,
  126. "/_matrix/client/unstable": resource,
  127. "/_matrix/client/v2_alpha": resource,
  128. "/_matrix/client/api/v1": resource,
  129. })
  130. root_resource = create_resource_tree(resources, NoResource())
  131. _base.listen_tcp(
  132. bind_addresses,
  133. port,
  134. SynapseSite(
  135. "synapse.access.http.%s" % (site_tag,),
  136. site_tag,
  137. listener_config,
  138. root_resource,
  139. self.version_string,
  140. )
  141. )
  142. logger.info("Synapse client reader now listening on port %d", port)
  143. def start_listening(self, listeners):
  144. for listener in listeners:
  145. if listener["type"] == "http":
  146. self._listen_http(listener)
  147. elif listener["type"] == "manhole":
  148. _base.listen_tcp(
  149. listener["bind_addresses"],
  150. listener["port"],
  151. manhole(
  152. username="matrix",
  153. password="rabbithole",
  154. globals={"hs": self},
  155. )
  156. )
  157. elif listener["type"] == "metrics":
  158. if not self.get_config().enable_metrics:
  159. logger.warn(("Metrics listener configured, but "
  160. "collect_metrics is not enabled!"))
  161. else:
  162. _base.listen_metrics(listener["bind_addresses"],
  163. listener["port"])
  164. else:
  165. logger.warn("Unrecognized listener type: %s", listener["type"])
  166. self.get_tcp_replication().start_replication(self)
  167. def build_tcp_replication(self):
  168. return ReplicationClientHandler(self.get_datastore())
  169. def start(config_options):
  170. try:
  171. config = HomeServerConfig.load_config(
  172. "Synapse frontend proxy", config_options
  173. )
  174. except ConfigError as e:
  175. sys.stderr.write("\n" + e.message + "\n")
  176. sys.exit(1)
  177. assert config.worker_app == "synapse.app.frontend_proxy"
  178. assert config.worker_main_http_uri is not None
  179. setup_logging(config, use_worker_options=True)
  180. events.USE_FROZEN_DICTS = config.use_frozen_dicts
  181. database_engine = create_engine(config.database_config)
  182. tls_server_context_factory = context_factory.ServerContextFactory(config)
  183. ss = FrontendProxyServer(
  184. config.server_name,
  185. db_config=config.database_config,
  186. tls_server_context_factory=tls_server_context_factory,
  187. config=config,
  188. version_string="Synapse/" + get_version_string(synapse),
  189. database_engine=database_engine,
  190. )
  191. ss.setup()
  192. ss.start_listening(config.worker_listeners)
  193. def start():
  194. ss.get_state_handler().start_caching()
  195. ss.get_datastore().start_profiling()
  196. reactor.callWhenRunning(start)
  197. _base.start_worker_reactor("synapse-frontend-proxy", config)
  198. if __name__ == '__main__':
  199. with LoggingContext("main"):
  200. start(sys.argv[1:])