grapevine/src/api/client_server/user_directory.rs

use ruma::{
    api::client::user_directory::search_users,
    events::{
        room::join_rules::{JoinRule, RoomJoinRulesEventContent},
        StateEventType,
    },
};

use crate::{services, Result, Ruma, RumaResponse};

/// # `POST /_matrix/client/r0/user_directory/search`
///
/// Searches all known users for a match.
///
/// - Hides any local users that aren't in any public rooms (i.e. those that
///   have the join rule set to public)
/// and don't share a room with the sender
pub(crate) async fn search_users_route(
    body: Ruma<search_users::v3::Request>,
) -> Result<RumaResponse<search_users::v3::Response>> {
    let sender_user = body.sender_user.as_ref().expect("user is authenticated");
    let limit = body.limit.try_into().unwrap_or(usize::MAX);

    let mut users = services().users.iter().filter_map(|user_id| {
        let user_id = user_id.ok()?;

        let user = search_users::v3::User {
            user_id: user_id.clone(),
            display_name: services().users.displayname(&user_id).ok()?,
            avatar_url: services().users.avatar_url(&user_id).ok()?,
        };

        let user_id_matches = user
            .user_id
            .to_string()
            .to_lowercase()
            .contains(&body.search_term.to_lowercase());

        let user_displayname_matches = user
            .display_name
            .as_ref()
            .filter(|name| {
                name.to_lowercase().contains(&body.search_term.to_lowercase())
            })
            .is_some();

        if !user_id_matches && !user_displayname_matches {
            return None;
        }

        // It's a matching user, but is the sender allowed to see them?
        let mut user_visible = false;

        let user_is_in_public_rooms = services()
            .rooms
            .state_cache
            .rooms_joined(&user_id)
            .filter_map(Result::ok)
            .any(|room| {
                services()
                    .rooms
                    .state_accessor
                    .room_state_get(&room, &StateEventType::RoomJoinRules, "")
                    .map_or(false, |event| {
                        event.map_or(false, |event| {
                            serde_json::from_str(event.content.get()).map_or(
                                false,
                                |r: RoomJoinRulesEventContent| {
                                    r.join_rule == JoinRule::Public
                                },
                            )
                        })
                    })
            });

        if user_is_in_public_rooms {
            user_visible = true;
        } else {
            let user_is_in_shared_rooms = services()
                .rooms
                .user
                .get_shared_rooms(vec![sender_user.clone(), user_id])
                .ok()?
                .next()
                .is_some();

            if user_is_in_shared_rooms {
                user_visible = true;
            }
        }

        if !user_visible {
            return None;
        }

        Some(user)
    });

    let results = users.by_ref().take(limit).collect();
    let limited = users.next().is_some();

    Ok(RumaResponse(search_users::v3::Response {
        results,
        limited,
    }))
}