feat: clean up bot restrictions

Cargo.lock

@@ -2999,7 +2999,7 @@ dependencies = [
 [[package]]
 name = "revolt-quark"
 version = "0.1.0"
-source = "git+https://github.com/revoltchat/quark?rev=e70a32d0a0a7e401c9c493ab1e557924e28ddf8a#e70a32d0a0a7e401c9c493ab1e557924e28ddf8a"
+source = "git+https://github.com/revoltchat/quark?rev=e5e8cae091eb7220cd37837494ece966e28cbe81#e5e8cae091eb7220cd37837494ece966e28cbe81"
 dependencies = [
  "async-recursion",
  "async-std",

Cargo.toml

@@ -64,5 +64,5 @@ schemars = "0.8.8"
 rocket_okapi = { git = "https://github.com/insertish/okapi", rev = "dcf0df115596ee07a587a7a543cddf3d7944645b", features = [ "swagger" ] }
 
 # quark
-revolt-quark = { git = "https://github.com/revoltchat/quark", rev = "e70a32d0a0a7e401c9c493ab1e557924e28ddf8a" }
+revolt-quark = { git = "https://github.com/revoltchat/quark", rev = "e5e8cae091eb7220cd37837494ece966e28cbe81" }
 # revolt-quark = { path = "../quark" }

src/routes/channels/channel_ack.rs

@@ -1,4 +1,4 @@
-use revolt_quark::{models::User, perms, Db, EmptyResponse, Permission, Ref, Result};
+use revolt_quark::{models::User, perms, Db, EmptyResponse, Error, Permission, Ref, Result};
 
 /// # Acknowledge Message
 ///
@@ -6,6 +6,10 @@ use revolt_quark::{models::User, perms, Db, EmptyResponse, Permission, Ref, Resu
 #[openapi(tag = "Messaging")]
 #[put("/<target>/ack/<message>")]
 pub async fn req(db: &Db, user: User, target: Ref, message: Ref) -> Result<EmptyResponse> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let channel = target.as_channel(db).await?;
     perms(&user)
         .channel(&channel)

src/routes/channels/group_add_member.rs

@@ -9,6 +9,10 @@ use revolt_quark::{
 #[openapi(tag = "Groups")]
 #[put("/<target>/recipients/<member>")]
 pub async fn req(db: &Db, user: User, target: Ref, member: Ref) -> Result<EmptyResponse> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let mut channel = target.as_channel(db).await?;
     perms(&user)
         .channel(&channel)

src/routes/channels/group_create.rs

@@ -37,6 +37,10 @@ pub struct DataCreateGroup {
 #[openapi(tag = "Groups")]
 #[post("/create", data = "<info>")]
 pub async fn req(db: &Db, user: User, info: Json<DataCreateGroup>) -> Result<Json<Channel>> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let info = info.into_inner();
     info.validate()
         .map_err(|error| Error::FailedValidation { error })?;

src/routes/channels/group_remove_member.rs

@@ -9,6 +9,10 @@ use revolt_quark::{
 #[openapi(tag = "Groups")]
 #[delete("/<target>/recipients/<member>")]
 pub async fn req(db: &Db, user: User, target: Ref, member: Ref) -> Result<EmptyResponse> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let channel = target.as_channel(db).await?;
 
     match &channel {

src/routes/channels/invite_create.rs

@@ -1,6 +1,6 @@
 use revolt_quark::{
     models::{Invite, User},
-    perms, Db, Permission, Ref, Result,
+    perms, Db, Error, Permission, Ref, Result,
 };
 
 use rocket::serde::json::Json;
@@ -13,6 +13,10 @@ use rocket::serde::json::Json;
 #[openapi(tag = "Channel Invites")]
 #[post("/<target>/invites")]
 pub async fn req(db: &Db, user: User, target: Ref) -> Result<Json<Invite>> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let channel = target.as_channel(db).await?;
     perms(&user)
         .channel(&channel)

src/routes/channels/members_fetch.rs

@@ -11,6 +11,10 @@ use rocket::serde::json::Json;
 #[openapi(tag = "Groups")]
 #[get("/<target>/members")]
 pub async fn req(db: &Db, user: User, target: Ref) -> Result<Json<Vec<User>>> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let channel = target.as_channel(db).await?;
     perms(&user)
         .channel(&channel)

src/routes/channels/message_search.rs

@@ -48,6 +48,10 @@ pub async fn req(
     target: Ref,
     options: Json<OptionsMessageSearch>,
 ) -> Result<Json<BulkMessageResponse>> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let options = options.into_inner();
     options
         .validate()

src/routes/servers/invites_fetch.rs

@@ -1,6 +1,6 @@
 use revolt_quark::{
     models::{Invite, User},
-    perms, Db, Permission, Ref, Result,
+    perms, Db, Error, Permission, Ref, Result,
 };
 
 use rocket::serde::json::Json;
@@ -11,6 +11,10 @@ use rocket::serde::json::Json;
 #[openapi(tag = "Server Members")]
 #[get("/<target>/invites")]
 pub async fn req(db: &Db, user: User, target: Ref) -> Result<Json<Vec<Invite>>> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let server = target.as_server(db).await?;
     perms(&user)
         .server(&server)

src/routes/servers/server_ack.rs

@@ -1,4 +1,4 @@
-use revolt_quark::{models::User, perms, Db, EmptyResponse, Ref, Result};
+use revolt_quark::{models::User, perms, Db, EmptyResponse, Error, Ref, Result};
 
 /// # Mark Server As Read
 ///
@@ -6,6 +6,10 @@ use revolt_quark::{models::User, perms, Db, EmptyResponse, Ref, Result};
 #[openapi(tag = "Server Information")]
 #[put("/<target>/ack")]
 pub async fn req(db: &Db, user: User, target: Ref) -> Result<EmptyResponse> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let server = target.as_server(db).await?;
     perms(&user).server(&server).calc(db).await?;
 

src/routes/users/add_friend.rs

@@ -1,5 +1,5 @@
 use revolt_quark::models::User;
-use revolt_quark::{Database, Result};
+use revolt_quark::{Database, Error, Result};
 
 use rocket::serde::json::Json;
 use rocket::State;
@@ -11,6 +11,11 @@ use rocket::State;
 #[put("/<username>/friend")]
 pub async fn req(db: &State<Database>, user: User, username: String) -> Result<Json<User>> {
     let mut target = db.fetch_user_by_username(&username).await?;
+
+    if user.bot.is_some() || target.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     user.add_friend(db, &mut target).await?;
     Ok(Json(target.with_auto_perspective(db, &user).await))
 }

src/routes/users/find_mutual.rs

@@ -24,6 +24,10 @@ pub async fn req(db: &State<Database>, user: User, target: Ref) -> Result<Json<M
         return Err(Error::InvalidOperation);
     }
 
+    if user.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     let target = target.as_user(db).await?;
 
     if perms(&user)

src/routes/users/remove_friend.rs

@@ -1,5 +1,5 @@
 use revolt_quark::models::User;
-use revolt_quark::{Database, Result};
+use revolt_quark::{Database, Error, Result};
 
 use rocket::serde::json::Json;
 use rocket::State;
@@ -11,6 +11,11 @@ use rocket::State;
 #[delete("/<target>/friend")]
 pub async fn req(db: &State<Database>, user: User, target: String) -> Result<Json<User>> {
     let mut target = db.fetch_user(&target).await?;
+
+    if user.bot.is_some() || target.bot.is_some() {
+        return Err(Error::IsBot);
+    }
+
     user.remove_friend(db, &mut target).await?;
     Ok(Json(target.with_auto_perspective(db, &user).await))
 }

src/util/ratelimiter.rs

@@ -136,7 +136,7 @@ fn resolve_bucket_limit(bucket: &str) -> u8 {
         "messaging" => 10,
         "channels" => 15,
         "servers" => 5,
-        "auth" => 3,
+        "auth" => 15,
         "auth_delete" => 255,
         "swagger" => 100,
         _ => 20,