Restrict bots from creating servers, groups, acking messages, and making friends.

src/routes/channels/channel_ack.rs

@@ -7,6 +7,10 @@ use mongodb::options::UpdateOptions;
 
 #[put("/<target>/ack/<message>")]
 pub async fn req(user: User, target: Ref, message: Ref) -> Result<()> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let target = target.fetch_channel().await?;
 
     let perm = permissions::PermissionCalculator::new(&user)

src/routes/channels/group_create.rs

@@ -24,6 +24,10 @@ pub struct Data {
 
 #[post("/create", data = "<info>")]
 pub async fn req(user: User, info: Json<Data>) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let info = info.into_inner();
     info.validate()
         .map_err(|error| Error::FailedValidation { error })?;

src/routes/invites/invite_join.rs

@@ -1,10 +1,14 @@
 use crate::database::*;
-use crate::util::result::Result;
+use crate::util::result::{Error, Result};
 
 use rocket::serde::json::Value;
 
 #[post("/<target>")]
 pub async fn req(user: User, target: Ref) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let target = target.fetch_invite().await?;
 
     match target {

src/routes/servers/server_ack.rs

@@ -3,6 +3,10 @@ use crate::util::result::{Error, Result};
 
 #[put("/<target>/ack")]
 pub async fn req(user: User, target: Ref) -> Result<()> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let target = target.fetch_server().await?;
 
     let perm = permissions::PermissionCalculator::new(&user)

src/routes/servers/server_create.rs

@@ -22,6 +22,10 @@ pub struct Data {
 
 #[post("/create", data = "<info>")]
 pub async fn req(user: User, info: Json<Data>) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let info = info.into_inner();
     info.validate()
         .map_err(|error| Error::FailedValidation { error })?;

src/routes/sync/get_settings.rs

@@ -13,6 +13,10 @@ pub struct Options {
 
 #[post("/settings/fetch", data = "<options>")]
 pub async fn req(user: User, options: Json<Options>) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let options = options.into_inner();
     let mut projection = doc! {
         "_id": 0,

src/routes/sync/get_unreads.rs

@@ -6,5 +6,9 @@ use rocket::serde::json::Value;
 
 #[get("/unreads")]
 pub async fn req(user: User) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     Ok(json!(User::fetch_unreads(&user.id).await?))
 }

src/routes/sync/set_settings.rs

@@ -19,6 +19,10 @@ pub struct Options {
 
 #[post("/settings/set?<options..>", data = "<data>")]
 pub async fn req(user: User, data: Json<Data>, options: Options) -> Result<()> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let data = data.into_inner();
     let current_time = Utc::now().timestamp_millis();
     let timestamp = if let Some(timestamp) = options.timestamp {

src/routes/users/add_friend.rs

@@ -9,6 +9,10 @@ use rocket::serde::json::Value;
 
 #[put("/<username>/friend")]
 pub async fn req(user: User, username: String) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+
     let col = get_collection("users");
     let doc = col
         .find_one(

src/routes/users/block_user.rs

@@ -8,8 +8,11 @@ use rocket::serde::json::Value;
 
 #[put("/<target>/block")]
 pub async fn req(user: User, target: Ref) -> Result<Value> {
-    let col = get_collection("users");
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
 
+    let col = get_collection("users");
     let target = target.fetch_user().await?;
 
     match get_relationship(&user, &target.id) {

src/routes/users/change_username.rs

@@ -32,6 +32,10 @@ pub async fn req(
     data: Json<Data>,
     _ignore_id: String,
 ) -> Result<()> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     data.validate()
         .map_err(|error| Error::FailedValidation { error })?;
 

src/routes/users/fetch_relationship.rs

@@ -1,9 +1,13 @@
 use crate::database::*;
-use crate::util::result::Result;
+use crate::util::result::{Error, Result};
 
 use rocket::serde::json::Value;
 
 #[get("/<target>/relationship")]
 pub async fn req(user: User, target: Ref) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     Ok(json!({ "status": get_relationship(&user, &target.id) }))
 }

src/routes/users/fetch_relationships.rs

@@ -1,10 +1,14 @@
 use crate::database::*;
-use crate::util::result::Result;
+use crate::util::result::{Error, Result};
 
 use rocket::serde::json::Value;
 
 #[get("/relationships")]
 pub async fn req(user: User) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     Ok(if let Some(vec) = user.relations {
         json!(vec)
     } else {

src/routes/users/remove_friend.rs

@@ -8,8 +8,11 @@ use rocket::serde::json::Value;
 
 #[delete("/<target>/friend")]
 pub async fn req(user: User, target: Ref) -> Result<Value> {
-    let col = get_collection("users");
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
 
+    let col = get_collection("users");
     let target = target.fetch_user().await?;
 
     match get_relationship(&user, &target.id) {

src/routes/users/unblock_user.rs

@@ -8,6 +8,10 @@ use rocket::serde::json::Value;
 
 #[delete("/<target>/block")]
 pub async fn req(user: User, target: Ref) -> Result<Value> {
+    if user.bot.is_some() {
+        return Err(Error::IsBot)
+    }
+    
     let col = get_collection("users");
     let target = target.fetch_user().await?;
 

src/util/result.rs

@@ -46,6 +46,7 @@ pub enum Error {
 
     // ? Bot related errors.
     ReachedMaximumBots,
+    IsBot,
 
     // ? General errors.
     TooManyIds,
@@ -102,6 +103,7 @@ impl<'r> Responder<'r, 'static> for Error {
             Error::Banned => Status::Forbidden,
 
             Error::ReachedMaximumBots => Status::BadRequest,
+            Error::IsBot => Status::BadRequest,
 
             Error::FailedValidation { .. } => Status::UnprocessableEntity,
             Error::DatabaseError { .. } => Status::InternalServerError,