import { Meteor } from 'meteor/meteor'; import { check } from 'meteor/check'; import moment from 'moment'; import { api } from '@rocket.chat/core-services'; import { Messages, Users } from '@rocket.chat/models'; import type { AtLeast, IMessage, IUser } from '@rocket.chat/core-typings'; import type { ServerMethods } from '@rocket.chat/ui-contexts'; import { canSendMessageAsync } from '../../../authorization/server/functions/canSendMessage'; import { hasPermissionAsync } from '../../../authorization/server/functions/hasPermission'; import { metrics } from '../../../metrics/server'; import { settings } from '../../../settings/server'; import { sendMessage } from '../functions'; import { RateLimiter } from '../lib'; import { SystemLogger } from '../../../../server/lib/logger/system'; import { i18n } from '../../../../server/lib/i18n'; export async function executeSendMessage(uid: IUser['_id'], message: AtLeast) { if (message.tshow && !message.tmid) { throw new Meteor.Error('invalid-params', 'tshow provided but missing tmid', { method: 'sendMessage', }); } if (message.tmid && !settings.get('Threads_enabled')) { throw new Meteor.Error('error-not-allowed', 'not-allowed', { method: 'sendMessage', }); } if (message.ts) { const tsDiff = Math.abs(moment(message.ts).diff(Date.now())); if (tsDiff > 60000) { throw new Meteor.Error('error-message-ts-out-of-sync', 'Message timestamp is out of sync', { method: 'sendMessage', message_ts: message.ts, server_ts: new Date().getTime(), }); } else if (tsDiff > 10000) { message.ts = new Date(); } } else { message.ts = new Date(); } if (message.msg) { if (message.msg.length > (settings.get('Message_MaxAllowedSize') ?? 0)) { throw new Meteor.Error('error-message-size-exceeded', 'Message size exceeds Message_MaxAllowedSize', { method: 'sendMessage', }); } } const user = await Users.findOneById(uid, { projection: { username: 1, type: 1, name: 1, }, }); if (!user?.username) { throw new Meteor.Error('error-invalid-user', 'Invalid user'); } let { rid } = message; // do not allow nested threads if (message.tmid) { const parentMessage = await Messages.findOneById(message.tmid, { projection: { rid: 1, tmid: 1 } }); message.tmid = parentMessage?.tmid || message.tmid; if (parentMessage?.rid) { rid = parentMessage?.rid; } } if (!rid) { throw new Error("The 'rid' property on the message object is missing."); } try { const room = await canSendMessageAsync(rid, { uid, username: user.username, type: user.type }); metrics.messagesSent.inc(); // TODO This line needs to be moved to it's proper place. See the comments on: https://github.com/RocketChat/Rocket.Chat/pull/5736 return sendMessage(user, message, room, false); } catch (err: any) { SystemLogger.error({ msg: 'Error sending message:', err }); const errorMessage = typeof err === 'string' ? err : err.error || err.message; void api.broadcast('notify.ephemeralMessage', uid, message.rid, { msg: i18n.t(errorMessage, { lng: user.language }), }); if (typeof err === 'string') { throw new Error(err); } throw err; } } declare module '@rocket.chat/ui-contexts' { // eslint-disable-next-line @typescript-eslint/naming-convention interface ServerMethods { sendMessage(message: AtLeast): any; } } Meteor.methods({ sendMessage(message) { check(message, Object); const uid = Meteor.userId(); if (!uid) { throw new Meteor.Error('error-invalid-user', 'Invalid user', { method: 'sendMessage', }); } try { return executeSendMessage(uid, message); } catch (error: any) { if ((error.error || error.message) === 'error-not-allowed') { throw new Meteor.Error(error.error || error.message, error.reason, { method: 'sendMessage', }); } } }, }); // Limit a user, who does not have the "bot" role, to sending 5 msgs/second RateLimiter.limitMethod('sendMessage', 5, 1000, { async userId(userId: IUser['_id']) { return !(await hasPermissionAsync(userId, 'send-many-messages')); }, });