From f49cc808867734795f486811b4af0a2f21ecfa69 Mon Sep 17 00:00:00 2001
From: trisua <tri@swmff.org>
Date: Wed, 9 Apr 2025 00:10:58 -0400
Subject: [PATCH] add: profile and community opengraph tags

---
 .../app/src/public/html/communities/base.html | 30 +++++++++++++++++++
 crates/app/src/public/html/profile/base.html  | 30 +++++++++++++++++++
 crates/app/src/routes/api/v1/auth/images.rs   | 16 ++++++++--
 crates/core/src/config.rs                     |  9 ++++++
 crates/core/src/database/auth.rs              |  8 ++---
 example/tetratto.toml                         |  1 +
 6 files changed, 86 insertions(+), 8 deletions(-)

diff --git a/crates/app/src/public/html/communities/base.html b/crates/app/src/public/html/communities/base.html
index a98c6ff..c9a2130 100644
--- a/crates/app/src/public/html/communities/base.html
+++ b/crates/app/src/public/html/communities/base.html
@@ -1,5 +1,35 @@
 {% extends "root.html" %} {% block head %}
 <title>{{ community.context.display_name }} - {{ config.name }}</title>
+
+<meta name="og:title" content="{{ community.title }}" />
+<meta
+    name="description"
+    content='View the "{{ community.title }}" community on {{ config.name }}!'
+/>
+<meta
+    name="og:description"
+    content='View the "{{ community.title }}" community on {{ config.name }}!'
+/>
+
+<meta property="og:type" content="profile" />
+<meta property="profile:username" content="{{ community.title }}" />
+
+<meta
+    name="og:image"
+    content="{{ config.host|safe }}/api/v1/communities/{{ community.id }}/avatar"
+/>
+
+<meta
+    name="twitter:image"
+    content="{{ config.host|safe }}/api/v1/communities/{{ community.id }}/avatar"
+/>
+
+<meta name="twitter:card" content="summary" />
+<meta name="twitter:title" content="{{ community.title }}" />
+<meta
+    name="twitter:description"
+    content='View the "{{ community.title }}" community on {{ config.name }}!'
+/>
 {% endblock %} {% block body %} {{ macros::nav() }}
 <article>
     <div class="content_container flex flex-col gap-4">
diff --git a/crates/app/src/public/html/profile/base.html b/crates/app/src/public/html/profile/base.html
index 0504174..410755e 100644
--- a/crates/app/src/public/html/profile/base.html
+++ b/crates/app/src/public/html/profile/base.html
@@ -1,5 +1,35 @@
 {% extends "root.html" %} {% block head %}
 <title>{{ profile.username }} - {{ config.name }}</title>
+
+<meta name="og:title" content="{{ profile.username }}" />
+<meta
+    name="description"
+    content="View @{{ profile.username }}'s profile on {{ config.name }}!"
+/>
+<meta
+    name="og:description"
+    content="View @{{ profile.username }}'s profile on {{ config.name }}!"
+/>
+
+<meta property="og:type" content="profile" />
+<meta property="profile:username" content="{{ profile.username }}" />
+
+<meta
+    name="og:image"
+    content="{{ config.host|safe }}/api/v1/auth/user/{{ profile.username }}/avatar?selector_type=username"
+/>
+
+<meta
+    name="twitter:image"
+    content="{{ config.host|safe }}/api/v1/auth/user/{{ profile.username }}/avatar?selector_type=username"
+/>
+
+<meta name="twitter:card" content="summary" />
+<meta name="twitter:title" content="{{ profile.username }}" />
+<meta
+    name="twitter:description"
+    content="View @{{ profile.username }}'s profile on {{ config.name }}!"
+/>
 {% endblock %} {% block body %} {{ macros::nav() }}
 <article>
     <div class="content_container flex flex-col gap-4">
diff --git a/crates/app/src/routes/api/v1/auth/images.rs b/crates/app/src/routes/api/v1/auth/images.rs
index 3c0fd56..bea651d 100644
--- a/crates/app/src/routes/api/v1/auth/images.rs
+++ b/crates/app/src/routes/api/v1/auth/images.rs
@@ -52,8 +52,20 @@ pub async fn avatar_request(
     let data = &(data.read().await).0;
 
     let user = match if req.selector_type == AvatarSelectorType::Id {
-        data.get_user_by_id(selector.parse::<usize>().unwrap())
-            .await
+        data.get_user_by_id(match selector.parse::<usize>() {
+            Ok(d) => d,
+            Err(_) => {
+                return (
+                    [("Content-Type", "image/svg+xml")],
+                    Body::from(read_image(PathBufD::current().extend(&[
+                        data.0.dirs.media.as_str(),
+                        "images",
+                        "default-avatar.svg",
+                    ]))),
+                );
+            }
+        })
+        .await
     } else {
         data.get_user_by_username(&selector).await
     } {
diff --git a/crates/core/src/config.rs b/crates/core/src/config.rs
index 608d4a6..916cd72 100644
--- a/crates/core/src/config.rs
+++ b/crates/core/src/config.rs
@@ -173,6 +173,10 @@ pub struct Config {
     /// order to prevent a way too easy DOS.
     #[serde(default = "default_banned_hosts")]
     pub banned_hosts: Vec<String>,
+    /// The main public host of the server. **Not** used to check against banned hosts,
+    /// so this host should be included in there as well.
+    #[serde(default = "default_host")]
+    pub host: String,
     /// Database security.
     #[serde(default = "default_security")]
     pub security: SecurityConfig,
@@ -222,6 +226,10 @@ fn default_banned_hosts() -> Vec<String> {
     Vec::new()
 }
 
+fn default_host() -> String {
+    String::new()
+}
+
 fn default_security() -> SecurityConfig {
     SecurityConfig::default()
 }
@@ -268,6 +276,7 @@ impl Default for Config {
             color: default_color(),
             port: default_port(),
             banned_hosts: default_banned_hosts(),
+            host: default_host(),
             database: default_database(),
             security: default_security(),
             dirs: default_dirs(),
diff --git a/crates/core/src/database/auth.rs b/crates/core/src/database/auth.rs
index 1510927..8f2f3c4 100644
--- a/crates/core/src/database/auth.rs
+++ b/crates/core/src/database/auth.rs
@@ -423,9 +423,7 @@ impl DataManager {
     pub fn check_totp(&self, ua: &User, code: &str) -> bool {
         let totp = ua.totp(Some(
             self.0
-                .banned_hosts
-                .get(0)
-                .unwrap_or(&"https://tetratto.com".to_string())
+                .host
                 .replace("http://", "")
                 .replace("https://", "")
                 .replace(":", "_"),
@@ -527,9 +525,7 @@ impl DataManager {
         // get totp
         let totp = other_user.totp(Some(
             self.0
-                .banned_hosts
-                .get(0)
-                .unwrap_or(&"https://tetratto.com".to_string())
+                .host
                 .replace("http://", "")
                 .replace("https://", "")
                 .replace(":", "_"),
diff --git a/example/tetratto.toml b/example/tetratto.toml
index 1ecc882..f97e9cc 100644
--- a/example/tetratto.toml
+++ b/example/tetratto.toml
@@ -4,6 +4,7 @@ color = "#c9b1bc"
 port = 4118
 banned_hosts = []
 no_track = []
+host = "http://localhost:4118"
 banned_usernames = [
     "admin",
     "owner",