Federation Refactoring & Architecture Improvements (#930)

* initial commit

* add lists

* update permissions

* fix waypoint create

* needs_full_sync for activitypub trails

* fixes build issues

* fix list get

* further CSRF protection

* update API docs

* adds rate limiter

* fix tiptap mentions

* a bit more cleanup of main.go

* Fix migration order

* fixes reviewed notes

* require context for activitpub server calls

* improve hashing for identifier

* fix copy paste error

* fix sync trail/list issues

* fix summit log/comment duplicates

* adaptions after trail merge

* fix dockerignore

---------

Co-authored-by: Christian Beutel <>
Co-authored-by: slothful-vassal <89943360+slothful-vassal@users.noreply.github.com>

db/routes/integration_komoot.go

@@ -0,0 +1,58 @@
+package routes
+
+import (
+	"encoding/json"
+	"net/http"
+	"os"
+	"pocketbase/integrations/komoot"
+
+	"github.com/pocketbase/dbx"
+	"github.com/pocketbase/pocketbase/apis"
+	"github.com/pocketbase/pocketbase/core"
+	"github.com/pocketbase/pocketbase/tools/security"
+)
+
+func IntegrationKommotLogin(e *core.RequestEvent) error {
+	encryptionKey := os.Getenv("POCKETBASE_ENCRYPTION_KEY")
+	if len(encryptionKey) == 0 {
+		return apis.NewBadRequestError("POCKETBASE_ENCRYPTION_KEY not set", nil)
+	}
+
+	userId := ""
+	if e.Auth != nil {
+		userId = e.Auth.Id
+	} else {
+		return e.UnauthorizedError("authentication required", nil)
+	}
+
+	integrations, err := e.App.FindAllRecords("integrations", dbx.NewExp("user = {:id}", dbx.Params{"id": userId}))
+	if err != nil {
+		return err
+	}
+	if len(integrations) == 0 {
+		return apis.NewBadRequestError("user has no integration", nil)
+	}
+	integration := integrations[0]
+	komootString := integration.GetString("komoot")
+	if len(komootString) == 0 {
+		return apis.NewBadRequestError("komoot integration missing", nil)
+	}
+	var komootIntegration komoot.KomootIntegration
+	err = json.Unmarshal([]byte(komootString), &komootIntegration)
+	if err != nil {
+		return err
+	}
+	decryptedPassword, err := security.Decrypt(komootIntegration.Password, encryptionKey)
+	if err != nil {
+		return err
+	}
+
+	k := &komoot.KomootApi{}
+
+	err = k.Login(komootIntegration.Email, string(decryptedPassword))
+	if err != nil {
+		return apis.NewUnauthorizedError("invalid credentials", nil)
+	}
+
+	return e.JSON(http.StatusOK, nil)
+}