git.squeep.com Git - akkoma/blob - lib/pleroma/web/mastodon_api/mastodon_api_controller.ex

   1 defmodule Pleroma.Web.MastodonAPI.MastodonAPIController do
   2   use Pleroma.Web, :controller
   3   alias Pleroma.{Repo, Activity, User, Notification}
   4   alias Pleroma.Web
   5   alias Pleroma.Web.MastodonAPI.{StatusView, AccountView, MastodonView}
   6   alias Pleroma.Web.ActivityPub.ActivityPub
   7   alias Pleroma.Web.TwitterAPI.TwitterAPI
   8   alias Pleroma.Web.{CommonAPI, OStatus}
   9   alias Pleroma.Web.OAuth.{Authorization, Token, App}
  10   alias Comeonin.Pbkdf2
  11   import Ecto.Query
  12   import Logger
  13
  14   def create_app(conn, params) do
  15     with cs <- App.register_changeset(%App{}, params) |> IO.inspect,
  16          {:ok, app} <- Repo.insert(cs) |> IO.inspect do
  17       res = %{
  18         id: app.id,
  19         client_id: app.client_id,
  20         client_secret: app.client_secret
  21       }
  22
  23       json(conn, res)
  24     end
  25   end
  26
  27   def update_credentials(%{assigns: %{user: user}} = conn, params) do
  28     params = if bio = params["note"] do
  29       Map.put(params, "bio", bio)
  30     else
  31       params
  32     end
  33
  34     params = if name = params["display_name"] do
  35       Map.put(params, "name", name)
  36     else
  37       params
  38     end
  39
  40     user = if avatar = params["avatar"] do
  41       with %Plug.Upload{} <- avatar,
  42            {:ok, object} <- ActivityPub.upload(avatar),
  43            change = Ecto.Changeset.change(user, %{avatar: object.data}),
  44            {:ok, user} = Repo.update(change) do
  45         user
  46       else
  47         _e -> user
  48       end
  49     else
  50       user
  51     end
  52
  53     user = if banner = params["header"] do
  54       with %Plug.Upload{} <- banner,
  55            {:ok, object} <- ActivityPub.upload(banner),
  56            new_info <- Map.put(user.info, "banner", object.data),
  57            change <- User.info_changeset(user, %{info: new_info}),
  58            {:ok, user} <- Repo.update(change) do
  59         user
  60       else
  61         _e -> user
  62       end
  63     else
  64       user
  65     end
  66
  67     with changeset <- User.update_changeset(user, params),
  68          {:ok, user} <- Repo.update(changeset) do
  69       json conn, AccountView.render("account.json", %{user: user})
  70     else
  71       _e ->
  72         conn
  73         |> put_status(403)
  74         |> json(%{error: "Invalid request"})
  75     end
  76   end
  77
  78   def verify_credentials(%{assigns: %{user: user}} = conn, params) do
  79     account = AccountView.render("account.json", %{user: user})
  80     json(conn, account)
  81   end
  82
  83   def user(conn, %{"id" => id}) do
  84     with %User{} = user <- Repo.get(User, id) do
  85       account = AccountView.render("account.json", %{user: user})
  86       json(conn, account)
  87     else
  88       _e -> conn
  89       |> put_status(404)
  90       |> json(%{error: "Can't find user"})
  91     end
  92   end
  93
  94   @instance Application.get_env(:pleroma, :instance)
  95
  96   def masto_instance(conn, _params) do
  97     response = %{
  98       uri: Web.base_url,
  99       title: Keyword.get(@instance, :name),
 100       description: "A Pleroma instance, an alternative fediverse server",
 101       version: Keyword.get(@instance, :version),
 102       email: Keyword.get(@instance, :email),
 103       urls: %{
 104         streaming_api: String.replace(Web.base_url, ["http","https"], "wss")
 105       },
 106       stats: %{
 107         user_count: 1,
 108         status_count: 2,
 109         domain_count: 3
 110       }
 111     }
 112
 113     json(conn, response)
 114   end
 115
 116   def custom_emojis(conn, _params) do
 117     mastodon_emoji = Pleroma.Formatter.get_custom_emoji()
 118     |> Enum.map(fn {shortcode, relative_url} ->
 119       url = to_string URI.merge(Web.base_url(), relative_url)
 120       %{
 121         "shortcode" => shortcode,
 122         "static_url" => url,
 123         "url" => url
 124       }
 125     end)
 126     json conn, mastodon_emoji
 127   end
 128
 129   defp add_link_headers(conn, method, activities) do
 130     last = List.last(activities)
 131     first = List.first(activities)
 132     if last do
 133       min = last.id
 134       max = first.id
 135       next_url = mastodon_api_url(Pleroma.Web.Endpoint, method, max_id: min)
 136       prev_url = mastodon_api_url(Pleroma.Web.Endpoint, method, since_id: max)
 137       conn
 138       |> put_resp_header("link", "<#{next_url}>; rel=\"next\", <#{prev_url}>; rel=\"prev\"")
 139     else
 140       conn
 141     end
 142   end
 143
 144   def home_timeline(%{assigns: %{user: user}} = conn, params) do
 145     params = params
 146     |> Map.put("type", ["Create", "Announce"])
 147     |> Map.put("blocking_user", user)
 148
 149     activities = ActivityPub.fetch_activities([user.ap_id | user.following], params)
 150     |> Enum.reverse
 151
 152     conn
 153     |> add_link_headers(:home_timeline, activities)
 154     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 155   end
 156
 157   def public_timeline(%{assigns: %{user: user}} = conn, params) do
 158     params = params
 159     |> Map.put("type", ["Create", "Announce"])
 160     |> Map.put("local_only", !!params["local"])
 161     |> Map.put("blocking_user", user)
 162
 163     activities = ActivityPub.fetch_public_activities(params)
 164     |> Enum.reverse
 165
 166     conn
 167     |> add_link_headers(:public_timeline, activities)
 168     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 169   end
 170
 171   # TODO: Link headers
 172   def user_statuses(%{assigns: %{user: user}} = conn, params) do
 173     with %User{ap_id: ap_id} <- Repo.get(User, params["id"]) do
 174       params = params
 175       |> Map.put("type", ["Create", "Announce"])
 176       |> Map.put("actor_id", ap_id)
 177       |> Map.put("whole_db", true)
 178
 179       activities = ActivityPub.fetch_activities([], params)
 180       |> Enum.reverse
 181
 182       render conn, StatusView, "index.json", %{activities: activities, for: user, as: :activity}
 183     end
 184   end
 185
 186   def get_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 187     with %Activity{} = activity <- Repo.get(Activity, id) do
 188       render conn, StatusView, "status.json", %{activity: activity, for: user}
 189     end
 190   end
 191
 192   def get_context(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 193     with %Activity{} = activity <- Repo.get(Activity, id),
 194          activities <- ActivityPub.fetch_activities_for_context(activity.data["object"]["context"], %{"blocking_user" => user}),
 195          activities <- activities |> Enum.filter(fn (%{id: aid}) -> to_string(aid) != to_string(id) end),
 196          grouped_activities <- Enum.group_by(activities, fn (%{id: id}) -> id < activity.id end) do
 197       result = %{
 198         ancestors: StatusView.render("index.json", for: user, activities: grouped_activities[true] || [], as: :activity) |> Enum.reverse,
 199         descendants: StatusView.render("index.json", for: user, activities: grouped_activities[false] || [], as: :activity) |> Enum.reverse,
 200       }
 201
 202       json(conn, result)
 203     end
 204   end
 205
 206   def post_status(%{assigns: %{user: user}} = conn, %{"status" => status} = params) do
 207     params = params
 208     |> Map.put("in_reply_to_status_id", params["in_reply_to_id"])
 209
 210     {:ok, activity} = CommonAPI.post(user, params)
 211     render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 212   end
 213
 214   def delete_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 215     with {:ok, %Activity{}} <- CommonAPI.delete(id, user) do
 216       json(conn, %{})
 217     else
 218       _e ->
 219         conn
 220         |> put_status(403)
 221         |> json(%{error: "Can't delete this post"})
 222     end
 223   end
 224
 225   def reblog_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 226     with {:ok, _announce, %{data: %{"id" => id}}} = CommonAPI.repeat(ap_id_or_id, user),
 227          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 228       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 229     end
 230   end
 231
 232   def fav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 233     with {:ok, _fav, %{data: %{"id" => id}}} = CommonAPI.favorite(ap_id_or_id, user),
 234          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 235       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 236     end
 237   end
 238
 239   def unfav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 240     with {:ok, %{data: %{"id" => id}}} = CommonAPI.unfavorite(ap_id_or_id, user),
 241          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 242       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 243     end
 244   end
 245
 246   def notifications(%{assigns: %{user: user}} = conn, params) do
 247     notifications = Notification.for_user(user, params)
 248     result = Enum.map(notifications, fn x ->
 249       render_notification(user, x)
 250     end)
 251     |> Enum.filter(&(&1))
 252
 253     conn
 254     |> add_link_headers(:notifications, notifications)
 255     |> json(result)
 256   end
 257
 258   def get_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 259     with {:ok, notification} <- Notification.get(user, id) do
 260       json(conn, render_notification(user, notification))
 261     else
 262       {:error, reason} ->
 263         conn
 264         |> put_resp_content_type("application/json")
 265         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 266     end
 267   end
 268
 269   def clear_notifications(%{assigns: %{user: user}} = conn, _params) do
 270     Notification.clear(user)
 271     json(conn, %{})
 272   end
 273
 274   def dismiss_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 275     with {:ok, _notif} <- Notification.dismiss(user, id) do
 276       json(conn, %{})
 277     else
 278       {:error, reason} ->
 279         conn
 280         |> put_resp_content_type("application/json")
 281         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 282     end
 283   end
 284
 285   def relationships(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 286     id = List.wrap(id)
 287     q = from u in User,
 288       where: u.id in ^id
 289     targets = Repo.all(q)
 290     render conn, AccountView, "relationships.json", %{user: user, targets: targets}
 291   end
 292
 293   def upload(%{assigns: %{user: user}} = conn, %{"file" => file}) do
 294     with {:ok, object} <- ActivityPub.upload(file) do
 295       data = object.data
 296       |> Map.put("id", object.id)
 297
 298       render conn, StatusView, "attachment.json", %{attachment: data}
 299     end
 300   end
 301
 302   def favourited_by(conn, %{"id" => id}) do
 303     with %Activity{data: %{"object" => %{"likes" => likes} = data}} <- Repo.get(Activity, id) do
 304       q = from u in User,
 305         where: u.ap_id in ^likes
 306       users = Repo.all(q)
 307       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 308     else
 309       _ -> json(conn, [])
 310     end
 311   end
 312
 313   def reblogged_by(conn, %{"id" => id}) do
 314     with %Activity{data: %{"object" => %{"announcements" => announces}}} <- Repo.get(Activity, id) do
 315       q = from u in User,
 316         where: u.ap_id in ^announces
 317       users = Repo.all(q)
 318       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 319     else
 320       _ -> json(conn, [])
 321     end
 322   end
 323
 324   # TODO: Link headers
 325   def hashtag_timeline(%{assigns: %{user: user}} = conn, params) do
 326     params = params
 327     |> Map.put("type", "Create")
 328     |> Map.put("local_only", !!params["local"])
 329     |> Map.put("blocking_user", user)
 330
 331     activities = ActivityPub.fetch_public_activities(params)
 332     |> Enum.reverse
 333
 334     conn
 335     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 336   end
 337
 338   # TODO: Pagination
 339   def followers(conn, %{"id" => id}) do
 340     with %User{} = user <- Repo.get(User, id),
 341          {:ok, followers} <- User.get_followers(user) do
 342       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 343     end
 344   end
 345
 346   def following(conn, %{"id" => id}) do
 347     with %User{} = user <- Repo.get(User, id),
 348          {:ok, followers} <- User.get_friends(user) do
 349       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 350     end
 351   end
 352
 353   def follow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 354     with %User{} = followed <- Repo.get(User, id),
 355          {:ok, follower} <- User.follow(follower, followed),
 356          {:ok, activity} <- ActivityPub.follow(follower, followed) do
 357       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 358     else
 359       {:error, message} = err ->
 360         conn
 361         |> put_resp_content_type("application/json")
 362         |> send_resp(403, Poison.encode!(%{"error" => message}))
 363     end
 364   end
 365
 366   def follow(%{assigns: %{user: follower}} = conn, %{"uri" => uri}) do
 367     with %User{} = followed <- Repo.get_by(User, nickname: uri),
 368          {:ok, follower} <- User.follow(follower, followed),
 369          {:ok, activity} <- ActivityPub.follow(follower, followed) do
 370       render conn, AccountView, "account.json", %{user: followed}
 371     else
 372       {:error, message} = err ->
 373         conn
 374         |> put_resp_content_type("application/json")
 375         |> send_resp(403, Poison.encode!(%{"error" => message}))
 376     end
 377   end
 378
 379   # TODO: Clean up and unify
 380   def unfollow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 381     with %User{} = followed <- Repo.get(User, id),
 382          { :ok, follower, follow_activity } <- User.unfollow(follower, followed),
 383          { :ok, _activity } <- ActivityPub.insert(%{
 384            "type" => "Undo",
 385            "actor" => follower.ap_id,
 386            "object" => follow_activity.data["id"] # get latest Follow for these users
 387          }) do
 388       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 389     end
 390   end
 391
 392   def block(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 393     with %User{} = blocked <- Repo.get(User, id),
 394          {:ok, blocker} <- User.block(blocker, blocked) do
 395       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 396     else
 397       {:error, message} = err ->
 398         conn
 399         |> put_resp_content_type("application/json")
 400         |> send_resp(403, Poison.encode!(%{"error" => message}))
 401     end
 402   end
 403
 404   def unblock(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 405     with %User{} = blocked <- Repo.get(User, id),
 406          {:ok, blocker} <- User.unblock(blocker, blocked) do
 407       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 408     else
 409       {:error, message} = err ->
 410         conn
 411         |> put_resp_content_type("application/json")
 412         |> send_resp(403, Poison.encode!(%{"error" => message}))
 413     end
 414   end
 415
 416   # TODO: Use proper query
 417   def blocks(%{assigns: %{user: user}} = conn, _) do
 418     with blocked_users <- user.info["blocks"] || [],
 419          accounts <- Enum.map(blocked_users, fn (ap_id) -> User.get_cached_by_ap_id(ap_id) end) do
 420       res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 421       json(conn, res)
 422     end
 423   end
 424
 425   def search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 426     accounts = User.search(query, params["resolve"] == "true")
 427
 428     fetched = if Regex.match?(~r/https?:/, query) do
 429       with {:ok, activities} <- OStatus.fetch_activity_from_url(query) do
 430         activities
 431       else
 432         _e -> []
 433       end
 434     end || []
 435
 436     q = from a in Activity,
 437       where: fragment("?->>'type' = 'Create'", a.data),
 438       where: fragment("to_tsvector('english', ?->'object'->>'content') @@ plainto_tsquery('english', ?)", a.data, ^query),
 439       limit: 20
 440     statuses = Repo.all(q) ++ fetched
 441
 442     res = %{
 443       "accounts" => AccountView.render("accounts.json", users: accounts, for: user, as: :user),
 444       "statuses" => StatusView.render("index.json", activities: statuses, for: user, as: :activity),
 445       "hashtags" => []
 446     }
 447
 448     json(conn, res)
 449   end
 450
 451   def account_search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 452     accounts = User.search(query, params["resolve"] == "true")
 453
 454     res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 455
 456     json(conn, res)
 457   end
 458
 459   def favourites(%{assigns: %{user: user}} = conn, params) do
 460     params = conn
 461     |> Map.put("type", "Create")
 462     |> Map.put("favorited_by", user.ap_id)
 463     |> Map.put("blocking_user", user)
 464
 465     activities = ActivityPub.fetch_activities([], params)
 466     |> Enum.reverse
 467
 468     conn
 469     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 470   end
 471
 472   def index(%{assigns: %{user: user}} = conn, _params) do
 473     token = conn
 474     |> get_session(:oauth_token)
 475
 476     if user && token do
 477       accounts = Map.put(%{}, user.id, AccountView.render("account.json", %{user: user}))
 478       initial_state = %{
 479         meta: %{
 480           streaming_api_base_url: String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
 481           access_token: token,
 482           locale: "en",
 483           domain: Pleroma.Web.Endpoint.host(),
 484           admin: "1",
 485           me: "#{user.id}",
 486           unfollow_modal: false,
 487           boost_modal: false,
 488           delete_modal: true,
 489           auto_play_gif: false,
 490           reduce_motion: false
 491         },
 492         compose: %{
 493           me: "#{user.id}",
 494           default_privacy: "public",
 495           default_sensitive: false
 496         },
 497         media_attachments: %{
 498           accept_content_types: [
 499             ".jpg",
 500             ".jpeg",
 501             ".png",
 502             ".gif",
 503             ".webm",
 504             ".mp4",
 505             ".m4v",
 506             "image\/jpeg",
 507             "image\/png",
 508             "image\/gif",
 509             "video\/webm",
 510             "video\/mp4"
 511           ]
 512         },
 513         settings: %{
 514           onboarded: true,
 515           home: %{
 516             shows: %{
 517               reblog: true,
 518               reply: true
 519             }
 520           },
 521           notifications: %{
 522             alerts: %{
 523               follow: true,
 524               favourite: true,
 525               reblog: true,
 526               mention: true
 527             },
 528             shows: %{
 529               follow: true,
 530               favourite: true,
 531               reblog: true,
 532               mention: true
 533             },
 534             sounds: %{
 535               follow: true,
 536               favourite: true,
 537               reblog: true,
 538               mention: true
 539             }
 540           }
 541         },
 542         push_subscription: nil,
 543         accounts: accounts,
 544         custom_emojis: %{}
 545       } |> Poison.encode!
 546       conn
 547       |> put_layout(false)
 548       |> render(MastodonView, "index.html", %{initial_state: initial_state})
 549     else
 550       conn
 551       |> redirect(to: "/web/login")
 552     end
 553   end
 554
 555   def login(conn, params) do
 556     conn
 557     |> render(MastodonView, "login.html")
 558   end
 559
 560   defp get_or_make_app() do
 561     with %App{} = app <- Repo.get_by(App, client_name: "Mastodon-Local") do
 562       {:ok, app}
 563     else
 564       _e ->
 565         cs = App.register_changeset(%App{}, %{client_name: "Mastodon-Local", redirect_uris: ".", scopes: "read,write,follow"})
 566         Repo.insert(cs)
 567     end
 568   end
 569
 570   def login_post(conn, %{"authorization" => %{ "name" => name, "password" => password}}) do
 571     with %User{} = user <- User.get_cached_by_nickname(name),
 572          true <- Pbkdf2.checkpw(password, user.password_hash),
 573          {:ok, app} <- get_or_make_app(),
 574          {:ok, auth} <- Authorization.create_authorization(app, user),
 575          {:ok, token} <- Token.exchange_token(app, auth) do
 576       conn
 577       |> put_session(:oauth_token, token.token)
 578       |> redirect(to: "/web/timelines/public")
 579     end
 580   end
 581
 582   def relationship_noop(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 583     Logger.debug("Unimplemented, returning unmodified relationship")
 584     with %User{} = target <- Repo.get(User, id) do
 585       render conn, AccountView, "relationship.json", %{user: user, target: target}
 586     end
 587   end
 588
 589   def empty_array(conn, _) do
 590     Logger.debug("Unimplemented, returning an empty array")
 591     json(conn, [])
 592   end
 593
 594   defp render_notification(user, %{id: id, activity: activity, inserted_at: created_at} = _params) do
 595     actor = User.get_cached_by_ap_id(activity.data["actor"])
 596     created_at = NaiveDateTime.to_iso8601(created_at)
 597     |> String.replace(~r/(\.\d+)?$/, ".000Z", global: false)
 598     case activity.data["type"] do
 599       "Create" ->
 600         %{id: id, type: "mention", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: activity, for: user})}
 601       "Like" ->
 602         liked_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 603         %{id: id, type: "favourite", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: liked_activity, for: user})}
 604       "Announce" ->
 605         announced_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 606         %{id: id, type: "reblog", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: announced_activity, for: user})}
 607       "Follow" ->
 608         %{id: id, type: "follow", created_at: created_at, account: AccountView.render("account.json", %{user: actor})}
 609       _ -> nil
 610     end
 611   end
 612 end