git.squeep.com Git - akkoma/blob - lib/pleroma/web/mastodon_api/mastodon_api_controller.ex

   1 defmodule Pleroma.Web.MastodonAPI.MastodonAPIController do
   2   use Pleroma.Web, :controller
   3   alias Pleroma.{Repo, Activity, User, Notification}
   4   alias Pleroma.Web
   5   alias Pleroma.Web.MastodonAPI.{StatusView, AccountView, MastodonView}
   6   alias Pleroma.Web.ActivityPub.ActivityPub
   7   alias Pleroma.Web.TwitterAPI.TwitterAPI
   8   alias Pleroma.Web.{CommonAPI, OStatus}
   9   alias Pleroma.Web.OAuth.{Authorization, Token, App}
  10   alias Comeonin.Pbkdf2
  11   import Ecto.Query
  12   import Logger
  13
  14   def create_app(conn, params) do
  15     with cs <- App.register_changeset(%App{}, params) |> IO.inspect,
  16          {:ok, app} <- Repo.insert(cs) |> IO.inspect do
  17       res = %{
  18         id: app.id,
  19         client_id: app.client_id,
  20         client_secret: app.client_secret
  21       }
  22
  23       json(conn, res)
  24     end
  25   end
  26
  27   def verify_credentials(%{assigns: %{user: user}} = conn, params) do
  28     account = AccountView.render("account.json", %{user: user})
  29     json(conn, account)
  30   end
  31
  32   def user(conn, %{"id" => id}) do
  33     with %User{} = user <- Repo.get(User, id) do
  34       account = AccountView.render("account.json", %{user: user})
  35       json(conn, account)
  36     else
  37       _e -> conn
  38       |> put_status(404)
  39       |> json(%{error: "Can't find user"})
  40     end
  41   end
  42
  43   @instance Application.get_env(:pleroma, :instance)
  44
  45   def masto_instance(conn, _params) do
  46     response = %{
  47       uri: Web.base_url,
  48       title: Keyword.get(@instance, :name),
  49       description: "A Pleroma instance, an alternative fediverse server",
  50       version: Keyword.get(@instance, :version),
  51       email: Keyword.get(@instance, :email),
  52       urls: %{
  53         streaming_api: String.replace(Web.base_url, ["http","https"], "wss")
  54       },
  55       stats: %{
  56         user_count: 1,
  57         status_count: 2,
  58         domain_count: 3
  59       }
  60     }
  61
  62     json(conn, response)
  63   end
  64
  65   def custom_emojis(conn, _params) do
  66     mastodon_emoji = Pleroma.Formatter.get_custom_emoji()
  67     |> Enum.map(fn {shortcode, relative_url} ->
  68       url = to_string URI.merge(Web.base_url(), relative_url)
  69       %{
  70         "shortcode" => shortcode,
  71         "static_url" => url,
  72         "url" => url
  73       }
  74     end)
  75     json conn, mastodon_emoji
  76   end
  77
  78   defp add_link_headers(conn, method, activities) do
  79     last = List.last(activities)
  80     first = List.first(activities)
  81     if last do
  82       min = last.id
  83       max = first.id
  84       next_url = mastodon_api_url(Pleroma.Web.Endpoint, method, max_id: min)
  85       prev_url = mastodon_api_url(Pleroma.Web.Endpoint, method, since_id: max)
  86       conn
  87       |> put_resp_header("link", "<#{next_url}>; rel=\"next\", <#{prev_url}>; rel=\"prev\"")
  88     else
  89       conn
  90     end
  91   end
  92
  93   def home_timeline(%{assigns: %{user: user}} = conn, params) do
  94     params = params
  95     |> Map.put("type", ["Create", "Announce"])
  96     |> Map.put("blocking_user", user)
  97
  98     activities = ActivityPub.fetch_activities([user.ap_id | user.following], params)
  99     |> Enum.reverse
 100
 101     conn
 102     |> add_link_headers(:home_timeline, activities)
 103     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 104   end
 105
 106   def public_timeline(%{assigns: %{user: user}} = conn, params) do
 107     params = params
 108     |> Map.put("type", ["Create", "Announce"])
 109     |> Map.put("local_only", !!params["local"])
 110     |> Map.put("blocking_user", user)
 111
 112     activities = ActivityPub.fetch_public_activities(params)
 113     |> Enum.reverse
 114
 115     conn
 116     |> add_link_headers(:public_timeline, activities)
 117     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 118   end
 119
 120   # TODO: Link headers
 121   def user_statuses(%{assigns: %{user: user}} = conn, params) do
 122     with %User{ap_id: ap_id} <- Repo.get(User, params["id"]) do
 123       params = params
 124       |> Map.put("type", ["Create", "Announce"])
 125       |> Map.put("actor_id", ap_id)
 126       |> Map.put("whole_db", true)
 127
 128       activities = ActivityPub.fetch_activities([], params)
 129       |> Enum.reverse
 130
 131       render conn, StatusView, "index.json", %{activities: activities, for: user, as: :activity}
 132     end
 133   end
 134
 135   def get_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 136     with %Activity{} = activity <- Repo.get(Activity, id) do
 137       render conn, StatusView, "status.json", %{activity: activity, for: user}
 138     end
 139   end
 140
 141   def get_context(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 142     with %Activity{} = activity <- Repo.get(Activity, id),
 143          activities <- ActivityPub.fetch_activities_for_context(activity.data["object"]["context"], %{"blocking_user" => user}),
 144          activities <- activities |> Enum.filter(fn (%{id: aid}) -> to_string(aid) != to_string(id) end),
 145          grouped_activities <- Enum.group_by(activities, fn (%{id: id}) -> id < activity.id end) do
 146       result = %{
 147         ancestors: StatusView.render("index.json", for: user, activities: grouped_activities[true] || [], as: :activity) |> Enum.reverse,
 148         descendants: StatusView.render("index.json", for: user, activities: grouped_activities[false] || [], as: :activity) |> Enum.reverse,
 149       }
 150
 151       json(conn, result)
 152     end
 153   end
 154
 155   def post_status(%{assigns: %{user: user}} = conn, %{"status" => status} = params) do
 156     params = params
 157     |> Map.put("in_reply_to_status_id", params["in_reply_to_id"])
 158
 159     {:ok, activity} = CommonAPI.post(user, params)
 160     render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 161   end
 162
 163   def delete_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 164     with {:ok, %Activity{}} <- CommonAPI.delete(id, user) do
 165       json(conn, %{})
 166     else
 167       _e ->
 168         conn
 169         |> put_status(403)
 170         |> json(%{error: "Can't delete this post"})
 171     end
 172   end
 173
 174   def reblog_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 175     with {:ok, _announce, %{data: %{"id" => id}}} = CommonAPI.repeat(ap_id_or_id, user),
 176          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 177       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 178     end
 179   end
 180
 181   def fav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 182     with {:ok, _fav, %{data: %{"id" => id}}} = CommonAPI.favorite(ap_id_or_id, user),
 183          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 184       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 185     end
 186   end
 187
 188   def unfav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 189     with {:ok, %{data: %{"id" => id}}} = CommonAPI.unfavorite(ap_id_or_id, user),
 190          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 191       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 192     end
 193   end
 194
 195   def notifications(%{assigns: %{user: user}} = conn, params) do
 196     notifications = Notification.for_user(user, params)
 197     result = Enum.map(notifications, fn (%{id: id, activity: activity, inserted_at: created_at}) ->
 198       actor = User.get_cached_by_ap_id(activity.data["actor"])
 199       created_at = NaiveDateTime.to_iso8601(created_at)
 200       |> String.replace(~r/(\.\d+)?$/, ".000Z", global: false)
 201       case activity.data["type"] do
 202         "Create" ->
 203           %{id: id, type: "mention", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: activity, for: user})}
 204         "Like" ->
 205           liked_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 206           %{id: id, type: "favourite", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: liked_activity, for: user})}
 207         "Announce" ->
 208           announced_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 209           %{id: id, type: "reblog", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: announced_activity, for: user})}
 210         "Follow" ->
 211           %{id: id, type: "follow", created_at: created_at, account: AccountView.render("account.json", %{user: actor})}
 212         _ -> nil
 213       end
 214     end)
 215     |> Enum.filter(&(&1))
 216
 217     conn
 218     |> add_link_headers(:notifications, notifications)
 219     |> json(result)
 220   end
 221
 222   def relationships(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 223     id = List.wrap(id)
 224     q = from u in User,
 225       where: u.id in ^id
 226     targets = Repo.all(q)
 227     render conn, AccountView, "relationships.json", %{user: user, targets: targets}
 228   end
 229
 230   def upload(%{assigns: %{user: user}} = conn, %{"file" => file}) do
 231     with {:ok, object} <- ActivityPub.upload(file) do
 232       data = object.data
 233       |> Map.put("id", object.id)
 234
 235       render conn, StatusView, "attachment.json", %{attachment: data}
 236     end
 237   end
 238
 239   def favourited_by(conn, %{"id" => id}) do
 240     with %Activity{data: %{"object" => %{"likes" => likes} = data}} <- Repo.get(Activity, id) do
 241       q = from u in User,
 242         where: u.ap_id in ^likes
 243       users = Repo.all(q)
 244       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 245     else
 246       _ -> json(conn, [])
 247     end
 248   end
 249
 250   def reblogged_by(conn, %{"id" => id}) do
 251     with %Activity{data: %{"object" => %{"announcements" => announces}}} <- Repo.get(Activity, id) do
 252       q = from u in User,
 253         where: u.ap_id in ^announces
 254       users = Repo.all(q)
 255       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 256     else
 257       _ -> json(conn, [])
 258     end
 259   end
 260
 261   # TODO: Link headers
 262   def hashtag_timeline(%{assigns: %{user: user}} = conn, params) do
 263     params = params
 264     |> Map.put("type", "Create")
 265     |> Map.put("local_only", !!params["local"])
 266     |> Map.put("blocking_user", user)
 267
 268     activities = ActivityPub.fetch_public_activities(params)
 269     |> Enum.reverse
 270
 271     conn
 272     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 273   end
 274
 275   # TODO: Pagination
 276   def followers(conn, %{"id" => id}) do
 277     with %User{} = user <- Repo.get(User, id),
 278          {:ok, followers} <- User.get_followers(user) do
 279       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 280     end
 281   end
 282
 283   def following(conn, %{"id" => id}) do
 284     with %User{} = user <- Repo.get(User, id),
 285          {:ok, followers} <- User.get_friends(user) do
 286       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 287     end
 288   end
 289
 290   def follow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 291     with %User{} = followed <- Repo.get(User, id),
 292          {:ok, follower} <- User.follow(follower, followed),
 293          {:ok, activity} <- ActivityPub.follow(follower, followed) do
 294       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 295     else
 296       {:error, message} = err ->
 297         conn
 298         |> put_resp_content_type("application/json")
 299         |> send_resp(403, Poison.encode!(%{"error" => message}))
 300     end
 301   end
 302
 303   def follow(%{assigns: %{user: follower}} = conn, %{"uri" => uri}) do
 304     with %User{} = followed <- Repo.get_by(User, nickname: uri),
 305          {:ok, follower} <- User.follow(follower, followed),
 306          {:ok, activity} <- ActivityPub.follow(follower, followed) do
 307       render conn, AccountView, "account.json", %{user: followed}
 308     else
 309       {:error, message} = err ->
 310         conn
 311         |> put_resp_content_type("application/json")
 312         |> send_resp(403, Poison.encode!(%{"error" => message}))
 313     end
 314   end
 315
 316   # TODO: Clean up and unify
 317   def unfollow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 318     with %User{} = followed <- Repo.get(User, id),
 319          { :ok, follower, follow_activity } <- User.unfollow(follower, followed),
 320          { :ok, _activity } <- ActivityPub.insert(%{
 321            "type" => "Undo",
 322            "actor" => follower.ap_id,
 323            "object" => follow_activity.data["id"] # get latest Follow for these users
 324          }) do
 325       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 326     end
 327   end
 328
 329   def block(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 330     with %User{} = blocked <- Repo.get(User, id),
 331          {:ok, blocker} <- User.block(blocker, blocked) do
 332       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 333     else
 334       {:error, message} = err ->
 335         conn
 336         |> put_resp_content_type("application/json")
 337         |> send_resp(403, Poison.encode!(%{"error" => message}))
 338     end
 339   end
 340
 341   def unblock(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 342     with %User{} = blocked <- Repo.get(User, id),
 343          {:ok, blocker} <- User.unblock(blocker, blocked) do
 344       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 345     else
 346       {:error, message} = err ->
 347         conn
 348         |> put_resp_content_type("application/json")
 349         |> send_resp(403, Poison.encode!(%{"error" => message}))
 350     end
 351   end
 352
 353   # TODO: Use proper query
 354   def blocks(%{assigns: %{user: user}} = conn, _) do
 355     with blocked_users <- user.info["blocks"] || [],
 356          accounts <- Enum.map(blocked_users, fn (ap_id) -> User.get_cached_by_ap_id(ap_id) end) do
 357       res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 358       json(conn, res)
 359     end
 360   end
 361
 362   def search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 363     accounts = User.search(query, params["resolve"] == "true")
 364
 365     fetched = if Regex.match?(~r/https?:/, query) do
 366       with {:ok, activities} <- OStatus.fetch_activity_from_url(query) do
 367         activities
 368       else
 369         _e -> []
 370       end
 371     end || []
 372
 373     q = from a in Activity,
 374       where: fragment("?->>'type' = 'Create'", a.data),
 375       where: fragment("to_tsvector('english', ?->'object'->>'content') @@ plainto_tsquery('english', ?)", a.data, ^query),
 376       limit: 20
 377     statuses = Repo.all(q) ++ fetched
 378
 379     res = %{
 380       "accounts" => AccountView.render("accounts.json", users: accounts, for: user, as: :user),
 381       "statuses" => StatusView.render("index.json", activities: statuses, for: user, as: :activity),
 382       "hashtags" => []
 383     }
 384
 385     json(conn, res)
 386   end
 387
 388   def account_search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 389     accounts = User.search(query, params["resolve"] == "true")
 390
 391     res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 392
 393     json(conn, res)
 394   end
 395
 396   def favourites(%{assigns: %{user: user}} = conn, params) do
 397     params = conn
 398     |> Map.put("type", "Create")
 399     |> Map.put("favorited_by", user.ap_id)
 400     |> Map.put("blocking_user", user)
 401
 402     activities = ActivityPub.fetch_activities([], params)
 403     |> Enum.reverse
 404
 405     conn
 406     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 407   end
 408
 409   def index(%{assigns: %{user: user}} = conn, _params) do
 410     token = conn
 411     |> get_session(:oauth_token)
 412
 413     if user && token do
 414       accounts = Map.put(%{}, user.id, AccountView.render("account.json", %{user: user}))
 415       initial_state = %{
 416         meta: %{
 417           streaming_api_base_url: String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
 418           access_token: token,
 419           locale: "en",
 420           domain: Pleroma.Web.Endpoint.host(),
 421           admin: "1",
 422           me: "#{user.id}",
 423           unfollow_modal: false,
 424           boost_modal: false,
 425           delete_modal: true,
 426           auto_play_gif: false,
 427           reduce_motion: false
 428         },
 429         compose: %{
 430           me: "#{user.id}",
 431           default_privacy: "public",
 432           default_sensitive: false
 433         },
 434         media_attachments: %{
 435           accept_content_types: [
 436             ".jpg",
 437             ".jpeg",
 438             ".png",
 439             ".gif",
 440             ".webm",
 441             ".mp4",
 442             ".m4v",
 443             "image\/jpeg",
 444             "image\/png",
 445             "image\/gif",
 446             "video\/webm",
 447             "video\/mp4"
 448           ]
 449         },
 450         settings: %{
 451           onboarded: true,
 452           home: %{
 453             shows: %{
 454               reblog: true,
 455               reply: true
 456             }
 457           },
 458           notifications: %{
 459             alerts: %{
 460               follow: true,
 461               favourite: true,
 462               reblog: true,
 463               mention: true
 464             },
 465             shows: %{
 466               follow: true,
 467               favourite: true,
 468               reblog: true,
 469               mention: true
 470             },
 471             sounds: %{
 472               follow: true,
 473               favourite: true,
 474               reblog: true,
 475               mention: true
 476             }
 477           }
 478         },
 479         push_subscription: nil,
 480         accounts: accounts,
 481         custom_emojis: %{}
 482       } |> Poison.encode!
 483       conn
 484       |> put_layout(false)
 485       |> render(MastodonView, "index.html", %{initial_state: initial_state})
 486     else
 487       conn
 488       |> redirect(to: "/web/login")
 489     end
 490   end
 491
 492   def login(conn, params) do
 493     conn
 494     |> render(MastodonView, "login.html")
 495   end
 496
 497   defp get_or_make_app() do
 498     with %App{} = app <- Repo.get_by(App, client_name: "Mastodon-Local") do
 499       {:ok, app}
 500     else
 501       _e ->
 502         cs = App.register_changeset(%App{}, %{client_name: "Mastodon-Local", redirect_uris: ".", scopes: "read,write,follow"})
 503         Repo.insert(cs)
 504     end
 505   end
 506
 507   def login_post(conn, %{"authorization" => %{ "name" => name, "password" => password}}) do
 508     with %User{} = user <- User.get_cached_by_nickname(name),
 509          true <- Pbkdf2.checkpw(password, user.password_hash),
 510          {:ok, app} <- get_or_make_app(),
 511          {:ok, auth} <- Authorization.create_authorization(app, user),
 512          {:ok, token} <- Token.exchange_token(app, auth) do
 513       conn
 514       |> put_session(:oauth_token, token.token)
 515       |> redirect(to: "/web/timelines/public")
 516     end
 517   end
 518
 519   def relationship_noop(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 520     Logger.debug("Unimplemented, returning unmodified relationship")
 521     with %User{} = target <- Repo.get(User, id) do
 522       render conn, AccountView, "relationship.json", %{user: user, target: target}
 523     end
 524   end
 525
 526   def empty_array(conn, _) do
 527     Logger.debug("Unimplemented, returning an empty array")
 528     json(conn, [])
 529   end
 530 end