git.squeep.com Git - akkoma/blob - lib/pleroma/web/mastodon_api/mastodon_api_controller.ex

   1 defmodule Pleroma.Web.MastodonAPI.MastodonAPIController do
   2   use Pleroma.Web, :controller
   3   alias Pleroma.{Repo, Activity, User, Notification, Stats}
   4   alias Pleroma.Web
   5   alias Pleroma.Web.MastodonAPI.{StatusView, AccountView, MastodonView}
   6   alias Pleroma.Web.ActivityPub.ActivityPub
   7   alias Pleroma.Web.{CommonAPI, OStatus}
   8   alias Pleroma.Web.OAuth.{Authorization, Token, App}
   9   alias Comeonin.Pbkdf2
  10   import Ecto.Query
  11   require Logger
  12
  13   def create_app(conn, params) do
  14     with cs <- App.register_changeset(%App{}, params) |> IO.inspect,
  15          {:ok, app} <- Repo.insert(cs) |> IO.inspect do
  16       res = %{
  17         id: app.id,
  18         client_id: app.client_id,
  19         client_secret: app.client_secret
  20       }
  21
  22       json(conn, res)
  23     end
  24   end
  25
  26   def update_credentials(%{assigns: %{user: user}} = conn, params) do
  27     params = if bio = params["note"] do
  28       Map.put(params, "bio", bio)
  29     else
  30       params
  31     end
  32
  33     params = if name = params["display_name"] do
  34       Map.put(params, "name", name)
  35     else
  36       params
  37     end
  38
  39     user = if avatar = params["avatar"] do
  40       with %Plug.Upload{} <- avatar,
  41            {:ok, object} <- ActivityPub.upload(avatar),
  42            change = Ecto.Changeset.change(user, %{avatar: object.data}),
  43            {:ok, user} = Repo.update(change) do
  44         user
  45       else
  46         _e -> user
  47       end
  48     else
  49       user
  50     end
  51
  52     user = if banner = params["header"] do
  53       with %Plug.Upload{} <- banner,
  54            {:ok, object} <- ActivityPub.upload(banner),
  55            new_info <- Map.put(user.info, "banner", object.data),
  56            change <- User.info_changeset(user, %{info: new_info}),
  57            {:ok, user} <- Repo.update(change) do
  58         user
  59       else
  60         _e -> user
  61       end
  62     else
  63       user
  64     end
  65
  66     with changeset <- User.update_changeset(user, params),
  67          {:ok, user} <- Repo.update(changeset) do
  68       json conn, AccountView.render("account.json", %{user: user})
  69     else
  70       _e ->
  71         conn
  72         |> put_status(403)
  73         |> json(%{error: "Invalid request"})
  74     end
  75   end
  76
  77   def verify_credentials(%{assigns: %{user: user}} = conn, _) do
  78     account = AccountView.render("account.json", %{user: user})
  79     json(conn, account)
  80   end
  81
  82   def user(conn, %{"id" => id}) do
  83     with %User{} = user <- Repo.get(User, id) do
  84       account = AccountView.render("account.json", %{user: user})
  85       json(conn, account)
  86     else
  87       _e -> conn
  88       |> put_status(404)
  89       |> json(%{error: "Can't find user"})
  90     end
  91   end
  92
  93   @instance Application.get_env(:pleroma, :instance)
  94
  95   def masto_instance(conn, _params) do
  96     response = %{
  97       uri: Web.base_url,
  98       title: Keyword.get(@instance, :name),
  99       description: "A Pleroma instance, an alternative fediverse server",
 100       version: Keyword.get(@instance, :version),
 101       email: Keyword.get(@instance, :email),
 102       urls: %{
 103         streaming_api: String.replace(Web.base_url, ["http","https"], "wss")
 104       },
 105       stats: Stats.get_stats,
 106       thumbnail: Web.base_url <> "/instance/thumbnail.jpeg",
 107       max_toot_chars: Keyword.get(@instance, :limit)
 108     }
 109
 110     json(conn, response)
 111   end
 112
 113   def peers(conn, _params) do
 114     json(conn, Stats.get_peers)
 115   end
 116
 117   defp mastodonized_emoji do
 118     Pleroma.Formatter.get_custom_emoji()
 119     |> Enum.map(fn {shortcode, relative_url} ->
 120       url = to_string URI.merge(Web.base_url(), relative_url)
 121       %{
 122         "shortcode" => shortcode,
 123         "static_url" => url,
 124         "url" => url
 125       }
 126     end)
 127   end
 128
 129   def custom_emojis(conn, _params) do
 130     mastodon_emoji = mastodonized_emoji()
 131     json conn, mastodon_emoji
 132   end
 133
 134   defp add_link_headers(conn, method, activities) do
 135     last = List.last(activities)
 136     first = List.first(activities)
 137     if last do
 138       min = last.id
 139       max = first.id
 140       next_url = mastodon_api_url(Pleroma.Web.Endpoint, method, max_id: min)
 141       prev_url = mastodon_api_url(Pleroma.Web.Endpoint, method, since_id: max)
 142       conn
 143       |> put_resp_header("link", "<#{next_url}>; rel=\"next\", <#{prev_url}>; rel=\"prev\"")
 144     else
 145       conn
 146     end
 147   end
 148
 149   def home_timeline(%{assigns: %{user: user}} = conn, params) do
 150     params = params
 151     |> Map.put("type", ["Create", "Announce"])
 152     |> Map.put("blocking_user", user)
 153     |> Map.put("user", user)
 154
 155     activities = ActivityPub.fetch_activities([user.ap_id | user.following], params)
 156     |> Enum.reverse
 157
 158     conn
 159     |> add_link_headers(:home_timeline, activities)
 160     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 161   end
 162
 163   def public_timeline(%{assigns: %{user: user}} = conn, params) do
 164     params = params
 165     |> Map.put("type", ["Create", "Announce"])
 166     |> Map.put("local_only", params["local"] in [true, "True", "true", "1"])
 167     |> Map.put("blocking_user", user)
 168
 169     activities = ActivityPub.fetch_public_activities(params)
 170     |> Enum.reverse
 171
 172     conn
 173     |> add_link_headers(:public_timeline, activities)
 174     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 175   end
 176
 177   # TODO: Link headers
 178   def user_statuses(%{assigns: %{user: user}} = conn, params) do
 179     with %User{ap_id: ap_id} <- Repo.get(User, params["id"]) do
 180       params = params
 181       |> Map.put("type", ["Create", "Announce"])
 182       |> Map.put("actor_id", ap_id)
 183       |> Map.put("whole_db", true)
 184
 185       activities = ActivityPub.fetch_activities([], params)
 186       |> Enum.reverse
 187
 188       render conn, StatusView, "index.json", %{activities: activities, for: user, as: :activity}
 189     end
 190   end
 191
 192   def get_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 193     with %Activity{} = activity <- Repo.get(Activity, id),
 194          true <- ActivityPub.visible_for_user?(activity, user) do
 195       render conn, StatusView, "status.json", %{activity: activity, for: user}
 196     end
 197   end
 198
 199   def get_context(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 200     with %Activity{} = activity <- Repo.get(Activity, id),
 201          activities <- ActivityPub.fetch_activities_for_context(activity.data["object"]["context"], %{"blocking_user" => user, "user" => user}),
 202          activities <- activities |> Enum.filter(fn (%{id: aid}) -> to_string(aid) != to_string(id) end),
 203          activities <- activities |> Enum.filter(fn (%{data: %{"type" => type}}) -> type == "Create" end),
 204          grouped_activities <- Enum.group_by(activities, fn (%{id: id}) -> id < activity.id end) do
 205       result = %{
 206         ancestors: StatusView.render("index.json", for: user, activities: grouped_activities[true] || [], as: :activity) |> Enum.reverse,
 207         descendants: StatusView.render("index.json", for: user, activities: grouped_activities[false] || [], as: :activity) |> Enum.reverse,
 208       }
 209
 210       json(conn, result)
 211     end
 212   end
 213
 214   def post_status(%{assigns: %{user: user}} = conn, %{"status" => _} = params) do
 215     params = params
 216     |> Map.put("in_reply_to_status_id", params["in_reply_to_id"])
 217     |> Map.put("no_attachment_links", true)
 218
 219     {:ok, activity} = CommonAPI.post(user, params)
 220     render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 221   end
 222
 223   def delete_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 224     with {:ok, %Activity{}} <- CommonAPI.delete(id, user) do
 225       json(conn, %{})
 226     else
 227       _e ->
 228         conn
 229         |> put_status(403)
 230         |> json(%{error: "Can't delete this post"})
 231     end
 232   end
 233
 234   def reblog_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 235     with {:ok, announce, _activity} = CommonAPI.repeat(ap_id_or_id, user) do
 236       render conn, StatusView, "status.json", %{activity: announce, for: user, as: :activity}
 237     end
 238   end
 239
 240   def fav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 241     with {:ok, _fav, %{data: %{"id" => id}}} = CommonAPI.favorite(ap_id_or_id, user),
 242          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 243       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 244     end
 245   end
 246
 247   def unfav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 248     with {:ok, %{data: %{"id" => id}}} = CommonAPI.unfavorite(ap_id_or_id, user),
 249          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 250       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 251     end
 252   end
 253
 254   def notifications(%{assigns: %{user: user}} = conn, params) do
 255     notifications = Notification.for_user(user, params)
 256     result = Enum.map(notifications, fn x ->
 257       render_notification(user, x)
 258     end)
 259     |> Enum.filter(&(&1))
 260
 261     conn
 262     |> add_link_headers(:notifications, notifications)
 263     |> json(result)
 264   end
 265
 266   def get_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 267     with {:ok, notification} <- Notification.get(user, id) do
 268       json(conn, render_notification(user, notification))
 269     else
 270       {:error, reason} ->
 271         conn
 272         |> put_resp_content_type("application/json")
 273         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 274     end
 275   end
 276
 277   def clear_notifications(%{assigns: %{user: user}} = conn, _params) do
 278     Notification.clear(user)
 279     json(conn, %{})
 280   end
 281
 282   def dismiss_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 283     with {:ok, _notif} <- Notification.dismiss(user, id) do
 284       json(conn, %{})
 285     else
 286       {:error, reason} ->
 287         conn
 288         |> put_resp_content_type("application/json")
 289         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 290     end
 291   end
 292
 293   def relationships(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 294     id = List.wrap(id)
 295     q = from u in User,
 296       where: u.id in ^id
 297     targets = Repo.all(q)
 298     render conn, AccountView, "relationships.json", %{user: user, targets: targets}
 299   end
 300
 301   def upload(%{assigns: %{user: _}} = conn, %{"file" => file}) do
 302     with {:ok, object} <- ActivityPub.upload(file) do
 303       data = object.data
 304       |> Map.put("id", object.id)
 305
 306       render conn, StatusView, "attachment.json", %{attachment: data}
 307     end
 308   end
 309
 310   def favourited_by(conn, %{"id" => id}) do
 311     with %Activity{data: %{"object" => %{"likes" => likes}}} <- Repo.get(Activity, id) do
 312       q = from u in User,
 313         where: u.ap_id in ^likes
 314       users = Repo.all(q)
 315       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 316     else
 317       _ -> json(conn, [])
 318     end
 319   end
 320
 321   def reblogged_by(conn, %{"id" => id}) do
 322     with %Activity{data: %{"object" => %{"announcements" => announces}}} <- Repo.get(Activity, id) do
 323       q = from u in User,
 324         where: u.ap_id in ^announces
 325       users = Repo.all(q)
 326       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 327     else
 328       _ -> json(conn, [])
 329     end
 330   end
 331
 332   # TODO: Link headers
 333   def hashtag_timeline(%{assigns: %{user: user}} = conn, params) do
 334     params = params
 335     |> Map.put("type", "Create")
 336     |> Map.put("local_only", !!params["local"])
 337     |> Map.put("blocking_user", user)
 338
 339     activities = ActivityPub.fetch_public_activities(params)
 340     |> Enum.reverse
 341
 342     conn
 343     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 344   end
 345
 346   # TODO: Pagination
 347   def followers(conn, %{"id" => id}) do
 348     with %User{} = user <- Repo.get(User, id),
 349          {:ok, followers} <- User.get_followers(user) do
 350       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 351     end
 352   end
 353
 354   def following(conn, %{"id" => id}) do
 355     with %User{} = user <- Repo.get(User, id),
 356          {:ok, followers} <- User.get_friends(user) do
 357       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 358     end
 359   end
 360
 361   def follow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 362     with %User{} = followed <- Repo.get(User, id),
 363          {:ok, follower} <- User.follow(follower, followed),
 364          {:ok, _activity} <- ActivityPub.follow(follower, followed) do
 365       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 366     else
 367       {:error, message} ->
 368         conn
 369         |> put_resp_content_type("application/json")
 370         |> send_resp(403, Poison.encode!(%{"error" => message}))
 371     end
 372   end
 373
 374   def follow(%{assigns: %{user: follower}} = conn, %{"uri" => uri}) do
 375     with %User{} = followed <- Repo.get_by(User, nickname: uri),
 376          {:ok, follower} <- User.follow(follower, followed),
 377          {:ok, _activity} <- ActivityPub.follow(follower, followed) do
 378       render conn, AccountView, "account.json", %{user: followed}
 379     else
 380       {:error, message} ->
 381         conn
 382         |> put_resp_content_type("application/json")
 383         |> send_resp(403, Poison.encode!(%{"error" => message}))
 384     end
 385   end
 386
 387   # TODO: Clean up and unify
 388   def unfollow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 389     with %User{} = followed <- Repo.get(User, id),
 390          { :ok, follower, follow_activity } <- User.unfollow(follower, followed),
 391          { :ok, _activity } <- ActivityPub.insert(%{
 392            "type" => "Undo",
 393            "actor" => follower.ap_id,
 394            "object" => follow_activity.data["id"] # get latest Follow for these users
 395          }) do
 396       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 397     end
 398   end
 399
 400   def block(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 401     with %User{} = blocked <- Repo.get(User, id),
 402          {:ok, blocker} <- User.block(blocker, blocked) do
 403       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 404     else
 405       {:error, message} ->
 406         conn
 407         |> put_resp_content_type("application/json")
 408         |> send_resp(403, Poison.encode!(%{"error" => message}))
 409     end
 410   end
 411
 412   def unblock(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 413     with %User{} = blocked <- Repo.get(User, id),
 414          {:ok, blocker} <- User.unblock(blocker, blocked) do
 415       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 416     else
 417       {:error, message} ->
 418         conn
 419         |> put_resp_content_type("application/json")
 420         |> send_resp(403, Poison.encode!(%{"error" => message}))
 421     end
 422   end
 423
 424   # TODO: Use proper query
 425   def blocks(%{assigns: %{user: user}} = conn, _) do
 426     with blocked_users <- user.info["blocks"] || [],
 427          accounts <- Enum.map(blocked_users, fn (ap_id) -> User.get_cached_by_ap_id(ap_id) end) do
 428       res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 429       json(conn, res)
 430     end
 431   end
 432
 433   def search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 434     accounts = User.search(query, params["resolve"] == "true")
 435
 436     fetched = if Regex.match?(~r/https?:/, query) do
 437       with {:ok, activities} <- OStatus.fetch_activity_from_url(query) do
 438         activities
 439       else
 440         _e -> []
 441       end
 442     end || []
 443
 444     q = from a in Activity,
 445       where: fragment("?->>'type' = 'Create'", a.data),
 446       where: fragment("to_tsvector('english', ?->'object'->>'content') @@ plainto_tsquery('english', ?)", a.data, ^query),
 447       limit: 20
 448     statuses = Repo.all(q) ++ fetched
 449
 450     res = %{
 451       "accounts" => AccountView.render("accounts.json", users: accounts, for: user, as: :user),
 452       "statuses" => StatusView.render("index.json", activities: statuses, for: user, as: :activity),
 453       "hashtags" => []
 454     }
 455
 456     json(conn, res)
 457   end
 458
 459   def account_search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 460     accounts = User.search(query, params["resolve"] == "true")
 461
 462     res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 463
 464     json(conn, res)
 465   end
 466
 467   def favourites(%{assigns: %{user: user}} = conn, _) do
 468     params = conn
 469     |> Map.put("type", "Create")
 470     |> Map.put("favorited_by", user.ap_id)
 471     |> Map.put("blocking_user", user)
 472
 473     activities = ActivityPub.fetch_activities([], params)
 474     |> Enum.reverse
 475
 476     conn
 477     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 478   end
 479
 480   def index(%{assigns: %{user: user}} = conn, _params) do
 481     token = conn
 482     |> get_session(:oauth_token)
 483
 484     if user && token do
 485       mastodon_emoji = mastodonized_emoji()
 486       accounts = Map.put(%{}, user.id, AccountView.render("account.json", %{user: user}))
 487       initial_state = %{
 488         meta: %{
 489           streaming_api_base_url: String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
 490           access_token: token,
 491           locale: "en",
 492           domain: Pleroma.Web.Endpoint.host(),
 493           admin: "1",
 494           me: "#{user.id}",
 495           unfollow_modal: false,
 496           boost_modal: false,
 497           delete_modal: true,
 498           auto_play_gif: false,
 499           reduce_motion: false
 500         },
 501         compose: %{
 502           me: "#{user.id}",
 503           default_privacy: "public",
 504           default_sensitive: false
 505         },
 506         media_attachments: %{
 507           accept_content_types: [
 508             ".jpg",
 509             ".jpeg",
 510             ".png",
 511             ".gif",
 512             ".webm",
 513             ".mp4",
 514             ".m4v",
 515             "image\/jpeg",
 516             "image\/png",
 517             "image\/gif",
 518             "video\/webm",
 519             "video\/mp4"
 520           ]
 521         },
 522         settings: %{
 523           onboarded: true,
 524           home: %{
 525             shows: %{
 526               reblog: true,
 527               reply: true
 528             }
 529           },
 530           notifications: %{
 531             alerts: %{
 532               follow: true,
 533               favourite: true,
 534               reblog: true,
 535               mention: true
 536             },
 537             shows: %{
 538               follow: true,
 539               favourite: true,
 540               reblog: true,
 541               mention: true
 542             },
 543             sounds: %{
 544               follow: true,
 545               favourite: true,
 546               reblog: true,
 547               mention: true
 548             }
 549           }
 550         },
 551         push_subscription: nil,
 552         accounts: accounts,
 553         custom_emojis: mastodon_emoji
 554       } |> Poison.encode!
 555       conn
 556       |> put_layout(false)
 557       |> render(MastodonView, "index.html", %{initial_state: initial_state})
 558     else
 559       conn
 560       |> redirect(to: "/web/login")
 561     end
 562   end
 563
 564   def login(conn, _) do
 565     conn
 566     |> render(MastodonView, "login.html", %{error: false})
 567   end
 568
 569   defp get_or_make_app() do
 570     with %App{} = app <- Repo.get_by(App, client_name: "Mastodon-Local") do
 571       {:ok, app}
 572     else
 573       _e ->
 574         cs = App.register_changeset(%App{}, %{client_name: "Mastodon-Local", redirect_uris: ".", scopes: "read,write,follow"})
 575         Repo.insert(cs)
 576     end
 577   end
 578
 579   def login_post(conn, %{"authorization" => %{ "name" => name, "password" => password}}) do
 580     with %User{} = user <- User.get_cached_by_nickname(name),
 581          true <- Pbkdf2.checkpw(password, user.password_hash),
 582          {:ok, app} <- get_or_make_app(),
 583          {:ok, auth} <- Authorization.create_authorization(app, user),
 584          {:ok, token} <- Token.exchange_token(app, auth) do
 585       conn
 586       |> put_session(:oauth_token, token.token)
 587       |> redirect(to: "/web/getting-started")
 588     else
 589       _e ->
 590         conn
 591         |> render(MastodonView, "login.html", %{error: "Wrong username or password"})
 592     end
 593   end
 594
 595   def logout(conn, _) do
 596     conn
 597     |> clear_session
 598     |> redirect(to: "/")
 599   end
 600
 601   def relationship_noop(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 602     Logger.debug("Unimplemented, returning unmodified relationship")
 603     with %User{} = target <- Repo.get(User, id) do
 604       render conn, AccountView, "relationship.json", %{user: user, target: target}
 605     end
 606   end
 607
 608   def empty_array(conn, _) do
 609     Logger.debug("Unimplemented, returning an empty array")
 610     json(conn, [])
 611   end
 612
 613   def render_notification(user, %{id: id, activity: activity, inserted_at: created_at} = _params) do
 614     actor = User.get_cached_by_ap_id(activity.data["actor"])
 615     created_at = NaiveDateTime.to_iso8601(created_at)
 616     |> String.replace(~r/(\.\d+)?$/, ".000Z", global: false)
 617     case activity.data["type"] do
 618       "Create" ->
 619         %{id: id, type: "mention", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: activity, for: user})}
 620       "Like" ->
 621         liked_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 622         %{id: id, type: "favourite", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: liked_activity, for: user})}
 623       "Announce" ->
 624         announced_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 625         %{id: id, type: "reblog", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: announced_activity, for: user})}
 626       "Follow" ->
 627         %{id: id, type: "follow", created_at: created_at, account: AccountView.render("account.json", %{user: actor})}
 628       _ -> nil
 629     end
 630   end
 631 end