git.squeep.com Git - akkoma/blob - lib/pleroma/web/mastodon_api/mastodon_api_controller.ex

   1 defmodule Pleroma.Web.MastodonAPI.MastodonAPIController do
   2   use Pleroma.Web, :controller
   3   alias Pleroma.{Repo, Activity, User, Notification, Stats}
   4   alias Pleroma.Web
   5   alias Pleroma.Web.MastodonAPI.{StatusView, AccountView, MastodonView}
   6   alias Pleroma.Web.ActivityPub.ActivityPub
   7   alias Pleroma.Web.{CommonAPI, OStatus}
   8   alias Pleroma.Web.OAuth.{Authorization, Token, App}
   9   alias Comeonin.Pbkdf2
  10   import Ecto.Query
  11   require Logger
  12
  13   def create_app(conn, params) do
  14     with cs <- App.register_changeset(%App{}, params) |> IO.inspect,
  15          {:ok, app} <- Repo.insert(cs) |> IO.inspect do
  16       res = %{
  17         id: app.id,
  18         client_id: app.client_id,
  19         client_secret: app.client_secret
  20       }
  21
  22       json(conn, res)
  23     end
  24   end
  25
  26   def update_credentials(%{assigns: %{user: user}} = conn, params) do
  27     original_user = user
  28     params = if bio = params["note"] do
  29       Map.put(params, "bio", bio)
  30     else
  31       params
  32     end
  33
  34     params = if name = params["display_name"] do
  35       Map.put(params, "name", name)
  36     else
  37       params
  38     end
  39
  40     user = if avatar = params["avatar"] do
  41       with %Plug.Upload{} <- avatar,
  42            {:ok, object} <- ActivityPub.upload(avatar),
  43            change = Ecto.Changeset.change(user, %{avatar: object.data}),
  44            {:ok, user} = User.update_and_set_cache(change) do
  45         user
  46       else
  47         _e -> user
  48       end
  49     else
  50       user
  51     end
  52
  53     user = if banner = params["header"] do
  54       with %Plug.Upload{} <- banner,
  55            {:ok, object} <- ActivityPub.upload(banner),
  56            new_info <- Map.put(user.info, "banner", object.data),
  57            change <- User.info_changeset(user, %{info: new_info}),
  58            {:ok, user} <- User.update_and_set_cache(change) do
  59         user
  60       else
  61         _e -> user
  62       end
  63     else
  64       user
  65     end
  66
  67     with changeset <- User.update_changeset(user, params),
  68          {:ok, user} <- User.update_and_set_cache(changeset) do
  69       if original_user != user do
  70         CommonAPI.update(user)
  71       end
  72       json conn, AccountView.render("account.json", %{user: user})
  73     else
  74       _e ->
  75         conn
  76         |> put_status(403)
  77         |> json(%{error: "Invalid request"})
  78     end
  79   end
  80
  81   def verify_credentials(%{assigns: %{user: user}} = conn, _) do
  82     account = AccountView.render("account.json", %{user: user})
  83     json(conn, account)
  84   end
  85
  86   def user(conn, %{"id" => id}) do
  87     with %User{} = user <- Repo.get(User, id) do
  88       account = AccountView.render("account.json", %{user: user})
  89       json(conn, account)
  90     else
  91       _e -> conn
  92       |> put_status(404)
  93       |> json(%{error: "Can't find user"})
  94     end
  95   end
  96
  97   @instance Application.get_env(:pleroma, :instance)
  98
  99   def masto_instance(conn, _params) do
 100     response = %{
 101       uri: Web.base_url,
 102       title: Keyword.get(@instance, :name),
 103       description: "A Pleroma instance, an alternative fediverse server",
 104       version: Keyword.get(@instance, :version),
 105       email: Keyword.get(@instance, :email),
 106       urls: %{
 107         streaming_api: String.replace(Web.base_url, ["http","https"], "wss")
 108       },
 109       stats: Stats.get_stats,
 110       thumbnail: Web.base_url <> "/instance/thumbnail.jpeg",
 111       max_toot_chars: Keyword.get(@instance, :limit)
 112     }
 113
 114     json(conn, response)
 115   end
 116
 117   def peers(conn, _params) do
 118     json(conn, Stats.get_peers)
 119   end
 120
 121   defp mastodonized_emoji do
 122     Pleroma.Formatter.get_custom_emoji()
 123     |> Enum.map(fn {shortcode, relative_url} ->
 124       url = to_string URI.merge(Web.base_url(), relative_url)
 125       %{
 126         "shortcode" => shortcode,
 127         "static_url" => url,
 128         "url" => url
 129       }
 130     end)
 131   end
 132
 133   def custom_emojis(conn, _params) do
 134     mastodon_emoji = mastodonized_emoji()
 135     json conn, mastodon_emoji
 136   end
 137
 138   defp add_link_headers(conn, method, activities) do
 139     last = List.last(activities)
 140     first = List.first(activities)
 141     if last do
 142       min = last.id
 143       max = first.id
 144       next_url = mastodon_api_url(Pleroma.Web.Endpoint, method, max_id: min)
 145       prev_url = mastodon_api_url(Pleroma.Web.Endpoint, method, since_id: max)
 146       conn
 147       |> put_resp_header("link", "<#{next_url}>; rel=\"next\", <#{prev_url}>; rel=\"prev\"")
 148     else
 149       conn
 150     end
 151   end
 152
 153   def home_timeline(%{assigns: %{user: user}} = conn, params) do
 154     params = params
 155     |> Map.put("type", ["Create", "Announce"])
 156     |> Map.put("blocking_user", user)
 157     |> Map.put("user", user)
 158
 159     activities = ActivityPub.fetch_activities([user.ap_id | user.following], params)
 160     |> Enum.reverse
 161
 162     conn
 163     |> add_link_headers(:home_timeline, activities)
 164     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 165   end
 166
 167   def public_timeline(%{assigns: %{user: user}} = conn, params) do
 168     params = params
 169     |> Map.put("type", ["Create", "Announce"])
 170     |> Map.put("local_only", params["local"] in [true, "True", "true", "1"])
 171     |> Map.put("blocking_user", user)
 172
 173     activities = ActivityPub.fetch_public_activities(params)
 174     |> Enum.reverse
 175
 176     conn
 177     |> add_link_headers(:public_timeline, activities)
 178     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 179   end
 180
 181   # TODO: Link headers
 182   def user_statuses(%{assigns: %{user: user}} = conn, params) do
 183     with %User{ap_id: ap_id} <- Repo.get(User, params["id"]) do
 184       params = params
 185       |> Map.put("type", ["Create", "Announce"])
 186       |> Map.put("actor_id", ap_id)
 187       |> Map.put("whole_db", true)
 188
 189       activities = ActivityPub.fetch_public_activities(params)
 190       |> Enum.reverse
 191
 192       render conn, StatusView, "index.json", %{activities: activities, for: user, as: :activity}
 193     end
 194   end
 195
 196   def get_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 197     with %Activity{} = activity <- Repo.get(Activity, id),
 198          true <- ActivityPub.visible_for_user?(activity, user) do
 199       render conn, StatusView, "status.json", %{activity: activity, for: user}
 200     end
 201   end
 202
 203   def get_context(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 204     with %Activity{} = activity <- Repo.get(Activity, id),
 205          activities <- ActivityPub.fetch_activities_for_context(activity.data["context"], %{"blocking_user" => user, "user" => user}),
 206          activities <- activities |> Enum.filter(fn (%{id: aid}) -> to_string(aid) != to_string(id) end),
 207          activities <- activities |> Enum.filter(fn (%{data: %{"type" => type}}) -> type == "Create" end),
 208          grouped_activities <- Enum.group_by(activities, fn (%{id: id}) -> id < activity.id end) do
 209       result = %{
 210         ancestors: StatusView.render("index.json", for: user, activities: grouped_activities[true] || [], as: :activity) |> Enum.reverse,
 211         descendants: StatusView.render("index.json", for: user, activities: grouped_activities[false] || [], as: :activity) |> Enum.reverse,
 212       }
 213
 214       json(conn, result)
 215     end
 216   end
 217
 218   def post_status(%{assigns: %{user: user}} = conn, %{"status" => _} = params) do
 219     params = params
 220     |> Map.put("in_reply_to_status_id", params["in_reply_to_id"])
 221     |> Map.put("no_attachment_links", true)
 222
 223     {:ok, activity} = CommonAPI.post(user, params)
 224     render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 225   end
 226
 227   def delete_status(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 228     with {:ok, %Activity{}} <- CommonAPI.delete(id, user) do
 229       json(conn, %{})
 230     else
 231       _e ->
 232         conn
 233         |> put_status(403)
 234         |> json(%{error: "Can't delete this post"})
 235     end
 236   end
 237
 238   def reblog_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 239     with {:ok, announce, _activity} = CommonAPI.repeat(ap_id_or_id, user) do
 240       render conn, StatusView, "status.json", %{activity: announce, for: user, as: :activity}
 241     end
 242   end
 243
 244   def fav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 245     with {:ok, _fav, %{data: %{"id" => id}}} = CommonAPI.favorite(ap_id_or_id, user),
 246          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 247       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 248     end
 249   end
 250
 251   def unfav_status(%{assigns: %{user: user}} = conn, %{"id" => ap_id_or_id}) do
 252     with {:ok, %{data: %{"id" => id}}} = CommonAPI.unfavorite(ap_id_or_id, user),
 253          %Activity{} = activity <- Activity.get_create_activity_by_object_ap_id(id) do
 254       render conn, StatusView, "status.json", %{activity: activity, for: user, as: :activity}
 255     end
 256   end
 257
 258   def notifications(%{assigns: %{user: user}} = conn, params) do
 259     notifications = Notification.for_user(user, params)
 260     result = Enum.map(notifications, fn x ->
 261       render_notification(user, x)
 262     end)
 263     |> Enum.filter(&(&1))
 264
 265     conn
 266     |> add_link_headers(:notifications, notifications)
 267     |> json(result)
 268   end
 269
 270   def get_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 271     with {:ok, notification} <- Notification.get(user, id) do
 272       json(conn, render_notification(user, notification))
 273     else
 274       {:error, reason} ->
 275         conn
 276         |> put_resp_content_type("application/json")
 277         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 278     end
 279   end
 280
 281   def clear_notifications(%{assigns: %{user: user}} = conn, _params) do
 282     Notification.clear(user)
 283     json(conn, %{})
 284   end
 285
 286   def dismiss_notification(%{assigns: %{user: user}} = conn, %{"id" => id} = _params) do
 287     with {:ok, _notif} <- Notification.dismiss(user, id) do
 288       json(conn, %{})
 289     else
 290       {:error, reason} ->
 291         conn
 292         |> put_resp_content_type("application/json")
 293         |> send_resp(403, Poison.encode!(%{"error" => reason}))
 294     end
 295   end
 296
 297   def relationships(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 298     id = List.wrap(id)
 299     q = from u in User,
 300       where: u.id in ^id
 301     targets = Repo.all(q)
 302     render conn, AccountView, "relationships.json", %{user: user, targets: targets}
 303   end
 304
 305   def upload(%{assigns: %{user: _}} = conn, %{"file" => file}) do
 306     with {:ok, object} <- ActivityPub.upload(file) do
 307       data = object.data
 308       |> Map.put("id", object.id)
 309
 310       render conn, StatusView, "attachment.json", %{attachment: data}
 311     end
 312   end
 313
 314   def favourited_by(conn, %{"id" => id}) do
 315     with %Activity{data: %{"object" => %{"likes" => likes}}} <- Repo.get(Activity, id) do
 316       q = from u in User,
 317         where: u.ap_id in ^likes
 318       users = Repo.all(q)
 319       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 320     else
 321       _ -> json(conn, [])
 322     end
 323   end
 324
 325   def reblogged_by(conn, %{"id" => id}) do
 326     with %Activity{data: %{"object" => %{"announcements" => announces}}} <- Repo.get(Activity, id) do
 327       q = from u in User,
 328         where: u.ap_id in ^announces
 329       users = Repo.all(q)
 330       render conn, AccountView, "accounts.json", %{users: users, as: :user}
 331     else
 332       _ -> json(conn, [])
 333     end
 334   end
 335
 336   # TODO: Link headers
 337   def hashtag_timeline(%{assigns: %{user: user}} = conn, params) do
 338     params = params
 339     |> Map.put("type", "Create")
 340     |> Map.put("local_only", !!params["local"])
 341     |> Map.put("blocking_user", user)
 342
 343     activities = ActivityPub.fetch_public_activities(params)
 344     |> Enum.reverse
 345
 346     conn
 347     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 348   end
 349
 350   # TODO: Pagination
 351   def followers(conn, %{"id" => id}) do
 352     with %User{} = user <- Repo.get(User, id),
 353          {:ok, followers} <- User.get_followers(user) do
 354       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 355     end
 356   end
 357
 358   def following(conn, %{"id" => id}) do
 359     with %User{} = user <- Repo.get(User, id),
 360          {:ok, followers} <- User.get_friends(user) do
 361       render conn, AccountView, "accounts.json", %{users: followers, as: :user}
 362     end
 363   end
 364
 365   def follow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 366     with %User{} = followed <- Repo.get(User, id),
 367          {:ok, follower} <- User.follow(follower, followed),
 368          {:ok, _activity} <- ActivityPub.follow(follower, followed) do
 369       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 370     else
 371       {:error, message} ->
 372         conn
 373         |> put_resp_content_type("application/json")
 374         |> send_resp(403, Poison.encode!(%{"error" => message}))
 375     end
 376   end
 377
 378   def follow(%{assigns: %{user: follower}} = conn, %{"uri" => uri}) do
 379     with %User{} = followed <- Repo.get_by(User, nickname: uri),
 380          {:ok, follower} <- User.follow(follower, followed),
 381          {:ok, _activity} <- ActivityPub.follow(follower, followed) do
 382       render conn, AccountView, "account.json", %{user: followed}
 383     else
 384       {:error, message} ->
 385         conn
 386         |> put_resp_content_type("application/json")
 387         |> send_resp(403, Poison.encode!(%{"error" => message}))
 388     end
 389   end
 390
 391   # TODO: Clean up and unify
 392   def unfollow(%{assigns: %{user: follower}} = conn, %{"id" => id}) do
 393     with %User{} = followed <- Repo.get(User, id),
 394          { :ok, follower, follow_activity } <- User.unfollow(follower, followed),
 395          { :ok, _activity } <- ActivityPub.insert(%{
 396            "type" => "Undo",
 397            "actor" => follower.ap_id,
 398            "object" => follow_activity.data["id"] # get latest Follow for these users
 399          }) do
 400       render conn, AccountView, "relationship.json", %{user: follower, target: followed}
 401     end
 402   end
 403
 404   def block(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 405     with %User{} = blocked <- Repo.get(User, id),
 406          {:ok, blocker} <- User.block(blocker, blocked) do
 407       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 408     else
 409       {:error, message} ->
 410         conn
 411         |> put_resp_content_type("application/json")
 412         |> send_resp(403, Poison.encode!(%{"error" => message}))
 413     end
 414   end
 415
 416   def unblock(%{assigns: %{user: blocker}} = conn, %{"id" => id}) do
 417     with %User{} = blocked <- Repo.get(User, id),
 418          {:ok, blocker} <- User.unblock(blocker, blocked) do
 419       render conn, AccountView, "relationship.json", %{user: blocker, target: blocked}
 420     else
 421       {:error, message} ->
 422         conn
 423         |> put_resp_content_type("application/json")
 424         |> send_resp(403, Poison.encode!(%{"error" => message}))
 425     end
 426   end
 427
 428   # TODO: Use proper query
 429   def blocks(%{assigns: %{user: user}} = conn, _) do
 430     with blocked_users <- user.info["blocks"] || [],
 431          accounts <- Enum.map(blocked_users, fn (ap_id) -> User.get_cached_by_ap_id(ap_id) end) do
 432       res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 433       json(conn, res)
 434     end
 435   end
 436
 437   def search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 438     accounts = User.search(query, params["resolve"] == "true")
 439
 440     fetched = if Regex.match?(~r/https?:/, query) do
 441       with {:ok, activities} <- OStatus.fetch_activity_from_url(query) do
 442         activities
 443       else
 444         _e -> []
 445       end
 446     end || []
 447
 448     q = from a in Activity,
 449       where: fragment("?->>'type' = 'Create'", a.data),
 450       where: fragment("to_tsvector('english', ?->'object'->>'content') @@ plainto_tsquery('english', ?)", a.data, ^query),
 451       limit: 20
 452     statuses = Repo.all(q) ++ fetched
 453
 454     res = %{
 455       "accounts" => AccountView.render("accounts.json", users: accounts, for: user, as: :user),
 456       "statuses" => StatusView.render("index.json", activities: statuses, for: user, as: :activity),
 457       "hashtags" => []
 458     }
 459
 460     json(conn, res)
 461   end
 462
 463   def account_search(%{assigns: %{user: user}} = conn, %{"q" => query} = params) do
 464     accounts = User.search(query, params["resolve"] == "true")
 465
 466     res = AccountView.render("accounts.json", users: accounts, for: user, as: :user)
 467
 468     json(conn, res)
 469   end
 470
 471   def favourites(%{assigns: %{user: user}} = conn, _) do
 472     params = %{}
 473     |> Map.put("type", "Create")
 474     |> Map.put("favorited_by", user.ap_id)
 475     |> Map.put("blocking_user", user)
 476
 477     activities = ActivityPub.fetch_public_activities(params)
 478     |> Enum.reverse
 479
 480     conn
 481     |> render(StatusView, "index.json", %{activities: activities, for: user, as: :activity})
 482   end
 483
 484   def index(%{assigns: %{user: user}} = conn, _params) do
 485     token = conn
 486     |> get_session(:oauth_token)
 487
 488     if user && token do
 489       mastodon_emoji = mastodonized_emoji()
 490       accounts = Map.put(%{}, user.id, AccountView.render("account.json", %{user: user}))
 491       initial_state = %{
 492         meta: %{
 493           streaming_api_base_url: String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
 494           access_token: token,
 495           locale: "en",
 496           domain: Pleroma.Web.Endpoint.host(),
 497           admin: "1",
 498           me: "#{user.id}",
 499           unfollow_modal: false,
 500           boost_modal: false,
 501           delete_modal: true,
 502           auto_play_gif: false,
 503           reduce_motion: false
 504         },
 505         compose: %{
 506           me: "#{user.id}",
 507           default_privacy: "public",
 508           default_sensitive: false
 509         },
 510         media_attachments: %{
 511           accept_content_types: [
 512             ".jpg",
 513             ".jpeg",
 514             ".png",
 515             ".gif",
 516             ".webm",
 517             ".mp4",
 518             ".m4v",
 519             "image\/jpeg",
 520             "image\/png",
 521             "image\/gif",
 522             "video\/webm",
 523             "video\/mp4"
 524           ]
 525         },
 526         settings: %{
 527           onboarded: true,
 528           home: %{
 529             shows: %{
 530               reblog: true,
 531               reply: true
 532             }
 533           },
 534           notifications: %{
 535             alerts: %{
 536               follow: true,
 537               favourite: true,
 538               reblog: true,
 539               mention: true
 540             },
 541             shows: %{
 542               follow: true,
 543               favourite: true,
 544               reblog: true,
 545               mention: true
 546             },
 547             sounds: %{
 548               follow: true,
 549               favourite: true,
 550               reblog: true,
 551               mention: true
 552             }
 553           }
 554         },
 555         push_subscription: nil,
 556         accounts: accounts,
 557         custom_emojis: mastodon_emoji
 558       } |> Poison.encode!
 559       conn
 560       |> put_layout(false)
 561       |> render(MastodonView, "index.html", %{initial_state: initial_state})
 562     else
 563       conn
 564       |> redirect(to: "/web/login")
 565     end
 566   end
 567
 568   def login(conn, _) do
 569     conn
 570     |> render(MastodonView, "login.html", %{error: false})
 571   end
 572
 573   defp get_or_make_app() do
 574     with %App{} = app <- Repo.get_by(App, client_name: "Mastodon-Local") do
 575       {:ok, app}
 576     else
 577       _e ->
 578         cs = App.register_changeset(%App{}, %{client_name: "Mastodon-Local", redirect_uris: ".", scopes: "read,write,follow"})
 579         Repo.insert(cs)
 580     end
 581   end
 582
 583   def login_post(conn, %{"authorization" => %{ "name" => name, "password" => password}}) do
 584     with %User{} = user <- User.get_cached_by_nickname(name),
 585          true <- Pbkdf2.checkpw(password, user.password_hash),
 586          {:ok, app} <- get_or_make_app(),
 587          {:ok, auth} <- Authorization.create_authorization(app, user),
 588          {:ok, token} <- Token.exchange_token(app, auth) do
 589       conn
 590       |> put_session(:oauth_token, token.token)
 591       |> redirect(to: "/web/getting-started")
 592     else
 593       _e ->
 594         conn
 595         |> render(MastodonView, "login.html", %{error: "Wrong username or password"})
 596     end
 597   end
 598
 599   def logout(conn, _) do
 600     conn
 601     |> clear_session
 602     |> redirect(to: "/")
 603   end
 604
 605   def relationship_noop(%{assigns: %{user: user}} = conn, %{"id" => id}) do
 606     Logger.debug("Unimplemented, returning unmodified relationship")
 607     with %User{} = target <- Repo.get(User, id) do
 608       render conn, AccountView, "relationship.json", %{user: user, target: target}
 609     end
 610   end
 611
 612   def empty_array(conn, _) do
 613     Logger.debug("Unimplemented, returning an empty array")
 614     json(conn, [])
 615   end
 616
 617   def render_notification(user, %{id: id, activity: activity, inserted_at: created_at} = _params) do
 618     actor = User.get_cached_by_ap_id(activity.data["actor"])
 619     created_at = NaiveDateTime.to_iso8601(created_at)
 620     |> String.replace(~r/(\.\d+)?$/, ".000Z", global: false)
 621     case activity.data["type"] do
 622       "Create" ->
 623         %{id: id, type: "mention", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: activity, for: user})}
 624       "Like" ->
 625         liked_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 626         %{id: id, type: "favourite", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: liked_activity, for: user})}
 627       "Announce" ->
 628         announced_activity = Activity.get_create_activity_by_object_ap_id(activity.data["object"])
 629         %{id: id, type: "reblog", created_at: created_at, account: AccountView.render("account.json", %{user: actor}), status: StatusView.render("status.json", %{activity: announced_activity, for: user})}
 630       "Follow" ->
 631         %{id: id, type: "follow", created_at: created_at, account: AccountView.render("account.json", %{user: actor})}
 632       _ -> nil
 633     end
 634   end
 635 end