1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.PleromaAPI.AccountController do
6 use Pleroma.Web, :controller
8 import Pleroma.Web.ControllerHelper,
9 only: [json_response: 3, add_link_headers: 2, assign_account_by_id: 2]
12 alias Pleroma.Plugs.EnsurePublicOrAuthenticatedPlug
13 alias Pleroma.Plugs.OAuthScopesPlug
14 alias Pleroma.Plugs.RateLimiter
16 alias Pleroma.Web.ActivityPub.ActivityPub
17 alias Pleroma.Web.MastodonAPI.StatusView
19 require Pleroma.Constants
22 OpenApiSpex.Plug.PutApiSpec,
23 [module: Pleroma.Web.ApiSpec] when action == :confirmation_resend
26 plug(Pleroma.Web.ApiSpec.CastAndValidate)
30 [OAuthScopesPlug, EnsurePublicOrAuthenticatedPlug] when action == :confirmation_resend
35 %{scopes: ["follow", "write:follows"]} when action in [:subscribe, :unsubscribe]
40 %{scopes: ["write:accounts"]}
41 # Note: the following actions are not permission-secured in Mastodon:
51 %{scopes: ["read:favourites"], fallback: :proceed_unauthenticated} when action == :favourites
54 plug(RateLimiter, [name: :account_confirmation_resend] when action == :confirmation_resend)
56 plug(:assign_account_by_id when action in [:favourites, :subscribe, :unsubscribe])
57 plug(:put_view, Pleroma.Web.MastodonAPI.AccountView)
61 [pool: Pleroma.MajicPool] when action in [:update_avatar, :update_background, :update_banner]
64 defdelegate open_api_operation(action), to: Pleroma.Web.ApiSpec.PleromaAccountOperation
66 @doc "POST /api/v1/pleroma/accounts/confirmation_resend"
67 def confirmation_resend(conn, params) do
68 nickname_or_email = params[:email] || params[:nickname]
70 with %User{} = user <- User.get_by_nickname_or_email(nickname_or_email),
71 {:ok, _} <- User.try_send_confirmation_email(user) do
72 json_response(conn, :no_content, "")
76 @doc "PATCH /api/v1/pleroma/accounts/update_avatar"
77 def update_avatar(%{assigns: %{user: user}, body_params: %{img: ""}} = conn, _) do
80 |> Changeset.change(%{avatar: nil})
81 |> User.update_and_set_cache()
83 json(conn, %{url: nil})
86 def update_avatar(%{assigns: %{user: user}, body_params: params} = conn, _params) do
87 {:ok, %{data: data}} = ActivityPub.upload(params, type: :avatar)
88 {:ok, _user} = user |> Changeset.change(%{avatar: data}) |> User.update_and_set_cache()
89 %{"url" => [%{"href" => href} | _]} = data
91 json(conn, %{url: href})
94 @doc "PATCH /api/v1/pleroma/accounts/update_banner"
95 def update_banner(%{assigns: %{user: user}, body_params: %{banner: ""}} = conn, _) do
96 with {:ok, _user} <- User.update_banner(user, %{}) do
97 json(conn, %{url: nil})
101 def update_banner(%{assigns: %{user: user}, body_params: params} = conn, _) do
102 with {:ok, object} <- ActivityPub.upload(%{img: params[:banner]}, type: :banner),
103 {:ok, _user} <- User.update_banner(user, object.data) do
104 %{"url" => [%{"href" => href} | _]} = object.data
106 json(conn, %{url: href})
110 @doc "PATCH /api/v1/pleroma/accounts/update_background"
111 def update_background(%{assigns: %{user: user}, body_params: %{img: ""}} = conn, _) do
112 with {:ok, _user} <- User.update_background(user, %{}) do
113 json(conn, %{url: nil})
117 def update_background(%{assigns: %{user: user}, body_params: params} = conn, _) do
118 with {:ok, object} <- ActivityPub.upload(params, type: :background),
119 {:ok, _user} <- User.update_background(user, object.data) do
120 %{"url" => [%{"href" => href} | _]} = object.data
122 json(conn, %{url: href})
126 @doc "GET /api/v1/pleroma/accounts/:id/favourites"
127 def favourites(%{assigns: %{account: %{hide_favorites: true}}} = conn, _params) do
128 render_error(conn, :forbidden, "Can't get favorites")
131 def favourites(%{assigns: %{user: for_user, account: user}} = conn, params) do
134 |> Map.put(:type, "Create")
135 |> Map.put(:favorited_by, user.ap_id)
136 |> Map.put(:blocking_user, for_user)
140 [Pleroma.Constants.as_public()] ++ [for_user.ap_id | User.following(for_user)]
142 [Pleroma.Constants.as_public()]
147 |> ActivityPub.fetch_activities(params)
151 |> add_link_headers(activities)
152 |> put_view(StatusView)
153 |> render("index.json",
154 activities: activities,
160 @doc "POST /api/v1/pleroma/accounts/:id/subscribe"
161 def subscribe(%{assigns: %{user: user, account: subscription_target}} = conn, _params) do
162 with {:ok, _subscription} <- User.subscribe(user, subscription_target) do
163 render(conn, "relationship.json", user: user, target: subscription_target)
165 {:error, message} -> json_response(conn, :forbidden, %{error: message})
169 @doc "POST /api/v1/pleroma/accounts/:id/unsubscribe"
170 def unsubscribe(%{assigns: %{user: user, account: subscription_target}} = conn, _params) do
171 with {:ok, _subscription} <- User.unsubscribe(user, subscription_target) do
172 render(conn, "relationship.json", user: user, target: subscription_target)
174 {:error, message} -> json_response(conn, :forbidden, %{error: message})