fixes for logger backends
[akkoma] / test / web / admin_api / admin_api_controller_test.exs
1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
4
5 defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do
6 use Pleroma.Web.ConnCase
7 use Oban.Testing, repo: Pleroma.Repo
8
9 alias Pleroma.Activity
10 alias Pleroma.HTML
11 alias Pleroma.ModerationLog
12 alias Pleroma.Repo
13 alias Pleroma.ReportNote
14 alias Pleroma.Tests.ObanHelpers
15 alias Pleroma.User
16 alias Pleroma.UserInviteToken
17 alias Pleroma.Web.ActivityPub.Relay
18 alias Pleroma.Web.CommonAPI
19 alias Pleroma.Web.MastodonAPI.StatusView
20 alias Pleroma.Web.MediaProxy
21 import Pleroma.Factory
22
23 setup_all do
24 Tesla.Mock.mock_global(fn env -> apply(HttpRequestMock, :request, [env]) end)
25
26 :ok
27 end
28
29 clear_config([:auth, :enforce_oauth_admin_scope_usage]) do
30 Pleroma.Config.put([:auth, :enforce_oauth_admin_scope_usage], false)
31 end
32
33 describe "with [:auth, :enforce_oauth_admin_scope_usage]," do
34 clear_config([:auth, :enforce_oauth_admin_scope_usage]) do
35 Pleroma.Config.put([:auth, :enforce_oauth_admin_scope_usage], true)
36 end
37
38 test "GET /api/pleroma/admin/users/:nickname requires admin:read:accounts or broader scope" do
39 user = insert(:user)
40 admin = insert(:user, is_admin: true)
41 url = "/api/pleroma/admin/users/#{user.nickname}"
42
43 good_token1 = insert(:oauth_token, user: admin, scopes: ["admin"])
44 good_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read"])
45 good_token3 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts"])
46
47 bad_token1 = insert(:oauth_token, user: admin, scopes: ["read:accounts"])
48 bad_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts:partial"])
49 bad_token3 = nil
50
51 for good_token <- [good_token1, good_token2, good_token3] do
52 conn =
53 build_conn()
54 |> assign(:user, admin)
55 |> assign(:token, good_token)
56 |> get(url)
57
58 assert json_response(conn, 200)
59 end
60
61 for good_token <- [good_token1, good_token2, good_token3] do
62 conn =
63 build_conn()
64 |> assign(:user, nil)
65 |> assign(:token, good_token)
66 |> get(url)
67
68 assert json_response(conn, :forbidden)
69 end
70
71 for bad_token <- [bad_token1, bad_token2, bad_token3] do
72 conn =
73 build_conn()
74 |> assign(:user, admin)
75 |> assign(:token, bad_token)
76 |> get(url)
77
78 assert json_response(conn, :forbidden)
79 end
80 end
81 end
82
83 describe "DELETE /api/pleroma/admin/users" do
84 test "single user" do
85 admin = insert(:user, is_admin: true)
86 user = insert(:user)
87
88 conn =
89 build_conn()
90 |> assign(:user, admin)
91 |> put_req_header("accept", "application/json")
92 |> delete("/api/pleroma/admin/users?nickname=#{user.nickname}")
93
94 log_entry = Repo.one(ModerationLog)
95
96 assert ModerationLog.get_log_entry_message(log_entry) ==
97 "@#{admin.nickname} deleted users: @#{user.nickname}"
98
99 assert json_response(conn, 200) == user.nickname
100 end
101
102 test "multiple users" do
103 admin = insert(:user, is_admin: true)
104 user_one = insert(:user)
105 user_two = insert(:user)
106
107 conn =
108 build_conn()
109 |> assign(:user, admin)
110 |> put_req_header("accept", "application/json")
111 |> delete("/api/pleroma/admin/users", %{
112 nicknames: [user_one.nickname, user_two.nickname]
113 })
114
115 log_entry = Repo.one(ModerationLog)
116
117 assert ModerationLog.get_log_entry_message(log_entry) ==
118 "@#{admin.nickname} deleted users: @#{user_one.nickname}, @#{user_two.nickname}"
119
120 response = json_response(conn, 200)
121 assert response -- [user_one.nickname, user_two.nickname] == []
122 end
123 end
124
125 describe "/api/pleroma/admin/users" do
126 test "Create" do
127 admin = insert(:user, is_admin: true)
128
129 conn =
130 build_conn()
131 |> assign(:user, admin)
132 |> put_req_header("accept", "application/json")
133 |> post("/api/pleroma/admin/users", %{
134 "users" => [
135 %{
136 "nickname" => "lain",
137 "email" => "lain@example.org",
138 "password" => "test"
139 },
140 %{
141 "nickname" => "lain2",
142 "email" => "lain2@example.org",
143 "password" => "test"
144 }
145 ]
146 })
147
148 response = json_response(conn, 200) |> Enum.map(&Map.get(&1, "type"))
149 assert response == ["success", "success"]
150
151 log_entry = Repo.one(ModerationLog)
152
153 assert ["lain", "lain2"] -- Enum.map(log_entry.data["subjects"], & &1["nickname"]) == []
154 end
155
156 test "Cannot create user with existing email" do
157 admin = insert(:user, is_admin: true)
158 user = insert(:user)
159
160 conn =
161 build_conn()
162 |> assign(:user, admin)
163 |> put_req_header("accept", "application/json")
164 |> post("/api/pleroma/admin/users", %{
165 "users" => [
166 %{
167 "nickname" => "lain",
168 "email" => user.email,
169 "password" => "test"
170 }
171 ]
172 })
173
174 assert json_response(conn, 409) == [
175 %{
176 "code" => 409,
177 "data" => %{
178 "email" => user.email,
179 "nickname" => "lain"
180 },
181 "error" => "email has already been taken",
182 "type" => "error"
183 }
184 ]
185 end
186
187 test "Cannot create user with existing nickname" do
188 admin = insert(:user, is_admin: true)
189 user = insert(:user)
190
191 conn =
192 build_conn()
193 |> assign(:user, admin)
194 |> put_req_header("accept", "application/json")
195 |> post("/api/pleroma/admin/users", %{
196 "users" => [
197 %{
198 "nickname" => user.nickname,
199 "email" => "someuser@plerama.social",
200 "password" => "test"
201 }
202 ]
203 })
204
205 assert json_response(conn, 409) == [
206 %{
207 "code" => 409,
208 "data" => %{
209 "email" => "someuser@plerama.social",
210 "nickname" => user.nickname
211 },
212 "error" => "nickname has already been taken",
213 "type" => "error"
214 }
215 ]
216 end
217
218 test "Multiple user creation works in transaction" do
219 admin = insert(:user, is_admin: true)
220 user = insert(:user)
221
222 conn =
223 build_conn()
224 |> assign(:user, admin)
225 |> put_req_header("accept", "application/json")
226 |> post("/api/pleroma/admin/users", %{
227 "users" => [
228 %{
229 "nickname" => "newuser",
230 "email" => "newuser@pleroma.social",
231 "password" => "test"
232 },
233 %{
234 "nickname" => "lain",
235 "email" => user.email,
236 "password" => "test"
237 }
238 ]
239 })
240
241 assert json_response(conn, 409) == [
242 %{
243 "code" => 409,
244 "data" => %{
245 "email" => user.email,
246 "nickname" => "lain"
247 },
248 "error" => "email has already been taken",
249 "type" => "error"
250 },
251 %{
252 "code" => 409,
253 "data" => %{
254 "email" => "newuser@pleroma.social",
255 "nickname" => "newuser"
256 },
257 "error" => "",
258 "type" => "error"
259 }
260 ]
261
262 assert User.get_by_nickname("newuser") === nil
263 end
264 end
265
266 describe "/api/pleroma/admin/users/:nickname" do
267 test "Show", %{conn: conn} do
268 admin = insert(:user, is_admin: true)
269 user = insert(:user)
270
271 conn =
272 conn
273 |> assign(:user, admin)
274 |> get("/api/pleroma/admin/users/#{user.nickname}")
275
276 expected = %{
277 "deactivated" => false,
278 "id" => to_string(user.id),
279 "local" => true,
280 "nickname" => user.nickname,
281 "roles" => %{"admin" => false, "moderator" => false},
282 "tags" => [],
283 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
284 "display_name" => HTML.strip_tags(user.name || user.nickname),
285 "confirmation_pending" => false
286 }
287
288 assert expected == json_response(conn, 200)
289 end
290
291 test "when the user doesn't exist", %{conn: conn} do
292 admin = insert(:user, is_admin: true)
293 user = build(:user)
294
295 conn =
296 conn
297 |> assign(:user, admin)
298 |> get("/api/pleroma/admin/users/#{user.nickname}")
299
300 assert "Not found" == json_response(conn, 404)
301 end
302 end
303
304 describe "/api/pleroma/admin/users/follow" do
305 test "allows to force-follow another user" do
306 admin = insert(:user, is_admin: true)
307 user = insert(:user)
308 follower = insert(:user)
309
310 build_conn()
311 |> assign(:user, admin)
312 |> put_req_header("accept", "application/json")
313 |> post("/api/pleroma/admin/users/follow", %{
314 "follower" => follower.nickname,
315 "followed" => user.nickname
316 })
317
318 user = User.get_cached_by_id(user.id)
319 follower = User.get_cached_by_id(follower.id)
320
321 assert User.following?(follower, user)
322
323 log_entry = Repo.one(ModerationLog)
324
325 assert ModerationLog.get_log_entry_message(log_entry) ==
326 "@#{admin.nickname} made @#{follower.nickname} follow @#{user.nickname}"
327 end
328 end
329
330 describe "/api/pleroma/admin/users/unfollow" do
331 test "allows to force-unfollow another user" do
332 admin = insert(:user, is_admin: true)
333 user = insert(:user)
334 follower = insert(:user)
335
336 User.follow(follower, user)
337
338 build_conn()
339 |> assign(:user, admin)
340 |> put_req_header("accept", "application/json")
341 |> post("/api/pleroma/admin/users/unfollow", %{
342 "follower" => follower.nickname,
343 "followed" => user.nickname
344 })
345
346 user = User.get_cached_by_id(user.id)
347 follower = User.get_cached_by_id(follower.id)
348
349 refute User.following?(follower, user)
350
351 log_entry = Repo.one(ModerationLog)
352
353 assert ModerationLog.get_log_entry_message(log_entry) ==
354 "@#{admin.nickname} made @#{follower.nickname} unfollow @#{user.nickname}"
355 end
356 end
357
358 describe "PUT /api/pleroma/admin/users/tag" do
359 setup do
360 admin = insert(:user, is_admin: true)
361 user1 = insert(:user, %{tags: ["x"]})
362 user2 = insert(:user, %{tags: ["y"]})
363 user3 = insert(:user, %{tags: ["unchanged"]})
364
365 conn =
366 build_conn()
367 |> assign(:user, admin)
368 |> put_req_header("accept", "application/json")
369 |> put(
370 "/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=#{
371 user2.nickname
372 }&tags[]=foo&tags[]=bar"
373 )
374
375 %{conn: conn, admin: admin, user1: user1, user2: user2, user3: user3}
376 end
377
378 test "it appends specified tags to users with specified nicknames", %{
379 conn: conn,
380 admin: admin,
381 user1: user1,
382 user2: user2
383 } do
384 assert json_response(conn, :no_content)
385 assert User.get_cached_by_id(user1.id).tags == ["x", "foo", "bar"]
386 assert User.get_cached_by_id(user2.id).tags == ["y", "foo", "bar"]
387
388 log_entry = Repo.one(ModerationLog)
389
390 users =
391 [user1.nickname, user2.nickname]
392 |> Enum.map(&"@#{&1}")
393 |> Enum.join(", ")
394
395 tags = ["foo", "bar"] |> Enum.join(", ")
396
397 assert ModerationLog.get_log_entry_message(log_entry) ==
398 "@#{admin.nickname} added tags: #{tags} to users: #{users}"
399 end
400
401 test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
402 assert json_response(conn, :no_content)
403 assert User.get_cached_by_id(user3.id).tags == ["unchanged"]
404 end
405 end
406
407 describe "DELETE /api/pleroma/admin/users/tag" do
408 setup do
409 admin = insert(:user, is_admin: true)
410 user1 = insert(:user, %{tags: ["x"]})
411 user2 = insert(:user, %{tags: ["y", "z"]})
412 user3 = insert(:user, %{tags: ["unchanged"]})
413
414 conn =
415 build_conn()
416 |> assign(:user, admin)
417 |> put_req_header("accept", "application/json")
418 |> delete(
419 "/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=#{
420 user2.nickname
421 }&tags[]=x&tags[]=z"
422 )
423
424 %{conn: conn, admin: admin, user1: user1, user2: user2, user3: user3}
425 end
426
427 test "it removes specified tags from users with specified nicknames", %{
428 conn: conn,
429 admin: admin,
430 user1: user1,
431 user2: user2
432 } do
433 assert json_response(conn, :no_content)
434 assert User.get_cached_by_id(user1.id).tags == []
435 assert User.get_cached_by_id(user2.id).tags == ["y"]
436
437 log_entry = Repo.one(ModerationLog)
438
439 users =
440 [user1.nickname, user2.nickname]
441 |> Enum.map(&"@#{&1}")
442 |> Enum.join(", ")
443
444 tags = ["x", "z"] |> Enum.join(", ")
445
446 assert ModerationLog.get_log_entry_message(log_entry) ==
447 "@#{admin.nickname} removed tags: #{tags} from users: #{users}"
448 end
449
450 test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
451 assert json_response(conn, :no_content)
452 assert User.get_cached_by_id(user3.id).tags == ["unchanged"]
453 end
454 end
455
456 describe "/api/pleroma/admin/users/:nickname/permission_group" do
457 test "GET is giving user_info" do
458 admin = insert(:user, is_admin: true)
459
460 conn =
461 build_conn()
462 |> assign(:user, admin)
463 |> put_req_header("accept", "application/json")
464 |> get("/api/pleroma/admin/users/#{admin.nickname}/permission_group/")
465
466 assert json_response(conn, 200) == %{
467 "is_admin" => true,
468 "is_moderator" => false
469 }
470 end
471
472 test "/:right POST, can add to a permission group" do
473 admin = insert(:user, is_admin: true)
474 user = insert(:user)
475
476 conn =
477 build_conn()
478 |> assign(:user, admin)
479 |> put_req_header("accept", "application/json")
480 |> post("/api/pleroma/admin/users/#{user.nickname}/permission_group/admin")
481
482 assert json_response(conn, 200) == %{
483 "is_admin" => true
484 }
485
486 log_entry = Repo.one(ModerationLog)
487
488 assert ModerationLog.get_log_entry_message(log_entry) ==
489 "@#{admin.nickname} made @#{user.nickname} admin"
490 end
491
492 test "/:right POST, can add to a permission group (multiple)" do
493 admin = insert(:user, is_admin: true)
494 user_one = insert(:user)
495 user_two = insert(:user)
496
497 conn =
498 build_conn()
499 |> assign(:user, admin)
500 |> put_req_header("accept", "application/json")
501 |> post("/api/pleroma/admin/users/permission_group/admin", %{
502 nicknames: [user_one.nickname, user_two.nickname]
503 })
504
505 assert json_response(conn, 200) == %{
506 "is_admin" => true
507 }
508
509 log_entry = Repo.one(ModerationLog)
510
511 assert ModerationLog.get_log_entry_message(log_entry) ==
512 "@#{admin.nickname} made @#{user_one.nickname}, @#{user_two.nickname} admin"
513 end
514
515 test "/:right DELETE, can remove from a permission group" do
516 admin = insert(:user, is_admin: true)
517 user = insert(:user, is_admin: true)
518
519 conn =
520 build_conn()
521 |> assign(:user, admin)
522 |> put_req_header("accept", "application/json")
523 |> delete("/api/pleroma/admin/users/#{user.nickname}/permission_group/admin")
524
525 assert json_response(conn, 200) == %{
526 "is_admin" => false
527 }
528
529 log_entry = Repo.one(ModerationLog)
530
531 assert ModerationLog.get_log_entry_message(log_entry) ==
532 "@#{admin.nickname} revoked admin role from @#{user.nickname}"
533 end
534
535 test "/:right DELETE, can remove from a permission group (multiple)" do
536 admin = insert(:user, is_admin: true)
537 user_one = insert(:user, is_admin: true)
538 user_two = insert(:user, is_admin: true)
539
540 conn =
541 build_conn()
542 |> assign(:user, admin)
543 |> put_req_header("accept", "application/json")
544 |> delete("/api/pleroma/admin/users/permission_group/admin", %{
545 nicknames: [user_one.nickname, user_two.nickname]
546 })
547
548 assert json_response(conn, 200) == %{
549 "is_admin" => false
550 }
551
552 log_entry = Repo.one(ModerationLog)
553
554 assert ModerationLog.get_log_entry_message(log_entry) ==
555 "@#{admin.nickname} revoked admin role from @#{user_one.nickname}, @#{
556 user_two.nickname
557 }"
558 end
559 end
560
561 describe "POST /api/pleroma/admin/email_invite, with valid config" do
562 setup do
563 [user: insert(:user, is_admin: true)]
564 end
565
566 clear_config([:instance, :registrations_open]) do
567 Pleroma.Config.put([:instance, :registrations_open], false)
568 end
569
570 clear_config([:instance, :invites_enabled]) do
571 Pleroma.Config.put([:instance, :invites_enabled], true)
572 end
573
574 test "sends invitation and returns 204", %{conn: conn, user: user} do
575 recipient_email = "foo@bar.com"
576 recipient_name = "J. D."
577
578 conn =
579 conn
580 |> assign(:user, user)
581 |> post(
582 "/api/pleroma/admin/users/email_invite?email=#{recipient_email}&name=#{recipient_name}"
583 )
584
585 assert json_response(conn, :no_content)
586
587 token_record = List.last(Pleroma.Repo.all(Pleroma.UserInviteToken))
588 assert token_record
589 refute token_record.used
590
591 notify_email = Pleroma.Config.get([:instance, :notify_email])
592 instance_name = Pleroma.Config.get([:instance, :name])
593
594 email =
595 Pleroma.Emails.UserEmail.user_invitation_email(
596 user,
597 token_record,
598 recipient_email,
599 recipient_name
600 )
601
602 Swoosh.TestAssertions.assert_email_sent(
603 from: {instance_name, notify_email},
604 to: {recipient_name, recipient_email},
605 html_body: email.html_body
606 )
607 end
608
609 test "it returns 403 if requested by a non-admin", %{conn: conn} do
610 non_admin_user = insert(:user)
611
612 conn =
613 conn
614 |> assign(:user, non_admin_user)
615 |> post("/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
616
617 assert json_response(conn, :forbidden)
618 end
619 end
620
621 describe "POST /api/pleroma/admin/users/email_invite, with invalid config" do
622 setup do
623 [user: insert(:user, is_admin: true)]
624 end
625
626 clear_config([:instance, :registrations_open])
627 clear_config([:instance, :invites_enabled])
628
629 test "it returns 500 if `invites_enabled` is not enabled", %{conn: conn, user: user} do
630 Pleroma.Config.put([:instance, :registrations_open], false)
631 Pleroma.Config.put([:instance, :invites_enabled], false)
632
633 conn =
634 conn
635 |> assign(:user, user)
636 |> post("/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
637
638 assert json_response(conn, :internal_server_error)
639 end
640
641 test "it returns 500 if `registrations_open` is enabled", %{conn: conn, user: user} do
642 Pleroma.Config.put([:instance, :registrations_open], true)
643 Pleroma.Config.put([:instance, :invites_enabled], true)
644
645 conn =
646 conn
647 |> assign(:user, user)
648 |> post("/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
649
650 assert json_response(conn, :internal_server_error)
651 end
652 end
653
654 test "/api/pleroma/admin/users/:nickname/password_reset" do
655 admin = insert(:user, is_admin: true)
656 user = insert(:user)
657
658 conn =
659 build_conn()
660 |> assign(:user, admin)
661 |> put_req_header("accept", "application/json")
662 |> get("/api/pleroma/admin/users/#{user.nickname}/password_reset")
663
664 resp = json_response(conn, 200)
665
666 assert Regex.match?(~r/(http:\/\/|https:\/\/)/, resp["link"])
667 end
668
669 describe "GET /api/pleroma/admin/users" do
670 setup do
671 admin = insert(:user, is_admin: true)
672
673 conn =
674 build_conn()
675 |> assign(:user, admin)
676
677 {:ok, conn: conn, admin: admin}
678 end
679
680 test "renders users array for the first page", %{conn: conn, admin: admin} do
681 user = insert(:user, local: false, tags: ["foo", "bar"])
682 conn = get(conn, "/api/pleroma/admin/users?page=1")
683
684 users =
685 [
686 %{
687 "deactivated" => admin.deactivated,
688 "id" => admin.id,
689 "nickname" => admin.nickname,
690 "roles" => %{"admin" => true, "moderator" => false},
691 "local" => true,
692 "tags" => [],
693 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
694 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
695 "confirmation_pending" => false
696 },
697 %{
698 "deactivated" => user.deactivated,
699 "id" => user.id,
700 "nickname" => user.nickname,
701 "roles" => %{"admin" => false, "moderator" => false},
702 "local" => false,
703 "tags" => ["foo", "bar"],
704 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
705 "display_name" => HTML.strip_tags(user.name || user.nickname),
706 "confirmation_pending" => false
707 }
708 ]
709 |> Enum.sort_by(& &1["nickname"])
710
711 assert json_response(conn, 200) == %{
712 "count" => 2,
713 "page_size" => 50,
714 "users" => users
715 }
716 end
717
718 test "renders empty array for the second page", %{conn: conn} do
719 insert(:user)
720
721 conn = get(conn, "/api/pleroma/admin/users?page=2")
722
723 assert json_response(conn, 200) == %{
724 "count" => 2,
725 "page_size" => 50,
726 "users" => []
727 }
728 end
729
730 test "regular search", %{conn: conn} do
731 user = insert(:user, nickname: "bob")
732
733 conn = get(conn, "/api/pleroma/admin/users?query=bo")
734
735 assert json_response(conn, 200) == %{
736 "count" => 1,
737 "page_size" => 50,
738 "users" => [
739 %{
740 "deactivated" => user.deactivated,
741 "id" => user.id,
742 "nickname" => user.nickname,
743 "roles" => %{"admin" => false, "moderator" => false},
744 "local" => true,
745 "tags" => [],
746 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
747 "display_name" => HTML.strip_tags(user.name || user.nickname),
748 "confirmation_pending" => false
749 }
750 ]
751 }
752 end
753
754 test "search by domain", %{conn: conn} do
755 user = insert(:user, nickname: "nickname@domain.com")
756 insert(:user)
757
758 conn = get(conn, "/api/pleroma/admin/users?query=domain.com")
759
760 assert json_response(conn, 200) == %{
761 "count" => 1,
762 "page_size" => 50,
763 "users" => [
764 %{
765 "deactivated" => user.deactivated,
766 "id" => user.id,
767 "nickname" => user.nickname,
768 "roles" => %{"admin" => false, "moderator" => false},
769 "local" => true,
770 "tags" => [],
771 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
772 "display_name" => HTML.strip_tags(user.name || user.nickname),
773 "confirmation_pending" => false
774 }
775 ]
776 }
777 end
778
779 test "search by full nickname", %{conn: conn} do
780 user = insert(:user, nickname: "nickname@domain.com")
781 insert(:user)
782
783 conn = get(conn, "/api/pleroma/admin/users?query=nickname@domain.com")
784
785 assert json_response(conn, 200) == %{
786 "count" => 1,
787 "page_size" => 50,
788 "users" => [
789 %{
790 "deactivated" => user.deactivated,
791 "id" => user.id,
792 "nickname" => user.nickname,
793 "roles" => %{"admin" => false, "moderator" => false},
794 "local" => true,
795 "tags" => [],
796 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
797 "display_name" => HTML.strip_tags(user.name || user.nickname),
798 "confirmation_pending" => false
799 }
800 ]
801 }
802 end
803
804 test "search by display name", %{conn: conn} do
805 user = insert(:user, name: "Display name")
806 insert(:user)
807
808 conn = get(conn, "/api/pleroma/admin/users?name=display")
809
810 assert json_response(conn, 200) == %{
811 "count" => 1,
812 "page_size" => 50,
813 "users" => [
814 %{
815 "deactivated" => user.deactivated,
816 "id" => user.id,
817 "nickname" => user.nickname,
818 "roles" => %{"admin" => false, "moderator" => false},
819 "local" => true,
820 "tags" => [],
821 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
822 "display_name" => HTML.strip_tags(user.name || user.nickname),
823 "confirmation_pending" => false
824 }
825 ]
826 }
827 end
828
829 test "search by email", %{conn: conn} do
830 user = insert(:user, email: "email@example.com")
831 insert(:user)
832
833 conn = get(conn, "/api/pleroma/admin/users?email=email@example.com")
834
835 assert json_response(conn, 200) == %{
836 "count" => 1,
837 "page_size" => 50,
838 "users" => [
839 %{
840 "deactivated" => user.deactivated,
841 "id" => user.id,
842 "nickname" => user.nickname,
843 "roles" => %{"admin" => false, "moderator" => false},
844 "local" => true,
845 "tags" => [],
846 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
847 "display_name" => HTML.strip_tags(user.name || user.nickname),
848 "confirmation_pending" => false
849 }
850 ]
851 }
852 end
853
854 test "regular search with page size", %{conn: conn} do
855 user = insert(:user, nickname: "aalice")
856 user2 = insert(:user, nickname: "alice")
857
858 conn1 = get(conn, "/api/pleroma/admin/users?query=a&page_size=1&page=1")
859
860 assert json_response(conn1, 200) == %{
861 "count" => 2,
862 "page_size" => 1,
863 "users" => [
864 %{
865 "deactivated" => user.deactivated,
866 "id" => user.id,
867 "nickname" => user.nickname,
868 "roles" => %{"admin" => false, "moderator" => false},
869 "local" => true,
870 "tags" => [],
871 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
872 "display_name" => HTML.strip_tags(user.name || user.nickname),
873 "confirmation_pending" => false
874 }
875 ]
876 }
877
878 conn2 = get(conn, "/api/pleroma/admin/users?query=a&page_size=1&page=2")
879
880 assert json_response(conn2, 200) == %{
881 "count" => 2,
882 "page_size" => 1,
883 "users" => [
884 %{
885 "deactivated" => user2.deactivated,
886 "id" => user2.id,
887 "nickname" => user2.nickname,
888 "roles" => %{"admin" => false, "moderator" => false},
889 "local" => true,
890 "tags" => [],
891 "avatar" => User.avatar_url(user2) |> MediaProxy.url(),
892 "display_name" => HTML.strip_tags(user2.name || user2.nickname),
893 "confirmation_pending" => false
894 }
895 ]
896 }
897 end
898
899 test "only local users" do
900 admin = insert(:user, is_admin: true, nickname: "john")
901 user = insert(:user, nickname: "bob")
902
903 insert(:user, nickname: "bobb", local: false)
904
905 conn =
906 build_conn()
907 |> assign(:user, admin)
908 |> get("/api/pleroma/admin/users?query=bo&filters=local")
909
910 assert json_response(conn, 200) == %{
911 "count" => 1,
912 "page_size" => 50,
913 "users" => [
914 %{
915 "deactivated" => user.deactivated,
916 "id" => user.id,
917 "nickname" => user.nickname,
918 "roles" => %{"admin" => false, "moderator" => false},
919 "local" => true,
920 "tags" => [],
921 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
922 "display_name" => HTML.strip_tags(user.name || user.nickname),
923 "confirmation_pending" => false
924 }
925 ]
926 }
927 end
928
929 test "only local users with no query", %{admin: old_admin} do
930 admin = insert(:user, is_admin: true, nickname: "john")
931 user = insert(:user, nickname: "bob")
932
933 insert(:user, nickname: "bobb", local: false)
934
935 conn =
936 build_conn()
937 |> assign(:user, admin)
938 |> get("/api/pleroma/admin/users?filters=local")
939
940 users =
941 [
942 %{
943 "deactivated" => user.deactivated,
944 "id" => user.id,
945 "nickname" => user.nickname,
946 "roles" => %{"admin" => false, "moderator" => false},
947 "local" => true,
948 "tags" => [],
949 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
950 "display_name" => HTML.strip_tags(user.name || user.nickname),
951 "confirmation_pending" => false
952 },
953 %{
954 "deactivated" => admin.deactivated,
955 "id" => admin.id,
956 "nickname" => admin.nickname,
957 "roles" => %{"admin" => true, "moderator" => false},
958 "local" => true,
959 "tags" => [],
960 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
961 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
962 "confirmation_pending" => false
963 },
964 %{
965 "deactivated" => false,
966 "id" => old_admin.id,
967 "local" => true,
968 "nickname" => old_admin.nickname,
969 "roles" => %{"admin" => true, "moderator" => false},
970 "tags" => [],
971 "avatar" => User.avatar_url(old_admin) |> MediaProxy.url(),
972 "display_name" => HTML.strip_tags(old_admin.name || old_admin.nickname),
973 "confirmation_pending" => false
974 }
975 ]
976 |> Enum.sort_by(& &1["nickname"])
977
978 assert json_response(conn, 200) == %{
979 "count" => 3,
980 "page_size" => 50,
981 "users" => users
982 }
983 end
984
985 test "load only admins", %{conn: conn, admin: admin} do
986 second_admin = insert(:user, is_admin: true)
987 insert(:user)
988 insert(:user)
989
990 conn = get(conn, "/api/pleroma/admin/users?filters=is_admin")
991
992 users =
993 [
994 %{
995 "deactivated" => false,
996 "id" => admin.id,
997 "nickname" => admin.nickname,
998 "roles" => %{"admin" => true, "moderator" => false},
999 "local" => admin.local,
1000 "tags" => [],
1001 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
1002 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
1003 "confirmation_pending" => false
1004 },
1005 %{
1006 "deactivated" => false,
1007 "id" => second_admin.id,
1008 "nickname" => second_admin.nickname,
1009 "roles" => %{"admin" => true, "moderator" => false},
1010 "local" => second_admin.local,
1011 "tags" => [],
1012 "avatar" => User.avatar_url(second_admin) |> MediaProxy.url(),
1013 "display_name" => HTML.strip_tags(second_admin.name || second_admin.nickname),
1014 "confirmation_pending" => false
1015 }
1016 ]
1017 |> Enum.sort_by(& &1["nickname"])
1018
1019 assert json_response(conn, 200) == %{
1020 "count" => 2,
1021 "page_size" => 50,
1022 "users" => users
1023 }
1024 end
1025
1026 test "load only moderators", %{conn: conn} do
1027 moderator = insert(:user, is_moderator: true)
1028 insert(:user)
1029 insert(:user)
1030
1031 conn = get(conn, "/api/pleroma/admin/users?filters=is_moderator")
1032
1033 assert json_response(conn, 200) == %{
1034 "count" => 1,
1035 "page_size" => 50,
1036 "users" => [
1037 %{
1038 "deactivated" => false,
1039 "id" => moderator.id,
1040 "nickname" => moderator.nickname,
1041 "roles" => %{"admin" => false, "moderator" => true},
1042 "local" => moderator.local,
1043 "tags" => [],
1044 "avatar" => User.avatar_url(moderator) |> MediaProxy.url(),
1045 "display_name" => HTML.strip_tags(moderator.name || moderator.nickname),
1046 "confirmation_pending" => false
1047 }
1048 ]
1049 }
1050 end
1051
1052 test "load users with tags list", %{conn: conn} do
1053 user1 = insert(:user, tags: ["first"])
1054 user2 = insert(:user, tags: ["second"])
1055 insert(:user)
1056 insert(:user)
1057
1058 conn = get(conn, "/api/pleroma/admin/users?tags[]=first&tags[]=second")
1059
1060 users =
1061 [
1062 %{
1063 "deactivated" => false,
1064 "id" => user1.id,
1065 "nickname" => user1.nickname,
1066 "roles" => %{"admin" => false, "moderator" => false},
1067 "local" => user1.local,
1068 "tags" => ["first"],
1069 "avatar" => User.avatar_url(user1) |> MediaProxy.url(),
1070 "display_name" => HTML.strip_tags(user1.name || user1.nickname),
1071 "confirmation_pending" => false
1072 },
1073 %{
1074 "deactivated" => false,
1075 "id" => user2.id,
1076 "nickname" => user2.nickname,
1077 "roles" => %{"admin" => false, "moderator" => false},
1078 "local" => user2.local,
1079 "tags" => ["second"],
1080 "avatar" => User.avatar_url(user2) |> MediaProxy.url(),
1081 "display_name" => HTML.strip_tags(user2.name || user2.nickname),
1082 "confirmation_pending" => false
1083 }
1084 ]
1085 |> Enum.sort_by(& &1["nickname"])
1086
1087 assert json_response(conn, 200) == %{
1088 "count" => 2,
1089 "page_size" => 50,
1090 "users" => users
1091 }
1092 end
1093
1094 test "it works with multiple filters" do
1095 admin = insert(:user, nickname: "john", is_admin: true)
1096 user = insert(:user, nickname: "bob", local: false, deactivated: true)
1097
1098 insert(:user, nickname: "ken", local: true, deactivated: true)
1099 insert(:user, nickname: "bobb", local: false, deactivated: false)
1100
1101 conn =
1102 build_conn()
1103 |> assign(:user, admin)
1104 |> get("/api/pleroma/admin/users?filters=deactivated,external")
1105
1106 assert json_response(conn, 200) == %{
1107 "count" => 1,
1108 "page_size" => 50,
1109 "users" => [
1110 %{
1111 "deactivated" => user.deactivated,
1112 "id" => user.id,
1113 "nickname" => user.nickname,
1114 "roles" => %{"admin" => false, "moderator" => false},
1115 "local" => user.local,
1116 "tags" => [],
1117 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
1118 "display_name" => HTML.strip_tags(user.name || user.nickname),
1119 "confirmation_pending" => false
1120 }
1121 ]
1122 }
1123 end
1124
1125 test "it omits relay user", %{admin: admin} do
1126 assert %User{} = Relay.get_actor()
1127
1128 conn =
1129 build_conn()
1130 |> assign(:user, admin)
1131 |> get("/api/pleroma/admin/users")
1132
1133 assert json_response(conn, 200) == %{
1134 "count" => 1,
1135 "page_size" => 50,
1136 "users" => [
1137 %{
1138 "deactivated" => admin.deactivated,
1139 "id" => admin.id,
1140 "nickname" => admin.nickname,
1141 "roles" => %{"admin" => true, "moderator" => false},
1142 "local" => true,
1143 "tags" => [],
1144 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
1145 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
1146 "confirmation_pending" => false
1147 }
1148 ]
1149 }
1150 end
1151 end
1152
1153 test "PATCH /api/pleroma/admin/users/activate" do
1154 admin = insert(:user, is_admin: true)
1155 user_one = insert(:user, deactivated: true)
1156 user_two = insert(:user, deactivated: true)
1157
1158 conn =
1159 build_conn()
1160 |> assign(:user, admin)
1161 |> patch(
1162 "/api/pleroma/admin/users/activate",
1163 %{nicknames: [user_one.nickname, user_two.nickname]}
1164 )
1165
1166 response = json_response(conn, 200)
1167 assert Enum.map(response["users"], & &1["deactivated"]) == [false, false]
1168
1169 log_entry = Repo.one(ModerationLog)
1170
1171 assert ModerationLog.get_log_entry_message(log_entry) ==
1172 "@#{admin.nickname} activated users: @#{user_one.nickname}, @#{user_two.nickname}"
1173 end
1174
1175 test "PATCH /api/pleroma/admin/users/deactivate" do
1176 admin = insert(:user, is_admin: true)
1177 user_one = insert(:user, deactivated: false)
1178 user_two = insert(:user, deactivated: false)
1179
1180 conn =
1181 build_conn()
1182 |> assign(:user, admin)
1183 |> patch(
1184 "/api/pleroma/admin/users/deactivate",
1185 %{nicknames: [user_one.nickname, user_two.nickname]}
1186 )
1187
1188 response = json_response(conn, 200)
1189 assert Enum.map(response["users"], & &1["deactivated"]) == [true, true]
1190
1191 log_entry = Repo.one(ModerationLog)
1192
1193 assert ModerationLog.get_log_entry_message(log_entry) ==
1194 "@#{admin.nickname} deactivated users: @#{user_one.nickname}, @#{user_two.nickname}"
1195 end
1196
1197 test "PATCH /api/pleroma/admin/users/:nickname/toggle_activation" do
1198 admin = insert(:user, is_admin: true)
1199 user = insert(:user)
1200
1201 conn =
1202 build_conn()
1203 |> assign(:user, admin)
1204 |> patch("/api/pleroma/admin/users/#{user.nickname}/toggle_activation")
1205
1206 assert json_response(conn, 200) ==
1207 %{
1208 "deactivated" => !user.deactivated,
1209 "id" => user.id,
1210 "nickname" => user.nickname,
1211 "roles" => %{"admin" => false, "moderator" => false},
1212 "local" => true,
1213 "tags" => [],
1214 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
1215 "display_name" => HTML.strip_tags(user.name || user.nickname),
1216 "confirmation_pending" => false
1217 }
1218
1219 log_entry = Repo.one(ModerationLog)
1220
1221 assert ModerationLog.get_log_entry_message(log_entry) ==
1222 "@#{admin.nickname} deactivated users: @#{user.nickname}"
1223 end
1224
1225 describe "POST /api/pleroma/admin/users/invite_token" do
1226 setup do
1227 admin = insert(:user, is_admin: true)
1228
1229 conn =
1230 build_conn()
1231 |> assign(:user, admin)
1232
1233 {:ok, conn: conn}
1234 end
1235
1236 test "without options", %{conn: conn} do
1237 conn = post(conn, "/api/pleroma/admin/users/invite_token")
1238
1239 invite_json = json_response(conn, 200)
1240 invite = UserInviteToken.find_by_token!(invite_json["token"])
1241 refute invite.used
1242 refute invite.expires_at
1243 refute invite.max_use
1244 assert invite.invite_type == "one_time"
1245 end
1246
1247 test "with expires_at", %{conn: conn} do
1248 conn =
1249 post(conn, "/api/pleroma/admin/users/invite_token", %{
1250 "expires_at" => Date.to_string(Date.utc_today())
1251 })
1252
1253 invite_json = json_response(conn, 200)
1254 invite = UserInviteToken.find_by_token!(invite_json["token"])
1255
1256 refute invite.used
1257 assert invite.expires_at == Date.utc_today()
1258 refute invite.max_use
1259 assert invite.invite_type == "date_limited"
1260 end
1261
1262 test "with max_use", %{conn: conn} do
1263 conn = post(conn, "/api/pleroma/admin/users/invite_token", %{"max_use" => 150})
1264
1265 invite_json = json_response(conn, 200)
1266 invite = UserInviteToken.find_by_token!(invite_json["token"])
1267 refute invite.used
1268 refute invite.expires_at
1269 assert invite.max_use == 150
1270 assert invite.invite_type == "reusable"
1271 end
1272
1273 test "with max use and expires_at", %{conn: conn} do
1274 conn =
1275 post(conn, "/api/pleroma/admin/users/invite_token", %{
1276 "max_use" => 150,
1277 "expires_at" => Date.to_string(Date.utc_today())
1278 })
1279
1280 invite_json = json_response(conn, 200)
1281 invite = UserInviteToken.find_by_token!(invite_json["token"])
1282 refute invite.used
1283 assert invite.expires_at == Date.utc_today()
1284 assert invite.max_use == 150
1285 assert invite.invite_type == "reusable_date_limited"
1286 end
1287 end
1288
1289 describe "GET /api/pleroma/admin/users/invites" do
1290 setup do
1291 admin = insert(:user, is_admin: true)
1292
1293 conn =
1294 build_conn()
1295 |> assign(:user, admin)
1296
1297 {:ok, conn: conn}
1298 end
1299
1300 test "no invites", %{conn: conn} do
1301 conn = get(conn, "/api/pleroma/admin/users/invites")
1302
1303 assert json_response(conn, 200) == %{"invites" => []}
1304 end
1305
1306 test "with invite", %{conn: conn} do
1307 {:ok, invite} = UserInviteToken.create_invite()
1308
1309 conn = get(conn, "/api/pleroma/admin/users/invites")
1310
1311 assert json_response(conn, 200) == %{
1312 "invites" => [
1313 %{
1314 "expires_at" => nil,
1315 "id" => invite.id,
1316 "invite_type" => "one_time",
1317 "max_use" => nil,
1318 "token" => invite.token,
1319 "used" => false,
1320 "uses" => 0
1321 }
1322 ]
1323 }
1324 end
1325 end
1326
1327 describe "POST /api/pleroma/admin/users/revoke_invite" do
1328 test "with token" do
1329 admin = insert(:user, is_admin: true)
1330 {:ok, invite} = UserInviteToken.create_invite()
1331
1332 conn =
1333 build_conn()
1334 |> assign(:user, admin)
1335 |> post("/api/pleroma/admin/users/revoke_invite", %{"token" => invite.token})
1336
1337 assert json_response(conn, 200) == %{
1338 "expires_at" => nil,
1339 "id" => invite.id,
1340 "invite_type" => "one_time",
1341 "max_use" => nil,
1342 "token" => invite.token,
1343 "used" => true,
1344 "uses" => 0
1345 }
1346 end
1347
1348 test "with invalid token" do
1349 admin = insert(:user, is_admin: true)
1350
1351 conn =
1352 build_conn()
1353 |> assign(:user, admin)
1354 |> post("/api/pleroma/admin/users/revoke_invite", %{"token" => "foo"})
1355
1356 assert json_response(conn, :not_found) == "Not found"
1357 end
1358 end
1359
1360 describe "GET /api/pleroma/admin/reports/:id" do
1361 setup %{conn: conn} do
1362 admin = insert(:user, is_admin: true)
1363
1364 %{conn: assign(conn, :user, admin)}
1365 end
1366
1367 test "returns report by its id", %{conn: conn} do
1368 [reporter, target_user] = insert_pair(:user)
1369 activity = insert(:note_activity, user: target_user)
1370
1371 {:ok, %{id: report_id}} =
1372 CommonAPI.report(reporter, %{
1373 "account_id" => target_user.id,
1374 "comment" => "I feel offended",
1375 "status_ids" => [activity.id]
1376 })
1377
1378 response =
1379 conn
1380 |> get("/api/pleroma/admin/reports/#{report_id}")
1381 |> json_response(:ok)
1382
1383 assert response["id"] == report_id
1384 end
1385
1386 test "returns 404 when report id is invalid", %{conn: conn} do
1387 conn = get(conn, "/api/pleroma/admin/reports/test")
1388
1389 assert json_response(conn, :not_found) == "Not found"
1390 end
1391 end
1392
1393 describe "PATCH /api/pleroma/admin/reports" do
1394 setup %{conn: conn} do
1395 admin = insert(:user, is_admin: true)
1396 [reporter, target_user] = insert_pair(:user)
1397 activity = insert(:note_activity, user: target_user)
1398
1399 {:ok, %{id: report_id}} =
1400 CommonAPI.report(reporter, %{
1401 "account_id" => target_user.id,
1402 "comment" => "I feel offended",
1403 "status_ids" => [activity.id]
1404 })
1405
1406 {:ok, %{id: second_report_id}} =
1407 CommonAPI.report(reporter, %{
1408 "account_id" => target_user.id,
1409 "comment" => "I feel very offended",
1410 "status_ids" => [activity.id]
1411 })
1412
1413 %{
1414 conn: assign(conn, :user, admin),
1415 id: report_id,
1416 admin: admin,
1417 second_report_id: second_report_id
1418 }
1419 end
1420
1421 test "mark report as resolved", %{conn: conn, id: id, admin: admin} do
1422 conn
1423 |> patch("/api/pleroma/admin/reports", %{
1424 "reports" => [
1425 %{"state" => "resolved", "id" => id}
1426 ]
1427 })
1428 |> json_response(:no_content)
1429
1430 activity = Activity.get_by_id(id)
1431 assert activity.data["state"] == "resolved"
1432
1433 log_entry = Repo.one(ModerationLog)
1434
1435 assert ModerationLog.get_log_entry_message(log_entry) ==
1436 "@#{admin.nickname} updated report ##{id} with 'resolved' state"
1437 end
1438
1439 test "closes report", %{conn: conn, id: id, admin: admin} do
1440 conn
1441 |> patch("/api/pleroma/admin/reports", %{
1442 "reports" => [
1443 %{"state" => "closed", "id" => id}
1444 ]
1445 })
1446 |> json_response(:no_content)
1447
1448 activity = Activity.get_by_id(id)
1449 assert activity.data["state"] == "closed"
1450
1451 log_entry = Repo.one(ModerationLog)
1452
1453 assert ModerationLog.get_log_entry_message(log_entry) ==
1454 "@#{admin.nickname} updated report ##{id} with 'closed' state"
1455 end
1456
1457 test "returns 400 when state is unknown", %{conn: conn, id: id} do
1458 conn =
1459 conn
1460 |> patch("/api/pleroma/admin/reports", %{
1461 "reports" => [
1462 %{"state" => "test", "id" => id}
1463 ]
1464 })
1465
1466 assert hd(json_response(conn, :bad_request))["error"] == "Unsupported state"
1467 end
1468
1469 test "returns 404 when report is not exist", %{conn: conn} do
1470 conn =
1471 conn
1472 |> patch("/api/pleroma/admin/reports", %{
1473 "reports" => [
1474 %{"state" => "closed", "id" => "test"}
1475 ]
1476 })
1477
1478 assert hd(json_response(conn, :bad_request))["error"] == "not_found"
1479 end
1480
1481 test "updates state of multiple reports", %{
1482 conn: conn,
1483 id: id,
1484 admin: admin,
1485 second_report_id: second_report_id
1486 } do
1487 conn
1488 |> patch("/api/pleroma/admin/reports", %{
1489 "reports" => [
1490 %{"state" => "resolved", "id" => id},
1491 %{"state" => "closed", "id" => second_report_id}
1492 ]
1493 })
1494 |> json_response(:no_content)
1495
1496 activity = Activity.get_by_id(id)
1497 second_activity = Activity.get_by_id(second_report_id)
1498 assert activity.data["state"] == "resolved"
1499 assert second_activity.data["state"] == "closed"
1500
1501 [first_log_entry, second_log_entry] = Repo.all(ModerationLog)
1502
1503 assert ModerationLog.get_log_entry_message(first_log_entry) ==
1504 "@#{admin.nickname} updated report ##{id} with 'resolved' state"
1505
1506 assert ModerationLog.get_log_entry_message(second_log_entry) ==
1507 "@#{admin.nickname} updated report ##{second_report_id} with 'closed' state"
1508 end
1509 end
1510
1511 describe "GET /api/pleroma/admin/reports" do
1512 setup %{conn: conn} do
1513 admin = insert(:user, is_admin: true)
1514
1515 %{conn: assign(conn, :user, admin)}
1516 end
1517
1518 test "returns empty response when no reports created", %{conn: conn} do
1519 response =
1520 conn
1521 |> get("/api/pleroma/admin/reports")
1522 |> json_response(:ok)
1523
1524 assert Enum.empty?(response["reports"])
1525 assert response["total"] == 0
1526 end
1527
1528 test "returns reports", %{conn: conn} do
1529 [reporter, target_user] = insert_pair(:user)
1530 activity = insert(:note_activity, user: target_user)
1531
1532 {:ok, %{id: report_id}} =
1533 CommonAPI.report(reporter, %{
1534 "account_id" => target_user.id,
1535 "comment" => "I feel offended",
1536 "status_ids" => [activity.id]
1537 })
1538
1539 response =
1540 conn
1541 |> get("/api/pleroma/admin/reports")
1542 |> json_response(:ok)
1543
1544 [report] = response["reports"]
1545
1546 assert length(response["reports"]) == 1
1547 assert report["id"] == report_id
1548
1549 assert response["total"] == 1
1550 end
1551
1552 test "returns reports with specified state", %{conn: conn} do
1553 [reporter, target_user] = insert_pair(:user)
1554 activity = insert(:note_activity, user: target_user)
1555
1556 {:ok, %{id: first_report_id}} =
1557 CommonAPI.report(reporter, %{
1558 "account_id" => target_user.id,
1559 "comment" => "I feel offended",
1560 "status_ids" => [activity.id]
1561 })
1562
1563 {:ok, %{id: second_report_id}} =
1564 CommonAPI.report(reporter, %{
1565 "account_id" => target_user.id,
1566 "comment" => "I don't like this user"
1567 })
1568
1569 CommonAPI.update_report_state(second_report_id, "closed")
1570
1571 response =
1572 conn
1573 |> get("/api/pleroma/admin/reports", %{
1574 "state" => "open"
1575 })
1576 |> json_response(:ok)
1577
1578 [open_report] = response["reports"]
1579
1580 assert length(response["reports"]) == 1
1581 assert open_report["id"] == first_report_id
1582
1583 assert response["total"] == 1
1584
1585 response =
1586 conn
1587 |> get("/api/pleroma/admin/reports", %{
1588 "state" => "closed"
1589 })
1590 |> json_response(:ok)
1591
1592 [closed_report] = response["reports"]
1593
1594 assert length(response["reports"]) == 1
1595 assert closed_report["id"] == second_report_id
1596
1597 assert response["total"] == 1
1598
1599 response =
1600 conn
1601 |> get("/api/pleroma/admin/reports", %{
1602 "state" => "resolved"
1603 })
1604 |> json_response(:ok)
1605
1606 assert Enum.empty?(response["reports"])
1607 assert response["total"] == 0
1608 end
1609
1610 test "returns 403 when requested by a non-admin" do
1611 user = insert(:user)
1612
1613 conn =
1614 build_conn()
1615 |> assign(:user, user)
1616 |> get("/api/pleroma/admin/reports")
1617
1618 assert json_response(conn, :forbidden) ==
1619 %{"error" => "User is not an admin or OAuth admin scope is not granted."}
1620 end
1621
1622 test "returns 403 when requested by anonymous" do
1623 conn =
1624 build_conn()
1625 |> get("/api/pleroma/admin/reports")
1626
1627 assert json_response(conn, :forbidden) == %{"error" => "Invalid credentials."}
1628 end
1629 end
1630
1631 describe "GET /api/pleroma/admin/grouped_reports" do
1632 setup %{conn: conn} do
1633 admin = insert(:user, is_admin: true)
1634 [reporter, target_user] = insert_pair(:user)
1635
1636 date1 = (DateTime.to_unix(DateTime.utc_now()) + 1000) |> DateTime.from_unix!()
1637 date2 = (DateTime.to_unix(DateTime.utc_now()) + 2000) |> DateTime.from_unix!()
1638 date3 = (DateTime.to_unix(DateTime.utc_now()) + 3000) |> DateTime.from_unix!()
1639
1640 first_status =
1641 insert(:note_activity, user: target_user, data_attrs: %{"published" => date1})
1642
1643 second_status =
1644 insert(:note_activity, user: target_user, data_attrs: %{"published" => date2})
1645
1646 third_status =
1647 insert(:note_activity, user: target_user, data_attrs: %{"published" => date3})
1648
1649 {:ok, first_report} =
1650 CommonAPI.report(reporter, %{
1651 "account_id" => target_user.id,
1652 "status_ids" => [first_status.id, second_status.id, third_status.id]
1653 })
1654
1655 {:ok, second_report} =
1656 CommonAPI.report(reporter, %{
1657 "account_id" => target_user.id,
1658 "status_ids" => [first_status.id, second_status.id]
1659 })
1660
1661 {:ok, third_report} =
1662 CommonAPI.report(reporter, %{
1663 "account_id" => target_user.id,
1664 "status_ids" => [first_status.id]
1665 })
1666
1667 %{
1668 conn: assign(conn, :user, admin),
1669 first_status: Activity.get_by_ap_id_with_object(first_status.data["id"]),
1670 second_status: Activity.get_by_ap_id_with_object(second_status.data["id"]),
1671 third_status: Activity.get_by_ap_id_with_object(third_status.data["id"]),
1672 first_report: first_report,
1673 first_status_reports: [first_report, second_report, third_report],
1674 second_status_reports: [first_report, second_report],
1675 third_status_reports: [first_report],
1676 target_user: target_user,
1677 reporter: reporter
1678 }
1679 end
1680
1681 test "returns reports grouped by status", %{
1682 conn: conn,
1683 first_status: first_status,
1684 second_status: second_status,
1685 third_status: third_status,
1686 first_status_reports: first_status_reports,
1687 second_status_reports: second_status_reports,
1688 third_status_reports: third_status_reports,
1689 target_user: target_user,
1690 reporter: reporter
1691 } do
1692 response =
1693 conn
1694 |> get("/api/pleroma/admin/grouped_reports")
1695 |> json_response(:ok)
1696
1697 assert length(response["reports"]) == 3
1698
1699 first_group = Enum.find(response["reports"], &(&1["status"]["id"] == first_status.id))
1700
1701 second_group = Enum.find(response["reports"], &(&1["status"]["id"] == second_status.id))
1702
1703 third_group = Enum.find(response["reports"], &(&1["status"]["id"] == third_status.id))
1704
1705 assert length(first_group["reports"]) == 3
1706 assert length(second_group["reports"]) == 2
1707 assert length(third_group["reports"]) == 1
1708
1709 assert first_group["date"] ==
1710 Enum.max_by(first_status_reports, fn act ->
1711 NaiveDateTime.from_iso8601!(act.data["published"])
1712 end).data["published"]
1713
1714 assert first_group["status"] ==
1715 Map.put(
1716 stringify_keys(StatusView.render("show.json", %{activity: first_status})),
1717 "deleted",
1718 false
1719 )
1720
1721 assert(first_group["account"]["id"] == target_user.id)
1722
1723 assert length(first_group["actors"]) == 1
1724 assert hd(first_group["actors"])["id"] == reporter.id
1725
1726 assert Enum.map(first_group["reports"], & &1["id"]) --
1727 Enum.map(first_status_reports, & &1.id) == []
1728
1729 assert second_group["date"] ==
1730 Enum.max_by(second_status_reports, fn act ->
1731 NaiveDateTime.from_iso8601!(act.data["published"])
1732 end).data["published"]
1733
1734 assert second_group["status"] ==
1735 Map.put(
1736 stringify_keys(StatusView.render("show.json", %{activity: second_status})),
1737 "deleted",
1738 false
1739 )
1740
1741 assert second_group["account"]["id"] == target_user.id
1742
1743 assert length(second_group["actors"]) == 1
1744 assert hd(second_group["actors"])["id"] == reporter.id
1745
1746 assert Enum.map(second_group["reports"], & &1["id"]) --
1747 Enum.map(second_status_reports, & &1.id) == []
1748
1749 assert third_group["date"] ==
1750 Enum.max_by(third_status_reports, fn act ->
1751 NaiveDateTime.from_iso8601!(act.data["published"])
1752 end).data["published"]
1753
1754 assert third_group["status"] ==
1755 Map.put(
1756 stringify_keys(StatusView.render("show.json", %{activity: third_status})),
1757 "deleted",
1758 false
1759 )
1760
1761 assert third_group["account"]["id"] == target_user.id
1762
1763 assert length(third_group["actors"]) == 1
1764 assert hd(third_group["actors"])["id"] == reporter.id
1765
1766 assert Enum.map(third_group["reports"], & &1["id"]) --
1767 Enum.map(third_status_reports, & &1.id) == []
1768 end
1769
1770 test "reopened report renders status data", %{
1771 conn: conn,
1772 first_report: first_report,
1773 first_status: first_status
1774 } do
1775 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1776
1777 response =
1778 conn
1779 |> get("/api/pleroma/admin/grouped_reports")
1780 |> json_response(:ok)
1781
1782 first_group = Enum.find(response["reports"], &(&1["status"]["id"] == first_status.id))
1783
1784 assert first_group["status"] ==
1785 Map.put(
1786 stringify_keys(StatusView.render("show.json", %{activity: first_status})),
1787 "deleted",
1788 false
1789 )
1790 end
1791
1792 test "reopened report does not render status data if status has been deleted", %{
1793 conn: conn,
1794 first_report: first_report,
1795 first_status: first_status,
1796 target_user: target_user
1797 } do
1798 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1799 {:ok, _} = CommonAPI.delete(first_status.id, target_user)
1800
1801 refute Activity.get_by_ap_id(first_status.id)
1802
1803 response =
1804 conn
1805 |> get("/api/pleroma/admin/grouped_reports")
1806 |> json_response(:ok)
1807
1808 assert Enum.find(response["reports"], &(&1["status"]["deleted"] == true))["status"][
1809 "deleted"
1810 ] == true
1811
1812 assert length(Enum.filter(response["reports"], &(&1["status"]["deleted"] == false))) == 2
1813 end
1814
1815 test "account not empty if status was deleted", %{
1816 conn: conn,
1817 first_report: first_report,
1818 first_status: first_status,
1819 target_user: target_user
1820 } do
1821 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1822 {:ok, _} = CommonAPI.delete(first_status.id, target_user)
1823
1824 refute Activity.get_by_ap_id(first_status.id)
1825
1826 response =
1827 conn
1828 |> get("/api/pleroma/admin/grouped_reports")
1829 |> json_response(:ok)
1830
1831 assert Enum.find(response["reports"], &(&1["status"]["deleted"] == true))["account"]
1832 end
1833 end
1834
1835 describe "PUT /api/pleroma/admin/statuses/:id" do
1836 setup %{conn: conn} do
1837 admin = insert(:user, is_admin: true)
1838 activity = insert(:note_activity)
1839
1840 %{conn: assign(conn, :user, admin), id: activity.id, admin: admin}
1841 end
1842
1843 test "toggle sensitive flag", %{conn: conn, id: id, admin: admin} do
1844 response =
1845 conn
1846 |> put("/api/pleroma/admin/statuses/#{id}", %{"sensitive" => "true"})
1847 |> json_response(:ok)
1848
1849 assert response["sensitive"]
1850
1851 log_entry = Repo.one(ModerationLog)
1852
1853 assert ModerationLog.get_log_entry_message(log_entry) ==
1854 "@#{admin.nickname} updated status ##{id}, set sensitive: 'true'"
1855
1856 response =
1857 conn
1858 |> put("/api/pleroma/admin/statuses/#{id}", %{"sensitive" => "false"})
1859 |> json_response(:ok)
1860
1861 refute response["sensitive"]
1862 end
1863
1864 test "change visibility flag", %{conn: conn, id: id, admin: admin} do
1865 response =
1866 conn
1867 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "public"})
1868 |> json_response(:ok)
1869
1870 assert response["visibility"] == "public"
1871
1872 log_entry = Repo.one(ModerationLog)
1873
1874 assert ModerationLog.get_log_entry_message(log_entry) ==
1875 "@#{admin.nickname} updated status ##{id}, set visibility: 'public'"
1876
1877 response =
1878 conn
1879 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "private"})
1880 |> json_response(:ok)
1881
1882 assert response["visibility"] == "private"
1883
1884 response =
1885 conn
1886 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "unlisted"})
1887 |> json_response(:ok)
1888
1889 assert response["visibility"] == "unlisted"
1890 end
1891
1892 test "returns 400 when visibility is unknown", %{conn: conn, id: id} do
1893 conn =
1894 conn
1895 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "test"})
1896
1897 assert json_response(conn, :bad_request) == "Unsupported visibility"
1898 end
1899 end
1900
1901 describe "DELETE /api/pleroma/admin/statuses/:id" do
1902 setup %{conn: conn} do
1903 admin = insert(:user, is_admin: true)
1904 activity = insert(:note_activity)
1905
1906 %{conn: assign(conn, :user, admin), id: activity.id, admin: admin}
1907 end
1908
1909 test "deletes status", %{conn: conn, id: id, admin: admin} do
1910 conn
1911 |> delete("/api/pleroma/admin/statuses/#{id}")
1912 |> json_response(:ok)
1913
1914 refute Activity.get_by_id(id)
1915
1916 log_entry = Repo.one(ModerationLog)
1917
1918 assert ModerationLog.get_log_entry_message(log_entry) ==
1919 "@#{admin.nickname} deleted status ##{id}"
1920 end
1921
1922 test "returns error when status is not exist", %{conn: conn} do
1923 conn =
1924 conn
1925 |> delete("/api/pleroma/admin/statuses/test")
1926
1927 assert json_response(conn, :bad_request) == "Could not delete"
1928 end
1929 end
1930
1931 describe "GET /api/pleroma/admin/config" do
1932 clear_config([:instance, :dynamic_configuration]) do
1933 Pleroma.Config.put([:instance, :dynamic_configuration], true)
1934 end
1935
1936 setup %{conn: conn} do
1937 admin = insert(:user, is_admin: true)
1938
1939 %{conn: assign(conn, :user, admin)}
1940 end
1941
1942 test "when dynamic configuration is off", %{conn: conn} do
1943 initial = Pleroma.Config.get([:instance, :dynamic_configuration])
1944 Pleroma.Config.put([:instance, :dynamic_configuration], false)
1945 on_exit(fn -> Pleroma.Config.put([:instance, :dynamic_configuration], initial) end)
1946 conn = get(conn, "/api/pleroma/admin/config")
1947
1948 assert json_response(conn, 400) ==
1949 "To use this endpoint you need to enable dynamic configuration."
1950 end
1951
1952 test "without any settings in db", %{conn: conn} do
1953 conn = get(conn, "/api/pleroma/admin/config")
1954
1955 assert json_response(conn, 400) ==
1956 "To use dynamic configuration migrate your settings to database."
1957 end
1958
1959 test "with settings in db", %{conn: conn} do
1960 config1 = insert(:config)
1961 config2 = insert(:config)
1962
1963 conn = get(conn, "/api/pleroma/admin/config")
1964
1965 %{
1966 "configs" => [
1967 %{
1968 "group" => ":pleroma",
1969 "key" => key1,
1970 "value" => _
1971 },
1972 %{
1973 "key" => key2,
1974 "value" => _
1975 }
1976 ]
1977 } = json_response(conn, 200)
1978
1979 assert key1 == config1.key
1980 assert key2 == config2.key
1981 end
1982 end
1983
1984 test "POST /api/pleroma/admin/config error" do
1985 admin = insert(:user, is_admin: true)
1986
1987 conn =
1988 build_conn()
1989 |> assign(:user, admin)
1990 |> post("/api/pleroma/admin/config", %{"configs" => []})
1991
1992 assert json_response(conn, 400) ==
1993 "To use this endpoint you need to enable dynamic configuration."
1994 end
1995
1996 describe "POST /api/pleroma/admin/config" do
1997 setup %{conn: conn} do
1998 admin = insert(:user, is_admin: true)
1999
2000 http = Application.get_env(:pleroma, :http)
2001
2002 on_exit(fn ->
2003 Application.delete_env(:pleroma, :key1)
2004 Application.delete_env(:pleroma, :key2)
2005 Application.delete_env(:pleroma, :key3)
2006 Application.delete_env(:pleroma, :key4)
2007 Application.delete_env(:pleroma, :keyaa1)
2008 Application.delete_env(:pleroma, :keyaa2)
2009 Application.delete_env(:pleroma, Pleroma.Web.Endpoint.NotReal)
2010 Application.delete_env(:pleroma, Pleroma.Captcha.NotReal)
2011 Application.put_env(:pleroma, :http, http)
2012 Application.put_env(:tesla, :adapter, Tesla.Mock)
2013 :ok = File.rm("config/test.exported_from_db.secret.exs")
2014 end)
2015
2016 %{conn: assign(conn, :user, admin)}
2017 end
2018
2019 clear_config([:instance, :dynamic_configuration]) do
2020 Pleroma.Config.put([:instance, :dynamic_configuration], true)
2021 end
2022
2023 @tag capture_log: true
2024 test "create new config setting in db", %{conn: conn} do
2025 conn =
2026 post(conn, "/api/pleroma/admin/config", %{
2027 configs: [
2028 %{group: ":pleroma", key: ":key1", value: "value1"},
2029 %{
2030 group: ":ueberauth",
2031 key: "Ueberauth.Strategy.Twitter.OAuth",
2032 value: [%{"tuple" => [":consumer_secret", "aaaa"]}]
2033 },
2034 %{
2035 group: ":pleroma",
2036 key: ":key2",
2037 value: %{
2038 ":nested_1" => "nested_value1",
2039 ":nested_2" => [
2040 %{":nested_22" => "nested_value222"},
2041 %{":nested_33" => %{":nested_44" => "nested_444"}}
2042 ]
2043 }
2044 },
2045 %{
2046 group: ":pleroma",
2047 key: ":key3",
2048 value: [
2049 %{"nested_3" => ":nested_3", "nested_33" => "nested_33"},
2050 %{"nested_4" => true}
2051 ]
2052 },
2053 %{
2054 group: ":pleroma",
2055 key: ":key4",
2056 value: %{":nested_5" => ":upload", "endpoint" => "https://example.com"}
2057 },
2058 %{
2059 group: ":idna",
2060 key: ":key5",
2061 value: %{"tuple" => ["string", "Pleroma.Captcha.NotReal", []]}
2062 }
2063 ]
2064 })
2065
2066 assert json_response(conn, 200) == %{
2067 "configs" => [
2068 %{
2069 "group" => ":pleroma",
2070 "key" => ":key1",
2071 "value" => "value1"
2072 },
2073 %{
2074 "group" => ":ueberauth",
2075 "key" => "Ueberauth.Strategy.Twitter.OAuth",
2076 "value" => [%{"tuple" => [":consumer_secret", "aaaa"]}]
2077 },
2078 %{
2079 "group" => ":pleroma",
2080 "key" => ":key2",
2081 "value" => %{
2082 ":nested_1" => "nested_value1",
2083 ":nested_2" => [
2084 %{":nested_22" => "nested_value222"},
2085 %{":nested_33" => %{":nested_44" => "nested_444"}}
2086 ]
2087 }
2088 },
2089 %{
2090 "group" => ":pleroma",
2091 "key" => ":key3",
2092 "value" => [
2093 %{"nested_3" => ":nested_3", "nested_33" => "nested_33"},
2094 %{"nested_4" => true}
2095 ]
2096 },
2097 %{
2098 "group" => ":pleroma",
2099 "key" => ":key4",
2100 "value" => %{"endpoint" => "https://example.com", ":nested_5" => ":upload"}
2101 },
2102 %{
2103 "group" => ":idna",
2104 "key" => ":key5",
2105 "value" => %{"tuple" => ["string", "Pleroma.Captcha.NotReal", []]}
2106 }
2107 ]
2108 }
2109
2110 assert Application.get_env(:pleroma, :key1) == "value1"
2111
2112 assert Application.get_env(:pleroma, :key2) == %{
2113 nested_1: "nested_value1",
2114 nested_2: [
2115 %{nested_22: "nested_value222"},
2116 %{nested_33: %{nested_44: "nested_444"}}
2117 ]
2118 }
2119
2120 assert Application.get_env(:pleroma, :key3) == [
2121 %{"nested_3" => :nested_3, "nested_33" => "nested_33"},
2122 %{"nested_4" => true}
2123 ]
2124
2125 assert Application.get_env(:pleroma, :key4) == %{
2126 "endpoint" => "https://example.com",
2127 nested_5: :upload
2128 }
2129
2130 assert Application.get_env(:idna, :key5) == {"string", Pleroma.Captcha.NotReal, []}
2131 end
2132
2133 test "save config setting without key", %{conn: conn} do
2134 level = Application.get_env(:quack, :level)
2135 meta = Application.get_env(:quack, :meta)
2136 webhook_url = Application.get_env(:quack, :webhook_url)
2137
2138 on_exit(fn ->
2139 Application.put_env(:quack, :level, level)
2140 Application.put_env(:quack, :meta, meta)
2141 Application.put_env(:quack, :webhook_url, webhook_url)
2142 end)
2143
2144 conn =
2145 post(conn, "/api/pleroma/admin/config", %{
2146 configs: [
2147 %{
2148 group: ":quack",
2149 key: ":level",
2150 value: ":info"
2151 },
2152 %{
2153 group: ":quack",
2154 key: ":meta",
2155 value: [":none"]
2156 },
2157 %{
2158 group: ":quack",
2159 key: ":webhook_url",
2160 value: "https://hooks.slack.com/services/KEY"
2161 }
2162 ]
2163 })
2164
2165 assert json_response(conn, 200) == %{
2166 "configs" => [
2167 %{"group" => ":quack", "key" => ":level", "value" => ":info"},
2168 %{"group" => ":quack", "key" => ":meta", "value" => [":none"]},
2169 %{
2170 "group" => ":quack",
2171 "key" => ":webhook_url",
2172 "value" => "https://hooks.slack.com/services/KEY"
2173 }
2174 ]
2175 }
2176
2177 assert Application.get_env(:quack, :level) == :info
2178 assert Application.get_env(:quack, :meta) == [:none]
2179 assert Application.get_env(:quack, :webhook_url) == "https://hooks.slack.com/services/KEY"
2180 end
2181
2182 test "saving config with partial update", %{conn: conn} do
2183 config = insert(:config, key: ":key1", value: :erlang.term_to_binary(key1: 1, key2: 2))
2184
2185 conn =
2186 post(conn, "/api/pleroma/admin/config", %{
2187 configs: [
2188 %{group: config.group, key: config.key, value: [%{"tuple" => [":key3", 3]}]}
2189 ]
2190 })
2191
2192 assert json_response(conn, 200) == %{
2193 "configs" => [
2194 %{
2195 "group" => ":pleroma",
2196 "key" => ":key1",
2197 "value" => [
2198 %{"tuple" => [":key1", 1]},
2199 %{"tuple" => [":key2", 2]},
2200 %{"tuple" => [":key3", 3]}
2201 ]
2202 }
2203 ]
2204 }
2205 end
2206
2207 test "saving full setting if value is in full_key_update list", %{conn: conn} do
2208 backends = Application.get_env(:logger, :backends)
2209 on_exit(fn -> Application.put_env(:logger, :backends, backends) end)
2210
2211 config =
2212 insert(:config,
2213 group: ":logger",
2214 key: ":backends",
2215 value: :erlang.term_to_binary([])
2216 )
2217
2218 conn =
2219 post(conn, "/api/pleroma/admin/config", %{
2220 configs: [
2221 %{
2222 group: config.group,
2223 key: config.key,
2224 value: [":console", %{"tuple" => ["ExSyslogger", ":ex_syslogger"]}]
2225 }
2226 ]
2227 })
2228
2229 assert json_response(conn, 200) == %{
2230 "configs" => [
2231 %{
2232 "group" => ":logger",
2233 "key" => ":backends",
2234 "value" => [
2235 ":console",
2236 %{"tuple" => ["ExSyslogger", ":ex_syslogger"]}
2237 ]
2238 }
2239 ]
2240 }
2241
2242 assert Application.get_env(:logger, :backends) == [
2243 :console,
2244 {ExSyslogger, :ex_syslogger}
2245 ]
2246
2247 ExUnit.CaptureLog.capture_log(fn ->
2248 require Logger
2249 Logger.warn("Ooops...")
2250 end) =~ "Ooops..."
2251 end
2252
2253 test "saving full setting if value is not keyword", %{conn: conn} do
2254 config =
2255 insert(:config,
2256 group: ":tesla",
2257 key: ":adapter",
2258 value: :erlang.term_to_binary(Tesla.Adapter.Hackey)
2259 )
2260
2261 conn =
2262 post(conn, "/api/pleroma/admin/config", %{
2263 configs: [
2264 %{group: config.group, key: config.key, value: "Tesla.Adapter.Httpc"}
2265 ]
2266 })
2267
2268 assert json_response(conn, 200) == %{
2269 "configs" => [
2270 %{
2271 "group" => ":tesla",
2272 "key" => ":adapter",
2273 "value" => "Tesla.Adapter.Httpc"
2274 }
2275 ]
2276 }
2277 end
2278
2279 test "update config setting & delete", %{conn: conn} do
2280 config1 = insert(:config, key: ":keyaa1")
2281 config2 = insert(:config, key: ":keyaa2")
2282
2283 insert(:config,
2284 group: "ueberauth",
2285 key: "Ueberauth.Strategy.Microsoft.OAuth"
2286 )
2287
2288 conn =
2289 post(conn, "/api/pleroma/admin/config", %{
2290 configs: [
2291 %{group: config1.group, key: config1.key, value: "another_value"},
2292 %{group: config2.group, key: config2.key, delete: "true"},
2293 %{
2294 group: "ueberauth",
2295 key: "Ueberauth.Strategy.Microsoft.OAuth",
2296 delete: "true"
2297 }
2298 ]
2299 })
2300
2301 assert json_response(conn, 200) == %{
2302 "configs" => [
2303 %{
2304 "group" => ":pleroma",
2305 "key" => config1.key,
2306 "value" => "another_value"
2307 }
2308 ]
2309 }
2310
2311 assert Application.get_env(:pleroma, :keyaa1) == "another_value"
2312 refute Application.get_env(:pleroma, :keyaa2)
2313 end
2314
2315 test "common config example", %{conn: conn} do
2316 adapter = Application.get_env(:tesla, :adapter)
2317 on_exit(fn -> Application.put_env(:tesla, :adapter, adapter) end)
2318
2319 conn =
2320 post(conn, "/api/pleroma/admin/config", %{
2321 configs: [
2322 %{
2323 "group" => ":pleroma",
2324 "key" => "Pleroma.Captcha.NotReal",
2325 "value" => [
2326 %{"tuple" => [":enabled", false]},
2327 %{"tuple" => [":method", "Pleroma.Captcha.Kocaptcha"]},
2328 %{"tuple" => [":seconds_valid", 60]},
2329 %{"tuple" => [":path", ""]},
2330 %{"tuple" => [":key1", nil]},
2331 %{"tuple" => [":partial_chain", "&:hackney_connect.partial_chain/1"]},
2332 %{"tuple" => [":regex1", "~r/https:\/\/example.com/"]},
2333 %{"tuple" => [":regex2", "~r/https:\/\/example.com/u"]},
2334 %{"tuple" => [":regex3", "~r/https:\/\/example.com/i"]},
2335 %{"tuple" => [":regex4", "~r/https:\/\/example.com/s"]},
2336 %{"tuple" => [":name", "Pleroma"]}
2337 ]
2338 },
2339 %{"group" => ":tesla", "key" => ":adapter", "value" => "Tesla.Adapter.Httpc"}
2340 ]
2341 })
2342
2343 assert Application.get_env(:tesla, :adapter) == Tesla.Adapter.Httpc
2344 assert Pleroma.Config.get([Pleroma.Captcha.NotReal, :name]) == "Pleroma"
2345
2346 assert json_response(conn, 200) == %{
2347 "configs" => [
2348 %{
2349 "group" => ":pleroma",
2350 "key" => "Pleroma.Captcha.NotReal",
2351 "value" => [
2352 %{"tuple" => [":enabled", false]},
2353 %{"tuple" => [":method", "Pleroma.Captcha.Kocaptcha"]},
2354 %{"tuple" => [":seconds_valid", 60]},
2355 %{"tuple" => [":path", ""]},
2356 %{"tuple" => [":key1", nil]},
2357 %{"tuple" => [":partial_chain", "&:hackney_connect.partial_chain/1"]},
2358 %{"tuple" => [":regex1", "~r/https:\\/\\/example.com/"]},
2359 %{"tuple" => [":regex2", "~r/https:\\/\\/example.com/u"]},
2360 %{"tuple" => [":regex3", "~r/https:\\/\\/example.com/i"]},
2361 %{"tuple" => [":regex4", "~r/https:\\/\\/example.com/s"]},
2362 %{"tuple" => [":name", "Pleroma"]}
2363 ]
2364 },
2365 %{"group" => ":tesla", "key" => ":adapter", "value" => "Tesla.Adapter.Httpc"}
2366 ]
2367 }
2368 end
2369
2370 test "tuples with more than two values", %{conn: conn} do
2371 conn =
2372 post(conn, "/api/pleroma/admin/config", %{
2373 configs: [
2374 %{
2375 "group" => ":pleroma",
2376 "key" => "Pleroma.Web.Endpoint.NotReal",
2377 "value" => [
2378 %{
2379 "tuple" => [
2380 ":http",
2381 [
2382 %{
2383 "tuple" => [
2384 ":key2",
2385 [
2386 %{
2387 "tuple" => [
2388 ":_",
2389 [
2390 %{
2391 "tuple" => [
2392 "/api/v1/streaming",
2393 "Pleroma.Web.MastodonAPI.WebsocketHandler",
2394 []
2395 ]
2396 },
2397 %{
2398 "tuple" => [
2399 "/websocket",
2400 "Phoenix.Endpoint.CowboyWebSocket",
2401 %{
2402 "tuple" => [
2403 "Phoenix.Transports.WebSocket",
2404 %{
2405 "tuple" => [
2406 "Pleroma.Web.Endpoint",
2407 "Pleroma.Web.UserSocket",
2408 []
2409 ]
2410 }
2411 ]
2412 }
2413 ]
2414 },
2415 %{
2416 "tuple" => [
2417 ":_",
2418 "Phoenix.Endpoint.Cowboy2Handler",
2419 %{"tuple" => ["Pleroma.Web.Endpoint", []]}
2420 ]
2421 }
2422 ]
2423 ]
2424 }
2425 ]
2426 ]
2427 }
2428 ]
2429 ]
2430 }
2431 ]
2432 }
2433 ]
2434 })
2435
2436 assert json_response(conn, 200) == %{
2437 "configs" => [
2438 %{
2439 "group" => ":pleroma",
2440 "key" => "Pleroma.Web.Endpoint.NotReal",
2441 "value" => [
2442 %{
2443 "tuple" => [
2444 ":http",
2445 [
2446 %{
2447 "tuple" => [
2448 ":key2",
2449 [
2450 %{
2451 "tuple" => [
2452 ":_",
2453 [
2454 %{
2455 "tuple" => [
2456 "/api/v1/streaming",
2457 "Pleroma.Web.MastodonAPI.WebsocketHandler",
2458 []
2459 ]
2460 },
2461 %{
2462 "tuple" => [
2463 "/websocket",
2464 "Phoenix.Endpoint.CowboyWebSocket",
2465 %{
2466 "tuple" => [
2467 "Phoenix.Transports.WebSocket",
2468 %{
2469 "tuple" => [
2470 "Pleroma.Web.Endpoint",
2471 "Pleroma.Web.UserSocket",
2472 []
2473 ]
2474 }
2475 ]
2476 }
2477 ]
2478 },
2479 %{
2480 "tuple" => [
2481 ":_",
2482 "Phoenix.Endpoint.Cowboy2Handler",
2483 %{"tuple" => ["Pleroma.Web.Endpoint", []]}
2484 ]
2485 }
2486 ]
2487 ]
2488 }
2489 ]
2490 ]
2491 }
2492 ]
2493 ]
2494 }
2495 ]
2496 }
2497 ]
2498 }
2499 end
2500
2501 test "settings with nesting map", %{conn: conn} do
2502 conn =
2503 post(conn, "/api/pleroma/admin/config", %{
2504 configs: [
2505 %{
2506 "group" => ":pleroma",
2507 "key" => ":key1",
2508 "value" => [
2509 %{"tuple" => [":key2", "some_val"]},
2510 %{
2511 "tuple" => [
2512 ":key3",
2513 %{
2514 ":max_options" => 20,
2515 ":max_option_chars" => 200,
2516 ":min_expiration" => 0,
2517 ":max_expiration" => 31_536_000,
2518 "nested" => %{
2519 ":max_options" => 20,
2520 ":max_option_chars" => 200,
2521 ":min_expiration" => 0,
2522 ":max_expiration" => 31_536_000
2523 }
2524 }
2525 ]
2526 }
2527 ]
2528 }
2529 ]
2530 })
2531
2532 assert json_response(conn, 200) ==
2533 %{
2534 "configs" => [
2535 %{
2536 "group" => ":pleroma",
2537 "key" => ":key1",
2538 "value" => [
2539 %{"tuple" => [":key2", "some_val"]},
2540 %{
2541 "tuple" => [
2542 ":key3",
2543 %{
2544 ":max_expiration" => 31_536_000,
2545 ":max_option_chars" => 200,
2546 ":max_options" => 20,
2547 ":min_expiration" => 0,
2548 "nested" => %{
2549 ":max_expiration" => 31_536_000,
2550 ":max_option_chars" => 200,
2551 ":max_options" => 20,
2552 ":min_expiration" => 0
2553 }
2554 }
2555 ]
2556 }
2557 ]
2558 }
2559 ]
2560 }
2561 end
2562
2563 test "value as map", %{conn: conn} do
2564 conn =
2565 post(conn, "/api/pleroma/admin/config", %{
2566 configs: [
2567 %{
2568 "group" => ":pleroma",
2569 "key" => ":key1",
2570 "value" => %{"key" => "some_val"}
2571 }
2572 ]
2573 })
2574
2575 assert json_response(conn, 200) ==
2576 %{
2577 "configs" => [
2578 %{
2579 "group" => ":pleroma",
2580 "key" => ":key1",
2581 "value" => %{"key" => "some_val"}
2582 }
2583 ]
2584 }
2585 end
2586
2587 test "dispatch setting", %{conn: conn} do
2588 conn =
2589 post(conn, "/api/pleroma/admin/config", %{
2590 configs: [
2591 %{
2592 "group" => ":pleroma",
2593 "key" => "Pleroma.Web.Endpoint.NotReal",
2594 "value" => [
2595 %{
2596 "tuple" => [
2597 ":http",
2598 [
2599 %{"tuple" => [":ip", %{"tuple" => [127, 0, 0, 1]}]},
2600 %{"tuple" => [":dispatch", ["{:_,
2601 [
2602 {\"/api/v1/streaming\", Pleroma.Web.MastodonAPI.WebsocketHandler, []},
2603 {\"/websocket\", Phoenix.Endpoint.CowboyWebSocket,
2604 {Phoenix.Transports.WebSocket,
2605 {Pleroma.Web.Endpoint, Pleroma.Web.UserSocket, [path: \"/websocket\"]}}},
2606 {:_, Phoenix.Endpoint.Cowboy2Handler, {Pleroma.Web.Endpoint, []}}
2607 ]}"]]}
2608 ]
2609 ]
2610 }
2611 ]
2612 }
2613 ]
2614 })
2615
2616 dispatch_string =
2617 "{:_, [{\"/api/v1/streaming\", Pleroma.Web.MastodonAPI.WebsocketHandler, []}, " <>
2618 "{\"/websocket\", Phoenix.Endpoint.CowboyWebSocket, {Phoenix.Transports.WebSocket, " <>
2619 "{Pleroma.Web.Endpoint, Pleroma.Web.UserSocket, [path: \"/websocket\"]}}}, " <>
2620 "{:_, Phoenix.Endpoint.Cowboy2Handler, {Pleroma.Web.Endpoint, []}}]}"
2621
2622 assert json_response(conn, 200) == %{
2623 "configs" => [
2624 %{
2625 "group" => ":pleroma",
2626 "key" => "Pleroma.Web.Endpoint.NotReal",
2627 "value" => [
2628 %{
2629 "tuple" => [
2630 ":http",
2631 [
2632 %{"tuple" => [":ip", %{"tuple" => [127, 0, 0, 1]}]},
2633 %{
2634 "tuple" => [
2635 ":dispatch",
2636 [
2637 dispatch_string
2638 ]
2639 ]
2640 }
2641 ]
2642 ]
2643 }
2644 ]
2645 }
2646 ]
2647 }
2648 end
2649
2650 test "queues key as atom", %{conn: conn} do
2651 conn =
2652 post(conn, "/api/pleroma/admin/config", %{
2653 configs: [
2654 %{
2655 "group" => ":oban",
2656 "key" => ":queues",
2657 "value" => [
2658 %{"tuple" => [":federator_incoming", 50]},
2659 %{"tuple" => [":federator_outgoing", 50]},
2660 %{"tuple" => [":web_push", 50]},
2661 %{"tuple" => [":mailer", 10]},
2662 %{"tuple" => [":transmogrifier", 20]},
2663 %{"tuple" => [":scheduled_activities", 10]},
2664 %{"tuple" => [":background", 5]}
2665 ]
2666 }
2667 ]
2668 })
2669
2670 assert json_response(conn, 200) == %{
2671 "configs" => [
2672 %{
2673 "group" => ":oban",
2674 "key" => ":queues",
2675 "value" => [
2676 %{"tuple" => [":federator_incoming", 50]},
2677 %{"tuple" => [":federator_outgoing", 50]},
2678 %{"tuple" => [":web_push", 50]},
2679 %{"tuple" => [":mailer", 10]},
2680 %{"tuple" => [":transmogrifier", 20]},
2681 %{"tuple" => [":scheduled_activities", 10]},
2682 %{"tuple" => [":background", 5]}
2683 ]
2684 }
2685 ]
2686 }
2687 end
2688
2689 test "delete part of settings by atom subkeys", %{conn: conn} do
2690 config =
2691 insert(:config,
2692 key: ":keyaa1",
2693 value: :erlang.term_to_binary(subkey1: "val1", subkey2: "val2", subkey3: "val3")
2694 )
2695
2696 conn =
2697 post(conn, "/api/pleroma/admin/config", %{
2698 configs: [
2699 %{
2700 group: config.group,
2701 key: config.key,
2702 subkeys: [":subkey1", ":subkey3"],
2703 delete: "true"
2704 }
2705 ]
2706 })
2707
2708 assert json_response(conn, 200) == %{
2709 "configs" => [
2710 %{
2711 "group" => ":pleroma",
2712 "key" => ":keyaa1",
2713 "value" => [%{"tuple" => [":subkey2", "val2"]}]
2714 }
2715 ]
2716 }
2717 end
2718
2719 test "proxy tuple localhost", %{conn: conn} do
2720 conn =
2721 post(conn, "/api/pleroma/admin/config", %{
2722 configs: [
2723 %{
2724 group: ":pleroma",
2725 key: ":http",
2726 value: [
2727 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "localhost", 1234]}]},
2728 %{"tuple" => [":send_user_agent", false]}
2729 ]
2730 }
2731 ]
2732 })
2733
2734 assert json_response(conn, 200) == %{
2735 "configs" => [
2736 %{
2737 "group" => ":pleroma",
2738 "key" => ":http",
2739 "value" => [
2740 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "localhost", 1234]}]},
2741 %{"tuple" => [":send_user_agent", false]}
2742 ]
2743 }
2744 ]
2745 }
2746 end
2747
2748 test "proxy tuple domain", %{conn: conn} do
2749 conn =
2750 post(conn, "/api/pleroma/admin/config", %{
2751 configs: [
2752 %{
2753 group: ":pleroma",
2754 key: ":http",
2755 value: [
2756 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "domain.com", 1234]}]},
2757 %{"tuple" => [":send_user_agent", false]}
2758 ]
2759 }
2760 ]
2761 })
2762
2763 assert json_response(conn, 200) == %{
2764 "configs" => [
2765 %{
2766 "group" => ":pleroma",
2767 "key" => ":http",
2768 "value" => [
2769 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "domain.com", 1234]}]},
2770 %{"tuple" => [":send_user_agent", false]}
2771 ]
2772 }
2773 ]
2774 }
2775 end
2776
2777 test "proxy tuple ip", %{conn: conn} do
2778 conn =
2779 post(conn, "/api/pleroma/admin/config", %{
2780 configs: [
2781 %{
2782 group: ":pleroma",
2783 key: ":http",
2784 value: [
2785 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "127.0.0.1", 1234]}]},
2786 %{"tuple" => [":send_user_agent", false]}
2787 ]
2788 }
2789 ]
2790 })
2791
2792 assert json_response(conn, 200) == %{
2793 "configs" => [
2794 %{
2795 "group" => ":pleroma",
2796 "key" => ":http",
2797 "value" => [
2798 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "127.0.0.1", 1234]}]},
2799 %{"tuple" => [":send_user_agent", false]}
2800 ]
2801 }
2802 ]
2803 }
2804 end
2805 end
2806
2807 describe "config mix tasks run" do
2808 setup %{conn: conn} do
2809 admin = insert(:user, is_admin: true)
2810
2811 Mix.shell(Mix.Shell.Quiet)
2812
2813 on_exit(fn ->
2814 Mix.shell(Mix.Shell.IO)
2815 end)
2816
2817 %{conn: assign(conn, :user, admin)}
2818 end
2819
2820 clear_config([:instance, :dynamic_configuration]) do
2821 Pleroma.Config.put([:instance, :dynamic_configuration], true)
2822 end
2823
2824 clear_config([:feed, :post_title]) do
2825 Pleroma.Config.put([:feed, :post_title], %{max_length: 100, omission: "…"})
2826 end
2827
2828 test "transfer settings to DB and to file", %{conn: conn} do
2829 on_exit(fn -> :ok = File.rm("config/test.exported_from_db.secret.exs") end)
2830 assert Pleroma.Repo.all(Pleroma.Web.AdminAPI.Config) == []
2831 Mix.Tasks.Pleroma.Config.run(["migrate_to_db"])
2832 assert Pleroma.Repo.all(Pleroma.Web.AdminAPI.Config) > 0
2833
2834 conn = get(conn, "/api/pleroma/admin/config/migrate_from_db")
2835
2836 assert json_response(conn, 200) == %{}
2837 assert Pleroma.Repo.all(Pleroma.Web.AdminAPI.Config) == []
2838 end
2839
2840 test "returns error if dynamic configuration is off", %{conn: conn} do
2841 initial = Pleroma.Config.get([:instance, :dynamic_configuration])
2842 on_exit(fn -> Pleroma.Config.put([:instance, :dynamic_configuration], initial) end)
2843 Pleroma.Config.put([:instance, :dynamic_configuration], false)
2844
2845 conn = get(conn, "/api/pleroma/admin/config/migrate_from_db")
2846
2847 assert json_response(conn, 400) ==
2848 "To use this endpoint you need to enable dynamic configuration."
2849 end
2850 end
2851
2852 describe "GET /api/pleroma/admin/users/:nickname/statuses" do
2853 setup do
2854 admin = insert(:user, is_admin: true)
2855 user = insert(:user)
2856
2857 date1 = (DateTime.to_unix(DateTime.utc_now()) + 2000) |> DateTime.from_unix!()
2858 date2 = (DateTime.to_unix(DateTime.utc_now()) + 1000) |> DateTime.from_unix!()
2859 date3 = (DateTime.to_unix(DateTime.utc_now()) + 3000) |> DateTime.from_unix!()
2860
2861 insert(:note_activity, user: user, published: date1)
2862 insert(:note_activity, user: user, published: date2)
2863 insert(:note_activity, user: user, published: date3)
2864
2865 conn =
2866 build_conn()
2867 |> assign(:user, admin)
2868
2869 {:ok, conn: conn, user: user}
2870 end
2871
2872 test "renders user's statuses", %{conn: conn, user: user} do
2873 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses")
2874
2875 assert json_response(conn, 200) |> length() == 3
2876 end
2877
2878 test "renders user's statuses with a limit", %{conn: conn, user: user} do
2879 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses?page_size=2")
2880
2881 assert json_response(conn, 200) |> length() == 2
2882 end
2883
2884 test "doesn't return private statuses by default", %{conn: conn, user: user} do
2885 {:ok, _private_status} =
2886 CommonAPI.post(user, %{"status" => "private", "visibility" => "private"})
2887
2888 {:ok, _public_status} =
2889 CommonAPI.post(user, %{"status" => "public", "visibility" => "public"})
2890
2891 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses")
2892
2893 assert json_response(conn, 200) |> length() == 4
2894 end
2895
2896 test "returns private statuses with godmode on", %{conn: conn, user: user} do
2897 {:ok, _private_status} =
2898 CommonAPI.post(user, %{"status" => "private", "visibility" => "private"})
2899
2900 {:ok, _public_status} =
2901 CommonAPI.post(user, %{"status" => "public", "visibility" => "public"})
2902
2903 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses?godmode=true")
2904
2905 assert json_response(conn, 200) |> length() == 5
2906 end
2907 end
2908
2909 describe "GET /api/pleroma/admin/moderation_log" do
2910 setup %{conn: conn} do
2911 admin = insert(:user, is_admin: true)
2912 moderator = insert(:user, is_moderator: true)
2913
2914 %{conn: assign(conn, :user, admin), admin: admin, moderator: moderator}
2915 end
2916
2917 test "returns the log", %{conn: conn, admin: admin} do
2918 Repo.insert(%ModerationLog{
2919 data: %{
2920 actor: %{
2921 "id" => admin.id,
2922 "nickname" => admin.nickname,
2923 "type" => "user"
2924 },
2925 action: "relay_follow",
2926 target: "https://example.org/relay"
2927 },
2928 inserted_at: NaiveDateTime.truncate(~N[2017-08-15 15:47:06.597036], :second)
2929 })
2930
2931 Repo.insert(%ModerationLog{
2932 data: %{
2933 actor: %{
2934 "id" => admin.id,
2935 "nickname" => admin.nickname,
2936 "type" => "user"
2937 },
2938 action: "relay_unfollow",
2939 target: "https://example.org/relay"
2940 },
2941 inserted_at: NaiveDateTime.truncate(~N[2017-08-16 15:47:06.597036], :second)
2942 })
2943
2944 conn = get(conn, "/api/pleroma/admin/moderation_log")
2945
2946 response = json_response(conn, 200)
2947 [first_entry, second_entry] = response["items"]
2948
2949 assert response["total"] == 2
2950 assert first_entry["data"]["action"] == "relay_unfollow"
2951
2952 assert first_entry["message"] ==
2953 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
2954
2955 assert second_entry["data"]["action"] == "relay_follow"
2956
2957 assert second_entry["message"] ==
2958 "@#{admin.nickname} followed relay: https://example.org/relay"
2959 end
2960
2961 test "returns the log with pagination", %{conn: conn, admin: admin} do
2962 Repo.insert(%ModerationLog{
2963 data: %{
2964 actor: %{
2965 "id" => admin.id,
2966 "nickname" => admin.nickname,
2967 "type" => "user"
2968 },
2969 action: "relay_follow",
2970 target: "https://example.org/relay"
2971 },
2972 inserted_at: NaiveDateTime.truncate(~N[2017-08-15 15:47:06.597036], :second)
2973 })
2974
2975 Repo.insert(%ModerationLog{
2976 data: %{
2977 actor: %{
2978 "id" => admin.id,
2979 "nickname" => admin.nickname,
2980 "type" => "user"
2981 },
2982 action: "relay_unfollow",
2983 target: "https://example.org/relay"
2984 },
2985 inserted_at: NaiveDateTime.truncate(~N[2017-08-16 15:47:06.597036], :second)
2986 })
2987
2988 conn1 = get(conn, "/api/pleroma/admin/moderation_log?page_size=1&page=1")
2989
2990 response1 = json_response(conn1, 200)
2991 [first_entry] = response1["items"]
2992
2993 assert response1["total"] == 2
2994 assert response1["items"] |> length() == 1
2995 assert first_entry["data"]["action"] == "relay_unfollow"
2996
2997 assert first_entry["message"] ==
2998 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
2999
3000 conn2 = get(conn, "/api/pleroma/admin/moderation_log?page_size=1&page=2")
3001
3002 response2 = json_response(conn2, 200)
3003 [second_entry] = response2["items"]
3004
3005 assert response2["total"] == 2
3006 assert response2["items"] |> length() == 1
3007 assert second_entry["data"]["action"] == "relay_follow"
3008
3009 assert second_entry["message"] ==
3010 "@#{admin.nickname} followed relay: https://example.org/relay"
3011 end
3012
3013 test "filters log by date", %{conn: conn, admin: admin} do
3014 first_date = "2017-08-15T15:47:06Z"
3015 second_date = "2017-08-20T15:47:06Z"
3016
3017 Repo.insert(%ModerationLog{
3018 data: %{
3019 actor: %{
3020 "id" => admin.id,
3021 "nickname" => admin.nickname,
3022 "type" => "user"
3023 },
3024 action: "relay_follow",
3025 target: "https://example.org/relay"
3026 },
3027 inserted_at: NaiveDateTime.from_iso8601!(first_date)
3028 })
3029
3030 Repo.insert(%ModerationLog{
3031 data: %{
3032 actor: %{
3033 "id" => admin.id,
3034 "nickname" => admin.nickname,
3035 "type" => "user"
3036 },
3037 action: "relay_unfollow",
3038 target: "https://example.org/relay"
3039 },
3040 inserted_at: NaiveDateTime.from_iso8601!(second_date)
3041 })
3042
3043 conn1 =
3044 get(
3045 conn,
3046 "/api/pleroma/admin/moderation_log?start_date=#{second_date}"
3047 )
3048
3049 response1 = json_response(conn1, 200)
3050 [first_entry] = response1["items"]
3051
3052 assert response1["total"] == 1
3053 assert first_entry["data"]["action"] == "relay_unfollow"
3054
3055 assert first_entry["message"] ==
3056 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
3057 end
3058
3059 test "returns log filtered by user", %{conn: conn, admin: admin, moderator: moderator} do
3060 Repo.insert(%ModerationLog{
3061 data: %{
3062 actor: %{
3063 "id" => admin.id,
3064 "nickname" => admin.nickname,
3065 "type" => "user"
3066 },
3067 action: "relay_follow",
3068 target: "https://example.org/relay"
3069 }
3070 })
3071
3072 Repo.insert(%ModerationLog{
3073 data: %{
3074 actor: %{
3075 "id" => moderator.id,
3076 "nickname" => moderator.nickname,
3077 "type" => "user"
3078 },
3079 action: "relay_unfollow",
3080 target: "https://example.org/relay"
3081 }
3082 })
3083
3084 conn1 = get(conn, "/api/pleroma/admin/moderation_log?user_id=#{moderator.id}")
3085
3086 response1 = json_response(conn1, 200)
3087 [first_entry] = response1["items"]
3088
3089 assert response1["total"] == 1
3090 assert get_in(first_entry, ["data", "actor", "id"]) == moderator.id
3091 end
3092
3093 test "returns log filtered by search", %{conn: conn, moderator: moderator} do
3094 ModerationLog.insert_log(%{
3095 actor: moderator,
3096 action: "relay_follow",
3097 target: "https://example.org/relay"
3098 })
3099
3100 ModerationLog.insert_log(%{
3101 actor: moderator,
3102 action: "relay_unfollow",
3103 target: "https://example.org/relay"
3104 })
3105
3106 conn1 = get(conn, "/api/pleroma/admin/moderation_log?search=unfo")
3107
3108 response1 = json_response(conn1, 200)
3109 [first_entry] = response1["items"]
3110
3111 assert response1["total"] == 1
3112
3113 assert get_in(first_entry, ["data", "message"]) ==
3114 "@#{moderator.nickname} unfollowed relay: https://example.org/relay"
3115 end
3116 end
3117
3118 describe "PATCH /users/:nickname/force_password_reset" do
3119 setup %{conn: conn} do
3120 admin = insert(:user, is_admin: true)
3121 user = insert(:user)
3122
3123 %{conn: assign(conn, :user, admin), admin: admin, user: user}
3124 end
3125
3126 test "sets password_reset_pending to true", %{admin: admin, user: user} do
3127 assert user.password_reset_pending == false
3128
3129 conn =
3130 build_conn()
3131 |> assign(:user, admin)
3132 |> patch("/api/pleroma/admin/users/force_password_reset", %{nicknames: [user.nickname]})
3133
3134 assert json_response(conn, 204) == ""
3135
3136 ObanHelpers.perform_all()
3137
3138 assert User.get_by_id(user.id).password_reset_pending == true
3139 end
3140 end
3141
3142 describe "relays" do
3143 setup %{conn: conn} do
3144 admin = insert(:user, is_admin: true)
3145
3146 %{conn: assign(conn, :user, admin), admin: admin}
3147 end
3148
3149 test "POST /relay", %{admin: admin} do
3150 conn =
3151 build_conn()
3152 |> assign(:user, admin)
3153 |> post("/api/pleroma/admin/relay", %{
3154 relay_url: "http://mastodon.example.org/users/admin"
3155 })
3156
3157 assert json_response(conn, 200) == "http://mastodon.example.org/users/admin"
3158
3159 log_entry = Repo.one(ModerationLog)
3160
3161 assert ModerationLog.get_log_entry_message(log_entry) ==
3162 "@#{admin.nickname} followed relay: http://mastodon.example.org/users/admin"
3163 end
3164
3165 test "GET /relay", %{admin: admin} do
3166 relay_user = Pleroma.Web.ActivityPub.Relay.get_actor()
3167
3168 ["http://mastodon.example.org/users/admin", "https://mstdn.io/users/mayuutann"]
3169 |> Enum.each(fn ap_id ->
3170 {:ok, user} = User.get_or_fetch_by_ap_id(ap_id)
3171 User.follow(relay_user, user)
3172 end)
3173
3174 conn =
3175 build_conn()
3176 |> assign(:user, admin)
3177 |> get("/api/pleroma/admin/relay")
3178
3179 assert json_response(conn, 200)["relays"] -- ["mastodon.example.org", "mstdn.io"] == []
3180 end
3181
3182 test "DELETE /relay", %{admin: admin} do
3183 build_conn()
3184 |> assign(:user, admin)
3185 |> post("/api/pleroma/admin/relay", %{
3186 relay_url: "http://mastodon.example.org/users/admin"
3187 })
3188
3189 conn =
3190 build_conn()
3191 |> assign(:user, admin)
3192 |> delete("/api/pleroma/admin/relay", %{
3193 relay_url: "http://mastodon.example.org/users/admin"
3194 })
3195
3196 assert json_response(conn, 200) == "http://mastodon.example.org/users/admin"
3197
3198 [log_entry_one, log_entry_two] = Repo.all(ModerationLog)
3199
3200 assert ModerationLog.get_log_entry_message(log_entry_one) ==
3201 "@#{admin.nickname} followed relay: http://mastodon.example.org/users/admin"
3202
3203 assert ModerationLog.get_log_entry_message(log_entry_two) ==
3204 "@#{admin.nickname} unfollowed relay: http://mastodon.example.org/users/admin"
3205 end
3206 end
3207
3208 describe "instances" do
3209 test "GET /instances/:instance/statuses" do
3210 admin = insert(:user, is_admin: true)
3211 user = insert(:user, local: false, nickname: "archaeme@archae.me")
3212 user2 = insert(:user, local: false, nickname: "test@test.com")
3213 insert_pair(:note_activity, user: user)
3214 insert(:note_activity, user: user2)
3215
3216 conn =
3217 build_conn()
3218 |> assign(:user, admin)
3219 |> get("/api/pleroma/admin/instances/archae.me/statuses")
3220
3221 response = json_response(conn, 200)
3222
3223 assert length(response) == 2
3224
3225 conn =
3226 build_conn()
3227 |> assign(:user, admin)
3228 |> get("/api/pleroma/admin/instances/test.com/statuses")
3229
3230 response = json_response(conn, 200)
3231
3232 assert length(response) == 1
3233
3234 conn =
3235 build_conn()
3236 |> assign(:user, admin)
3237 |> get("/api/pleroma/admin/instances/nonexistent.com/statuses")
3238
3239 response = json_response(conn, 200)
3240
3241 assert length(response) == 0
3242 end
3243 end
3244
3245 describe "PATCH /confirm_email" do
3246 setup %{conn: conn} do
3247 admin = insert(:user, is_admin: true)
3248
3249 %{conn: assign(conn, :user, admin), admin: admin}
3250 end
3251
3252 test "it confirms emails of two users", %{admin: admin} do
3253 [first_user, second_user] = insert_pair(:user, confirmation_pending: true)
3254
3255 assert first_user.confirmation_pending == true
3256 assert second_user.confirmation_pending == true
3257
3258 build_conn()
3259 |> assign(:user, admin)
3260 |> patch("/api/pleroma/admin/users/confirm_email", %{
3261 nicknames: [
3262 first_user.nickname,
3263 second_user.nickname
3264 ]
3265 })
3266
3267 assert first_user.confirmation_pending == true
3268 assert second_user.confirmation_pending == true
3269
3270 log_entry = Repo.one(ModerationLog)
3271
3272 assert ModerationLog.get_log_entry_message(log_entry) ==
3273 "@#{admin.nickname} confirmed email for users: @#{first_user.nickname}, @#{
3274 second_user.nickname
3275 }"
3276 end
3277 end
3278
3279 describe "PATCH /resend_confirmation_email" do
3280 setup %{conn: conn} do
3281 admin = insert(:user, is_admin: true)
3282
3283 %{conn: assign(conn, :user, admin), admin: admin}
3284 end
3285
3286 test "it resend emails for two users", %{admin: admin} do
3287 [first_user, second_user] = insert_pair(:user, confirmation_pending: true)
3288
3289 build_conn()
3290 |> assign(:user, admin)
3291 |> patch("/api/pleroma/admin/users/resend_confirmation_email", %{
3292 nicknames: [
3293 first_user.nickname,
3294 second_user.nickname
3295 ]
3296 })
3297
3298 log_entry = Repo.one(ModerationLog)
3299
3300 assert ModerationLog.get_log_entry_message(log_entry) ==
3301 "@#{admin.nickname} re-sent confirmation email for users: @#{first_user.nickname}, @#{
3302 second_user.nickname
3303 }"
3304 end
3305 end
3306
3307 describe "POST /reports/:id/notes" do
3308 setup do
3309 admin = insert(:user, is_admin: true)
3310 [reporter, target_user] = insert_pair(:user)
3311 activity = insert(:note_activity, user: target_user)
3312
3313 {:ok, %{id: report_id}} =
3314 CommonAPI.report(reporter, %{
3315 "account_id" => target_user.id,
3316 "comment" => "I feel offended",
3317 "status_ids" => [activity.id]
3318 })
3319
3320 build_conn()
3321 |> assign(:user, admin)
3322 |> post("/api/pleroma/admin/reports/#{report_id}/notes", %{
3323 content: "this is disgusting!"
3324 })
3325
3326 build_conn()
3327 |> assign(:user, admin)
3328 |> post("/api/pleroma/admin/reports/#{report_id}/notes", %{
3329 content: "this is disgusting2!"
3330 })
3331
3332 %{
3333 admin_id: admin.id,
3334 report_id: report_id,
3335 admin: admin
3336 }
3337 end
3338
3339 test "it creates report note", %{admin_id: admin_id, report_id: report_id} do
3340 [note, _] = Repo.all(ReportNote)
3341
3342 assert %{
3343 activity_id: ^report_id,
3344 content: "this is disgusting!",
3345 user_id: ^admin_id
3346 } = note
3347 end
3348
3349 test "it returns reports with notes", %{admin: admin} do
3350 conn =
3351 build_conn()
3352 |> assign(:user, admin)
3353 |> get("/api/pleroma/admin/reports")
3354
3355 response = json_response(conn, 200)
3356 notes = hd(response["reports"])["notes"]
3357 [note, _] = notes
3358
3359 assert note["user"]["nickname"] == admin.nickname
3360 assert note["content"] == "this is disgusting!"
3361 assert note["created_at"]
3362 assert response["total"] == 1
3363 end
3364
3365 test "it deletes the note", %{admin: admin, report_id: report_id} do
3366 assert ReportNote |> Repo.all() |> length() == 2
3367
3368 [note, _] = Repo.all(ReportNote)
3369
3370 build_conn()
3371 |> assign(:user, admin)
3372 |> delete("/api/pleroma/admin/reports/#{report_id}/notes/#{note.id}")
3373
3374 assert ReportNote |> Repo.all() |> length() == 1
3375 end
3376 end
3377
3378 test "GET /api/pleroma/admin/config/descriptions", %{conn: conn} do
3379 admin = insert(:user, is_admin: true)
3380
3381 conn =
3382 assign(conn, :user, admin)
3383 |> get("/api/pleroma/admin/config/descriptions")
3384
3385 assert [child | _others] = json_response(conn, 200)
3386
3387 assert child["children"]
3388 assert child["key"]
3389 assert String.starts_with?(child["group"], ":")
3390 assert child["description"]
3391 end
3392 end
3393
3394 # Needed for testing
3395 defmodule Pleroma.Web.Endpoint.NotReal do
3396 end
3397
3398 defmodule Pleroma.Captcha.NotReal do
3399 end