1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do
6 use Pleroma.Web.ConnCase
7 use Oban.Testing, repo: Pleroma.Repo
10 alias Pleroma.ConfigDB
12 alias Pleroma.ModerationLog
14 alias Pleroma.ReportNote
15 alias Pleroma.Tests.ObanHelpers
17 alias Pleroma.UserInviteToken
18 alias Pleroma.Web.ActivityPub.Relay
19 alias Pleroma.Web.CommonAPI
20 alias Pleroma.Web.MastodonAPI.StatusView
21 alias Pleroma.Web.MediaProxy
22 import Pleroma.Factory
25 Tesla.Mock.mock_global(fn env -> apply(HttpRequestMock, :request, [env]) end)
31 admin = insert(:user, is_admin: true)
32 token = insert(:oauth_admin_token, user: admin)
36 |> assign(:user, admin)
37 |> assign(:token, token)
39 {:ok, %{admin: admin, token: token, conn: conn}}
42 describe "with [:auth, :enforce_oauth_admin_scope_usage]," do
43 clear_config([:auth, :enforce_oauth_admin_scope_usage]) do
44 Pleroma.Config.put([:auth, :enforce_oauth_admin_scope_usage], true)
47 test "GET /api/pleroma/admin/users/:nickname requires admin:read:accounts or broader scope",
50 url = "/api/pleroma/admin/users/#{user.nickname}"
52 good_token1 = insert(:oauth_token, user: admin, scopes: ["admin"])
53 good_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read"])
54 good_token3 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts"])
56 bad_token1 = insert(:oauth_token, user: admin, scopes: ["read:accounts"])
57 bad_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts:partial"])
60 for good_token <- [good_token1, good_token2, good_token3] do
63 |> assign(:user, admin)
64 |> assign(:token, good_token)
67 assert json_response(conn, 200)
70 for good_token <- [good_token1, good_token2, good_token3] do
74 |> assign(:token, good_token)
77 assert json_response(conn, :forbidden)
80 for bad_token <- [bad_token1, bad_token2, bad_token3] do
83 |> assign(:user, admin)
84 |> assign(:token, bad_token)
87 assert json_response(conn, :forbidden)
92 describe "unless [:auth, :enforce_oauth_admin_scope_usage]," do
93 clear_config([:auth, :enforce_oauth_admin_scope_usage]) do
94 Pleroma.Config.put([:auth, :enforce_oauth_admin_scope_usage], false)
97 test "GET /api/pleroma/admin/users/:nickname requires " <>
98 "read:accounts or admin:read:accounts or broader scope",
101 url = "/api/pleroma/admin/users/#{user.nickname}"
103 good_token1 = insert(:oauth_token, user: admin, scopes: ["admin"])
104 good_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read"])
105 good_token3 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts"])
106 good_token4 = insert(:oauth_token, user: admin, scopes: ["read:accounts"])
107 good_token5 = insert(:oauth_token, user: admin, scopes: ["read"])
109 good_tokens = [good_token1, good_token2, good_token3, good_token4, good_token5]
111 bad_token1 = insert(:oauth_token, user: admin, scopes: ["read:accounts:partial"])
112 bad_token2 = insert(:oauth_token, user: admin, scopes: ["admin:read:accounts:partial"])
115 for good_token <- good_tokens do
118 |> assign(:user, admin)
119 |> assign(:token, good_token)
122 assert json_response(conn, 200)
125 for good_token <- good_tokens do
128 |> assign(:user, nil)
129 |> assign(:token, good_token)
132 assert json_response(conn, :forbidden)
135 for bad_token <- [bad_token1, bad_token2, bad_token3] do
138 |> assign(:user, admin)
139 |> assign(:token, bad_token)
142 assert json_response(conn, :forbidden)
147 describe "DELETE /api/pleroma/admin/users" do
148 test "single user", %{admin: admin, conn: conn} do
153 |> put_req_header("accept", "application/json")
154 |> delete("/api/pleroma/admin/users?nickname=#{user.nickname}")
156 log_entry = Repo.one(ModerationLog)
158 assert ModerationLog.get_log_entry_message(log_entry) ==
159 "@#{admin.nickname} deleted users: @#{user.nickname}"
161 assert json_response(conn, 200) == user.nickname
164 test "multiple users", %{admin: admin, conn: conn} do
165 user_one = insert(:user)
166 user_two = insert(:user)
170 |> put_req_header("accept", "application/json")
171 |> delete("/api/pleroma/admin/users", %{
172 nicknames: [user_one.nickname, user_two.nickname]
175 log_entry = Repo.one(ModerationLog)
177 assert ModerationLog.get_log_entry_message(log_entry) ==
178 "@#{admin.nickname} deleted users: @#{user_one.nickname}, @#{user_two.nickname}"
180 response = json_response(conn, 200)
181 assert response -- [user_one.nickname, user_two.nickname] == []
185 describe "/api/pleroma/admin/users" do
186 test "Create", %{conn: conn} do
189 |> put_req_header("accept", "application/json")
190 |> post("/api/pleroma/admin/users", %{
193 "nickname" => "lain",
194 "email" => "lain@example.org",
198 "nickname" => "lain2",
199 "email" => "lain2@example.org",
205 response = json_response(conn, 200) |> Enum.map(&Map.get(&1, "type"))
206 assert response == ["success", "success"]
208 log_entry = Repo.one(ModerationLog)
210 assert ["lain", "lain2"] -- Enum.map(log_entry.data["subjects"], & &1["nickname"]) == []
213 test "Cannot create user with existing email", %{conn: conn} do
218 |> put_req_header("accept", "application/json")
219 |> post("/api/pleroma/admin/users", %{
222 "nickname" => "lain",
223 "email" => user.email,
229 assert json_response(conn, 409) == [
233 "email" => user.email,
236 "error" => "email has already been taken",
242 test "Cannot create user with existing nickname", %{conn: conn} do
247 |> put_req_header("accept", "application/json")
248 |> post("/api/pleroma/admin/users", %{
251 "nickname" => user.nickname,
252 "email" => "someuser@plerama.social",
258 assert json_response(conn, 409) == [
262 "email" => "someuser@plerama.social",
263 "nickname" => user.nickname
265 "error" => "nickname has already been taken",
271 test "Multiple user creation works in transaction", %{conn: conn} do
276 |> put_req_header("accept", "application/json")
277 |> post("/api/pleroma/admin/users", %{
280 "nickname" => "newuser",
281 "email" => "newuser@pleroma.social",
285 "nickname" => "lain",
286 "email" => user.email,
292 assert json_response(conn, 409) == [
296 "email" => user.email,
299 "error" => "email has already been taken",
305 "email" => "newuser@pleroma.social",
306 "nickname" => "newuser"
313 assert User.get_by_nickname("newuser") === nil
317 describe "/api/pleroma/admin/users/:nickname" do
318 test "Show", %{conn: conn} do
321 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}")
324 "deactivated" => false,
325 "id" => to_string(user.id),
327 "nickname" => user.nickname,
328 "roles" => %{"admin" => false, "moderator" => false},
330 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
331 "display_name" => HTML.strip_tags(user.name || user.nickname),
332 "confirmation_pending" => false
335 assert expected == json_response(conn, 200)
338 test "when the user doesn't exist", %{conn: conn} do
341 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}")
343 assert "Not found" == json_response(conn, 404)
347 describe "/api/pleroma/admin/users/follow" do
348 test "allows to force-follow another user", %{admin: admin, conn: conn} do
350 follower = insert(:user)
353 |> put_req_header("accept", "application/json")
354 |> post("/api/pleroma/admin/users/follow", %{
355 "follower" => follower.nickname,
356 "followed" => user.nickname
359 user = User.get_cached_by_id(user.id)
360 follower = User.get_cached_by_id(follower.id)
362 assert User.following?(follower, user)
364 log_entry = Repo.one(ModerationLog)
366 assert ModerationLog.get_log_entry_message(log_entry) ==
367 "@#{admin.nickname} made @#{follower.nickname} follow @#{user.nickname}"
371 describe "/api/pleroma/admin/users/unfollow" do
372 test "allows to force-unfollow another user", %{admin: admin, conn: conn} do
374 follower = insert(:user)
376 User.follow(follower, user)
379 |> put_req_header("accept", "application/json")
380 |> post("/api/pleroma/admin/users/unfollow", %{
381 "follower" => follower.nickname,
382 "followed" => user.nickname
385 user = User.get_cached_by_id(user.id)
386 follower = User.get_cached_by_id(follower.id)
388 refute User.following?(follower, user)
390 log_entry = Repo.one(ModerationLog)
392 assert ModerationLog.get_log_entry_message(log_entry) ==
393 "@#{admin.nickname} made @#{follower.nickname} unfollow @#{user.nickname}"
397 describe "PUT /api/pleroma/admin/users/tag" do
398 setup %{conn: conn} do
399 user1 = insert(:user, %{tags: ["x"]})
400 user2 = insert(:user, %{tags: ["y"]})
401 user3 = insert(:user, %{tags: ["unchanged"]})
405 |> put_req_header("accept", "application/json")
407 "/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=" <>
408 "#{user2.nickname}&tags[]=foo&tags[]=bar"
411 %{conn: conn, user1: user1, user2: user2, user3: user3}
414 test "it appends specified tags to users with specified nicknames", %{
420 assert json_response(conn, :no_content)
421 assert User.get_cached_by_id(user1.id).tags == ["x", "foo", "bar"]
422 assert User.get_cached_by_id(user2.id).tags == ["y", "foo", "bar"]
424 log_entry = Repo.one(ModerationLog)
427 [user1.nickname, user2.nickname]
428 |> Enum.map(&"@#{&1}")
431 tags = ["foo", "bar"] |> Enum.join(", ")
433 assert ModerationLog.get_log_entry_message(log_entry) ==
434 "@#{admin.nickname} added tags: #{tags} to users: #{users}"
437 test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
438 assert json_response(conn, :no_content)
439 assert User.get_cached_by_id(user3.id).tags == ["unchanged"]
443 describe "DELETE /api/pleroma/admin/users/tag" do
444 setup %{conn: conn} do
445 user1 = insert(:user, %{tags: ["x"]})
446 user2 = insert(:user, %{tags: ["y", "z"]})
447 user3 = insert(:user, %{tags: ["unchanged"]})
451 |> put_req_header("accept", "application/json")
453 "/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=" <>
454 "#{user2.nickname}&tags[]=x&tags[]=z"
457 %{conn: conn, user1: user1, user2: user2, user3: user3}
460 test "it removes specified tags from users with specified nicknames", %{
466 assert json_response(conn, :no_content)
467 assert User.get_cached_by_id(user1.id).tags == []
468 assert User.get_cached_by_id(user2.id).tags == ["y"]
470 log_entry = Repo.one(ModerationLog)
473 [user1.nickname, user2.nickname]
474 |> Enum.map(&"@#{&1}")
477 tags = ["x", "z"] |> Enum.join(", ")
479 assert ModerationLog.get_log_entry_message(log_entry) ==
480 "@#{admin.nickname} removed tags: #{tags} from users: #{users}"
483 test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
484 assert json_response(conn, :no_content)
485 assert User.get_cached_by_id(user3.id).tags == ["unchanged"]
489 describe "/api/pleroma/admin/users/:nickname/permission_group" do
490 test "GET is giving user_info", %{admin: admin, conn: conn} do
493 |> put_req_header("accept", "application/json")
494 |> get("/api/pleroma/admin/users/#{admin.nickname}/permission_group/")
496 assert json_response(conn, 200) == %{
498 "is_moderator" => false
502 test "/:right POST, can add to a permission group", %{admin: admin, conn: conn} do
507 |> put_req_header("accept", "application/json")
508 |> post("/api/pleroma/admin/users/#{user.nickname}/permission_group/admin")
510 assert json_response(conn, 200) == %{
514 log_entry = Repo.one(ModerationLog)
516 assert ModerationLog.get_log_entry_message(log_entry) ==
517 "@#{admin.nickname} made @#{user.nickname} admin"
520 test "/:right POST, can add to a permission group (multiple)", %{admin: admin, conn: conn} do
521 user_one = insert(:user)
522 user_two = insert(:user)
526 |> put_req_header("accept", "application/json")
527 |> post("/api/pleroma/admin/users/permission_group/admin", %{
528 nicknames: [user_one.nickname, user_two.nickname]
531 assert json_response(conn, 200) == %{"is_admin" => true}
533 log_entry = Repo.one(ModerationLog)
535 assert ModerationLog.get_log_entry_message(log_entry) ==
536 "@#{admin.nickname} made @#{user_one.nickname}, @#{user_two.nickname} admin"
539 test "/:right DELETE, can remove from a permission group", %{admin: admin, conn: conn} do
540 user = insert(:user, is_admin: true)
544 |> put_req_header("accept", "application/json")
545 |> delete("/api/pleroma/admin/users/#{user.nickname}/permission_group/admin")
547 assert json_response(conn, 200) == %{"is_admin" => false}
549 log_entry = Repo.one(ModerationLog)
551 assert ModerationLog.get_log_entry_message(log_entry) ==
552 "@#{admin.nickname} revoked admin role from @#{user.nickname}"
555 test "/:right DELETE, can remove from a permission group (multiple)", %{
559 user_one = insert(:user, is_admin: true)
560 user_two = insert(:user, is_admin: true)
564 |> put_req_header("accept", "application/json")
565 |> delete("/api/pleroma/admin/users/permission_group/admin", %{
566 nicknames: [user_one.nickname, user_two.nickname]
569 assert json_response(conn, 200) == %{"is_admin" => false}
571 log_entry = Repo.one(ModerationLog)
573 assert ModerationLog.get_log_entry_message(log_entry) ==
574 "@#{admin.nickname} revoked admin role from @#{user_one.nickname}, @#{
580 describe "POST /api/pleroma/admin/email_invite, with valid config" do
581 clear_config([:instance, :registrations_open]) do
582 Pleroma.Config.put([:instance, :registrations_open], false)
585 clear_config([:instance, :invites_enabled]) do
586 Pleroma.Config.put([:instance, :invites_enabled], true)
589 test "sends invitation and returns 204", %{admin: admin, conn: conn} do
590 recipient_email = "foo@bar.com"
591 recipient_name = "J. D."
596 "/api/pleroma/admin/users/email_invite?email=#{recipient_email}&name=#{recipient_name}"
599 assert json_response(conn, :no_content)
601 token_record = List.last(Repo.all(Pleroma.UserInviteToken))
603 refute token_record.used
605 notify_email = Pleroma.Config.get([:instance, :notify_email])
606 instance_name = Pleroma.Config.get([:instance, :name])
609 Pleroma.Emails.UserEmail.user_invitation_email(
616 Swoosh.TestAssertions.assert_email_sent(
617 from: {instance_name, notify_email},
618 to: {recipient_name, recipient_email},
619 html_body: email.html_body
623 test "it returns 403 if requested by a non-admin" do
624 non_admin_user = insert(:user)
625 token = insert(:oauth_token, user: non_admin_user)
629 |> assign(:user, non_admin_user)
630 |> assign(:token, token)
631 |> post("/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
633 assert json_response(conn, :forbidden)
637 describe "POST /api/pleroma/admin/users/email_invite, with invalid config" do
638 clear_config([:instance, :registrations_open])
639 clear_config([:instance, :invites_enabled])
641 test "it returns 500 if `invites_enabled` is not enabled", %{conn: conn} do
642 Pleroma.Config.put([:instance, :registrations_open], false)
643 Pleroma.Config.put([:instance, :invites_enabled], false)
645 conn = post(conn, "/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
647 assert json_response(conn, :internal_server_error)
650 test "it returns 500 if `registrations_open` is enabled", %{conn: conn} do
651 Pleroma.Config.put([:instance, :registrations_open], true)
652 Pleroma.Config.put([:instance, :invites_enabled], true)
654 conn = post(conn, "/api/pleroma/admin/users/email_invite?email=foo@bar.com&name=JD")
656 assert json_response(conn, :internal_server_error)
660 test "/api/pleroma/admin/users/:nickname/password_reset", %{conn: conn} do
665 |> put_req_header("accept", "application/json")
666 |> get("/api/pleroma/admin/users/#{user.nickname}/password_reset")
668 resp = json_response(conn, 200)
670 assert Regex.match?(~r/(http:\/\/|https:\/\/)/, resp["link"])
673 describe "GET /api/pleroma/admin/users" do
674 test "renders users array for the first page", %{conn: conn, admin: admin} do
675 user = insert(:user, local: false, tags: ["foo", "bar"])
676 conn = get(conn, "/api/pleroma/admin/users?page=1")
681 "deactivated" => admin.deactivated,
683 "nickname" => admin.nickname,
684 "roles" => %{"admin" => true, "moderator" => false},
687 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
688 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
689 "confirmation_pending" => false
692 "deactivated" => user.deactivated,
694 "nickname" => user.nickname,
695 "roles" => %{"admin" => false, "moderator" => false},
697 "tags" => ["foo", "bar"],
698 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
699 "display_name" => HTML.strip_tags(user.name || user.nickname),
700 "confirmation_pending" => false
703 |> Enum.sort_by(& &1["nickname"])
705 assert json_response(conn, 200) == %{
712 test "renders empty array for the second page", %{conn: conn} do
715 conn = get(conn, "/api/pleroma/admin/users?page=2")
717 assert json_response(conn, 200) == %{
724 test "regular search", %{conn: conn} do
725 user = insert(:user, nickname: "bob")
727 conn = get(conn, "/api/pleroma/admin/users?query=bo")
729 assert json_response(conn, 200) == %{
734 "deactivated" => user.deactivated,
736 "nickname" => user.nickname,
737 "roles" => %{"admin" => false, "moderator" => false},
740 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
741 "display_name" => HTML.strip_tags(user.name || user.nickname),
742 "confirmation_pending" => false
748 test "search by domain", %{conn: conn} do
749 user = insert(:user, nickname: "nickname@domain.com")
752 conn = get(conn, "/api/pleroma/admin/users?query=domain.com")
754 assert json_response(conn, 200) == %{
759 "deactivated" => user.deactivated,
761 "nickname" => user.nickname,
762 "roles" => %{"admin" => false, "moderator" => false},
765 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
766 "display_name" => HTML.strip_tags(user.name || user.nickname),
767 "confirmation_pending" => false
773 test "search by full nickname", %{conn: conn} do
774 user = insert(:user, nickname: "nickname@domain.com")
777 conn = get(conn, "/api/pleroma/admin/users?query=nickname@domain.com")
779 assert json_response(conn, 200) == %{
784 "deactivated" => user.deactivated,
786 "nickname" => user.nickname,
787 "roles" => %{"admin" => false, "moderator" => false},
790 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
791 "display_name" => HTML.strip_tags(user.name || user.nickname),
792 "confirmation_pending" => false
798 test "search by display name", %{conn: conn} do
799 user = insert(:user, name: "Display name")
802 conn = get(conn, "/api/pleroma/admin/users?name=display")
804 assert json_response(conn, 200) == %{
809 "deactivated" => user.deactivated,
811 "nickname" => user.nickname,
812 "roles" => %{"admin" => false, "moderator" => false},
815 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
816 "display_name" => HTML.strip_tags(user.name || user.nickname),
817 "confirmation_pending" => false
823 test "search by email", %{conn: conn} do
824 user = insert(:user, email: "email@example.com")
827 conn = get(conn, "/api/pleroma/admin/users?email=email@example.com")
829 assert json_response(conn, 200) == %{
834 "deactivated" => user.deactivated,
836 "nickname" => user.nickname,
837 "roles" => %{"admin" => false, "moderator" => false},
840 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
841 "display_name" => HTML.strip_tags(user.name || user.nickname),
842 "confirmation_pending" => false
848 test "regular search with page size", %{conn: conn} do
849 user = insert(:user, nickname: "aalice")
850 user2 = insert(:user, nickname: "alice")
852 conn1 = get(conn, "/api/pleroma/admin/users?query=a&page_size=1&page=1")
854 assert json_response(conn1, 200) == %{
859 "deactivated" => user.deactivated,
861 "nickname" => user.nickname,
862 "roles" => %{"admin" => false, "moderator" => false},
865 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
866 "display_name" => HTML.strip_tags(user.name || user.nickname),
867 "confirmation_pending" => false
872 conn2 = get(conn, "/api/pleroma/admin/users?query=a&page_size=1&page=2")
874 assert json_response(conn2, 200) == %{
879 "deactivated" => user2.deactivated,
881 "nickname" => user2.nickname,
882 "roles" => %{"admin" => false, "moderator" => false},
885 "avatar" => User.avatar_url(user2) |> MediaProxy.url(),
886 "display_name" => HTML.strip_tags(user2.name || user2.nickname),
887 "confirmation_pending" => false
893 test "only local users" do
894 admin = insert(:user, is_admin: true, nickname: "john")
895 token = insert(:oauth_admin_token, user: admin)
896 user = insert(:user, nickname: "bob")
898 insert(:user, nickname: "bobb", local: false)
902 |> assign(:user, admin)
903 |> assign(:token, token)
904 |> get("/api/pleroma/admin/users?query=bo&filters=local")
906 assert json_response(conn, 200) == %{
911 "deactivated" => user.deactivated,
913 "nickname" => user.nickname,
914 "roles" => %{"admin" => false, "moderator" => false},
917 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
918 "display_name" => HTML.strip_tags(user.name || user.nickname),
919 "confirmation_pending" => false
925 test "only local users with no query", %{conn: conn, admin: old_admin} do
926 admin = insert(:user, is_admin: true, nickname: "john")
927 user = insert(:user, nickname: "bob")
929 insert(:user, nickname: "bobb", local: false)
931 conn = get(conn, "/api/pleroma/admin/users?filters=local")
936 "deactivated" => user.deactivated,
938 "nickname" => user.nickname,
939 "roles" => %{"admin" => false, "moderator" => false},
942 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
943 "display_name" => HTML.strip_tags(user.name || user.nickname),
944 "confirmation_pending" => false
947 "deactivated" => admin.deactivated,
949 "nickname" => admin.nickname,
950 "roles" => %{"admin" => true, "moderator" => false},
953 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
954 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
955 "confirmation_pending" => false
958 "deactivated" => false,
959 "id" => old_admin.id,
961 "nickname" => old_admin.nickname,
962 "roles" => %{"admin" => true, "moderator" => false},
964 "avatar" => User.avatar_url(old_admin) |> MediaProxy.url(),
965 "display_name" => HTML.strip_tags(old_admin.name || old_admin.nickname),
966 "confirmation_pending" => false
969 |> Enum.sort_by(& &1["nickname"])
971 assert json_response(conn, 200) == %{
978 test "load only admins", %{conn: conn, admin: admin} do
979 second_admin = insert(:user, is_admin: true)
983 conn = get(conn, "/api/pleroma/admin/users?filters=is_admin")
988 "deactivated" => false,
990 "nickname" => admin.nickname,
991 "roles" => %{"admin" => true, "moderator" => false},
992 "local" => admin.local,
994 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
995 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
996 "confirmation_pending" => false
999 "deactivated" => false,
1000 "id" => second_admin.id,
1001 "nickname" => second_admin.nickname,
1002 "roles" => %{"admin" => true, "moderator" => false},
1003 "local" => second_admin.local,
1005 "avatar" => User.avatar_url(second_admin) |> MediaProxy.url(),
1006 "display_name" => HTML.strip_tags(second_admin.name || second_admin.nickname),
1007 "confirmation_pending" => false
1010 |> Enum.sort_by(& &1["nickname"])
1012 assert json_response(conn, 200) == %{
1019 test "load only moderators", %{conn: conn} do
1020 moderator = insert(:user, is_moderator: true)
1024 conn = get(conn, "/api/pleroma/admin/users?filters=is_moderator")
1026 assert json_response(conn, 200) == %{
1031 "deactivated" => false,
1032 "id" => moderator.id,
1033 "nickname" => moderator.nickname,
1034 "roles" => %{"admin" => false, "moderator" => true},
1035 "local" => moderator.local,
1037 "avatar" => User.avatar_url(moderator) |> MediaProxy.url(),
1038 "display_name" => HTML.strip_tags(moderator.name || moderator.nickname),
1039 "confirmation_pending" => false
1045 test "load users with tags list", %{conn: conn} do
1046 user1 = insert(:user, tags: ["first"])
1047 user2 = insert(:user, tags: ["second"])
1051 conn = get(conn, "/api/pleroma/admin/users?tags[]=first&tags[]=second")
1056 "deactivated" => false,
1058 "nickname" => user1.nickname,
1059 "roles" => %{"admin" => false, "moderator" => false},
1060 "local" => user1.local,
1061 "tags" => ["first"],
1062 "avatar" => User.avatar_url(user1) |> MediaProxy.url(),
1063 "display_name" => HTML.strip_tags(user1.name || user1.nickname),
1064 "confirmation_pending" => false
1067 "deactivated" => false,
1069 "nickname" => user2.nickname,
1070 "roles" => %{"admin" => false, "moderator" => false},
1071 "local" => user2.local,
1072 "tags" => ["second"],
1073 "avatar" => User.avatar_url(user2) |> MediaProxy.url(),
1074 "display_name" => HTML.strip_tags(user2.name || user2.nickname),
1075 "confirmation_pending" => false
1078 |> Enum.sort_by(& &1["nickname"])
1080 assert json_response(conn, 200) == %{
1087 test "it works with multiple filters" do
1088 admin = insert(:user, nickname: "john", is_admin: true)
1089 token = insert(:oauth_admin_token, user: admin)
1090 user = insert(:user, nickname: "bob", local: false, deactivated: true)
1092 insert(:user, nickname: "ken", local: true, deactivated: true)
1093 insert(:user, nickname: "bobb", local: false, deactivated: false)
1097 |> assign(:user, admin)
1098 |> assign(:token, token)
1099 |> get("/api/pleroma/admin/users?filters=deactivated,external")
1101 assert json_response(conn, 200) == %{
1106 "deactivated" => user.deactivated,
1108 "nickname" => user.nickname,
1109 "roles" => %{"admin" => false, "moderator" => false},
1110 "local" => user.local,
1112 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
1113 "display_name" => HTML.strip_tags(user.name || user.nickname),
1114 "confirmation_pending" => false
1120 test "it omits relay user", %{admin: admin, conn: conn} do
1121 assert %User{} = Relay.get_actor()
1123 conn = get(conn, "/api/pleroma/admin/users")
1125 assert json_response(conn, 200) == %{
1130 "deactivated" => admin.deactivated,
1132 "nickname" => admin.nickname,
1133 "roles" => %{"admin" => true, "moderator" => false},
1136 "avatar" => User.avatar_url(admin) |> MediaProxy.url(),
1137 "display_name" => HTML.strip_tags(admin.name || admin.nickname),
1138 "confirmation_pending" => false
1145 test "PATCH /api/pleroma/admin/users/activate", %{admin: admin, conn: conn} do
1146 user_one = insert(:user, deactivated: true)
1147 user_two = insert(:user, deactivated: true)
1152 "/api/pleroma/admin/users/activate",
1153 %{nicknames: [user_one.nickname, user_two.nickname]}
1156 response = json_response(conn, 200)
1157 assert Enum.map(response["users"], & &1["deactivated"]) == [false, false]
1159 log_entry = Repo.one(ModerationLog)
1161 assert ModerationLog.get_log_entry_message(log_entry) ==
1162 "@#{admin.nickname} activated users: @#{user_one.nickname}, @#{user_two.nickname}"
1165 test "PATCH /api/pleroma/admin/users/deactivate", %{admin: admin, conn: conn} do
1166 user_one = insert(:user, deactivated: false)
1167 user_two = insert(:user, deactivated: false)
1172 "/api/pleroma/admin/users/deactivate",
1173 %{nicknames: [user_one.nickname, user_two.nickname]}
1176 response = json_response(conn, 200)
1177 assert Enum.map(response["users"], & &1["deactivated"]) == [true, true]
1179 log_entry = Repo.one(ModerationLog)
1181 assert ModerationLog.get_log_entry_message(log_entry) ==
1182 "@#{admin.nickname} deactivated users: @#{user_one.nickname}, @#{user_two.nickname}"
1185 test "PATCH /api/pleroma/admin/users/:nickname/toggle_activation", %{admin: admin, conn: conn} do
1186 user = insert(:user)
1188 conn = patch(conn, "/api/pleroma/admin/users/#{user.nickname}/toggle_activation")
1190 assert json_response(conn, 200) ==
1192 "deactivated" => !user.deactivated,
1194 "nickname" => user.nickname,
1195 "roles" => %{"admin" => false, "moderator" => false},
1198 "avatar" => User.avatar_url(user) |> MediaProxy.url(),
1199 "display_name" => HTML.strip_tags(user.name || user.nickname),
1200 "confirmation_pending" => false
1203 log_entry = Repo.one(ModerationLog)
1205 assert ModerationLog.get_log_entry_message(log_entry) ==
1206 "@#{admin.nickname} deactivated users: @#{user.nickname}"
1209 describe "POST /api/pleroma/admin/users/invite_token" do
1210 test "without options", %{conn: conn} do
1211 conn = post(conn, "/api/pleroma/admin/users/invite_token")
1213 invite_json = json_response(conn, 200)
1214 invite = UserInviteToken.find_by_token!(invite_json["token"])
1216 refute invite.expires_at
1217 refute invite.max_use
1218 assert invite.invite_type == "one_time"
1221 test "with expires_at", %{conn: conn} do
1223 post(conn, "/api/pleroma/admin/users/invite_token", %{
1224 "expires_at" => Date.to_string(Date.utc_today())
1227 invite_json = json_response(conn, 200)
1228 invite = UserInviteToken.find_by_token!(invite_json["token"])
1231 assert invite.expires_at == Date.utc_today()
1232 refute invite.max_use
1233 assert invite.invite_type == "date_limited"
1236 test "with max_use", %{conn: conn} do
1237 conn = post(conn, "/api/pleroma/admin/users/invite_token", %{"max_use" => 150})
1239 invite_json = json_response(conn, 200)
1240 invite = UserInviteToken.find_by_token!(invite_json["token"])
1242 refute invite.expires_at
1243 assert invite.max_use == 150
1244 assert invite.invite_type == "reusable"
1247 test "with max use and expires_at", %{conn: conn} do
1249 post(conn, "/api/pleroma/admin/users/invite_token", %{
1251 "expires_at" => Date.to_string(Date.utc_today())
1254 invite_json = json_response(conn, 200)
1255 invite = UserInviteToken.find_by_token!(invite_json["token"])
1257 assert invite.expires_at == Date.utc_today()
1258 assert invite.max_use == 150
1259 assert invite.invite_type == "reusable_date_limited"
1263 describe "GET /api/pleroma/admin/users/invites" do
1264 test "no invites", %{conn: conn} do
1265 conn = get(conn, "/api/pleroma/admin/users/invites")
1267 assert json_response(conn, 200) == %{"invites" => []}
1270 test "with invite", %{conn: conn} do
1271 {:ok, invite} = UserInviteToken.create_invite()
1273 conn = get(conn, "/api/pleroma/admin/users/invites")
1275 assert json_response(conn, 200) == %{
1278 "expires_at" => nil,
1280 "invite_type" => "one_time",
1282 "token" => invite.token,
1291 describe "POST /api/pleroma/admin/users/revoke_invite" do
1292 test "with token", %{conn: conn} do
1293 {:ok, invite} = UserInviteToken.create_invite()
1295 conn = post(conn, "/api/pleroma/admin/users/revoke_invite", %{"token" => invite.token})
1297 assert json_response(conn, 200) == %{
1298 "expires_at" => nil,
1300 "invite_type" => "one_time",
1302 "token" => invite.token,
1308 test "with invalid token", %{conn: conn} do
1309 conn = post(conn, "/api/pleroma/admin/users/revoke_invite", %{"token" => "foo"})
1311 assert json_response(conn, :not_found) == "Not found"
1315 describe "GET /api/pleroma/admin/reports/:id" do
1316 test "returns report by its id", %{conn: conn} do
1317 [reporter, target_user] = insert_pair(:user)
1318 activity = insert(:note_activity, user: target_user)
1320 {:ok, %{id: report_id}} =
1321 CommonAPI.report(reporter, %{
1322 "account_id" => target_user.id,
1323 "comment" => "I feel offended",
1324 "status_ids" => [activity.id]
1329 |> get("/api/pleroma/admin/reports/#{report_id}")
1330 |> json_response(:ok)
1332 assert response["id"] == report_id
1335 test "returns 404 when report id is invalid", %{conn: conn} do
1336 conn = get(conn, "/api/pleroma/admin/reports/test")
1338 assert json_response(conn, :not_found) == "Not found"
1342 describe "PATCH /api/pleroma/admin/reports" do
1344 [reporter, target_user] = insert_pair(:user)
1345 activity = insert(:note_activity, user: target_user)
1347 {:ok, %{id: report_id}} =
1348 CommonAPI.report(reporter, %{
1349 "account_id" => target_user.id,
1350 "comment" => "I feel offended",
1351 "status_ids" => [activity.id]
1354 {:ok, %{id: second_report_id}} =
1355 CommonAPI.report(reporter, %{
1356 "account_id" => target_user.id,
1357 "comment" => "I feel very offended",
1358 "status_ids" => [activity.id]
1363 second_report_id: second_report_id
1367 test "requires admin:write:reports scope", %{conn: conn, id: id, admin: admin} do
1368 read_token = insert(:oauth_token, user: admin, scopes: ["admin:read"])
1369 write_token = insert(:oauth_token, user: admin, scopes: ["admin:write:reports"])
1373 |> assign(:token, read_token)
1374 |> patch("/api/pleroma/admin/reports", %{
1375 "reports" => [%{"state" => "resolved", "id" => id}]
1377 |> json_response(403)
1379 assert response == %{
1380 "error" => "Insufficient permissions: admin:write:reports."
1384 |> assign(:token, write_token)
1385 |> patch("/api/pleroma/admin/reports", %{
1386 "reports" => [%{"state" => "resolved", "id" => id}]
1388 |> json_response(:no_content)
1391 test "mark report as resolved", %{conn: conn, id: id, admin: admin} do
1393 |> patch("/api/pleroma/admin/reports", %{
1395 %{"state" => "resolved", "id" => id}
1398 |> json_response(:no_content)
1400 activity = Activity.get_by_id(id)
1401 assert activity.data["state"] == "resolved"
1403 log_entry = Repo.one(ModerationLog)
1405 assert ModerationLog.get_log_entry_message(log_entry) ==
1406 "@#{admin.nickname} updated report ##{id} with 'resolved' state"
1409 test "closes report", %{conn: conn, id: id, admin: admin} do
1411 |> patch("/api/pleroma/admin/reports", %{
1413 %{"state" => "closed", "id" => id}
1416 |> json_response(:no_content)
1418 activity = Activity.get_by_id(id)
1419 assert activity.data["state"] == "closed"
1421 log_entry = Repo.one(ModerationLog)
1423 assert ModerationLog.get_log_entry_message(log_entry) ==
1424 "@#{admin.nickname} updated report ##{id} with 'closed' state"
1427 test "returns 400 when state is unknown", %{conn: conn, id: id} do
1430 |> patch("/api/pleroma/admin/reports", %{
1432 %{"state" => "test", "id" => id}
1436 assert hd(json_response(conn, :bad_request))["error"] == "Unsupported state"
1439 test "returns 404 when report is not exist", %{conn: conn} do
1442 |> patch("/api/pleroma/admin/reports", %{
1444 %{"state" => "closed", "id" => "test"}
1448 assert hd(json_response(conn, :bad_request))["error"] == "not_found"
1451 test "updates state of multiple reports", %{
1455 second_report_id: second_report_id
1458 |> patch("/api/pleroma/admin/reports", %{
1460 %{"state" => "resolved", "id" => id},
1461 %{"state" => "closed", "id" => second_report_id}
1464 |> json_response(:no_content)
1466 activity = Activity.get_by_id(id)
1467 second_activity = Activity.get_by_id(second_report_id)
1468 assert activity.data["state"] == "resolved"
1469 assert second_activity.data["state"] == "closed"
1471 [first_log_entry, second_log_entry] = Repo.all(ModerationLog)
1473 assert ModerationLog.get_log_entry_message(first_log_entry) ==
1474 "@#{admin.nickname} updated report ##{id} with 'resolved' state"
1476 assert ModerationLog.get_log_entry_message(second_log_entry) ==
1477 "@#{admin.nickname} updated report ##{second_report_id} with 'closed' state"
1481 describe "GET /api/pleroma/admin/reports" do
1482 test "returns empty response when no reports created", %{conn: conn} do
1485 |> get("/api/pleroma/admin/reports")
1486 |> json_response(:ok)
1488 assert Enum.empty?(response["reports"])
1489 assert response["total"] == 0
1492 test "returns reports", %{conn: conn} do
1493 [reporter, target_user] = insert_pair(:user)
1494 activity = insert(:note_activity, user: target_user)
1496 {:ok, %{id: report_id}} =
1497 CommonAPI.report(reporter, %{
1498 "account_id" => target_user.id,
1499 "comment" => "I feel offended",
1500 "status_ids" => [activity.id]
1505 |> get("/api/pleroma/admin/reports")
1506 |> json_response(:ok)
1508 [report] = response["reports"]
1510 assert length(response["reports"]) == 1
1511 assert report["id"] == report_id
1513 assert response["total"] == 1
1516 test "returns reports with specified state", %{conn: conn} do
1517 [reporter, target_user] = insert_pair(:user)
1518 activity = insert(:note_activity, user: target_user)
1520 {:ok, %{id: first_report_id}} =
1521 CommonAPI.report(reporter, %{
1522 "account_id" => target_user.id,
1523 "comment" => "I feel offended",
1524 "status_ids" => [activity.id]
1527 {:ok, %{id: second_report_id}} =
1528 CommonAPI.report(reporter, %{
1529 "account_id" => target_user.id,
1530 "comment" => "I don't like this user"
1533 CommonAPI.update_report_state(second_report_id, "closed")
1537 |> get("/api/pleroma/admin/reports", %{
1540 |> json_response(:ok)
1542 [open_report] = response["reports"]
1544 assert length(response["reports"]) == 1
1545 assert open_report["id"] == first_report_id
1547 assert response["total"] == 1
1551 |> get("/api/pleroma/admin/reports", %{
1554 |> json_response(:ok)
1556 [closed_report] = response["reports"]
1558 assert length(response["reports"]) == 1
1559 assert closed_report["id"] == second_report_id
1561 assert response["total"] == 1
1565 |> get("/api/pleroma/admin/reports", %{
1566 "state" => "resolved"
1568 |> json_response(:ok)
1570 assert Enum.empty?(response["reports"])
1571 assert response["total"] == 0
1574 test "returns 403 when requested by a non-admin" do
1575 user = insert(:user)
1576 token = insert(:oauth_token, user: user)
1580 |> assign(:user, user)
1581 |> assign(:token, token)
1582 |> get("/api/pleroma/admin/reports")
1584 assert json_response(conn, :forbidden) ==
1585 %{"error" => "User is not an admin or OAuth admin scope is not granted."}
1588 test "returns 403 when requested by anonymous" do
1589 conn = get(build_conn(), "/api/pleroma/admin/reports")
1591 assert json_response(conn, :forbidden) == %{"error" => "Invalid credentials."}
1595 describe "GET /api/pleroma/admin/grouped_reports" do
1597 [reporter, target_user] = insert_pair(:user)
1599 date1 = (DateTime.to_unix(DateTime.utc_now()) + 1000) |> DateTime.from_unix!()
1600 date2 = (DateTime.to_unix(DateTime.utc_now()) + 2000) |> DateTime.from_unix!()
1601 date3 = (DateTime.to_unix(DateTime.utc_now()) + 3000) |> DateTime.from_unix!()
1604 insert(:note_activity, user: target_user, data_attrs: %{"published" => date1})
1607 insert(:note_activity, user: target_user, data_attrs: %{"published" => date2})
1610 insert(:note_activity, user: target_user, data_attrs: %{"published" => date3})
1612 {:ok, first_report} =
1613 CommonAPI.report(reporter, %{
1614 "account_id" => target_user.id,
1615 "status_ids" => [first_status.id, second_status.id, third_status.id]
1618 {:ok, second_report} =
1619 CommonAPI.report(reporter, %{
1620 "account_id" => target_user.id,
1621 "status_ids" => [first_status.id, second_status.id]
1624 {:ok, third_report} =
1625 CommonAPI.report(reporter, %{
1626 "account_id" => target_user.id,
1627 "status_ids" => [first_status.id]
1631 first_status: Activity.get_by_ap_id_with_object(first_status.data["id"]),
1632 second_status: Activity.get_by_ap_id_with_object(second_status.data["id"]),
1633 third_status: Activity.get_by_ap_id_with_object(third_status.data["id"]),
1634 first_report: first_report,
1635 first_status_reports: [first_report, second_report, third_report],
1636 second_status_reports: [first_report, second_report],
1637 third_status_reports: [first_report],
1638 target_user: target_user,
1643 test "returns reports grouped by status", %{
1645 first_status: first_status,
1646 second_status: second_status,
1647 third_status: third_status,
1648 first_status_reports: first_status_reports,
1649 second_status_reports: second_status_reports,
1650 third_status_reports: third_status_reports,
1651 target_user: target_user,
1656 |> get("/api/pleroma/admin/grouped_reports")
1657 |> json_response(:ok)
1659 assert length(response["reports"]) == 3
1661 first_group = Enum.find(response["reports"], &(&1["status"]["id"] == first_status.id))
1663 second_group = Enum.find(response["reports"], &(&1["status"]["id"] == second_status.id))
1665 third_group = Enum.find(response["reports"], &(&1["status"]["id"] == third_status.id))
1667 assert length(first_group["reports"]) == 3
1668 assert length(second_group["reports"]) == 2
1669 assert length(third_group["reports"]) == 1
1671 assert first_group["date"] ==
1672 Enum.max_by(first_status_reports, fn act ->
1673 NaiveDateTime.from_iso8601!(act.data["published"])
1674 end).data["published"]
1676 assert first_group["status"] ==
1678 stringify_keys(StatusView.render("show.json", %{activity: first_status})),
1683 assert(first_group["account"]["id"] == target_user.id)
1685 assert length(first_group["actors"]) == 1
1686 assert hd(first_group["actors"])["id"] == reporter.id
1688 assert Enum.map(first_group["reports"], & &1["id"]) --
1689 Enum.map(first_status_reports, & &1.id) == []
1691 assert second_group["date"] ==
1692 Enum.max_by(second_status_reports, fn act ->
1693 NaiveDateTime.from_iso8601!(act.data["published"])
1694 end).data["published"]
1696 assert second_group["status"] ==
1698 stringify_keys(StatusView.render("show.json", %{activity: second_status})),
1703 assert second_group["account"]["id"] == target_user.id
1705 assert length(second_group["actors"]) == 1
1706 assert hd(second_group["actors"])["id"] == reporter.id
1708 assert Enum.map(second_group["reports"], & &1["id"]) --
1709 Enum.map(second_status_reports, & &1.id) == []
1711 assert third_group["date"] ==
1712 Enum.max_by(third_status_reports, fn act ->
1713 NaiveDateTime.from_iso8601!(act.data["published"])
1714 end).data["published"]
1716 assert third_group["status"] ==
1718 stringify_keys(StatusView.render("show.json", %{activity: third_status})),
1723 assert third_group["account"]["id"] == target_user.id
1725 assert length(third_group["actors"]) == 1
1726 assert hd(third_group["actors"])["id"] == reporter.id
1728 assert Enum.map(third_group["reports"], & &1["id"]) --
1729 Enum.map(third_status_reports, & &1.id) == []
1732 test "reopened report renders status data", %{
1734 first_report: first_report,
1735 first_status: first_status
1737 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1741 |> get("/api/pleroma/admin/grouped_reports")
1742 |> json_response(:ok)
1744 first_group = Enum.find(response["reports"], &(&1["status"]["id"] == first_status.id))
1746 assert first_group["status"] ==
1748 stringify_keys(StatusView.render("show.json", %{activity: first_status})),
1754 test "reopened report does not render status data if status has been deleted", %{
1756 first_report: first_report,
1757 first_status: first_status,
1758 target_user: target_user
1760 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1761 {:ok, _} = CommonAPI.delete(first_status.id, target_user)
1763 refute Activity.get_by_ap_id(first_status.id)
1767 |> get("/api/pleroma/admin/grouped_reports")
1768 |> json_response(:ok)
1770 assert Enum.find(response["reports"], &(&1["status"]["deleted"] == true))["status"][
1774 assert length(Enum.filter(response["reports"], &(&1["status"]["deleted"] == false))) == 2
1777 test "account not empty if status was deleted", %{
1779 first_report: first_report,
1780 first_status: first_status,
1781 target_user: target_user
1783 {:ok, _} = CommonAPI.update_report_state(first_report.id, "resolved")
1784 {:ok, _} = CommonAPI.delete(first_status.id, target_user)
1786 refute Activity.get_by_ap_id(first_status.id)
1790 |> get("/api/pleroma/admin/grouped_reports")
1791 |> json_response(:ok)
1793 assert Enum.find(response["reports"], &(&1["status"]["deleted"] == true))["account"]
1797 describe "PUT /api/pleroma/admin/statuses/:id" do
1799 activity = insert(:note_activity)
1804 test "toggle sensitive flag", %{conn: conn, id: id, admin: admin} do
1807 |> put("/api/pleroma/admin/statuses/#{id}", %{"sensitive" => "true"})
1808 |> json_response(:ok)
1810 assert response["sensitive"]
1812 log_entry = Repo.one(ModerationLog)
1814 assert ModerationLog.get_log_entry_message(log_entry) ==
1815 "@#{admin.nickname} updated status ##{id}, set sensitive: 'true'"
1819 |> put("/api/pleroma/admin/statuses/#{id}", %{"sensitive" => "false"})
1820 |> json_response(:ok)
1822 refute response["sensitive"]
1825 test "change visibility flag", %{conn: conn, id: id, admin: admin} do
1828 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "public"})
1829 |> json_response(:ok)
1831 assert response["visibility"] == "public"
1833 log_entry = Repo.one(ModerationLog)
1835 assert ModerationLog.get_log_entry_message(log_entry) ==
1836 "@#{admin.nickname} updated status ##{id}, set visibility: 'public'"
1840 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "private"})
1841 |> json_response(:ok)
1843 assert response["visibility"] == "private"
1847 |> put("/api/pleroma/admin/statuses/#{id}", %{"visibility" => "unlisted"})
1848 |> json_response(:ok)
1850 assert response["visibility"] == "unlisted"
1853 test "returns 400 when visibility is unknown", %{conn: conn, id: id} do
1854 conn = put(conn, "/api/pleroma/admin/statuses/#{id}", %{"visibility" => "test"})
1856 assert json_response(conn, :bad_request) == "Unsupported visibility"
1860 describe "DELETE /api/pleroma/admin/statuses/:id" do
1862 activity = insert(:note_activity)
1867 test "deletes status", %{conn: conn, id: id, admin: admin} do
1869 |> delete("/api/pleroma/admin/statuses/#{id}")
1870 |> json_response(:ok)
1872 refute Activity.get_by_id(id)
1874 log_entry = Repo.one(ModerationLog)
1876 assert ModerationLog.get_log_entry_message(log_entry) ==
1877 "@#{admin.nickname} deleted status ##{id}"
1880 test "returns error when status is not exist", %{conn: conn} do
1881 conn = delete(conn, "/api/pleroma/admin/statuses/test")
1883 assert json_response(conn, :bad_request) == "Could not delete"
1887 describe "GET /api/pleroma/admin/config" do
1888 clear_config(:configurable_from_database) do
1889 Pleroma.Config.put(:configurable_from_database, true)
1892 test "when configuration from database is off", %{conn: conn} do
1893 initial = Pleroma.Config.get(:configurable_from_database)
1894 Pleroma.Config.put(:configurable_from_database, false)
1895 on_exit(fn -> Pleroma.Config.put(:configurable_from_database, initial) end)
1896 conn = get(conn, "/api/pleroma/admin/config")
1898 assert json_response(conn, 400) ==
1899 "To use this endpoint you need to enable configuration from database."
1902 test "without any settings in db", %{conn: conn} do
1903 conn = get(conn, "/api/pleroma/admin/config")
1905 assert json_response(conn, 400) ==
1906 "To use configuration from database migrate your settings to database."
1909 test "with settings only in db", %{conn: conn} do
1910 config1 = insert(:config)
1911 config2 = insert(:config)
1913 conn = get(conn, "/api/pleroma/admin/config", %{"only_db" => true})
1918 "group" => ":pleroma",
1923 "group" => ":pleroma",
1928 } = json_response(conn, 200)
1930 assert key1 == config1.key
1931 assert key2 == config2.key
1934 test "db is added to settings that are in db", %{conn: conn} do
1935 _config = insert(:config, key: ":instance", value: ConfigDB.to_binary(name: "Some name"))
1937 %{"configs" => configs} =
1939 |> get("/api/pleroma/admin/config")
1940 |> json_response(200)
1943 Enum.filter(configs, fn %{"group" => group, "key" => key} ->
1944 group == ":pleroma" and key == ":instance"
1947 assert instance_config["db"] == [":name"]
1950 test "merged default setting with db settings", %{conn: conn} do
1951 config1 = insert(:config)
1952 config2 = insert(:config)
1956 value: ConfigDB.to_binary(k1: :v1, k2: :v2)
1959 %{"configs" => configs} =
1961 |> get("/api/pleroma/admin/config")
1962 |> json_response(200)
1964 assert length(configs) > 3
1967 Enum.filter(configs, fn %{"group" => group, "key" => key} ->
1968 group == ":pleroma" and key in [config1.key, config2.key, config3.key]
1971 assert length(received_configs) == 3
1975 |> ConfigDB.from_binary()
1977 |> ConfigDB.convert()
1979 Enum.each(received_configs, fn %{"value" => value, "db" => db} ->
1980 assert db in [[config1.key], [config2.key], db_keys]
1983 ConfigDB.from_binary_with_convert(config1.value),
1984 ConfigDB.from_binary_with_convert(config2.value),
1985 ConfigDB.from_binary_with_convert(config3.value)
1990 test "subkeys with full update right merge", %{conn: conn} do
1994 value: ConfigDB.to_binary(groups: [a: 1, b: 2], key: [a: 1])
2000 value: ConfigDB.to_binary(mascots: [a: 1, b: 2], key: [a: 1])
2003 %{"configs" => configs} =
2005 |> get("/api/pleroma/admin/config")
2006 |> json_response(200)
2009 Enum.filter(configs, fn %{"group" => group, "key" => key} ->
2010 group == ":pleroma" and key in [config1.key, config2.key]
2013 emoji = Enum.find(vals, fn %{"key" => key} -> key == ":emoji" end)
2014 assets = Enum.find(vals, fn %{"key" => key} -> key == ":assets" end)
2016 emoji_val = ConfigDB.transform_with_out_binary(emoji["value"])
2017 assets_val = ConfigDB.transform_with_out_binary(assets["value"])
2019 assert emoji_val[:groups] == [a: 1, b: 2]
2020 assert assets_val[:mascots] == [a: 1, b: 2]
2024 test "POST /api/pleroma/admin/config error", %{conn: conn} do
2025 conn = post(conn, "/api/pleroma/admin/config", %{"configs" => []})
2027 assert json_response(conn, 400) ==
2028 "To use this endpoint you need to enable configuration from database."
2031 describe "POST /api/pleroma/admin/config" do
2033 http = Application.get_env(:pleroma, :http)
2036 Application.delete_env(:pleroma, :key1)
2037 Application.delete_env(:pleroma, :key2)
2038 Application.delete_env(:pleroma, :key3)
2039 Application.delete_env(:pleroma, :key4)
2040 Application.delete_env(:pleroma, :keyaa1)
2041 Application.delete_env(:pleroma, :keyaa2)
2042 Application.delete_env(:pleroma, Pleroma.Web.Endpoint.NotReal)
2043 Application.delete_env(:pleroma, Pleroma.Captcha.NotReal)
2044 Application.put_env(:pleroma, :http, http)
2045 Application.put_env(:tesla, :adapter, Tesla.Mock)
2046 :ok = File.rm("config/test.exported_from_db.secret.exs")
2050 clear_config(:configurable_from_database) do
2051 Pleroma.Config.put(:configurable_from_database, true)
2054 @tag capture_log: true
2055 test "create new config setting in db", %{conn: conn} do
2056 ueberauth = Application.get_env(:ueberauth, Ueberauth)
2057 on_exit(fn -> Application.put_env(:ueberauth, Ueberauth, ueberauth) end)
2060 post(conn, "/api/pleroma/admin/config", %{
2062 %{group: ":pleroma", key: ":key1", value: "value1"},
2064 group: ":ueberauth",
2066 value: [%{"tuple" => [":consumer_secret", "aaaa"]}]
2072 ":nested_1" => "nested_value1",
2074 %{":nested_22" => "nested_value222"},
2075 %{":nested_33" => %{":nested_44" => "nested_444"}}
2083 %{"nested_3" => ":nested_3", "nested_33" => "nested_33"},
2084 %{"nested_4" => true}
2090 value: %{":nested_5" => ":upload", "endpoint" => "https://example.com"}
2095 value: %{"tuple" => ["string", "Pleroma.Captcha.NotReal", []]}
2100 assert json_response(conn, 200) == %{
2103 "group" => ":pleroma",
2105 "value" => "value1",
2109 "group" => ":ueberauth",
2110 "key" => "Ueberauth",
2111 "value" => [%{"tuple" => [":consumer_secret", "aaaa"]}],
2112 "db" => [":consumer_secret"]
2115 "group" => ":pleroma",
2118 ":nested_1" => "nested_value1",
2120 %{":nested_22" => "nested_value222"},
2121 %{":nested_33" => %{":nested_44" => "nested_444"}}
2127 "group" => ":pleroma",
2130 %{"nested_3" => ":nested_3", "nested_33" => "nested_33"},
2131 %{"nested_4" => true}
2136 "group" => ":pleroma",
2138 "value" => %{"endpoint" => "https://example.com", ":nested_5" => ":upload"},
2144 "value" => %{"tuple" => ["string", "Pleroma.Captcha.NotReal", []]},
2150 assert Application.get_env(:pleroma, :key1) == "value1"
2152 assert Application.get_env(:pleroma, :key2) == %{
2153 nested_1: "nested_value1",
2155 %{nested_22: "nested_value222"},
2156 %{nested_33: %{nested_44: "nested_444"}}
2160 assert Application.get_env(:pleroma, :key3) == [
2161 %{"nested_3" => :nested_3, "nested_33" => "nested_33"},
2162 %{"nested_4" => true}
2165 assert Application.get_env(:pleroma, :key4) == %{
2166 "endpoint" => "https://example.com",
2170 assert Application.get_env(:idna, :key5) == {"string", Pleroma.Captcha.NotReal, []}
2173 test "save config setting without key", %{conn: conn} do
2174 level = Application.get_env(:quack, :level)
2175 meta = Application.get_env(:quack, :meta)
2176 webhook_url = Application.get_env(:quack, :webhook_url)
2179 Application.put_env(:quack, :level, level)
2180 Application.put_env(:quack, :meta, meta)
2181 Application.put_env(:quack, :webhook_url, webhook_url)
2185 post(conn, "/api/pleroma/admin/config", %{
2199 key: ":webhook_url",
2200 value: "https://hooks.slack.com/services/KEY"
2205 assert json_response(conn, 200) == %{
2208 "group" => ":quack",
2214 "group" => ":quack",
2216 "value" => [":none"],
2220 "group" => ":quack",
2221 "key" => ":webhook_url",
2222 "value" => "https://hooks.slack.com/services/KEY",
2223 "db" => [":webhook_url"]
2228 assert Application.get_env(:quack, :level) == :info
2229 assert Application.get_env(:quack, :meta) == [:none]
2230 assert Application.get_env(:quack, :webhook_url) == "https://hooks.slack.com/services/KEY"
2233 test "saving config with partial update", %{conn: conn} do
2234 config = insert(:config, key: ":key1", value: :erlang.term_to_binary(key1: 1, key2: 2))
2237 post(conn, "/api/pleroma/admin/config", %{
2239 %{group: config.group, key: config.key, value: [%{"tuple" => [":key3", 3]}]}
2243 assert json_response(conn, 200) == %{
2246 "group" => ":pleroma",
2249 %{"tuple" => [":key1", 1]},
2250 %{"tuple" => [":key2", 2]},
2251 %{"tuple" => [":key3", 3]}
2253 "db" => [":key1", ":key2", ":key3"]
2259 test "saving config with nested merge", %{conn: conn} do
2261 insert(:config, key: ":key1", value: :erlang.term_to_binary(key1: 1, key2: [k1: 1, k2: 2]))
2264 post(conn, "/api/pleroma/admin/config", %{
2267 group: config.group,
2270 %{"tuple" => [":key3", 3]},
2275 %{"tuple" => [":k2", 1]},
2276 %{"tuple" => [":k3", 3]}
2285 assert json_response(conn, 200) == %{
2288 "group" => ":pleroma",
2291 %{"tuple" => [":key1", 1]},
2292 %{"tuple" => [":key3", 3]},
2297 %{"tuple" => [":k1", 1]},
2298 %{"tuple" => [":k2", 1]},
2299 %{"tuple" => [":k3", 3]}
2304 "db" => [":key1", ":key3", ":key2"]
2310 test "saving special atoms", %{conn: conn} do
2312 post(conn, "/api/pleroma/admin/config", %{
2315 "group" => ":pleroma",
2321 [%{"tuple" => [":versions", [":tlsv1", ":tlsv1.1", ":tlsv1.2"]]}]
2329 assert json_response(conn, 200) == %{
2332 "group" => ":pleroma",
2338 [%{"tuple" => [":versions", [":tlsv1", ":tlsv1.1", ":tlsv1.2"]]}]
2342 "db" => [":ssl_options"]
2347 assert Application.get_env(:pleroma, :key1) == [
2348 ssl_options: [versions: [:tlsv1, :"tlsv1.1", :"tlsv1.2"]]
2352 test "saving full setting if value is in full_key_update list", %{conn: conn} do
2353 backends = Application.get_env(:logger, :backends)
2354 on_exit(fn -> Application.put_env(:logger, :backends, backends) end)
2360 value: :erlang.term_to_binary([])
2364 post(conn, "/api/pleroma/admin/config", %{
2367 group: config.group,
2369 value: [":console", %{"tuple" => ["ExSyslogger", ":ex_syslogger"]}]
2374 assert json_response(conn, 200) == %{
2377 "group" => ":logger",
2378 "key" => ":backends",
2381 %{"tuple" => ["ExSyslogger", ":ex_syslogger"]}
2383 "db" => [":backends"]
2388 assert Application.get_env(:logger, :backends) == [
2390 {ExSyslogger, :ex_syslogger}
2393 ExUnit.CaptureLog.capture_log(fn ->
2395 Logger.warn("Ooops...")
2399 test "saving full setting if value is not keyword", %{conn: conn} do
2404 value: :erlang.term_to_binary(Tesla.Adapter.Hackey)
2408 post(conn, "/api/pleroma/admin/config", %{
2410 %{group: config.group, key: config.key, value: "Tesla.Adapter.Httpc"}
2414 assert json_response(conn, 200) == %{
2417 "group" => ":tesla",
2418 "key" => ":adapter",
2419 "value" => "Tesla.Adapter.Httpc",
2420 "db" => [":adapter"]
2426 test "update config setting & delete with fallback to default value", %{
2431 ueberauth = Application.get_env(:ueberauth, Ueberauth)
2432 config1 = insert(:config, key: ":keyaa1")
2433 config2 = insert(:config, key: ":keyaa2")
2437 group: ":ueberauth",
2442 post(conn, "/api/pleroma/admin/config", %{
2444 %{group: config1.group, key: config1.key, value: "another_value"},
2445 %{group: config2.group, key: config2.key, value: "another_value"}
2449 assert json_response(conn, 200) == %{
2452 "group" => ":pleroma",
2453 "key" => config1.key,
2454 "value" => "another_value",
2458 "group" => ":pleroma",
2459 "key" => config2.key,
2460 "value" => "another_value",
2466 assert Application.get_env(:pleroma, :keyaa1) == "another_value"
2467 assert Application.get_env(:pleroma, :keyaa2) == "another_value"
2468 assert Application.get_env(:ueberauth, Ueberauth) == ConfigDB.from_binary(config3.value)
2472 |> assign(:user, admin)
2473 |> assign(:token, token)
2474 |> post("/api/pleroma/admin/config", %{
2476 %{group: config2.group, key: config2.key, delete: true},
2478 group: ":ueberauth",
2485 assert json_response(conn, 200) == %{
2489 assert Application.get_env(:ueberauth, Ueberauth) == ueberauth
2490 refute Keyword.has_key?(Application.get_all_env(:pleroma), :keyaa2)
2493 test "common config example", %{conn: conn} do
2494 adapter = Application.get_env(:tesla, :adapter)
2495 on_exit(fn -> Application.put_env(:tesla, :adapter, adapter) end)
2498 post(conn, "/api/pleroma/admin/config", %{
2501 "group" => ":pleroma",
2502 "key" => "Pleroma.Captcha.NotReal",
2504 %{"tuple" => [":enabled", false]},
2505 %{"tuple" => [":method", "Pleroma.Captcha.Kocaptcha"]},
2506 %{"tuple" => [":seconds_valid", 60]},
2507 %{"tuple" => [":path", ""]},
2508 %{"tuple" => [":key1", nil]},
2509 %{"tuple" => [":partial_chain", "&:hackney_connect.partial_chain/1"]},
2510 %{"tuple" => [":regex1", "~r/https:\/\/example.com/"]},
2511 %{"tuple" => [":regex2", "~r/https:\/\/example.com/u"]},
2512 %{"tuple" => [":regex3", "~r/https:\/\/example.com/i"]},
2513 %{"tuple" => [":regex4", "~r/https:\/\/example.com/s"]},
2514 %{"tuple" => [":name", "Pleroma"]}
2518 "group" => ":tesla",
2519 "key" => ":adapter",
2520 "value" => "Tesla.Adapter.Httpc"
2525 assert Application.get_env(:tesla, :adapter) == Tesla.Adapter.Httpc
2526 assert Pleroma.Config.get([Pleroma.Captcha.NotReal, :name]) == "Pleroma"
2528 assert json_response(conn, 200) == %{
2531 "group" => ":pleroma",
2532 "key" => "Pleroma.Captcha.NotReal",
2534 %{"tuple" => [":enabled", false]},
2535 %{"tuple" => [":method", "Pleroma.Captcha.Kocaptcha"]},
2536 %{"tuple" => [":seconds_valid", 60]},
2537 %{"tuple" => [":path", ""]},
2538 %{"tuple" => [":key1", nil]},
2539 %{"tuple" => [":partial_chain", "&:hackney_connect.partial_chain/1"]},
2540 %{"tuple" => [":regex1", "~r/https:\\/\\/example.com/"]},
2541 %{"tuple" => [":regex2", "~r/https:\\/\\/example.com/u"]},
2542 %{"tuple" => [":regex3", "~r/https:\\/\\/example.com/i"]},
2543 %{"tuple" => [":regex4", "~r/https:\\/\\/example.com/s"]},
2544 %{"tuple" => [":name", "Pleroma"]}
2561 "group" => ":tesla",
2562 "key" => ":adapter",
2563 "value" => "Tesla.Adapter.Httpc",
2564 "db" => [":adapter"]
2570 test "tuples with more than two values", %{conn: conn} do
2572 post(conn, "/api/pleroma/admin/config", %{
2575 "group" => ":pleroma",
2576 "key" => "Pleroma.Web.Endpoint.NotReal",
2592 "/api/v1/streaming",
2593 "Pleroma.Web.MastodonAPI.WebsocketHandler",
2600 "Phoenix.Endpoint.CowboyWebSocket",
2603 "Phoenix.Transports.WebSocket",
2606 "Pleroma.Web.Endpoint",
2607 "Pleroma.Web.UserSocket",
2618 "Phoenix.Endpoint.Cowboy2Handler",
2619 %{"tuple" => ["Pleroma.Web.Endpoint", []]}
2636 assert json_response(conn, 200) == %{
2639 "group" => ":pleroma",
2640 "key" => "Pleroma.Web.Endpoint.NotReal",
2656 "/api/v1/streaming",
2657 "Pleroma.Web.MastodonAPI.WebsocketHandler",
2664 "Phoenix.Endpoint.CowboyWebSocket",
2667 "Phoenix.Transports.WebSocket",
2670 "Pleroma.Web.Endpoint",
2671 "Pleroma.Web.UserSocket",
2682 "Phoenix.Endpoint.Cowboy2Handler",
2683 %{"tuple" => ["Pleroma.Web.Endpoint", []]}
2702 test "settings with nesting map", %{conn: conn} do
2704 post(conn, "/api/pleroma/admin/config", %{
2707 "group" => ":pleroma",
2710 %{"tuple" => [":key2", "some_val"]},
2715 ":max_options" => 20,
2716 ":max_option_chars" => 200,
2717 ":min_expiration" => 0,
2718 ":max_expiration" => 31_536_000,
2720 ":max_options" => 20,
2721 ":max_option_chars" => 200,
2722 ":min_expiration" => 0,
2723 ":max_expiration" => 31_536_000
2733 assert json_response(conn, 200) ==
2737 "group" => ":pleroma",
2740 %{"tuple" => [":key2", "some_val"]},
2745 ":max_expiration" => 31_536_000,
2746 ":max_option_chars" => 200,
2747 ":max_options" => 20,
2748 ":min_expiration" => 0,
2750 ":max_expiration" => 31_536_000,
2751 ":max_option_chars" => 200,
2752 ":max_options" => 20,
2753 ":min_expiration" => 0
2759 "db" => [":key2", ":key3"]
2765 test "value as map", %{conn: conn} do
2767 post(conn, "/api/pleroma/admin/config", %{
2770 "group" => ":pleroma",
2772 "value" => %{"key" => "some_val"}
2777 assert json_response(conn, 200) ==
2781 "group" => ":pleroma",
2783 "value" => %{"key" => "some_val"},
2790 test "queues key as atom", %{conn: conn} do
2792 post(conn, "/api/pleroma/admin/config", %{
2798 %{"tuple" => [":federator_incoming", 50]},
2799 %{"tuple" => [":federator_outgoing", 50]},
2800 %{"tuple" => [":web_push", 50]},
2801 %{"tuple" => [":mailer", 10]},
2802 %{"tuple" => [":transmogrifier", 20]},
2803 %{"tuple" => [":scheduled_activities", 10]},
2804 %{"tuple" => [":background", 5]}
2810 assert json_response(conn, 200) == %{
2816 %{"tuple" => [":federator_incoming", 50]},
2817 %{"tuple" => [":federator_outgoing", 50]},
2818 %{"tuple" => [":web_push", 50]},
2819 %{"tuple" => [":mailer", 10]},
2820 %{"tuple" => [":transmogrifier", 20]},
2821 %{"tuple" => [":scheduled_activities", 10]},
2822 %{"tuple" => [":background", 5]}
2825 ":federator_incoming",
2826 ":federator_outgoing",
2830 ":scheduled_activities",
2838 test "delete part of settings by atom subkeys", %{conn: conn} do
2842 value: :erlang.term_to_binary(subkey1: "val1", subkey2: "val2", subkey3: "val3")
2846 post(conn, "/api/pleroma/admin/config", %{
2849 group: config.group,
2851 subkeys: [":subkey1", ":subkey3"],
2857 assert json_response(conn, 200) == %{
2860 "group" => ":pleroma",
2862 "value" => [%{"tuple" => [":subkey2", "val2"]}],
2863 "db" => [":subkey2"]
2869 test "proxy tuple localhost", %{conn: conn} do
2871 post(conn, "/api/pleroma/admin/config", %{
2877 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "localhost", 1234]}]},
2878 %{"tuple" => [":send_user_agent", false]}
2884 assert json_response(conn, 200) == %{
2887 "group" => ":pleroma",
2890 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "localhost", 1234]}]},
2891 %{"tuple" => [":send_user_agent", false]}
2893 "db" => [":proxy_url", ":send_user_agent"]
2899 test "proxy tuple domain", %{conn: conn} do
2901 post(conn, "/api/pleroma/admin/config", %{
2907 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "domain.com", 1234]}]},
2908 %{"tuple" => [":send_user_agent", false]}
2914 assert json_response(conn, 200) == %{
2917 "group" => ":pleroma",
2920 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "domain.com", 1234]}]},
2921 %{"tuple" => [":send_user_agent", false]}
2923 "db" => [":proxy_url", ":send_user_agent"]
2929 test "proxy tuple ip", %{conn: conn} do
2931 post(conn, "/api/pleroma/admin/config", %{
2937 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "127.0.0.1", 1234]}]},
2938 %{"tuple" => [":send_user_agent", false]}
2944 assert json_response(conn, 200) == %{
2947 "group" => ":pleroma",
2950 %{"tuple" => [":proxy_url", %{"tuple" => [":socks5", "127.0.0.1", 1234]}]},
2951 %{"tuple" => [":send_user_agent", false]}
2953 "db" => [":proxy_url", ":send_user_agent"]
2960 describe "config mix tasks run" do
2962 Mix.shell(Mix.Shell.Quiet)
2965 Mix.shell(Mix.Shell.IO)
2971 clear_config(:configurable_from_database) do
2972 Pleroma.Config.put(:configurable_from_database, true)
2975 clear_config([:feed, :post_title]) do
2976 Pleroma.Config.put([:feed, :post_title], %{max_length: 100, omission: "…"})
2979 test "transfer settings to DB and to file", %{conn: conn} do
2980 assert Repo.all(Pleroma.ConfigDB) == []
2981 Mix.Tasks.Pleroma.Config.migrate_to_db("test/fixtures/config/temp.secret.exs")
2982 assert Repo.aggregate(Pleroma.ConfigDB, :count, :id) > 0
2984 conn = get(conn, "/api/pleroma/admin/config/migrate_from_db")
2986 assert json_response(conn, 200) == %{}
2987 assert Repo.all(Pleroma.ConfigDB) == []
2990 test "returns error if configuration from database is off", %{conn: conn} do
2991 initial = Pleroma.Config.get(:configurable_from_database)
2992 on_exit(fn -> Pleroma.Config.put(:configurable_from_database, initial) end)
2993 Pleroma.Config.put(:configurable_from_database, false)
2995 conn = get(conn, "/api/pleroma/admin/config/migrate_from_db")
2997 assert json_response(conn, 400) ==
2998 "To use this endpoint you need to enable configuration from database."
3000 assert Repo.all(Pleroma.ConfigDB) == []
3004 describe "GET /api/pleroma/admin/users/:nickname/statuses" do
3006 user = insert(:user)
3008 date1 = (DateTime.to_unix(DateTime.utc_now()) + 2000) |> DateTime.from_unix!()
3009 date2 = (DateTime.to_unix(DateTime.utc_now()) + 1000) |> DateTime.from_unix!()
3010 date3 = (DateTime.to_unix(DateTime.utc_now()) + 3000) |> DateTime.from_unix!()
3012 insert(:note_activity, user: user, published: date1)
3013 insert(:note_activity, user: user, published: date2)
3014 insert(:note_activity, user: user, published: date3)
3019 test "renders user's statuses", %{conn: conn, user: user} do
3020 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses")
3022 assert json_response(conn, 200) |> length() == 3
3025 test "renders user's statuses with a limit", %{conn: conn, user: user} do
3026 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses?page_size=2")
3028 assert json_response(conn, 200) |> length() == 2
3031 test "doesn't return private statuses by default", %{conn: conn, user: user} do
3032 {:ok, _private_status} =
3033 CommonAPI.post(user, %{"status" => "private", "visibility" => "private"})
3035 {:ok, _public_status} =
3036 CommonAPI.post(user, %{"status" => "public", "visibility" => "public"})
3038 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses")
3040 assert json_response(conn, 200) |> length() == 4
3043 test "returns private statuses with godmode on", %{conn: conn, user: user} do
3044 {:ok, _private_status} =
3045 CommonAPI.post(user, %{"status" => "private", "visibility" => "private"})
3047 {:ok, _public_status} =
3048 CommonAPI.post(user, %{"status" => "public", "visibility" => "public"})
3050 conn = get(conn, "/api/pleroma/admin/users/#{user.nickname}/statuses?godmode=true")
3052 assert json_response(conn, 200) |> length() == 5
3056 describe "GET /api/pleroma/admin/moderation_log" do
3058 moderator = insert(:user, is_moderator: true)
3060 %{moderator: moderator}
3063 test "returns the log", %{conn: conn, admin: admin} do
3064 Repo.insert(%ModerationLog{
3068 "nickname" => admin.nickname,
3071 action: "relay_follow",
3072 target: "https://example.org/relay"
3074 inserted_at: NaiveDateTime.truncate(~N[2017-08-15 15:47:06.597036], :second)
3077 Repo.insert(%ModerationLog{
3081 "nickname" => admin.nickname,
3084 action: "relay_unfollow",
3085 target: "https://example.org/relay"
3087 inserted_at: NaiveDateTime.truncate(~N[2017-08-16 15:47:06.597036], :second)
3090 conn = get(conn, "/api/pleroma/admin/moderation_log")
3092 response = json_response(conn, 200)
3093 [first_entry, second_entry] = response["items"]
3095 assert response["total"] == 2
3096 assert first_entry["data"]["action"] == "relay_unfollow"
3098 assert first_entry["message"] ==
3099 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
3101 assert second_entry["data"]["action"] == "relay_follow"
3103 assert second_entry["message"] ==
3104 "@#{admin.nickname} followed relay: https://example.org/relay"
3107 test "returns the log with pagination", %{conn: conn, admin: admin} do
3108 Repo.insert(%ModerationLog{
3112 "nickname" => admin.nickname,
3115 action: "relay_follow",
3116 target: "https://example.org/relay"
3118 inserted_at: NaiveDateTime.truncate(~N[2017-08-15 15:47:06.597036], :second)
3121 Repo.insert(%ModerationLog{
3125 "nickname" => admin.nickname,
3128 action: "relay_unfollow",
3129 target: "https://example.org/relay"
3131 inserted_at: NaiveDateTime.truncate(~N[2017-08-16 15:47:06.597036], :second)
3134 conn1 = get(conn, "/api/pleroma/admin/moderation_log?page_size=1&page=1")
3136 response1 = json_response(conn1, 200)
3137 [first_entry] = response1["items"]
3139 assert response1["total"] == 2
3140 assert response1["items"] |> length() == 1
3141 assert first_entry["data"]["action"] == "relay_unfollow"
3143 assert first_entry["message"] ==
3144 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
3146 conn2 = get(conn, "/api/pleroma/admin/moderation_log?page_size=1&page=2")
3148 response2 = json_response(conn2, 200)
3149 [second_entry] = response2["items"]
3151 assert response2["total"] == 2
3152 assert response2["items"] |> length() == 1
3153 assert second_entry["data"]["action"] == "relay_follow"
3155 assert second_entry["message"] ==
3156 "@#{admin.nickname} followed relay: https://example.org/relay"
3159 test "filters log by date", %{conn: conn, admin: admin} do
3160 first_date = "2017-08-15T15:47:06Z"
3161 second_date = "2017-08-20T15:47:06Z"
3163 Repo.insert(%ModerationLog{
3167 "nickname" => admin.nickname,
3170 action: "relay_follow",
3171 target: "https://example.org/relay"
3173 inserted_at: NaiveDateTime.from_iso8601!(first_date)
3176 Repo.insert(%ModerationLog{
3180 "nickname" => admin.nickname,
3183 action: "relay_unfollow",
3184 target: "https://example.org/relay"
3186 inserted_at: NaiveDateTime.from_iso8601!(second_date)
3192 "/api/pleroma/admin/moderation_log?start_date=#{second_date}"
3195 response1 = json_response(conn1, 200)
3196 [first_entry] = response1["items"]
3198 assert response1["total"] == 1
3199 assert first_entry["data"]["action"] == "relay_unfollow"
3201 assert first_entry["message"] ==
3202 "@#{admin.nickname} unfollowed relay: https://example.org/relay"
3205 test "returns log filtered by user", %{conn: conn, admin: admin, moderator: moderator} do
3206 Repo.insert(%ModerationLog{
3210 "nickname" => admin.nickname,
3213 action: "relay_follow",
3214 target: "https://example.org/relay"
3218 Repo.insert(%ModerationLog{
3221 "id" => moderator.id,
3222 "nickname" => moderator.nickname,
3225 action: "relay_unfollow",
3226 target: "https://example.org/relay"
3230 conn1 = get(conn, "/api/pleroma/admin/moderation_log?user_id=#{moderator.id}")
3232 response1 = json_response(conn1, 200)
3233 [first_entry] = response1["items"]
3235 assert response1["total"] == 1
3236 assert get_in(first_entry, ["data", "actor", "id"]) == moderator.id
3239 test "returns log filtered by search", %{conn: conn, moderator: moderator} do
3240 ModerationLog.insert_log(%{
3242 action: "relay_follow",
3243 target: "https://example.org/relay"
3246 ModerationLog.insert_log(%{
3248 action: "relay_unfollow",
3249 target: "https://example.org/relay"
3252 conn1 = get(conn, "/api/pleroma/admin/moderation_log?search=unfo")
3254 response1 = json_response(conn1, 200)
3255 [first_entry] = response1["items"]
3257 assert response1["total"] == 1
3259 assert get_in(first_entry, ["data", "message"]) ==
3260 "@#{moderator.nickname} unfollowed relay: https://example.org/relay"
3264 describe "PATCH /users/:nickname/force_password_reset" do
3265 test "sets password_reset_pending to true", %{conn: conn} do
3266 user = insert(:user)
3267 assert user.password_reset_pending == false
3270 patch(conn, "/api/pleroma/admin/users/force_password_reset", %{nicknames: [user.nickname]})
3272 assert json_response(conn, 204) == ""
3274 ObanHelpers.perform_all()
3276 assert User.get_by_id(user.id).password_reset_pending == true
3280 describe "relays" do
3281 test "POST /relay", %{conn: conn, admin: admin} do
3283 post(conn, "/api/pleroma/admin/relay", %{
3284 relay_url: "http://mastodon.example.org/users/admin"
3287 assert json_response(conn, 200) == "http://mastodon.example.org/users/admin"
3289 log_entry = Repo.one(ModerationLog)
3291 assert ModerationLog.get_log_entry_message(log_entry) ==
3292 "@#{admin.nickname} followed relay: http://mastodon.example.org/users/admin"
3295 test "GET /relay", %{conn: conn} do
3296 relay_user = Pleroma.Web.ActivityPub.Relay.get_actor()
3298 ["http://mastodon.example.org/users/admin", "https://mstdn.io/users/mayuutann"]
3299 |> Enum.each(fn ap_id ->
3300 {:ok, user} = User.get_or_fetch_by_ap_id(ap_id)
3301 User.follow(relay_user, user)
3304 conn = get(conn, "/api/pleroma/admin/relay")
3306 assert json_response(conn, 200)["relays"] -- ["mastodon.example.org", "mstdn.io"] == []
3309 test "DELETE /relay", %{conn: conn, admin: admin} do
3310 post(conn, "/api/pleroma/admin/relay", %{
3311 relay_url: "http://mastodon.example.org/users/admin"
3315 delete(conn, "/api/pleroma/admin/relay", %{
3316 relay_url: "http://mastodon.example.org/users/admin"
3319 assert json_response(conn, 200) == "http://mastodon.example.org/users/admin"
3321 [log_entry_one, log_entry_two] = Repo.all(ModerationLog)
3323 assert ModerationLog.get_log_entry_message(log_entry_one) ==
3324 "@#{admin.nickname} followed relay: http://mastodon.example.org/users/admin"
3326 assert ModerationLog.get_log_entry_message(log_entry_two) ==
3327 "@#{admin.nickname} unfollowed relay: http://mastodon.example.org/users/admin"
3331 describe "instances" do
3332 test "GET /instances/:instance/statuses", %{conn: conn} do
3333 user = insert(:user, local: false, nickname: "archaeme@archae.me")
3334 user2 = insert(:user, local: false, nickname: "test@test.com")
3335 insert_pair(:note_activity, user: user)
3336 insert(:note_activity, user: user2)
3338 ret_conn = get(conn, "/api/pleroma/admin/instances/archae.me/statuses")
3340 response = json_response(ret_conn, 200)
3342 assert length(response) == 2
3344 ret_conn = get(conn, "/api/pleroma/admin/instances/test.com/statuses")
3346 response = json_response(ret_conn, 200)
3348 assert length(response) == 1
3350 ret_conn = get(conn, "/api/pleroma/admin/instances/nonexistent.com/statuses")
3352 response = json_response(ret_conn, 200)
3354 assert Enum.empty?(response)
3358 describe "PATCH /confirm_email" do
3359 test "it confirms emails of two users", %{conn: conn, admin: admin} do
3360 [first_user, second_user] = insert_pair(:user, confirmation_pending: true)
3362 assert first_user.confirmation_pending == true
3363 assert second_user.confirmation_pending == true
3366 patch(conn, "/api/pleroma/admin/users/confirm_email", %{
3368 first_user.nickname,
3369 second_user.nickname
3373 assert ret_conn.status == 200
3375 assert first_user.confirmation_pending == true
3376 assert second_user.confirmation_pending == true
3378 log_entry = Repo.one(ModerationLog)
3380 assert ModerationLog.get_log_entry_message(log_entry) ==
3381 "@#{admin.nickname} confirmed email for users: @#{first_user.nickname}, @#{
3382 second_user.nickname
3387 describe "PATCH /resend_confirmation_email" do
3388 test "it resend emails for two users", %{conn: conn, admin: admin} do
3389 [first_user, second_user] = insert_pair(:user, confirmation_pending: true)
3392 patch(conn, "/api/pleroma/admin/users/resend_confirmation_email", %{
3394 first_user.nickname,
3395 second_user.nickname
3399 assert ret_conn.status == 200
3401 log_entry = Repo.one(ModerationLog)
3403 assert ModerationLog.get_log_entry_message(log_entry) ==
3404 "@#{admin.nickname} re-sent confirmation email for users: @#{first_user.nickname}, @#{
3405 second_user.nickname
3410 describe "POST /reports/:id/notes" do
3411 setup %{conn: conn, admin: admin} do
3412 [reporter, target_user] = insert_pair(:user)
3413 activity = insert(:note_activity, user: target_user)
3415 {:ok, %{id: report_id}} =
3416 CommonAPI.report(reporter, %{
3417 "account_id" => target_user.id,
3418 "comment" => "I feel offended",
3419 "status_ids" => [activity.id]
3422 post(conn, "/api/pleroma/admin/reports/#{report_id}/notes", %{
3423 content: "this is disgusting!"
3426 post(conn, "/api/pleroma/admin/reports/#{report_id}/notes", %{
3427 content: "this is disgusting2!"
3432 report_id: report_id
3436 test "it creates report note", %{admin_id: admin_id, report_id: report_id} do
3437 [note, _] = Repo.all(ReportNote)
3440 activity_id: ^report_id,
3441 content: "this is disgusting!",
3446 test "it returns reports with notes", %{conn: conn, admin: admin} do
3447 conn = get(conn, "/api/pleroma/admin/reports")
3449 response = json_response(conn, 200)
3450 notes = hd(response["reports"])["notes"]
3453 assert note["user"]["nickname"] == admin.nickname
3454 assert note["content"] == "this is disgusting!"
3455 assert note["created_at"]
3456 assert response["total"] == 1
3459 test "it deletes the note", %{conn: conn, report_id: report_id} do
3460 assert ReportNote |> Repo.all() |> length() == 2
3462 [note, _] = Repo.all(ReportNote)
3464 delete(conn, "/api/pleroma/admin/reports/#{report_id}/notes/#{note.id}")
3466 assert ReportNote |> Repo.all() |> length() == 1
3470 test "GET /api/pleroma/admin/config/descriptions", %{conn: conn} do
3471 admin = insert(:user, is_admin: true)
3474 assign(conn, :user, admin)
3475 |> get("/api/pleroma/admin/config/descriptions")
3477 assert [child | _others] = json_response(conn, 200)
3479 assert child["children"]
3481 assert String.starts_with?(child["group"], ":")
3482 assert child["description"]
3486 # Needed for testing
3487 defmodule Pleroma.Web.Endpoint.NotReal do
3490 defmodule Pleroma.Captcha.NotReal do