1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do
6 use Pleroma.Web.ConnCase
8 alias Pleroma.Web.TwitterAPI.TwitterAPI
9 alias Pleroma.{Repo, User, Object, Activity, Notification}
10 alias Pleroma.Web.{OStatus, CommonAPI}
11 alias Pleroma.Web.ActivityPub.ActivityPub
12 alias Pleroma.Web.MastodonAPI.FilterView
14 import Pleroma.Factory
15 import ExUnit.CaptureLog
19 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
23 test "the home timeline", %{conn: conn} do
25 following = insert(:user)
27 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
31 |> assign(:user, user)
32 |> get("/api/v1/timelines/home")
34 assert length(json_response(conn, 200)) == 0
36 {:ok, user} = User.follow(user, following)
40 |> assign(:user, user)
41 |> get("/api/v1/timelines/home")
43 assert [%{"content" => "test"}] = json_response(conn, 200)
46 test "the public timeline", %{conn: conn} do
47 following = insert(:user)
50 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
53 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
57 |> get("/api/v1/timelines/public", %{"local" => "False"})
59 assert length(json_response(conn, 200)) == 2
63 |> get("/api/v1/timelines/public", %{"local" => "True"})
65 assert [%{"content" => "test"}] = json_response(conn, 200)
69 |> get("/api/v1/timelines/public", %{"local" => "1"})
71 assert [%{"content" => "test"}] = json_response(conn, 200)
75 test "posting a status", %{conn: conn} do
78 idempotency_key = "Pikachu rocks!"
82 |> assign(:user, user)
83 |> put_req_header("idempotency-key", idempotency_key)
84 |> post("/api/v1/statuses", %{
86 "spoiler_text" => "2hu",
87 "sensitive" => "false"
90 {:ok, ttl} = Cachex.ttl(:idempotency_cache, idempotency_key)
92 assert ttl > :timer.seconds(6 * 60 * 60 - 1)
94 assert %{"content" => "cofe", "id" => id, "spoiler_text" => "2hu", "sensitive" => false} =
95 json_response(conn_one, 200)
97 assert Repo.get(Activity, id)
101 |> assign(:user, user)
102 |> put_req_header("idempotency-key", idempotency_key)
103 |> post("/api/v1/statuses", %{
105 "spoiler_text" => "2hu",
106 "sensitive" => "false"
109 assert %{"id" => second_id} = json_response(conn_two, 200)
111 assert id == second_id
115 |> assign(:user, user)
116 |> post("/api/v1/statuses", %{
118 "spoiler_text" => "2hu",
119 "sensitive" => "false"
122 assert %{"id" => third_id} = json_response(conn_three, 200)
124 refute id == third_id
127 test "posting a sensitive status", %{conn: conn} do
132 |> assign(:user, user)
133 |> post("/api/v1/statuses", %{"status" => "cofe", "sensitive" => true})
135 assert %{"content" => "cofe", "id" => id, "sensitive" => true} = json_response(conn, 200)
136 assert Repo.get(Activity, id)
139 test "posting a direct status", %{conn: conn} do
140 user1 = insert(:user)
141 user2 = insert(:user)
142 content = "direct cofe @#{user2.nickname}"
146 |> assign(:user, user1)
147 |> post("api/v1/statuses", %{"status" => content, "visibility" => "direct"})
149 assert %{"id" => id, "visibility" => "direct"} = json_response(conn, 200)
150 assert activity = Repo.get(Activity, id)
151 assert activity.recipients == [user2.ap_id, user1.ap_id]
152 assert activity.data["to"] == [user2.ap_id]
153 assert activity.data["cc"] == []
156 test "direct timeline", %{conn: conn} do
157 user_one = insert(:user)
158 user_two = insert(:user)
160 {:ok, user_two} = User.follow(user_two, user_one)
163 CommonAPI.post(user_one, %{
164 "status" => "Hi @#{user_two.nickname}!",
165 "visibility" => "direct"
168 {:ok, _follower_only} =
169 CommonAPI.post(user_one, %{
170 "status" => "Hi @#{user_two.nickname}!",
171 "visibility" => "private"
174 # Only direct should be visible here
177 |> assign(:user, user_two)
178 |> get("api/v1/timelines/direct")
180 [status] = json_response(res_conn, 200)
182 assert %{"visibility" => "direct"} = status
183 assert status["url"] != direct.data["id"]
185 # User should be able to see his own direct message
188 |> assign(:user, user_one)
189 |> get("api/v1/timelines/direct")
191 [status] = json_response(res_conn, 200)
193 assert %{"visibility" => "direct"} = status
195 # Both should be visible here
198 |> assign(:user, user_two)
199 |> get("api/v1/timelines/home")
201 [_s1, _s2] = json_response(res_conn, 200)
204 Enum.each(1..20, fn _ ->
206 CommonAPI.post(user_one, %{
207 "status" => "Hi @#{user_two.nickname}!",
208 "visibility" => "direct"
214 |> assign(:user, user_two)
215 |> get("api/v1/timelines/direct")
217 statuses = json_response(res_conn, 200)
218 assert length(statuses) == 20
222 |> assign(:user, user_two)
223 |> get("api/v1/timelines/direct", %{max_id: List.last(statuses)["id"]})
225 [status] = json_response(res_conn, 200)
227 assert status["url"] != direct.data["id"]
230 test "replying to a status", %{conn: conn} do
233 {:ok, replied_to} = TwitterAPI.create_status(user, %{"status" => "cofe"})
237 |> assign(:user, user)
238 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id})
240 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
242 activity = Repo.get(Activity, id)
244 assert activity.data["context"] == replied_to.data["context"]
245 assert activity.data["object"]["inReplyToStatusId"] == replied_to.id
248 test "posting a status with an invalid in_reply_to_id", %{conn: conn} do
253 |> assign(:user, user)
254 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => ""})
256 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
258 activity = Repo.get(Activity, id)
263 test "verify_credentials", %{conn: conn} do
268 |> assign(:user, user)
269 |> get("/api/v1/accounts/verify_credentials")
271 assert %{"id" => id, "source" => %{"privacy" => "public"}} = json_response(conn, 200)
272 assert id == to_string(user.id)
275 test "verify_credentials default scope unlisted", %{conn: conn} do
276 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "unlisted"}})
280 |> assign(:user, user)
281 |> get("/api/v1/accounts/verify_credentials")
283 assert %{"id" => id, "source" => %{"privacy" => "unlisted"}} = json_response(conn, 200)
284 assert id == to_string(user.id)
287 test "get a status", %{conn: conn} do
288 activity = insert(:note_activity)
292 |> get("/api/v1/statuses/#{activity.id}")
294 assert %{"id" => id} = json_response(conn, 200)
295 assert id == to_string(activity.id)
298 describe "deleting a status" do
299 test "when you created it", %{conn: conn} do
300 activity = insert(:note_activity)
301 author = User.get_by_ap_id(activity.data["actor"])
305 |> assign(:user, author)
306 |> delete("/api/v1/statuses/#{activity.id}")
308 assert %{} = json_response(conn, 200)
310 refute Repo.get(Activity, activity.id)
313 test "when you didn't create it", %{conn: conn} do
314 activity = insert(:note_activity)
319 |> assign(:user, user)
320 |> delete("/api/v1/statuses/#{activity.id}")
322 assert %{"error" => _} = json_response(conn, 403)
324 assert Repo.get(Activity, activity.id) == activity
328 describe "filters" do
329 test "creating a filter", %{conn: conn} do
332 filter = %Pleroma.Filter{
339 |> assign(:user, user)
340 |> post("/api/v1/filters", %{"phrase" => filter.phrase, context: filter.context})
342 assert response = json_response(conn, 200)
343 assert response["phrase"] == filter.phrase
344 assert response["context"] == filter.context
345 assert response["id"] != nil
346 assert response["id"] != ""
349 test "fetching a list of filters", %{conn: conn} do
352 query_one = %Pleroma.Filter{
359 query_two = %Pleroma.Filter{
366 {:ok, filter_one} = Pleroma.Filter.create(query_one)
367 {:ok, filter_two} = Pleroma.Filter.create(query_two)
371 |> assign(:user, user)
372 |> get("/api/v1/filters")
373 |> json_response(200)
379 filters: [filter_two, filter_one]
383 test "get a filter", %{conn: conn} do
386 query = %Pleroma.Filter{
393 {:ok, filter} = Pleroma.Filter.create(query)
397 |> assign(:user, user)
398 |> get("/api/v1/filters/#{filter.filter_id}")
400 assert _response = json_response(conn, 200)
403 test "update a filter", %{conn: conn} do
406 query = %Pleroma.Filter{
413 {:ok, _filter} = Pleroma.Filter.create(query)
415 new = %Pleroma.Filter{
422 |> assign(:user, user)
423 |> put("/api/v1/filters/#{query.filter_id}", %{
428 assert response = json_response(conn, 200)
429 assert response["phrase"] == new.phrase
430 assert response["context"] == new.context
433 test "delete a filter", %{conn: conn} do
436 query = %Pleroma.Filter{
443 {:ok, filter} = Pleroma.Filter.create(query)
447 |> assign(:user, user)
448 |> delete("/api/v1/filters/#{filter.filter_id}")
450 assert response = json_response(conn, 200)
451 assert response == %{}
456 test "creating a list", %{conn: conn} do
461 |> assign(:user, user)
462 |> post("/api/v1/lists", %{"title" => "cuties"})
464 assert %{"title" => title} = json_response(conn, 200)
465 assert title == "cuties"
468 test "adding users to a list", %{conn: conn} do
470 other_user = insert(:user)
471 {:ok, list} = Pleroma.List.create("name", user)
475 |> assign(:user, user)
476 |> post("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
478 assert %{} == json_response(conn, 200)
479 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
480 assert following == [other_user.follower_address]
483 test "removing users from a list", %{conn: conn} do
485 other_user = insert(:user)
486 third_user = insert(:user)
487 {:ok, list} = Pleroma.List.create("name", user)
488 {:ok, list} = Pleroma.List.follow(list, other_user)
489 {:ok, list} = Pleroma.List.follow(list, third_user)
493 |> assign(:user, user)
494 |> delete("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
496 assert %{} == json_response(conn, 200)
497 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
498 assert following == [third_user.follower_address]
501 test "listing users in a list", %{conn: conn} do
503 other_user = insert(:user)
504 {:ok, list} = Pleroma.List.create("name", user)
505 {:ok, list} = Pleroma.List.follow(list, other_user)
509 |> assign(:user, user)
510 |> get("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
512 assert [%{"id" => id}] = json_response(conn, 200)
513 assert id == to_string(other_user.id)
516 test "retrieving a list", %{conn: conn} do
518 {:ok, list} = Pleroma.List.create("name", user)
522 |> assign(:user, user)
523 |> get("/api/v1/lists/#{list.id}")
525 assert %{"id" => id} = json_response(conn, 200)
526 assert id == to_string(list.id)
529 test "renaming a list", %{conn: conn} do
531 {:ok, list} = Pleroma.List.create("name", user)
535 |> assign(:user, user)
536 |> put("/api/v1/lists/#{list.id}", %{"title" => "newname"})
538 assert %{"title" => name} = json_response(conn, 200)
539 assert name == "newname"
542 test "deleting a list", %{conn: conn} do
544 {:ok, list} = Pleroma.List.create("name", user)
548 |> assign(:user, user)
549 |> delete("/api/v1/lists/#{list.id}")
551 assert %{} = json_response(conn, 200)
552 assert is_nil(Repo.get(Pleroma.List, list.id))
555 test "list timeline", %{conn: conn} do
557 other_user = insert(:user)
558 {:ok, _activity_one} = TwitterAPI.create_status(user, %{"status" => "Marisa is cute."})
559 {:ok, activity_two} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
560 {:ok, list} = Pleroma.List.create("name", user)
561 {:ok, list} = Pleroma.List.follow(list, other_user)
565 |> assign(:user, user)
566 |> get("/api/v1/timelines/list/#{list.id}")
568 assert [%{"id" => id}] = json_response(conn, 200)
570 assert id == to_string(activity_two.id)
573 test "list timeline does not leak non-public statuses for unfollowed users", %{conn: conn} do
575 other_user = insert(:user)
576 {:ok, activity_one} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
578 {:ok, _activity_two} =
579 TwitterAPI.create_status(other_user, %{
580 "status" => "Marisa is cute.",
581 "visibility" => "private"
584 {:ok, list} = Pleroma.List.create("name", user)
585 {:ok, list} = Pleroma.List.follow(list, other_user)
589 |> assign(:user, user)
590 |> get("/api/v1/timelines/list/#{list.id}")
592 assert [%{"id" => id}] = json_response(conn, 200)
594 assert id == to_string(activity_one.id)
598 describe "notifications" do
599 test "list of notifications", %{conn: conn} do
601 other_user = insert(:user)
604 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
606 {:ok, [_notification]} = Notification.create_notifications(activity)
610 |> assign(:user, user)
611 |> get("/api/v1/notifications")
614 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
616 }\">@<span>#{user.nickname}</span></a></span>"
618 assert [%{"status" => %{"content" => response}} | _rest] = json_response(conn, 200)
619 assert response == expected_response
622 test "getting a single notification", %{conn: conn} do
624 other_user = insert(:user)
627 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
629 {:ok, [notification]} = Notification.create_notifications(activity)
633 |> assign(:user, user)
634 |> get("/api/v1/notifications/#{notification.id}")
637 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
639 }\">@<span>#{user.nickname}</span></a></span>"
641 assert %{"status" => %{"content" => response}} = json_response(conn, 200)
642 assert response == expected_response
645 test "dismissing a single notification", %{conn: conn} do
647 other_user = insert(:user)
650 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
652 {:ok, [notification]} = Notification.create_notifications(activity)
656 |> assign(:user, user)
657 |> post("/api/v1/notifications/dismiss", %{"id" => notification.id})
659 assert %{} = json_response(conn, 200)
662 test "clearing all notifications", %{conn: conn} do
664 other_user = insert(:user)
667 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
669 {:ok, [_notification]} = Notification.create_notifications(activity)
673 |> assign(:user, user)
674 |> post("/api/v1/notifications/clear")
676 assert %{} = json_response(conn, 200)
680 |> assign(:user, user)
681 |> get("/api/v1/notifications")
683 assert all = json_response(conn, 200)
688 describe "reblogging" do
689 test "reblogs and returns the reblogged status", %{conn: conn} do
690 activity = insert(:note_activity)
695 |> assign(:user, user)
696 |> post("/api/v1/statuses/#{activity.id}/reblog")
698 assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} =
699 json_response(conn, 200)
701 assert to_string(activity.id) == id
705 describe "unreblogging" do
706 test "unreblogs and returns the unreblogged status", %{conn: conn} do
707 activity = insert(:note_activity)
710 {:ok, _, _} = CommonAPI.repeat(activity.id, user)
714 |> assign(:user, user)
715 |> post("/api/v1/statuses/#{activity.id}/unreblog")
717 assert %{"id" => id, "reblogged" => false, "reblogs_count" => 0} = json_response(conn, 200)
719 assert to_string(activity.id) == id
723 describe "favoriting" do
724 test "favs a status and returns it", %{conn: conn} do
725 activity = insert(:note_activity)
730 |> assign(:user, user)
731 |> post("/api/v1/statuses/#{activity.id}/favourite")
733 assert %{"id" => id, "favourites_count" => 1, "favourited" => true} =
734 json_response(conn, 200)
736 assert to_string(activity.id) == id
739 test "returns 500 for a wrong id", %{conn: conn} do
744 |> assign(:user, user)
745 |> post("/api/v1/statuses/1/favourite")
746 |> json_response(500)
748 assert resp == "Something went wrong"
752 describe "unfavoriting" do
753 test "unfavorites a status and returns it", %{conn: conn} do
754 activity = insert(:note_activity)
757 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
761 |> assign(:user, user)
762 |> post("/api/v1/statuses/#{activity.id}/unfavourite")
764 assert %{"id" => id, "favourites_count" => 0, "favourited" => false} =
765 json_response(conn, 200)
767 assert to_string(activity.id) == id
771 describe "user timelines" do
772 test "gets a users statuses", %{conn: conn} do
773 user_one = insert(:user)
774 user_two = insert(:user)
775 user_three = insert(:user)
777 {:ok, user_three} = User.follow(user_three, user_one)
779 {:ok, activity} = CommonAPI.post(user_one, %{"status" => "HI!!!"})
781 {:ok, direct_activity} =
782 CommonAPI.post(user_one, %{
783 "status" => "Hi, @#{user_two.nickname}.",
784 "visibility" => "direct"
787 {:ok, private_activity} =
788 CommonAPI.post(user_one, %{"status" => "private", "visibility" => "private"})
792 |> get("/api/v1/accounts/#{user_one.id}/statuses")
794 assert [%{"id" => id}] = json_response(resp, 200)
795 assert id == to_string(activity.id)
799 |> assign(:user, user_two)
800 |> get("/api/v1/accounts/#{user_one.id}/statuses")
802 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
803 assert id_one == to_string(direct_activity.id)
804 assert id_two == to_string(activity.id)
808 |> assign(:user, user_three)
809 |> get("/api/v1/accounts/#{user_one.id}/statuses")
811 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
812 assert id_one == to_string(private_activity.id)
813 assert id_two == to_string(activity.id)
816 test "unimplemented pinned statuses feature", %{conn: conn} do
817 note = insert(:note_activity)
818 user = User.get_by_ap_id(note.data["actor"])
822 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
824 assert json_response(conn, 200) == []
827 test "gets an users media", %{conn: conn} do
828 note = insert(:note_activity)
829 user = User.get_by_ap_id(note.data["actor"])
832 content_type: "image/jpg",
833 path: Path.absname("test/fixtures/image.jpg"),
834 filename: "an_image.jpg"
838 TwitterAPI.upload(file, user, "json")
842 TwitterAPI.create_status(user, %{"status" => "cofe", "media_ids" => [media["media_id"]]})
846 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "true"})
848 assert [%{"id" => id}] = json_response(conn, 200)
849 assert id == to_string(image_post.id)
853 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "1"})
855 assert [%{"id" => id}] = json_response(conn, 200)
856 assert id == to_string(image_post.id)
859 test "gets a user's statuses without reblogs", %{conn: conn} do
861 {:ok, post} = CommonAPI.post(user, %{"status" => "HI!!!"})
862 {:ok, _, _} = CommonAPI.repeat(post.id, user)
866 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "true"})
868 assert [%{"id" => id}] = json_response(conn, 200)
869 assert id == to_string(post.id)
873 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "1"})
875 assert [%{"id" => id}] = json_response(conn, 200)
876 assert id == to_string(post.id)
880 describe "user relationships" do
881 test "returns the relationships for the current user", %{conn: conn} do
883 other_user = insert(:user)
884 {:ok, user} = User.follow(user, other_user)
888 |> assign(:user, user)
889 |> get("/api/v1/accounts/relationships", %{"id" => [other_user.id]})
891 assert [relationship] = json_response(conn, 200)
893 assert to_string(other_user.id) == relationship["id"]
897 describe "locked accounts" do
898 test "/api/v1/follow_requests works" do
899 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
900 other_user = insert(:user)
902 {:ok, _activity} = ActivityPub.follow(other_user, user)
904 user = Repo.get(User, user.id)
905 other_user = Repo.get(User, other_user.id)
907 assert User.following?(other_user, user) == false
911 |> assign(:user, user)
912 |> get("/api/v1/follow_requests")
914 assert [relationship] = json_response(conn, 200)
915 assert to_string(other_user.id) == relationship["id"]
918 test "/api/v1/follow_requests/:id/authorize works" do
919 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
920 other_user = insert(:user)
922 {:ok, _activity} = ActivityPub.follow(other_user, user)
924 user = Repo.get(User, user.id)
925 other_user = Repo.get(User, other_user.id)
927 assert User.following?(other_user, user) == false
931 |> assign(:user, user)
932 |> post("/api/v1/follow_requests/#{other_user.id}/authorize")
934 assert relationship = json_response(conn, 200)
935 assert to_string(other_user.id) == relationship["id"]
937 user = Repo.get(User, user.id)
938 other_user = Repo.get(User, other_user.id)
940 assert User.following?(other_user, user) == true
943 test "verify_credentials", %{conn: conn} do
944 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "private"}})
948 |> assign(:user, user)
949 |> get("/api/v1/accounts/verify_credentials")
951 assert %{"id" => id, "source" => %{"privacy" => "private"}} = json_response(conn, 200)
952 assert id == to_string(user.id)
955 test "/api/v1/follow_requests/:id/reject works" do
956 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
957 other_user = insert(:user)
959 {:ok, _activity} = ActivityPub.follow(other_user, user)
963 |> assign(:user, user)
964 |> post("/api/v1/follow_requests/#{other_user.id}/reject")
966 assert relationship = json_response(conn, 200)
967 assert to_string(other_user.id) == relationship["id"]
969 user = Repo.get(User, user.id)
970 other_user = Repo.get(User, other_user.id)
972 assert User.following?(other_user, user) == false
976 test "account fetching", %{conn: conn} do
981 |> get("/api/v1/accounts/#{user.id}")
983 assert %{"id" => id} = json_response(conn, 200)
984 assert id == to_string(user.id)
988 |> get("/api/v1/accounts/-1")
990 assert %{"error" => "Can't find user"} = json_response(conn, 404)
993 test "media upload", %{conn: conn} do
995 content_type: "image/jpg",
996 path: Path.absname("test/fixtures/image.jpg"),
997 filename: "an_image.jpg"
1000 desc = "Description of the image"
1002 user = insert(:user)
1006 |> assign(:user, user)
1007 |> post("/api/v1/media", %{"file" => file, "description" => desc})
1009 assert media = json_response(conn, 200)
1011 assert media["type"] == "image"
1012 assert media["description"] == desc
1015 object = Repo.get(Object, media["id"])
1016 assert object.data["actor"] == User.ap_id(user)
1019 test "hashtag timeline", %{conn: conn} do
1020 following = insert(:user)
1023 {:ok, activity} = TwitterAPI.create_status(following, %{"status" => "test #2hu"})
1025 {:ok, [_activity]} =
1026 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
1030 |> get("/api/v1/timelines/tag/2hu")
1032 assert [%{"id" => id}] = json_response(nconn, 200)
1034 assert id == to_string(activity.id)
1036 # works for different capitalization too
1039 |> get("/api/v1/timelines/tag/2HU")
1041 assert [%{"id" => id}] = json_response(nconn, 200)
1043 assert id == to_string(activity.id)
1047 test "multi-hashtag timeline", %{conn: conn} do
1048 user = insert(:user)
1050 {:ok, activity_test} = CommonAPI.post(user, %{"status" => "#test"})
1051 {:ok, activity_test1} = CommonAPI.post(user, %{"status" => "#test1"})
1052 {:ok, activity_none} = CommonAPI.post(user, %{"status" => "#test #none"})
1056 |> get("/api/v1/timelines/tag/test", %{"all" => ["test1"]})
1058 assert [status_none, status_test1, status_test] = json_response(all_test, 200)
1060 assert to_string(activity_test.id) == status_test["id"]
1061 assert to_string(activity_test1.id) == status_test1["id"]
1062 assert to_string(activity_none.id) == status_none["id"]
1066 |> get("/api/v1/timelines/tag/test", %{"all" => ["test1"], "none" => ["none"]})
1068 assert [status_test1, status_test] == json_response(restricted_test, 200)
1071 test "getting followers", %{conn: conn} do
1072 user = insert(:user)
1073 other_user = insert(:user)
1074 {:ok, user} = User.follow(user, other_user)
1078 |> get("/api/v1/accounts/#{other_user.id}/followers")
1080 assert [%{"id" => id}] = json_response(conn, 200)
1081 assert id == to_string(user.id)
1084 test "getting followers, hide_network", %{conn: conn} do
1085 user = insert(:user)
1086 other_user = insert(:user, %{info: %{hide_network: true}})
1087 {:ok, _user} = User.follow(user, other_user)
1091 |> get("/api/v1/accounts/#{other_user.id}/followers")
1093 assert [] == json_response(conn, 200)
1096 test "getting followers, hide_network, same user requesting", %{conn: conn} do
1097 user = insert(:user)
1098 other_user = insert(:user, %{info: %{hide_network: true}})
1099 {:ok, _user} = User.follow(user, other_user)
1103 |> assign(:user, other_user)
1104 |> get("/api/v1/accounts/#{other_user.id}/followers")
1106 refute [] == json_response(conn, 200)
1109 test "getting following", %{conn: conn} do
1110 user = insert(:user)
1111 other_user = insert(:user)
1112 {:ok, user} = User.follow(user, other_user)
1116 |> get("/api/v1/accounts/#{user.id}/following")
1118 assert [%{"id" => id}] = json_response(conn, 200)
1119 assert id == to_string(other_user.id)
1122 test "getting following, hide_network", %{conn: conn} do
1123 user = insert(:user, %{info: %{hide_network: true}})
1124 other_user = insert(:user)
1125 {:ok, user} = User.follow(user, other_user)
1129 |> get("/api/v1/accounts/#{user.id}/following")
1131 assert [] == json_response(conn, 200)
1134 test "getting following, hide_network, same user requesting", %{conn: conn} do
1135 user = insert(:user, %{info: %{hide_network: true}})
1136 other_user = insert(:user)
1137 {:ok, user} = User.follow(user, other_user)
1141 |> assign(:user, user)
1142 |> get("/api/v1/accounts/#{user.id}/following")
1144 refute [] == json_response(conn, 200)
1147 test "following / unfollowing a user", %{conn: conn} do
1148 user = insert(:user)
1149 other_user = insert(:user)
1153 |> assign(:user, user)
1154 |> post("/api/v1/accounts/#{other_user.id}/follow")
1156 assert %{"id" => _id, "following" => true} = json_response(conn, 200)
1158 user = Repo.get(User, user.id)
1162 |> assign(:user, user)
1163 |> post("/api/v1/accounts/#{other_user.id}/unfollow")
1165 assert %{"id" => _id, "following" => false} = json_response(conn, 200)
1167 user = Repo.get(User, user.id)
1171 |> assign(:user, user)
1172 |> post("/api/v1/follows", %{"uri" => other_user.nickname})
1174 assert %{"id" => id} = json_response(conn, 200)
1175 assert id == to_string(other_user.id)
1178 test "blocking / unblocking a user", %{conn: conn} do
1179 user = insert(:user)
1180 other_user = insert(:user)
1184 |> assign(:user, user)
1185 |> post("/api/v1/accounts/#{other_user.id}/block")
1187 assert %{"id" => _id, "blocking" => true} = json_response(conn, 200)
1189 user = Repo.get(User, user.id)
1193 |> assign(:user, user)
1194 |> post("/api/v1/accounts/#{other_user.id}/unblock")
1196 assert %{"id" => _id, "blocking" => false} = json_response(conn, 200)
1199 test "getting a list of blocks", %{conn: conn} do
1200 user = insert(:user)
1201 other_user = insert(:user)
1203 {:ok, user} = User.block(user, other_user)
1207 |> assign(:user, user)
1208 |> get("/api/v1/blocks")
1210 other_user_id = to_string(other_user.id)
1211 assert [%{"id" => ^other_user_id}] = json_response(conn, 200)
1214 test "blocking / unblocking a domain", %{conn: conn} do
1215 user = insert(:user)
1216 other_user = insert(:user, %{ap_id: "https://dogwhistle.zone/@pundit"})
1220 |> assign(:user, user)
1221 |> post("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1223 assert %{} = json_response(conn, 200)
1224 user = User.get_cached_by_ap_id(user.ap_id)
1225 assert User.blocks?(user, other_user)
1229 |> assign(:user, user)
1230 |> delete("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1232 assert %{} = json_response(conn, 200)
1233 user = User.get_cached_by_ap_id(user.ap_id)
1234 refute User.blocks?(user, other_user)
1237 test "getting a list of domain blocks", %{conn: conn} do
1238 user = insert(:user)
1240 {:ok, user} = User.block_domain(user, "bad.site")
1241 {:ok, user} = User.block_domain(user, "even.worse.site")
1245 |> assign(:user, user)
1246 |> get("/api/v1/domain_blocks")
1248 domain_blocks = json_response(conn, 200)
1250 assert "bad.site" in domain_blocks
1251 assert "even.worse.site" in domain_blocks
1254 test "unimplemented mute endpoints" do
1255 user = insert(:user)
1256 other_user = insert(:user)
1259 |> Enum.each(fn endpoint ->
1262 |> assign(:user, user)
1263 |> post("/api/v1/accounts/#{other_user.id}/#{endpoint}")
1265 assert %{"id" => id} = json_response(conn, 200)
1266 assert id == to_string(other_user.id)
1270 test "unimplemented mutes, follow_requests, blocks, domain blocks" do
1271 user = insert(:user)
1273 ["blocks", "domain_blocks", "mutes", "follow_requests"]
1274 |> Enum.each(fn endpoint ->
1277 |> assign(:user, user)
1278 |> get("/api/v1/#{endpoint}")
1280 assert [] = json_response(conn, 200)
1284 test "account search", %{conn: conn} do
1285 user = insert(:user)
1286 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1287 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1291 |> assign(:user, user)
1292 |> get("/api/v1/accounts/search", %{"q" => "shp"})
1293 |> json_response(200)
1295 result_ids = for result <- results, do: result["acct"]
1297 assert user_two.nickname in result_ids
1298 assert user_three.nickname in result_ids
1302 |> assign(:user, user)
1303 |> get("/api/v1/accounts/search", %{"q" => "2hu"})
1304 |> json_response(200)
1306 result_ids = for result <- results, do: result["acct"]
1308 assert user_three.nickname in result_ids
1311 test "search", %{conn: conn} do
1312 user = insert(:user)
1313 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1314 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1316 {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
1319 CommonAPI.post(user, %{
1320 "status" => "This is about 2hu, but private",
1321 "visibility" => "private"
1324 {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
1328 |> get("/api/v1/search", %{"q" => "2hu"})
1330 assert results = json_response(conn, 200)
1332 [account | _] = results["accounts"]
1333 assert account["id"] == to_string(user_three.id)
1335 assert results["hashtags"] == []
1337 [status] = results["statuses"]
1338 assert status["id"] == to_string(activity.id)
1341 test "search fetches remote statuses", %{conn: conn} do
1345 |> get("/api/v1/search", %{"q" => "https://shitposter.club/notice/2827873"})
1347 assert results = json_response(conn, 200)
1349 [status] = results["statuses"]
1350 assert status["uri"] == "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"
1354 test "search doesn't show statuses that it shouldn't", %{conn: conn} do
1356 CommonAPI.post(insert(:user), %{
1357 "status" => "This is about 2hu, but private",
1358 "visibility" => "private"
1364 |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]})
1366 assert results = json_response(conn, 200)
1368 [] = results["statuses"]
1372 test "search fetches remote accounts", %{conn: conn} do
1375 |> get("/api/v1/search", %{"q" => "shp@social.heldscal.la", "resolve" => "true"})
1377 assert results = json_response(conn, 200)
1378 [account] = results["accounts"]
1379 assert account["acct"] == "shp@social.heldscal.la"
1382 test "returns the favorites of a user", %{conn: conn} do
1383 user = insert(:user)
1384 other_user = insert(:user)
1386 {:ok, _} = CommonAPI.post(other_user, %{"status" => "bla"})
1387 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "traps are happy"})
1389 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
1393 |> assign(:user, user)
1394 |> get("/api/v1/favourites")
1396 assert [status] = json_response(first_conn, 200)
1397 assert status["id"] == to_string(activity.id)
1399 assert [{"link", _link_header}] =
1400 Enum.filter(first_conn.resp_headers, fn element -> match?({"link", _}, element) end)
1402 # Honours query params
1403 {:ok, second_activity} =
1404 CommonAPI.post(other_user, %{
1406 "Trees Are Never Sad Look At Them Every Once In Awhile They're Quite Beautiful."
1409 {:ok, _, _} = CommonAPI.favorite(second_activity.id, user)
1411 last_like = status["id"]
1415 |> assign(:user, user)
1416 |> get("/api/v1/favourites?since_id=#{last_like}")
1418 assert [second_status] = json_response(second_conn, 200)
1419 assert second_status["id"] == to_string(second_activity.id)
1423 |> assign(:user, user)
1424 |> get("/api/v1/favourites?limit=0")
1426 assert [] = json_response(third_conn, 200)
1429 describe "updating credentials" do
1430 test "updates the user's bio", %{conn: conn} do
1431 user = insert(:user)
1432 user2 = insert(:user)
1436 |> assign(:user, user)
1437 |> patch("/api/v1/accounts/update_credentials", %{
1438 "note" => "I drink #cofe with @#{user2.nickname}"
1441 assert user = json_response(conn, 200)
1443 assert user["note"] ==
1444 "I drink <a class=\"hashtag\" data-tag=\"cofe\" href=\"http://localhost:4001/tag/cofe\">#cofe</a> with <span class=\"h-card\"><a data-user=\"#{
1446 }\" class=\"u-url mention\" href=\"#{user2.ap_id}\">@<span>#{user2.nickname}</span></a></span>"
1449 test "updates the user's locking status", %{conn: conn} do
1450 user = insert(:user)
1454 |> assign(:user, user)
1455 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
1457 assert user = json_response(conn, 200)
1458 assert user["locked"] == true
1461 test "updates the user's name", %{conn: conn} do
1462 user = insert(:user)
1466 |> assign(:user, user)
1467 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
1469 assert user = json_response(conn, 200)
1470 assert user["display_name"] == "markorepairs"
1473 test "updates the user's avatar", %{conn: conn} do
1474 user = insert(:user)
1476 new_avatar = %Plug.Upload{
1477 content_type: "image/jpg",
1478 path: Path.absname("test/fixtures/image.jpg"),
1479 filename: "an_image.jpg"
1484 |> assign(:user, user)
1485 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
1487 assert user_response = json_response(conn, 200)
1488 assert user_response["avatar"] != User.avatar_url(user)
1491 test "updates the user's banner", %{conn: conn} do
1492 user = insert(:user)
1494 new_header = %Plug.Upload{
1495 content_type: "image/jpg",
1496 path: Path.absname("test/fixtures/image.jpg"),
1497 filename: "an_image.jpg"
1502 |> assign(:user, user)
1503 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
1505 assert user_response = json_response(conn, 200)
1506 assert user_response["header"] != User.banner_url(user)
1510 test "get instance information", %{conn: conn} do
1511 user = insert(:user, %{local: true})
1513 user2 = insert(:user, %{local: true})
1514 {:ok, _user2} = User.deactivate(user2, !user2.info.deactivated)
1516 insert(:user, %{local: false, nickname: "u@peer1.com"})
1517 insert(:user, %{local: false, nickname: "u@peer2.com"})
1519 {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})
1521 # Stats should count users with missing or nil `info.deactivated` value
1522 user = Repo.get(User, user.id)
1523 info_change = Changeset.change(user.info, %{deactivated: nil})
1527 |> Changeset.change()
1528 |> Changeset.put_embed(:info, info_change)
1529 |> User.update_and_set_cache()
1531 Pleroma.Stats.update_stats()
1533 conn = get(conn, "/api/v1/instance")
1535 assert result = json_response(conn, 200)
1537 stats = result["stats"]
1540 assert stats["user_count"] == 1
1541 assert stats["status_count"] == 1
1542 assert stats["domain_count"] == 2
1545 test "get peers", %{conn: conn} do
1546 insert(:user, %{local: false, nickname: "u@peer1.com"})
1547 insert(:user, %{local: false, nickname: "u@peer2.com"})
1549 Pleroma.Stats.update_stats()
1551 conn = get(conn, "/api/v1/instance/peers")
1553 assert result = json_response(conn, 200)
1555 assert ["peer1.com", "peer2.com"] == Enum.sort(result)
1558 test "put settings", %{conn: conn} do
1559 user = insert(:user)
1563 |> assign(:user, user)
1564 |> put("/api/web/settings", %{"data" => %{"programming" => "socks"}})
1566 assert _result = json_response(conn, 200)
1568 user = User.get_cached_by_ap_id(user.ap_id)
1569 assert user.info.settings == %{"programming" => "socks"}
1572 describe "pinned statuses" do
1574 Pleroma.Config.put([:instance, :max_pinned_statuses], 1)
1576 user = insert(:user)
1577 {:ok, activity} = CommonAPI.post(user, %{"status" => "HI!!!"})
1579 [user: user, activity: activity]
1582 test "returns pinned statuses", %{conn: conn, user: user, activity: activity} do
1583 {:ok, _} = CommonAPI.pin(activity.id, user)
1587 |> assign(:user, user)
1588 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1589 |> json_response(200)
1591 id_str = to_string(activity.id)
1593 assert [%{"id" => ^id_str, "pinned" => true}] = result
1596 test "pin status", %{conn: conn, user: user, activity: activity} do
1597 id_str = to_string(activity.id)
1599 assert %{"id" => ^id_str, "pinned" => true} =
1601 |> assign(:user, user)
1602 |> post("/api/v1/statuses/#{activity.id}/pin")
1603 |> json_response(200)
1605 assert [%{"id" => ^id_str, "pinned" => true}] =
1607 |> assign(:user, user)
1608 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1609 |> json_response(200)
1612 test "unpin status", %{conn: conn, user: user, activity: activity} do
1613 {:ok, _} = CommonAPI.pin(activity.id, user)
1615 id_str = to_string(activity.id)
1616 user = refresh_record(user)
1618 assert %{"id" => ^id_str, "pinned" => false} =
1620 |> assign(:user, user)
1621 |> post("/api/v1/statuses/#{activity.id}/unpin")
1622 |> json_response(200)
1626 |> assign(:user, user)
1627 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1628 |> json_response(200)
1631 test "max pinned statuses", %{conn: conn, user: user, activity: activity_one} do
1632 {:ok, activity_two} = CommonAPI.post(user, %{"status" => "HI!!!"})
1634 id_str_one = to_string(activity_one.id)
1636 assert %{"id" => ^id_str_one, "pinned" => true} =
1638 |> assign(:user, user)
1639 |> post("/api/v1/statuses/#{id_str_one}/pin")
1640 |> json_response(200)
1642 user = refresh_record(user)
1644 assert %{"error" => "You have already pinned the maximum number of statuses"} =
1646 |> assign(:user, user)
1647 |> post("/api/v1/statuses/#{activity_two.id}/pin")
1648 |> json_response(400)