1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do
6 use Pleroma.Web.ConnCase
8 alias Pleroma.Web.TwitterAPI.TwitterAPI
9 alias Pleroma.{Repo, User, Object, Activity, Notification}
10 alias Pleroma.Web.{OStatus, CommonAPI}
11 alias Pleroma.Web.ActivityPub.ActivityPub
12 alias Pleroma.Web.MastodonAPI.FilterView
14 import Pleroma.Factory
15 import ExUnit.CaptureLog
19 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
23 test "the home timeline", %{conn: conn} do
25 following = insert(:user)
27 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
31 |> assign(:user, user)
32 |> get("/api/v1/timelines/home")
34 assert length(json_response(conn, 200)) == 0
36 {:ok, user} = User.follow(user, following)
40 |> assign(:user, user)
41 |> get("/api/v1/timelines/home")
43 assert [%{"content" => "test"}] = json_response(conn, 200)
46 test "the public timeline", %{conn: conn} do
47 following = insert(:user)
50 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
53 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
57 |> get("/api/v1/timelines/public", %{"local" => "False"})
59 assert length(json_response(conn, 200)) == 2
63 |> get("/api/v1/timelines/public", %{"local" => "True"})
65 assert [%{"content" => "test"}] = json_response(conn, 200)
69 |> get("/api/v1/timelines/public", %{"local" => "1"})
71 assert [%{"content" => "test"}] = json_response(conn, 200)
75 test "posting a status", %{conn: conn} do
78 idempotency_key = "Pikachu rocks!"
82 |> assign(:user, user)
83 |> put_req_header("idempotency-key", idempotency_key)
84 |> post("/api/v1/statuses", %{
86 "spoiler_text" => "2hu",
87 "sensitive" => "false"
90 {:ok, ttl} = Cachex.ttl(:idempotency_cache, idempotency_key)
92 assert ttl > :timer.seconds(6 * 60 * 60 - 1)
94 assert %{"content" => "cofe", "id" => id, "spoiler_text" => "2hu", "sensitive" => false} =
95 json_response(conn_one, 200)
97 assert Repo.get(Activity, id)
101 |> assign(:user, user)
102 |> put_req_header("idempotency-key", idempotency_key)
103 |> post("/api/v1/statuses", %{
105 "spoiler_text" => "2hu",
106 "sensitive" => "false"
109 assert %{"id" => second_id} = json_response(conn_two, 200)
111 assert id == second_id
115 |> assign(:user, user)
116 |> post("/api/v1/statuses", %{
118 "spoiler_text" => "2hu",
119 "sensitive" => "false"
122 assert %{"id" => third_id} = json_response(conn_three, 200)
124 refute id == third_id
127 test "posting a sensitive status", %{conn: conn} do
132 |> assign(:user, user)
133 |> post("/api/v1/statuses", %{"status" => "cofe", "sensitive" => true})
135 assert %{"content" => "cofe", "id" => id, "sensitive" => true} = json_response(conn, 200)
136 assert Repo.get(Activity, id)
139 test "posting a status with OGP link preview", %{conn: conn} do
140 Pleroma.Config.put([:rich_media, :enabled], true)
145 |> assign(:user, user)
146 |> post("/api/v1/statuses", %{
147 "status" => "http://example.com/ogp"
150 assert %{"id" => id, "card" => %{"title" => "The Rock"}} = json_response(conn, 200)
151 assert Repo.get(Activity, id)
152 Pleroma.Config.put([:rich_media, :enabled], false)
155 test "posting a direct status", %{conn: conn} do
156 user1 = insert(:user)
157 user2 = insert(:user)
158 content = "direct cofe @#{user2.nickname}"
162 |> assign(:user, user1)
163 |> post("api/v1/statuses", %{"status" => content, "visibility" => "direct"})
165 assert %{"id" => id, "visibility" => "direct"} = json_response(conn, 200)
166 assert activity = Repo.get(Activity, id)
167 assert activity.recipients == [user2.ap_id, user1.ap_id]
168 assert activity.data["to"] == [user2.ap_id]
169 assert activity.data["cc"] == []
172 test "direct timeline", %{conn: conn} do
173 user_one = insert(:user)
174 user_two = insert(:user)
176 {:ok, user_two} = User.follow(user_two, user_one)
179 CommonAPI.post(user_one, %{
180 "status" => "Hi @#{user_two.nickname}!",
181 "visibility" => "direct"
184 {:ok, _follower_only} =
185 CommonAPI.post(user_one, %{
186 "status" => "Hi @#{user_two.nickname}!",
187 "visibility" => "private"
190 # Only direct should be visible here
193 |> assign(:user, user_two)
194 |> get("api/v1/timelines/direct")
196 [status] = json_response(res_conn, 200)
198 assert %{"visibility" => "direct"} = status
199 assert status["url"] != direct.data["id"]
201 # User should be able to see his own direct message
204 |> assign(:user, user_one)
205 |> get("api/v1/timelines/direct")
207 [status] = json_response(res_conn, 200)
209 assert %{"visibility" => "direct"} = status
211 # Both should be visible here
214 |> assign(:user, user_two)
215 |> get("api/v1/timelines/home")
217 [_s1, _s2] = json_response(res_conn, 200)
220 Enum.each(1..20, fn _ ->
222 CommonAPI.post(user_one, %{
223 "status" => "Hi @#{user_two.nickname}!",
224 "visibility" => "direct"
230 |> assign(:user, user_two)
231 |> get("api/v1/timelines/direct")
233 statuses = json_response(res_conn, 200)
234 assert length(statuses) == 20
238 |> assign(:user, user_two)
239 |> get("api/v1/timelines/direct", %{max_id: List.last(statuses)["id"]})
241 [status] = json_response(res_conn, 200)
243 assert status["url"] != direct.data["id"]
246 test "replying to a status", %{conn: conn} do
249 {:ok, replied_to} = TwitterAPI.create_status(user, %{"status" => "cofe"})
253 |> assign(:user, user)
254 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id})
256 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
258 activity = Repo.get(Activity, id)
260 assert activity.data["context"] == replied_to.data["context"]
261 assert activity.data["object"]["inReplyToStatusId"] == replied_to.id
264 test "posting a status with an invalid in_reply_to_id", %{conn: conn} do
269 |> assign(:user, user)
270 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => ""})
272 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
274 activity = Repo.get(Activity, id)
279 test "verify_credentials", %{conn: conn} do
284 |> assign(:user, user)
285 |> get("/api/v1/accounts/verify_credentials")
287 assert %{"id" => id, "source" => %{"privacy" => "public"}} = json_response(conn, 200)
288 assert id == to_string(user.id)
291 test "verify_credentials default scope unlisted", %{conn: conn} do
292 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "unlisted"}})
296 |> assign(:user, user)
297 |> get("/api/v1/accounts/verify_credentials")
299 assert %{"id" => id, "source" => %{"privacy" => "unlisted"}} = json_response(conn, 200)
300 assert id == to_string(user.id)
303 test "get a status", %{conn: conn} do
304 activity = insert(:note_activity)
308 |> get("/api/v1/statuses/#{activity.id}")
310 assert %{"id" => id} = json_response(conn, 200)
311 assert id == to_string(activity.id)
314 describe "deleting a status" do
315 test "when you created it", %{conn: conn} do
316 activity = insert(:note_activity)
317 author = User.get_by_ap_id(activity.data["actor"])
321 |> assign(:user, author)
322 |> delete("/api/v1/statuses/#{activity.id}")
324 assert %{} = json_response(conn, 200)
326 refute Repo.get(Activity, activity.id)
329 test "when you didn't create it", %{conn: conn} do
330 activity = insert(:note_activity)
335 |> assign(:user, user)
336 |> delete("/api/v1/statuses/#{activity.id}")
338 assert %{"error" => _} = json_response(conn, 403)
340 assert Repo.get(Activity, activity.id) == activity
344 describe "filters" do
345 test "creating a filter", %{conn: conn} do
348 filter = %Pleroma.Filter{
355 |> assign(:user, user)
356 |> post("/api/v1/filters", %{"phrase" => filter.phrase, context: filter.context})
358 assert response = json_response(conn, 200)
359 assert response["phrase"] == filter.phrase
360 assert response["context"] == filter.context
361 assert response["id"] != nil
362 assert response["id"] != ""
365 test "fetching a list of filters", %{conn: conn} do
368 query_one = %Pleroma.Filter{
375 query_two = %Pleroma.Filter{
382 {:ok, filter_one} = Pleroma.Filter.create(query_one)
383 {:ok, filter_two} = Pleroma.Filter.create(query_two)
387 |> assign(:user, user)
388 |> get("/api/v1/filters")
389 |> json_response(200)
395 filters: [filter_two, filter_one]
399 test "get a filter", %{conn: conn} do
402 query = %Pleroma.Filter{
409 {:ok, filter} = Pleroma.Filter.create(query)
413 |> assign(:user, user)
414 |> get("/api/v1/filters/#{filter.filter_id}")
416 assert _response = json_response(conn, 200)
419 test "update a filter", %{conn: conn} do
422 query = %Pleroma.Filter{
429 {:ok, _filter} = Pleroma.Filter.create(query)
431 new = %Pleroma.Filter{
438 |> assign(:user, user)
439 |> put("/api/v1/filters/#{query.filter_id}", %{
444 assert response = json_response(conn, 200)
445 assert response["phrase"] == new.phrase
446 assert response["context"] == new.context
449 test "delete a filter", %{conn: conn} do
452 query = %Pleroma.Filter{
459 {:ok, filter} = Pleroma.Filter.create(query)
463 |> assign(:user, user)
464 |> delete("/api/v1/filters/#{filter.filter_id}")
466 assert response = json_response(conn, 200)
467 assert response == %{}
472 test "creating a list", %{conn: conn} do
477 |> assign(:user, user)
478 |> post("/api/v1/lists", %{"title" => "cuties"})
480 assert %{"title" => title} = json_response(conn, 200)
481 assert title == "cuties"
484 test "adding users to a list", %{conn: conn} do
486 other_user = insert(:user)
487 {:ok, list} = Pleroma.List.create("name", user)
491 |> assign(:user, user)
492 |> post("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
494 assert %{} == json_response(conn, 200)
495 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
496 assert following == [other_user.follower_address]
499 test "removing users from a list", %{conn: conn} do
501 other_user = insert(:user)
502 third_user = insert(:user)
503 {:ok, list} = Pleroma.List.create("name", user)
504 {:ok, list} = Pleroma.List.follow(list, other_user)
505 {:ok, list} = Pleroma.List.follow(list, third_user)
509 |> assign(:user, user)
510 |> delete("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
512 assert %{} == json_response(conn, 200)
513 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
514 assert following == [third_user.follower_address]
517 test "listing users in a list", %{conn: conn} do
519 other_user = insert(:user)
520 {:ok, list} = Pleroma.List.create("name", user)
521 {:ok, list} = Pleroma.List.follow(list, other_user)
525 |> assign(:user, user)
526 |> get("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
528 assert [%{"id" => id}] = json_response(conn, 200)
529 assert id == to_string(other_user.id)
532 test "retrieving a list", %{conn: conn} do
534 {:ok, list} = Pleroma.List.create("name", user)
538 |> assign(:user, user)
539 |> get("/api/v1/lists/#{list.id}")
541 assert %{"id" => id} = json_response(conn, 200)
542 assert id == to_string(list.id)
545 test "renaming a list", %{conn: conn} do
547 {:ok, list} = Pleroma.List.create("name", user)
551 |> assign(:user, user)
552 |> put("/api/v1/lists/#{list.id}", %{"title" => "newname"})
554 assert %{"title" => name} = json_response(conn, 200)
555 assert name == "newname"
558 test "deleting a list", %{conn: conn} do
560 {:ok, list} = Pleroma.List.create("name", user)
564 |> assign(:user, user)
565 |> delete("/api/v1/lists/#{list.id}")
567 assert %{} = json_response(conn, 200)
568 assert is_nil(Repo.get(Pleroma.List, list.id))
571 test "list timeline", %{conn: conn} do
573 other_user = insert(:user)
574 {:ok, _activity_one} = TwitterAPI.create_status(user, %{"status" => "Marisa is cute."})
575 {:ok, activity_two} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
576 {:ok, list} = Pleroma.List.create("name", user)
577 {:ok, list} = Pleroma.List.follow(list, other_user)
581 |> assign(:user, user)
582 |> get("/api/v1/timelines/list/#{list.id}")
584 assert [%{"id" => id}] = json_response(conn, 200)
586 assert id == to_string(activity_two.id)
589 test "list timeline does not leak non-public statuses for unfollowed users", %{conn: conn} do
591 other_user = insert(:user)
592 {:ok, activity_one} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
594 {:ok, _activity_two} =
595 TwitterAPI.create_status(other_user, %{
596 "status" => "Marisa is cute.",
597 "visibility" => "private"
600 {:ok, list} = Pleroma.List.create("name", user)
601 {:ok, list} = Pleroma.List.follow(list, other_user)
605 |> assign(:user, user)
606 |> get("/api/v1/timelines/list/#{list.id}")
608 assert [%{"id" => id}] = json_response(conn, 200)
610 assert id == to_string(activity_one.id)
614 describe "notifications" do
615 test "list of notifications", %{conn: conn} do
617 other_user = insert(:user)
620 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
622 {:ok, [_notification]} = Notification.create_notifications(activity)
626 |> assign(:user, user)
627 |> get("/api/v1/notifications")
630 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
632 }\">@<span>#{user.nickname}</span></a></span>"
634 assert [%{"status" => %{"content" => response}} | _rest] = json_response(conn, 200)
635 assert response == expected_response
638 test "getting a single notification", %{conn: conn} do
640 other_user = insert(:user)
643 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
645 {:ok, [notification]} = Notification.create_notifications(activity)
649 |> assign(:user, user)
650 |> get("/api/v1/notifications/#{notification.id}")
653 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
655 }\">@<span>#{user.nickname}</span></a></span>"
657 assert %{"status" => %{"content" => response}} = json_response(conn, 200)
658 assert response == expected_response
661 test "dismissing a single notification", %{conn: conn} do
663 other_user = insert(:user)
666 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
668 {:ok, [notification]} = Notification.create_notifications(activity)
672 |> assign(:user, user)
673 |> post("/api/v1/notifications/dismiss", %{"id" => notification.id})
675 assert %{} = json_response(conn, 200)
678 test "clearing all notifications", %{conn: conn} do
680 other_user = insert(:user)
683 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
685 {:ok, [_notification]} = Notification.create_notifications(activity)
689 |> assign(:user, user)
690 |> post("/api/v1/notifications/clear")
692 assert %{} = json_response(conn, 200)
696 |> assign(:user, user)
697 |> get("/api/v1/notifications")
699 assert all = json_response(conn, 200)
704 describe "reblogging" do
705 test "reblogs and returns the reblogged status", %{conn: conn} do
706 activity = insert(:note_activity)
711 |> assign(:user, user)
712 |> post("/api/v1/statuses/#{activity.id}/reblog")
714 assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} =
715 json_response(conn, 200)
717 assert to_string(activity.id) == id
721 describe "unreblogging" do
722 test "unreblogs and returns the unreblogged status", %{conn: conn} do
723 activity = insert(:note_activity)
726 {:ok, _, _} = CommonAPI.repeat(activity.id, user)
730 |> assign(:user, user)
731 |> post("/api/v1/statuses/#{activity.id}/unreblog")
733 assert %{"id" => id, "reblogged" => false, "reblogs_count" => 0} = json_response(conn, 200)
735 assert to_string(activity.id) == id
739 describe "favoriting" do
740 test "favs a status and returns it", %{conn: conn} do
741 activity = insert(:note_activity)
746 |> assign(:user, user)
747 |> post("/api/v1/statuses/#{activity.id}/favourite")
749 assert %{"id" => id, "favourites_count" => 1, "favourited" => true} =
750 json_response(conn, 200)
752 assert to_string(activity.id) == id
755 test "returns 500 for a wrong id", %{conn: conn} do
760 |> assign(:user, user)
761 |> post("/api/v1/statuses/1/favourite")
762 |> json_response(500)
764 assert resp == "Something went wrong"
768 describe "unfavoriting" do
769 test "unfavorites a status and returns it", %{conn: conn} do
770 activity = insert(:note_activity)
773 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
777 |> assign(:user, user)
778 |> post("/api/v1/statuses/#{activity.id}/unfavourite")
780 assert %{"id" => id, "favourites_count" => 0, "favourited" => false} =
781 json_response(conn, 200)
783 assert to_string(activity.id) == id
787 describe "user timelines" do
788 test "gets a users statuses", %{conn: conn} do
789 user_one = insert(:user)
790 user_two = insert(:user)
791 user_three = insert(:user)
793 {:ok, user_three} = User.follow(user_three, user_one)
795 {:ok, activity} = CommonAPI.post(user_one, %{"status" => "HI!!!"})
797 {:ok, direct_activity} =
798 CommonAPI.post(user_one, %{
799 "status" => "Hi, @#{user_two.nickname}.",
800 "visibility" => "direct"
803 {:ok, private_activity} =
804 CommonAPI.post(user_one, %{"status" => "private", "visibility" => "private"})
808 |> get("/api/v1/accounts/#{user_one.id}/statuses")
810 assert [%{"id" => id}] = json_response(resp, 200)
811 assert id == to_string(activity.id)
815 |> assign(:user, user_two)
816 |> get("/api/v1/accounts/#{user_one.id}/statuses")
818 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
819 assert id_one == to_string(direct_activity.id)
820 assert id_two == to_string(activity.id)
824 |> assign(:user, user_three)
825 |> get("/api/v1/accounts/#{user_one.id}/statuses")
827 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
828 assert id_one == to_string(private_activity.id)
829 assert id_two == to_string(activity.id)
832 test "unimplemented pinned statuses feature", %{conn: conn} do
833 note = insert(:note_activity)
834 user = User.get_by_ap_id(note.data["actor"])
838 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
840 assert json_response(conn, 200) == []
843 test "gets an users media", %{conn: conn} do
844 note = insert(:note_activity)
845 user = User.get_by_ap_id(note.data["actor"])
848 content_type: "image/jpg",
849 path: Path.absname("test/fixtures/image.jpg"),
850 filename: "an_image.jpg"
854 TwitterAPI.upload(file, user, "json")
858 TwitterAPI.create_status(user, %{"status" => "cofe", "media_ids" => [media["media_id"]]})
862 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "true"})
864 assert [%{"id" => id}] = json_response(conn, 200)
865 assert id == to_string(image_post.id)
869 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "1"})
871 assert [%{"id" => id}] = json_response(conn, 200)
872 assert id == to_string(image_post.id)
875 test "gets a user's statuses without reblogs", %{conn: conn} do
877 {:ok, post} = CommonAPI.post(user, %{"status" => "HI!!!"})
878 {:ok, _, _} = CommonAPI.repeat(post.id, user)
882 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "true"})
884 assert [%{"id" => id}] = json_response(conn, 200)
885 assert id == to_string(post.id)
889 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "1"})
891 assert [%{"id" => id}] = json_response(conn, 200)
892 assert id == to_string(post.id)
896 describe "user relationships" do
897 test "returns the relationships for the current user", %{conn: conn} do
899 other_user = insert(:user)
900 {:ok, user} = User.follow(user, other_user)
904 |> assign(:user, user)
905 |> get("/api/v1/accounts/relationships", %{"id" => [other_user.id]})
907 assert [relationship] = json_response(conn, 200)
909 assert to_string(other_user.id) == relationship["id"]
913 describe "locked accounts" do
914 test "/api/v1/follow_requests works" do
915 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
916 other_user = insert(:user)
918 {:ok, _activity} = ActivityPub.follow(other_user, user)
920 user = Repo.get(User, user.id)
921 other_user = Repo.get(User, other_user.id)
923 assert User.following?(other_user, user) == false
927 |> assign(:user, user)
928 |> get("/api/v1/follow_requests")
930 assert [relationship] = json_response(conn, 200)
931 assert to_string(other_user.id) == relationship["id"]
934 test "/api/v1/follow_requests/:id/authorize works" do
935 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
936 other_user = insert(:user)
938 {:ok, _activity} = ActivityPub.follow(other_user, user)
940 user = Repo.get(User, user.id)
941 other_user = Repo.get(User, other_user.id)
943 assert User.following?(other_user, user) == false
947 |> assign(:user, user)
948 |> post("/api/v1/follow_requests/#{other_user.id}/authorize")
950 assert relationship = json_response(conn, 200)
951 assert to_string(other_user.id) == relationship["id"]
953 user = Repo.get(User, user.id)
954 other_user = Repo.get(User, other_user.id)
956 assert User.following?(other_user, user) == true
959 test "verify_credentials", %{conn: conn} do
960 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "private"}})
964 |> assign(:user, user)
965 |> get("/api/v1/accounts/verify_credentials")
967 assert %{"id" => id, "source" => %{"privacy" => "private"}} = json_response(conn, 200)
968 assert id == to_string(user.id)
971 test "/api/v1/follow_requests/:id/reject works" do
972 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
973 other_user = insert(:user)
975 {:ok, _activity} = ActivityPub.follow(other_user, user)
979 |> assign(:user, user)
980 |> post("/api/v1/follow_requests/#{other_user.id}/reject")
982 assert relationship = json_response(conn, 200)
983 assert to_string(other_user.id) == relationship["id"]
985 user = Repo.get(User, user.id)
986 other_user = Repo.get(User, other_user.id)
988 assert User.following?(other_user, user) == false
992 test "account fetching", %{conn: conn} do
997 |> get("/api/v1/accounts/#{user.id}")
999 assert %{"id" => id} = json_response(conn, 200)
1000 assert id == to_string(user.id)
1004 |> get("/api/v1/accounts/-1")
1006 assert %{"error" => "Can't find user"} = json_response(conn, 404)
1009 test "media upload", %{conn: conn} do
1010 file = %Plug.Upload{
1011 content_type: "image/jpg",
1012 path: Path.absname("test/fixtures/image.jpg"),
1013 filename: "an_image.jpg"
1016 desc = "Description of the image"
1018 user = insert(:user)
1022 |> assign(:user, user)
1023 |> post("/api/v1/media", %{"file" => file, "description" => desc})
1025 assert media = json_response(conn, 200)
1027 assert media["type"] == "image"
1028 assert media["description"] == desc
1031 object = Repo.get(Object, media["id"])
1032 assert object.data["actor"] == User.ap_id(user)
1035 test "hashtag timeline", %{conn: conn} do
1036 following = insert(:user)
1039 {:ok, activity} = TwitterAPI.create_status(following, %{"status" => "test #2hu"})
1041 {:ok, [_activity]} =
1042 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
1046 |> get("/api/v1/timelines/tag/2hu")
1048 assert [%{"id" => id}] = json_response(nconn, 200)
1050 assert id == to_string(activity.id)
1052 # works for different capitalization too
1055 |> get("/api/v1/timelines/tag/2HU")
1057 assert [%{"id" => id}] = json_response(nconn, 200)
1059 assert id == to_string(activity.id)
1063 test "multi-hashtag timeline", %{conn: conn} do
1064 user = insert(:user)
1066 {:ok, activity_test} = CommonAPI.post(user, %{"status" => "#test"})
1067 {:ok, activity_test1} = CommonAPI.post(user, %{"status" => "#test #test1"})
1068 {:ok, activity_none} = CommonAPI.post(user, %{"status" => "#test #none"})
1072 |> get("/api/v1/timelines/tag/test", %{"any" => ["test1"]})
1074 [status_none, status_test1, status_test] = json_response(any_test, 200)
1076 assert to_string(activity_test.id) == status_test["id"]
1077 assert to_string(activity_test1.id) == status_test1["id"]
1078 assert to_string(activity_none.id) == status_none["id"]
1082 |> get("/api/v1/timelines/tag/test", %{"all" => ["test1"], "none" => ["none"]})
1084 assert [status_test1] == json_response(restricted_test, 200)
1086 all_test = conn |> get("/api/v1/timelines/tag/test", %{"all" => ["none"]})
1088 assert [status_none] == json_response(all_test, 200)
1091 test "getting followers", %{conn: conn} do
1092 user = insert(:user)
1093 other_user = insert(:user)
1094 {:ok, user} = User.follow(user, other_user)
1098 |> get("/api/v1/accounts/#{other_user.id}/followers")
1100 assert [%{"id" => id}] = json_response(conn, 200)
1101 assert id == to_string(user.id)
1104 test "getting followers, hide_followers", %{conn: conn} do
1105 user = insert(:user)
1106 other_user = insert(:user, %{info: %{hide_followers: true}})
1107 {:ok, _user} = User.follow(user, other_user)
1111 |> get("/api/v1/accounts/#{other_user.id}/followers")
1113 assert [] == json_response(conn, 200)
1116 test "getting followers, hide_followers, same user requesting", %{conn: conn} do
1117 user = insert(:user)
1118 other_user = insert(:user, %{info: %{hide_followers: true}})
1119 {:ok, _user} = User.follow(user, other_user)
1123 |> assign(:user, other_user)
1124 |> get("/api/v1/accounts/#{other_user.id}/followers")
1126 refute [] == json_response(conn, 200)
1129 test "getting following", %{conn: conn} do
1130 user = insert(:user)
1131 other_user = insert(:user)
1132 {:ok, user} = User.follow(user, other_user)
1136 |> get("/api/v1/accounts/#{user.id}/following")
1138 assert [%{"id" => id}] = json_response(conn, 200)
1139 assert id == to_string(other_user.id)
1142 test "getting following, hide_follows", %{conn: conn} do
1143 user = insert(:user, %{info: %{hide_follows: true}})
1144 other_user = insert(:user)
1145 {:ok, user} = User.follow(user, other_user)
1149 |> get("/api/v1/accounts/#{user.id}/following")
1151 assert [] == json_response(conn, 200)
1154 test "getting following, hide_follows, same user requesting", %{conn: conn} do
1155 user = insert(:user, %{info: %{hide_follows: true}})
1156 other_user = insert(:user)
1157 {:ok, user} = User.follow(user, other_user)
1161 |> assign(:user, user)
1162 |> get("/api/v1/accounts/#{user.id}/following")
1164 refute [] == json_response(conn, 200)
1167 test "following / unfollowing a user", %{conn: conn} do
1168 user = insert(:user)
1169 other_user = insert(:user)
1173 |> assign(:user, user)
1174 |> post("/api/v1/accounts/#{other_user.id}/follow")
1176 assert %{"id" => _id, "following" => true} = json_response(conn, 200)
1178 user = Repo.get(User, user.id)
1182 |> assign(:user, user)
1183 |> post("/api/v1/accounts/#{other_user.id}/unfollow")
1185 assert %{"id" => _id, "following" => false} = json_response(conn, 200)
1187 user = Repo.get(User, user.id)
1191 |> assign(:user, user)
1192 |> post("/api/v1/follows", %{"uri" => other_user.nickname})
1194 assert %{"id" => id} = json_response(conn, 200)
1195 assert id == to_string(other_user.id)
1198 test "blocking / unblocking a user", %{conn: conn} do
1199 user = insert(:user)
1200 other_user = insert(:user)
1204 |> assign(:user, user)
1205 |> post("/api/v1/accounts/#{other_user.id}/block")
1207 assert %{"id" => _id, "blocking" => true} = json_response(conn, 200)
1209 user = Repo.get(User, user.id)
1213 |> assign(:user, user)
1214 |> post("/api/v1/accounts/#{other_user.id}/unblock")
1216 assert %{"id" => _id, "blocking" => false} = json_response(conn, 200)
1219 test "getting a list of blocks", %{conn: conn} do
1220 user = insert(:user)
1221 other_user = insert(:user)
1223 {:ok, user} = User.block(user, other_user)
1227 |> assign(:user, user)
1228 |> get("/api/v1/blocks")
1230 other_user_id = to_string(other_user.id)
1231 assert [%{"id" => ^other_user_id}] = json_response(conn, 200)
1234 test "blocking / unblocking a domain", %{conn: conn} do
1235 user = insert(:user)
1236 other_user = insert(:user, %{ap_id: "https://dogwhistle.zone/@pundit"})
1240 |> assign(:user, user)
1241 |> post("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1243 assert %{} = json_response(conn, 200)
1244 user = User.get_cached_by_ap_id(user.ap_id)
1245 assert User.blocks?(user, other_user)
1249 |> assign(:user, user)
1250 |> delete("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1252 assert %{} = json_response(conn, 200)
1253 user = User.get_cached_by_ap_id(user.ap_id)
1254 refute User.blocks?(user, other_user)
1257 test "getting a list of domain blocks", %{conn: conn} do
1258 user = insert(:user)
1260 {:ok, user} = User.block_domain(user, "bad.site")
1261 {:ok, user} = User.block_domain(user, "even.worse.site")
1265 |> assign(:user, user)
1266 |> get("/api/v1/domain_blocks")
1268 domain_blocks = json_response(conn, 200)
1270 assert "bad.site" in domain_blocks
1271 assert "even.worse.site" in domain_blocks
1274 test "unimplemented mute endpoints" do
1275 user = insert(:user)
1276 other_user = insert(:user)
1279 |> Enum.each(fn endpoint ->
1282 |> assign(:user, user)
1283 |> post("/api/v1/accounts/#{other_user.id}/#{endpoint}")
1285 assert %{"id" => id} = json_response(conn, 200)
1286 assert id == to_string(other_user.id)
1290 test "unimplemented mutes, follow_requests, blocks, domain blocks" do
1291 user = insert(:user)
1293 ["blocks", "domain_blocks", "mutes", "follow_requests"]
1294 |> Enum.each(fn endpoint ->
1297 |> assign(:user, user)
1298 |> get("/api/v1/#{endpoint}")
1300 assert [] = json_response(conn, 200)
1304 test "account search", %{conn: conn} do
1305 user = insert(:user)
1306 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1307 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1311 |> assign(:user, user)
1312 |> get("/api/v1/accounts/search", %{"q" => "shp"})
1313 |> json_response(200)
1315 result_ids = for result <- results, do: result["acct"]
1317 assert user_two.nickname in result_ids
1318 assert user_three.nickname in result_ids
1322 |> assign(:user, user)
1323 |> get("/api/v1/accounts/search", %{"q" => "2hu"})
1324 |> json_response(200)
1326 result_ids = for result <- results, do: result["acct"]
1328 assert user_three.nickname in result_ids
1331 test "search", %{conn: conn} do
1332 user = insert(:user)
1333 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1334 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1336 {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
1339 CommonAPI.post(user, %{
1340 "status" => "This is about 2hu, but private",
1341 "visibility" => "private"
1344 {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
1348 |> get("/api/v1/search", %{"q" => "2hu"})
1350 assert results = json_response(conn, 200)
1352 [account | _] = results["accounts"]
1353 assert account["id"] == to_string(user_three.id)
1355 assert results["hashtags"] == []
1357 [status] = results["statuses"]
1358 assert status["id"] == to_string(activity.id)
1361 test "search fetches remote statuses", %{conn: conn} do
1365 |> get("/api/v1/search", %{"q" => "https://shitposter.club/notice/2827873"})
1367 assert results = json_response(conn, 200)
1369 [status] = results["statuses"]
1370 assert status["uri"] == "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"
1374 test "search doesn't show statuses that it shouldn't", %{conn: conn} do
1376 CommonAPI.post(insert(:user), %{
1377 "status" => "This is about 2hu, but private",
1378 "visibility" => "private"
1384 |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]})
1386 assert results = json_response(conn, 200)
1388 [] = results["statuses"]
1392 test "search fetches remote accounts", %{conn: conn} do
1395 |> get("/api/v1/search", %{"q" => "shp@social.heldscal.la", "resolve" => "true"})
1397 assert results = json_response(conn, 200)
1398 [account] = results["accounts"]
1399 assert account["acct"] == "shp@social.heldscal.la"
1402 test "returns the favorites of a user", %{conn: conn} do
1403 user = insert(:user)
1404 other_user = insert(:user)
1406 {:ok, _} = CommonAPI.post(other_user, %{"status" => "bla"})
1407 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "traps are happy"})
1409 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
1413 |> assign(:user, user)
1414 |> get("/api/v1/favourites")
1416 assert [status] = json_response(first_conn, 200)
1417 assert status["id"] == to_string(activity.id)
1419 assert [{"link", _link_header}] =
1420 Enum.filter(first_conn.resp_headers, fn element -> match?({"link", _}, element) end)
1422 # Honours query params
1423 {:ok, second_activity} =
1424 CommonAPI.post(other_user, %{
1426 "Trees Are Never Sad Look At Them Every Once In Awhile They're Quite Beautiful."
1429 {:ok, _, _} = CommonAPI.favorite(second_activity.id, user)
1431 last_like = status["id"]
1435 |> assign(:user, user)
1436 |> get("/api/v1/favourites?since_id=#{last_like}")
1438 assert [second_status] = json_response(second_conn, 200)
1439 assert second_status["id"] == to_string(second_activity.id)
1443 |> assign(:user, user)
1444 |> get("/api/v1/favourites?limit=0")
1446 assert [] = json_response(third_conn, 200)
1449 describe "updating credentials" do
1450 test "updates the user's bio", %{conn: conn} do
1451 user = insert(:user)
1452 user2 = insert(:user)
1456 |> assign(:user, user)
1457 |> patch("/api/v1/accounts/update_credentials", %{
1458 "note" => "I drink #cofe with @#{user2.nickname}"
1461 assert user = json_response(conn, 200)
1463 assert user["note"] ==
1464 "I drink <a class=\"hashtag\" data-tag=\"cofe\" href=\"http://localhost:4001/tag/cofe\">#cofe</a> with <span class=\"h-card\"><a data-user=\"#{
1466 }\" class=\"u-url mention\" href=\"#{user2.ap_id}\">@<span>#{user2.nickname}</span></a></span>"
1469 test "updates the user's locking status", %{conn: conn} do
1470 user = insert(:user)
1474 |> assign(:user, user)
1475 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
1477 assert user = json_response(conn, 200)
1478 assert user["locked"] == true
1481 test "updates the user's name", %{conn: conn} do
1482 user = insert(:user)
1486 |> assign(:user, user)
1487 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
1489 assert user = json_response(conn, 200)
1490 assert user["display_name"] == "markorepairs"
1493 test "updates the user's avatar", %{conn: conn} do
1494 user = insert(:user)
1496 new_avatar = %Plug.Upload{
1497 content_type: "image/jpg",
1498 path: Path.absname("test/fixtures/image.jpg"),
1499 filename: "an_image.jpg"
1504 |> assign(:user, user)
1505 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
1507 assert user_response = json_response(conn, 200)
1508 assert user_response["avatar"] != User.avatar_url(user)
1511 test "updates the user's banner", %{conn: conn} do
1512 user = insert(:user)
1514 new_header = %Plug.Upload{
1515 content_type: "image/jpg",
1516 path: Path.absname("test/fixtures/image.jpg"),
1517 filename: "an_image.jpg"
1522 |> assign(:user, user)
1523 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
1525 assert user_response = json_response(conn, 200)
1526 assert user_response["header"] != User.banner_url(user)
1530 test "get instance information", %{conn: conn} do
1531 user = insert(:user, %{local: true})
1533 user2 = insert(:user, %{local: true})
1534 {:ok, _user2} = User.deactivate(user2, !user2.info.deactivated)
1536 insert(:user, %{local: false, nickname: "u@peer1.com"})
1537 insert(:user, %{local: false, nickname: "u@peer2.com"})
1539 {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})
1541 # Stats should count users with missing or nil `info.deactivated` value
1542 user = Repo.get(User, user.id)
1543 info_change = Changeset.change(user.info, %{deactivated: nil})
1547 |> Changeset.change()
1548 |> Changeset.put_embed(:info, info_change)
1549 |> User.update_and_set_cache()
1551 Pleroma.Stats.update_stats()
1553 conn = get(conn, "/api/v1/instance")
1555 assert result = json_response(conn, 200)
1557 stats = result["stats"]
1560 assert stats["user_count"] == 1
1561 assert stats["status_count"] == 1
1562 assert stats["domain_count"] == 2
1565 test "get peers", %{conn: conn} do
1566 insert(:user, %{local: false, nickname: "u@peer1.com"})
1567 insert(:user, %{local: false, nickname: "u@peer2.com"})
1569 Pleroma.Stats.update_stats()
1571 conn = get(conn, "/api/v1/instance/peers")
1573 assert result = json_response(conn, 200)
1575 assert ["peer1.com", "peer2.com"] == Enum.sort(result)
1578 test "put settings", %{conn: conn} do
1579 user = insert(:user)
1583 |> assign(:user, user)
1584 |> put("/api/web/settings", %{"data" => %{"programming" => "socks"}})
1586 assert _result = json_response(conn, 200)
1588 user = User.get_cached_by_ap_id(user.ap_id)
1589 assert user.info.settings == %{"programming" => "socks"}
1592 describe "pinned statuses" do
1594 Pleroma.Config.put([:instance, :max_pinned_statuses], 1)
1596 user = insert(:user)
1597 {:ok, activity} = CommonAPI.post(user, %{"status" => "HI!!!"})
1599 [user: user, activity: activity]
1602 test "returns pinned statuses", %{conn: conn, user: user, activity: activity} do
1603 {:ok, _} = CommonAPI.pin(activity.id, user)
1607 |> assign(:user, user)
1608 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1609 |> json_response(200)
1611 id_str = to_string(activity.id)
1613 assert [%{"id" => ^id_str, "pinned" => true}] = result
1616 test "pin status", %{conn: conn, user: user, activity: activity} do
1617 id_str = to_string(activity.id)
1619 assert %{"id" => ^id_str, "pinned" => true} =
1621 |> assign(:user, user)
1622 |> post("/api/v1/statuses/#{activity.id}/pin")
1623 |> json_response(200)
1625 assert [%{"id" => ^id_str, "pinned" => true}] =
1627 |> assign(:user, user)
1628 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1629 |> json_response(200)
1632 test "unpin status", %{conn: conn, user: user, activity: activity} do
1633 {:ok, _} = CommonAPI.pin(activity.id, user)
1635 id_str = to_string(activity.id)
1636 user = refresh_record(user)
1638 assert %{"id" => ^id_str, "pinned" => false} =
1640 |> assign(:user, user)
1641 |> post("/api/v1/statuses/#{activity.id}/unpin")
1642 |> json_response(200)
1646 |> assign(:user, user)
1647 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1648 |> json_response(200)
1651 test "max pinned statuses", %{conn: conn, user: user, activity: activity_one} do
1652 {:ok, activity_two} = CommonAPI.post(user, %{"status" => "HI!!!"})
1654 id_str_one = to_string(activity_one.id)
1656 assert %{"id" => ^id_str_one, "pinned" => true} =
1658 |> assign(:user, user)
1659 |> post("/api/v1/statuses/#{id_str_one}/pin")
1660 |> json_response(200)
1662 user = refresh_record(user)
1664 assert %{"error" => "You have already pinned the maximum number of statuses"} =
1666 |> assign(:user, user)
1667 |> post("/api/v1/statuses/#{activity_two.id}/pin")
1668 |> json_response(400)
1671 test "Status rich-media Card", %{conn: conn, user: user} do
1672 Pleroma.Config.put([:rich_media, :enabled], true)
1673 {:ok, activity} = CommonAPI.post(user, %{"status" => "http://example.com/ogp"})
1677 |> get("/api/v1/statuses/#{activity.id}/card")
1678 |> json_response(200)
1680 assert response == %{
1681 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1682 "provider_name" => "www.imdb.com",
1683 "provider_url" => "http://www.imdb.com",
1684 "title" => "The Rock",
1686 "url" => "http://www.imdb.com/title/tt0117500/",
1687 "description" => nil,
1690 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1691 "title" => "The Rock",
1692 "type" => "video.movie",
1693 "url" => "http://www.imdb.com/title/tt0117500/"
1698 Pleroma.Config.put([:rich_media, :enabled], false)
1703 user = insert(:user)
1704 for_user = insert(:user)
1707 CommonAPI.post(user, %{
1708 "status" => "heweoo?"
1712 CommonAPI.post(user, %{
1713 "status" => "heweoo!"
1718 |> assign(:user, for_user)
1719 |> post("/api/v1/statuses/#{activity1.id}/bookmark")
1721 assert json_response(response1, 200)["bookmarked"] == true
1725 |> assign(:user, for_user)
1726 |> post("/api/v1/statuses/#{activity2.id}/bookmark")
1728 assert json_response(response2, 200)["bookmarked"] == true
1732 |> assign(:user, for_user)
1733 |> get("/api/v1/bookmarks")
1735 assert [json_response(response2, 200), json_response(response1, 200)] ==
1736 json_response(bookmarks, 200)
1740 |> assign(:user, for_user)
1741 |> post("/api/v1/statuses/#{activity1.id}/unbookmark")
1743 assert json_response(response1, 200)["bookmarked"] == false
1747 |> assign(:user, for_user)
1748 |> get("/api/v1/bookmarks")
1750 assert [json_response(response2, 200)] == json_response(bookmarks, 200)