1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do
6 use Pleroma.Web.ConnCase
8 alias Pleroma.Web.TwitterAPI.TwitterAPI
12 alias Pleroma.Activity
13 alias Pleroma.Notification
14 alias Pleroma.Web.OStatus
15 alias Pleroma.Web.CommonAPI
16 alias Pleroma.Web.ActivityPub.ActivityPub
17 alias Pleroma.Web.MastodonAPI.FilterView
19 import Pleroma.Factory
20 import ExUnit.CaptureLog
24 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
28 test "the home timeline", %{conn: conn} do
30 following = insert(:user)
32 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
36 |> assign(:user, user)
37 |> get("/api/v1/timelines/home")
39 assert Enum.empty?(json_response(conn, 200))
41 {:ok, user} = User.follow(user, following)
45 |> assign(:user, user)
46 |> get("/api/v1/timelines/home")
48 assert [%{"content" => "test"}] = json_response(conn, 200)
51 test "the public timeline", %{conn: conn} do
52 following = insert(:user)
55 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
58 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
62 |> get("/api/v1/timelines/public", %{"local" => "False"})
64 assert length(json_response(conn, 200)) == 2
68 |> get("/api/v1/timelines/public", %{"local" => "True"})
70 assert [%{"content" => "test"}] = json_response(conn, 200)
74 |> get("/api/v1/timelines/public", %{"local" => "1"})
76 assert [%{"content" => "test"}] = json_response(conn, 200)
80 test "posting a status", %{conn: conn} do
83 idempotency_key = "Pikachu rocks!"
87 |> assign(:user, user)
88 |> put_req_header("idempotency-key", idempotency_key)
89 |> post("/api/v1/statuses", %{
91 "spoiler_text" => "2hu",
92 "sensitive" => "false"
95 {:ok, ttl} = Cachex.ttl(:idempotency_cache, idempotency_key)
97 assert ttl > :timer.seconds(6 * 60 * 60 - 1)
99 assert %{"content" => "cofe", "id" => id, "spoiler_text" => "2hu", "sensitive" => false} =
100 json_response(conn_one, 200)
102 assert Repo.get(Activity, id)
106 |> assign(:user, user)
107 |> put_req_header("idempotency-key", idempotency_key)
108 |> post("/api/v1/statuses", %{
110 "spoiler_text" => "2hu",
111 "sensitive" => "false"
114 assert %{"id" => second_id} = json_response(conn_two, 200)
116 assert id == second_id
120 |> assign(:user, user)
121 |> post("/api/v1/statuses", %{
123 "spoiler_text" => "2hu",
124 "sensitive" => "false"
127 assert %{"id" => third_id} = json_response(conn_three, 200)
129 refute id == third_id
132 test "posting a sensitive status", %{conn: conn} do
137 |> assign(:user, user)
138 |> post("/api/v1/statuses", %{"status" => "cofe", "sensitive" => true})
140 assert %{"content" => "cofe", "id" => id, "sensitive" => true} = json_response(conn, 200)
141 assert Repo.get(Activity, id)
144 test "posting a status with OGP link preview", %{conn: conn} do
145 Pleroma.Config.put([:rich_media, :enabled], true)
150 |> assign(:user, user)
151 |> post("/api/v1/statuses", %{
152 "status" => "http://example.com/ogp"
155 assert %{"id" => id, "card" => %{"title" => "The Rock"}} = json_response(conn, 200)
156 assert Repo.get(Activity, id)
157 Pleroma.Config.put([:rich_media, :enabled], false)
160 test "posting a direct status", %{conn: conn} do
161 user1 = insert(:user)
162 user2 = insert(:user)
163 content = "direct cofe @#{user2.nickname}"
167 |> assign(:user, user1)
168 |> post("api/v1/statuses", %{"status" => content, "visibility" => "direct"})
170 assert %{"id" => id, "visibility" => "direct"} = json_response(conn, 200)
171 assert activity = Repo.get(Activity, id)
172 assert activity.recipients == [user2.ap_id, user1.ap_id]
173 assert activity.data["to"] == [user2.ap_id]
174 assert activity.data["cc"] == []
177 test "direct timeline", %{conn: conn} do
178 user_one = insert(:user)
179 user_two = insert(:user)
181 {:ok, user_two} = User.follow(user_two, user_one)
184 CommonAPI.post(user_one, %{
185 "status" => "Hi @#{user_two.nickname}!",
186 "visibility" => "direct"
189 {:ok, _follower_only} =
190 CommonAPI.post(user_one, %{
191 "status" => "Hi @#{user_two.nickname}!",
192 "visibility" => "private"
195 # Only direct should be visible here
198 |> assign(:user, user_two)
199 |> get("api/v1/timelines/direct")
201 [status] = json_response(res_conn, 200)
203 assert %{"visibility" => "direct"} = status
204 assert status["url"] != direct.data["id"]
206 # User should be able to see his own direct message
209 |> assign(:user, user_one)
210 |> get("api/v1/timelines/direct")
212 [status] = json_response(res_conn, 200)
214 assert %{"visibility" => "direct"} = status
216 # Both should be visible here
219 |> assign(:user, user_two)
220 |> get("api/v1/timelines/home")
222 [_s1, _s2] = json_response(res_conn, 200)
225 Enum.each(1..20, fn _ ->
227 CommonAPI.post(user_one, %{
228 "status" => "Hi @#{user_two.nickname}!",
229 "visibility" => "direct"
235 |> assign(:user, user_two)
236 |> get("api/v1/timelines/direct")
238 statuses = json_response(res_conn, 200)
239 assert length(statuses) == 20
243 |> assign(:user, user_two)
244 |> get("api/v1/timelines/direct", %{max_id: List.last(statuses)["id"]})
246 [status] = json_response(res_conn, 200)
248 assert status["url"] != direct.data["id"]
251 test "replying to a status", %{conn: conn} do
254 {:ok, replied_to} = TwitterAPI.create_status(user, %{"status" => "cofe"})
258 |> assign(:user, user)
259 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id})
261 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
263 activity = Repo.get(Activity, id)
265 assert activity.data["context"] == replied_to.data["context"]
266 assert activity.data["object"]["inReplyToStatusId"] == replied_to.id
269 test "posting a status with an invalid in_reply_to_id", %{conn: conn} do
274 |> assign(:user, user)
275 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => ""})
277 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
279 activity = Repo.get(Activity, id)
284 test "verify_credentials", %{conn: conn} do
289 |> assign(:user, user)
290 |> get("/api/v1/accounts/verify_credentials")
292 assert %{"id" => id, "source" => %{"privacy" => "public"}} = json_response(conn, 200)
293 assert id == to_string(user.id)
296 test "verify_credentials default scope unlisted", %{conn: conn} do
297 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "unlisted"}})
301 |> assign(:user, user)
302 |> get("/api/v1/accounts/verify_credentials")
304 assert %{"id" => id, "source" => %{"privacy" => "unlisted"}} = json_response(conn, 200)
305 assert id == to_string(user.id)
308 test "get a status", %{conn: conn} do
309 activity = insert(:note_activity)
313 |> get("/api/v1/statuses/#{activity.id}")
315 assert %{"id" => id} = json_response(conn, 200)
316 assert id == to_string(activity.id)
319 describe "deleting a status" do
320 test "when you created it", %{conn: conn} do
321 activity = insert(:note_activity)
322 author = User.get_by_ap_id(activity.data["actor"])
326 |> assign(:user, author)
327 |> delete("/api/v1/statuses/#{activity.id}")
329 assert %{} = json_response(conn, 200)
331 refute Repo.get(Activity, activity.id)
334 test "when you didn't create it", %{conn: conn} do
335 activity = insert(:note_activity)
340 |> assign(:user, user)
341 |> delete("/api/v1/statuses/#{activity.id}")
343 assert %{"error" => _} = json_response(conn, 403)
345 assert Repo.get(Activity, activity.id) == activity
349 describe "filters" do
350 test "creating a filter", %{conn: conn} do
353 filter = %Pleroma.Filter{
360 |> assign(:user, user)
361 |> post("/api/v1/filters", %{"phrase" => filter.phrase, context: filter.context})
363 assert response = json_response(conn, 200)
364 assert response["phrase"] == filter.phrase
365 assert response["context"] == filter.context
366 assert response["id"] != nil
367 assert response["id"] != ""
370 test "fetching a list of filters", %{conn: conn} do
373 query_one = %Pleroma.Filter{
380 query_two = %Pleroma.Filter{
387 {:ok, filter_one} = Pleroma.Filter.create(query_one)
388 {:ok, filter_two} = Pleroma.Filter.create(query_two)
392 |> assign(:user, user)
393 |> get("/api/v1/filters")
394 |> json_response(200)
400 filters: [filter_two, filter_one]
404 test "get a filter", %{conn: conn} do
407 query = %Pleroma.Filter{
414 {:ok, filter} = Pleroma.Filter.create(query)
418 |> assign(:user, user)
419 |> get("/api/v1/filters/#{filter.filter_id}")
421 assert _response = json_response(conn, 200)
424 test "update a filter", %{conn: conn} do
427 query = %Pleroma.Filter{
434 {:ok, _filter} = Pleroma.Filter.create(query)
436 new = %Pleroma.Filter{
443 |> assign(:user, user)
444 |> put("/api/v1/filters/#{query.filter_id}", %{
449 assert response = json_response(conn, 200)
450 assert response["phrase"] == new.phrase
451 assert response["context"] == new.context
454 test "delete a filter", %{conn: conn} do
457 query = %Pleroma.Filter{
464 {:ok, filter} = Pleroma.Filter.create(query)
468 |> assign(:user, user)
469 |> delete("/api/v1/filters/#{filter.filter_id}")
471 assert response = json_response(conn, 200)
472 assert response == %{}
477 test "creating a list", %{conn: conn} do
482 |> assign(:user, user)
483 |> post("/api/v1/lists", %{"title" => "cuties"})
485 assert %{"title" => title} = json_response(conn, 200)
486 assert title == "cuties"
489 test "adding users to a list", %{conn: conn} do
491 other_user = insert(:user)
492 {:ok, list} = Pleroma.List.create("name", user)
496 |> assign(:user, user)
497 |> post("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
499 assert %{} == json_response(conn, 200)
500 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
501 assert following == [other_user.follower_address]
504 test "removing users from a list", %{conn: conn} do
506 other_user = insert(:user)
507 third_user = insert(:user)
508 {:ok, list} = Pleroma.List.create("name", user)
509 {:ok, list} = Pleroma.List.follow(list, other_user)
510 {:ok, list} = Pleroma.List.follow(list, third_user)
514 |> assign(:user, user)
515 |> delete("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
517 assert %{} == json_response(conn, 200)
518 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
519 assert following == [third_user.follower_address]
522 test "listing users in a list", %{conn: conn} do
524 other_user = insert(:user)
525 {:ok, list} = Pleroma.List.create("name", user)
526 {:ok, list} = Pleroma.List.follow(list, other_user)
530 |> assign(:user, user)
531 |> get("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
533 assert [%{"id" => id}] = json_response(conn, 200)
534 assert id == to_string(other_user.id)
537 test "retrieving a list", %{conn: conn} do
539 {:ok, list} = Pleroma.List.create("name", user)
543 |> assign(:user, user)
544 |> get("/api/v1/lists/#{list.id}")
546 assert %{"id" => id} = json_response(conn, 200)
547 assert id == to_string(list.id)
550 test "renaming a list", %{conn: conn} do
552 {:ok, list} = Pleroma.List.create("name", user)
556 |> assign(:user, user)
557 |> put("/api/v1/lists/#{list.id}", %{"title" => "newname"})
559 assert %{"title" => name} = json_response(conn, 200)
560 assert name == "newname"
563 test "deleting a list", %{conn: conn} do
565 {:ok, list} = Pleroma.List.create("name", user)
569 |> assign(:user, user)
570 |> delete("/api/v1/lists/#{list.id}")
572 assert %{} = json_response(conn, 200)
573 assert is_nil(Repo.get(Pleroma.List, list.id))
576 test "list timeline", %{conn: conn} do
578 other_user = insert(:user)
579 {:ok, _activity_one} = TwitterAPI.create_status(user, %{"status" => "Marisa is cute."})
580 {:ok, activity_two} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
581 {:ok, list} = Pleroma.List.create("name", user)
582 {:ok, list} = Pleroma.List.follow(list, other_user)
586 |> assign(:user, user)
587 |> get("/api/v1/timelines/list/#{list.id}")
589 assert [%{"id" => id}] = json_response(conn, 200)
591 assert id == to_string(activity_two.id)
594 test "list timeline does not leak non-public statuses for unfollowed users", %{conn: conn} do
596 other_user = insert(:user)
597 {:ok, activity_one} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
599 {:ok, _activity_two} =
600 TwitterAPI.create_status(other_user, %{
601 "status" => "Marisa is cute.",
602 "visibility" => "private"
605 {:ok, list} = Pleroma.List.create("name", user)
606 {:ok, list} = Pleroma.List.follow(list, other_user)
610 |> assign(:user, user)
611 |> get("/api/v1/timelines/list/#{list.id}")
613 assert [%{"id" => id}] = json_response(conn, 200)
615 assert id == to_string(activity_one.id)
619 describe "notifications" do
620 test "list of notifications", %{conn: conn} do
622 other_user = insert(:user)
625 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
627 {:ok, [_notification]} = Notification.create_notifications(activity)
631 |> assign(:user, user)
632 |> get("/api/v1/notifications")
635 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
637 }\">@<span>#{user.nickname}</span></a></span>"
639 assert [%{"status" => %{"content" => response}} | _rest] = json_response(conn, 200)
640 assert response == expected_response
643 test "getting a single notification", %{conn: conn} do
645 other_user = insert(:user)
648 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
650 {:ok, [notification]} = Notification.create_notifications(activity)
654 |> assign(:user, user)
655 |> get("/api/v1/notifications/#{notification.id}")
658 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
660 }\">@<span>#{user.nickname}</span></a></span>"
662 assert %{"status" => %{"content" => response}} = json_response(conn, 200)
663 assert response == expected_response
666 test "dismissing a single notification", %{conn: conn} do
668 other_user = insert(:user)
671 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
673 {:ok, [notification]} = Notification.create_notifications(activity)
677 |> assign(:user, user)
678 |> post("/api/v1/notifications/dismiss", %{"id" => notification.id})
680 assert %{} = json_response(conn, 200)
683 test "clearing all notifications", %{conn: conn} do
685 other_user = insert(:user)
688 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
690 {:ok, [_notification]} = Notification.create_notifications(activity)
694 |> assign(:user, user)
695 |> post("/api/v1/notifications/clear")
697 assert %{} = json_response(conn, 200)
701 |> assign(:user, user)
702 |> get("/api/v1/notifications")
704 assert all = json_response(conn, 200)
709 describe "reblogging" do
710 test "reblogs and returns the reblogged status", %{conn: conn} do
711 activity = insert(:note_activity)
716 |> assign(:user, user)
717 |> post("/api/v1/statuses/#{activity.id}/reblog")
719 assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} =
720 json_response(conn, 200)
722 assert to_string(activity.id) == id
726 describe "unreblogging" do
727 test "unreblogs and returns the unreblogged status", %{conn: conn} do
728 activity = insert(:note_activity)
731 {:ok, _, _} = CommonAPI.repeat(activity.id, user)
735 |> assign(:user, user)
736 |> post("/api/v1/statuses/#{activity.id}/unreblog")
738 assert %{"id" => id, "reblogged" => false, "reblogs_count" => 0} = json_response(conn, 200)
740 assert to_string(activity.id) == id
744 describe "favoriting" do
745 test "favs a status and returns it", %{conn: conn} do
746 activity = insert(:note_activity)
751 |> assign(:user, user)
752 |> post("/api/v1/statuses/#{activity.id}/favourite")
754 assert %{"id" => id, "favourites_count" => 1, "favourited" => true} =
755 json_response(conn, 200)
757 assert to_string(activity.id) == id
760 test "returns 500 for a wrong id", %{conn: conn} do
765 |> assign(:user, user)
766 |> post("/api/v1/statuses/1/favourite")
767 |> json_response(500)
769 assert resp == "Something went wrong"
773 describe "unfavoriting" do
774 test "unfavorites a status and returns it", %{conn: conn} do
775 activity = insert(:note_activity)
778 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
782 |> assign(:user, user)
783 |> post("/api/v1/statuses/#{activity.id}/unfavourite")
785 assert %{"id" => id, "favourites_count" => 0, "favourited" => false} =
786 json_response(conn, 200)
788 assert to_string(activity.id) == id
792 describe "user timelines" do
793 test "gets a users statuses", %{conn: conn} do
794 user_one = insert(:user)
795 user_two = insert(:user)
796 user_three = insert(:user)
798 {:ok, user_three} = User.follow(user_three, user_one)
800 {:ok, activity} = CommonAPI.post(user_one, %{"status" => "HI!!!"})
802 {:ok, direct_activity} =
803 CommonAPI.post(user_one, %{
804 "status" => "Hi, @#{user_two.nickname}.",
805 "visibility" => "direct"
808 {:ok, private_activity} =
809 CommonAPI.post(user_one, %{"status" => "private", "visibility" => "private"})
813 |> get("/api/v1/accounts/#{user_one.id}/statuses")
815 assert [%{"id" => id}] = json_response(resp, 200)
816 assert id == to_string(activity.id)
820 |> assign(:user, user_two)
821 |> get("/api/v1/accounts/#{user_one.id}/statuses")
823 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
824 assert id_one == to_string(direct_activity.id)
825 assert id_two == to_string(activity.id)
829 |> assign(:user, user_three)
830 |> get("/api/v1/accounts/#{user_one.id}/statuses")
832 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
833 assert id_one == to_string(private_activity.id)
834 assert id_two == to_string(activity.id)
837 test "unimplemented pinned statuses feature", %{conn: conn} do
838 note = insert(:note_activity)
839 user = User.get_by_ap_id(note.data["actor"])
843 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
845 assert json_response(conn, 200) == []
848 test "gets an users media", %{conn: conn} do
849 note = insert(:note_activity)
850 user = User.get_by_ap_id(note.data["actor"])
853 content_type: "image/jpg",
854 path: Path.absname("test/fixtures/image.jpg"),
855 filename: "an_image.jpg"
859 TwitterAPI.upload(file, user, "json")
863 TwitterAPI.create_status(user, %{"status" => "cofe", "media_ids" => [media["media_id"]]})
867 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "true"})
869 assert [%{"id" => id}] = json_response(conn, 200)
870 assert id == to_string(image_post.id)
874 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "1"})
876 assert [%{"id" => id}] = json_response(conn, 200)
877 assert id == to_string(image_post.id)
880 test "gets a user's statuses without reblogs", %{conn: conn} do
882 {:ok, post} = CommonAPI.post(user, %{"status" => "HI!!!"})
883 {:ok, _, _} = CommonAPI.repeat(post.id, user)
887 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "true"})
889 assert [%{"id" => id}] = json_response(conn, 200)
890 assert id == to_string(post.id)
894 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "1"})
896 assert [%{"id" => id}] = json_response(conn, 200)
897 assert id == to_string(post.id)
901 describe "user relationships" do
902 test "returns the relationships for the current user", %{conn: conn} do
904 other_user = insert(:user)
905 {:ok, user} = User.follow(user, other_user)
909 |> assign(:user, user)
910 |> get("/api/v1/accounts/relationships", %{"id" => [other_user.id]})
912 assert [relationship] = json_response(conn, 200)
914 assert to_string(other_user.id) == relationship["id"]
918 describe "locked accounts" do
919 test "/api/v1/follow_requests works" do
920 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
921 other_user = insert(:user)
923 {:ok, _activity} = ActivityPub.follow(other_user, user)
925 user = Repo.get(User, user.id)
926 other_user = Repo.get(User, other_user.id)
928 assert User.following?(other_user, user) == false
932 |> assign(:user, user)
933 |> get("/api/v1/follow_requests")
935 assert [relationship] = json_response(conn, 200)
936 assert to_string(other_user.id) == relationship["id"]
939 test "/api/v1/follow_requests/:id/authorize works" do
940 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
941 other_user = insert(:user)
943 {:ok, _activity} = ActivityPub.follow(other_user, user)
945 user = Repo.get(User, user.id)
946 other_user = Repo.get(User, other_user.id)
948 assert User.following?(other_user, user) == false
952 |> assign(:user, user)
953 |> post("/api/v1/follow_requests/#{other_user.id}/authorize")
955 assert relationship = json_response(conn, 200)
956 assert to_string(other_user.id) == relationship["id"]
958 user = Repo.get(User, user.id)
959 other_user = Repo.get(User, other_user.id)
961 assert User.following?(other_user, user) == true
964 test "verify_credentials", %{conn: conn} do
965 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "private"}})
969 |> assign(:user, user)
970 |> get("/api/v1/accounts/verify_credentials")
972 assert %{"id" => id, "source" => %{"privacy" => "private"}} = json_response(conn, 200)
973 assert id == to_string(user.id)
976 test "/api/v1/follow_requests/:id/reject works" do
977 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
978 other_user = insert(:user)
980 {:ok, _activity} = ActivityPub.follow(other_user, user)
984 |> assign(:user, user)
985 |> post("/api/v1/follow_requests/#{other_user.id}/reject")
987 assert relationship = json_response(conn, 200)
988 assert to_string(other_user.id) == relationship["id"]
990 user = Repo.get(User, user.id)
991 other_user = Repo.get(User, other_user.id)
993 assert User.following?(other_user, user) == false
997 test "account fetching", %{conn: conn} do
1002 |> get("/api/v1/accounts/#{user.id}")
1004 assert %{"id" => id} = json_response(conn, 200)
1005 assert id == to_string(user.id)
1009 |> get("/api/v1/accounts/-1")
1011 assert %{"error" => "Can't find user"} = json_response(conn, 404)
1014 test "media upload", %{conn: conn} do
1015 file = %Plug.Upload{
1016 content_type: "image/jpg",
1017 path: Path.absname("test/fixtures/image.jpg"),
1018 filename: "an_image.jpg"
1021 desc = "Description of the image"
1023 user = insert(:user)
1027 |> assign(:user, user)
1028 |> post("/api/v1/media", %{"file" => file, "description" => desc})
1030 assert media = json_response(conn, 200)
1032 assert media["type"] == "image"
1033 assert media["description"] == desc
1036 object = Repo.get(Object, media["id"])
1037 assert object.data["actor"] == User.ap_id(user)
1040 test "hashtag timeline", %{conn: conn} do
1041 following = insert(:user)
1044 {:ok, activity} = TwitterAPI.create_status(following, %{"status" => "test #2hu"})
1046 {:ok, [_activity]} =
1047 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
1051 |> get("/api/v1/timelines/tag/2hu")
1053 assert [%{"id" => id}] = json_response(nconn, 200)
1055 assert id == to_string(activity.id)
1057 # works for different capitalization too
1060 |> get("/api/v1/timelines/tag/2HU")
1062 assert [%{"id" => id}] = json_response(nconn, 200)
1064 assert id == to_string(activity.id)
1068 test "multi-hashtag timeline", %{conn: conn} do
1069 user = insert(:user)
1071 {:ok, activity_test} = CommonAPI.post(user, %{"status" => "#test"})
1072 {:ok, activity_test1} = CommonAPI.post(user, %{"status" => "#test #test1"})
1073 {:ok, activity_none} = CommonAPI.post(user, %{"status" => "#test #none"})
1077 |> get("/api/v1/timelines/tag/test", %{"any" => ["test1"]})
1079 [status_none, status_test1, status_test] = json_response(any_test, 200)
1081 assert to_string(activity_test.id) == status_test["id"]
1082 assert to_string(activity_test1.id) == status_test1["id"]
1083 assert to_string(activity_none.id) == status_none["id"]
1087 |> get("/api/v1/timelines/tag/test", %{"all" => ["test1"], "none" => ["none"]})
1089 assert [status_test1] == json_response(restricted_test, 200)
1091 all_test = conn |> get("/api/v1/timelines/tag/test", %{"all" => ["none"]})
1093 assert [status_none] == json_response(all_test, 200)
1096 test "getting followers", %{conn: conn} do
1097 user = insert(:user)
1098 other_user = insert(:user)
1099 {:ok, user} = User.follow(user, other_user)
1103 |> get("/api/v1/accounts/#{other_user.id}/followers")
1105 assert [%{"id" => id}] = json_response(conn, 200)
1106 assert id == to_string(user.id)
1109 test "getting followers, hide_followers", %{conn: conn} do
1110 user = insert(:user)
1111 other_user = insert(:user, %{info: %{hide_followers: true}})
1112 {:ok, _user} = User.follow(user, other_user)
1116 |> get("/api/v1/accounts/#{other_user.id}/followers")
1118 assert [] == json_response(conn, 200)
1121 test "getting followers, hide_followers, same user requesting", %{conn: conn} do
1122 user = insert(:user)
1123 other_user = insert(:user, %{info: %{hide_followers: true}})
1124 {:ok, _user} = User.follow(user, other_user)
1128 |> assign(:user, other_user)
1129 |> get("/api/v1/accounts/#{other_user.id}/followers")
1131 refute [] == json_response(conn, 200)
1134 test "getting following", %{conn: conn} do
1135 user = insert(:user)
1136 other_user = insert(:user)
1137 {:ok, user} = User.follow(user, other_user)
1141 |> get("/api/v1/accounts/#{user.id}/following")
1143 assert [%{"id" => id}] = json_response(conn, 200)
1144 assert id == to_string(other_user.id)
1147 test "getting following, hide_follows", %{conn: conn} do
1148 user = insert(:user, %{info: %{hide_follows: true}})
1149 other_user = insert(:user)
1150 {:ok, user} = User.follow(user, other_user)
1154 |> get("/api/v1/accounts/#{user.id}/following")
1156 assert [] == json_response(conn, 200)
1159 test "getting following, hide_follows, same user requesting", %{conn: conn} do
1160 user = insert(:user, %{info: %{hide_follows: true}})
1161 other_user = insert(:user)
1162 {:ok, user} = User.follow(user, other_user)
1166 |> assign(:user, user)
1167 |> get("/api/v1/accounts/#{user.id}/following")
1169 refute [] == json_response(conn, 200)
1172 test "following / unfollowing a user", %{conn: conn} do
1173 user = insert(:user)
1174 other_user = insert(:user)
1178 |> assign(:user, user)
1179 |> post("/api/v1/accounts/#{other_user.id}/follow")
1181 assert %{"id" => _id, "following" => true} = json_response(conn, 200)
1183 user = Repo.get(User, user.id)
1187 |> assign(:user, user)
1188 |> post("/api/v1/accounts/#{other_user.id}/unfollow")
1190 assert %{"id" => _id, "following" => false} = json_response(conn, 200)
1192 user = Repo.get(User, user.id)
1196 |> assign(:user, user)
1197 |> post("/api/v1/follows", %{"uri" => other_user.nickname})
1199 assert %{"id" => id} = json_response(conn, 200)
1200 assert id == to_string(other_user.id)
1203 test "blocking / unblocking a user", %{conn: conn} do
1204 user = insert(:user)
1205 other_user = insert(:user)
1209 |> assign(:user, user)
1210 |> post("/api/v1/accounts/#{other_user.id}/block")
1212 assert %{"id" => _id, "blocking" => true} = json_response(conn, 200)
1214 user = Repo.get(User, user.id)
1218 |> assign(:user, user)
1219 |> post("/api/v1/accounts/#{other_user.id}/unblock")
1221 assert %{"id" => _id, "blocking" => false} = json_response(conn, 200)
1224 test "getting a list of blocks", %{conn: conn} do
1225 user = insert(:user)
1226 other_user = insert(:user)
1228 {:ok, user} = User.block(user, other_user)
1232 |> assign(:user, user)
1233 |> get("/api/v1/blocks")
1235 other_user_id = to_string(other_user.id)
1236 assert [%{"id" => ^other_user_id}] = json_response(conn, 200)
1239 test "blocking / unblocking a domain", %{conn: conn} do
1240 user = insert(:user)
1241 other_user = insert(:user, %{ap_id: "https://dogwhistle.zone/@pundit"})
1245 |> assign(:user, user)
1246 |> post("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1248 assert %{} = json_response(conn, 200)
1249 user = User.get_cached_by_ap_id(user.ap_id)
1250 assert User.blocks?(user, other_user)
1254 |> assign(:user, user)
1255 |> delete("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1257 assert %{} = json_response(conn, 200)
1258 user = User.get_cached_by_ap_id(user.ap_id)
1259 refute User.blocks?(user, other_user)
1262 test "getting a list of domain blocks", %{conn: conn} do
1263 user = insert(:user)
1265 {:ok, user} = User.block_domain(user, "bad.site")
1266 {:ok, user} = User.block_domain(user, "even.worse.site")
1270 |> assign(:user, user)
1271 |> get("/api/v1/domain_blocks")
1273 domain_blocks = json_response(conn, 200)
1275 assert "bad.site" in domain_blocks
1276 assert "even.worse.site" in domain_blocks
1279 test "unimplemented mute endpoints" do
1280 user = insert(:user)
1281 other_user = insert(:user)
1284 |> Enum.each(fn endpoint ->
1287 |> assign(:user, user)
1288 |> post("/api/v1/accounts/#{other_user.id}/#{endpoint}")
1290 assert %{"id" => id} = json_response(conn, 200)
1291 assert id == to_string(other_user.id)
1295 test "unimplemented mutes, follow_requests, blocks, domain blocks" do
1296 user = insert(:user)
1298 ["blocks", "domain_blocks", "mutes", "follow_requests"]
1299 |> Enum.each(fn endpoint ->
1302 |> assign(:user, user)
1303 |> get("/api/v1/#{endpoint}")
1305 assert [] = json_response(conn, 200)
1309 test "account search", %{conn: conn} do
1310 user = insert(:user)
1311 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1312 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1316 |> assign(:user, user)
1317 |> get("/api/v1/accounts/search", %{"q" => "shp"})
1318 |> json_response(200)
1320 result_ids = for result <- results, do: result["acct"]
1322 assert user_two.nickname in result_ids
1323 assert user_three.nickname in result_ids
1327 |> assign(:user, user)
1328 |> get("/api/v1/accounts/search", %{"q" => "2hu"})
1329 |> json_response(200)
1331 result_ids = for result <- results, do: result["acct"]
1333 assert user_three.nickname in result_ids
1336 test "search", %{conn: conn} do
1337 user = insert(:user)
1338 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1339 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1341 {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
1344 CommonAPI.post(user, %{
1345 "status" => "This is about 2hu, but private",
1346 "visibility" => "private"
1349 {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
1353 |> get("/api/v1/search", %{"q" => "2hu"})
1355 assert results = json_response(conn, 200)
1357 [account | _] = results["accounts"]
1358 assert account["id"] == to_string(user_three.id)
1360 assert results["hashtags"] == []
1362 [status] = results["statuses"]
1363 assert status["id"] == to_string(activity.id)
1366 test "search fetches remote statuses", %{conn: conn} do
1370 |> get("/api/v1/search", %{"q" => "https://shitposter.club/notice/2827873"})
1372 assert results = json_response(conn, 200)
1374 [status] = results["statuses"]
1375 assert status["uri"] == "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"
1379 test "search doesn't show statuses that it shouldn't", %{conn: conn} do
1381 CommonAPI.post(insert(:user), %{
1382 "status" => "This is about 2hu, but private",
1383 "visibility" => "private"
1389 |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]})
1391 assert results = json_response(conn, 200)
1393 [] = results["statuses"]
1397 test "search fetches remote accounts", %{conn: conn} do
1400 |> get("/api/v1/search", %{"q" => "shp@social.heldscal.la", "resolve" => "true"})
1402 assert results = json_response(conn, 200)
1403 [account] = results["accounts"]
1404 assert account["acct"] == "shp@social.heldscal.la"
1407 test "returns the favorites of a user", %{conn: conn} do
1408 user = insert(:user)
1409 other_user = insert(:user)
1411 {:ok, _} = CommonAPI.post(other_user, %{"status" => "bla"})
1412 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "traps are happy"})
1414 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
1418 |> assign(:user, user)
1419 |> get("/api/v1/favourites")
1421 assert [status] = json_response(first_conn, 200)
1422 assert status["id"] == to_string(activity.id)
1424 assert [{"link", _link_header}] =
1425 Enum.filter(first_conn.resp_headers, fn element -> match?({"link", _}, element) end)
1427 # Honours query params
1428 {:ok, second_activity} =
1429 CommonAPI.post(other_user, %{
1431 "Trees Are Never Sad Look At Them Every Once In Awhile They're Quite Beautiful."
1434 {:ok, _, _} = CommonAPI.favorite(second_activity.id, user)
1436 last_like = status["id"]
1440 |> assign(:user, user)
1441 |> get("/api/v1/favourites?since_id=#{last_like}")
1443 assert [second_status] = json_response(second_conn, 200)
1444 assert second_status["id"] == to_string(second_activity.id)
1448 |> assign(:user, user)
1449 |> get("/api/v1/favourites?limit=0")
1451 assert [] = json_response(third_conn, 200)
1454 describe "updating credentials" do
1455 test "updates the user's bio", %{conn: conn} do
1456 user = insert(:user)
1457 user2 = insert(:user)
1461 |> assign(:user, user)
1462 |> patch("/api/v1/accounts/update_credentials", %{
1463 "note" => "I drink #cofe with @#{user2.nickname}"
1466 assert user = json_response(conn, 200)
1468 assert user["note"] ==
1469 "I drink <a class=\"hashtag\" data-tag=\"cofe\" href=\"http://localhost:4001/tag/cofe\">#cofe</a> with <span class=\"h-card\"><a data-user=\"#{
1471 }\" class=\"u-url mention\" href=\"#{user2.ap_id}\">@<span>#{user2.nickname}</span></a></span>"
1474 test "updates the user's locking status", %{conn: conn} do
1475 user = insert(:user)
1479 |> assign(:user, user)
1480 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
1482 assert user = json_response(conn, 200)
1483 assert user["locked"] == true
1486 test "updates the user's name", %{conn: conn} do
1487 user = insert(:user)
1491 |> assign(:user, user)
1492 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
1494 assert user = json_response(conn, 200)
1495 assert user["display_name"] == "markorepairs"
1498 test "updates the user's avatar", %{conn: conn} do
1499 user = insert(:user)
1501 new_avatar = %Plug.Upload{
1502 content_type: "image/jpg",
1503 path: Path.absname("test/fixtures/image.jpg"),
1504 filename: "an_image.jpg"
1509 |> assign(:user, user)
1510 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
1512 assert user_response = json_response(conn, 200)
1513 assert user_response["avatar"] != User.avatar_url(user)
1516 test "updates the user's banner", %{conn: conn} do
1517 user = insert(:user)
1519 new_header = %Plug.Upload{
1520 content_type: "image/jpg",
1521 path: Path.absname("test/fixtures/image.jpg"),
1522 filename: "an_image.jpg"
1527 |> assign(:user, user)
1528 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
1530 assert user_response = json_response(conn, 200)
1531 assert user_response["header"] != User.banner_url(user)
1535 test "get instance information", %{conn: conn} do
1536 user = insert(:user, %{local: true})
1538 user2 = insert(:user, %{local: true})
1539 {:ok, _user2} = User.deactivate(user2, !user2.info.deactivated)
1541 insert(:user, %{local: false, nickname: "u@peer1.com"})
1542 insert(:user, %{local: false, nickname: "u@peer2.com"})
1544 {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})
1546 # Stats should count users with missing or nil `info.deactivated` value
1547 user = Repo.get(User, user.id)
1548 info_change = Changeset.change(user.info, %{deactivated: nil})
1552 |> Changeset.change()
1553 |> Changeset.put_embed(:info, info_change)
1554 |> User.update_and_set_cache()
1556 Pleroma.Stats.update_stats()
1558 conn = get(conn, "/api/v1/instance")
1560 assert result = json_response(conn, 200)
1562 stats = result["stats"]
1565 assert stats["user_count"] == 1
1566 assert stats["status_count"] == 1
1567 assert stats["domain_count"] == 2
1570 test "get peers", %{conn: conn} do
1571 insert(:user, %{local: false, nickname: "u@peer1.com"})
1572 insert(:user, %{local: false, nickname: "u@peer2.com"})
1574 Pleroma.Stats.update_stats()
1576 conn = get(conn, "/api/v1/instance/peers")
1578 assert result = json_response(conn, 200)
1580 assert ["peer1.com", "peer2.com"] == Enum.sort(result)
1583 test "put settings", %{conn: conn} do
1584 user = insert(:user)
1588 |> assign(:user, user)
1589 |> put("/api/web/settings", %{"data" => %{"programming" => "socks"}})
1591 assert _result = json_response(conn, 200)
1593 user = User.get_cached_by_ap_id(user.ap_id)
1594 assert user.info.settings == %{"programming" => "socks"}
1597 describe "pinned statuses" do
1599 Pleroma.Config.put([:instance, :max_pinned_statuses], 1)
1601 user = insert(:user)
1602 {:ok, activity} = CommonAPI.post(user, %{"status" => "HI!!!"})
1604 [user: user, activity: activity]
1607 test "returns pinned statuses", %{conn: conn, user: user, activity: activity} do
1608 {:ok, _} = CommonAPI.pin(activity.id, user)
1612 |> assign(:user, user)
1613 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1614 |> json_response(200)
1616 id_str = to_string(activity.id)
1618 assert [%{"id" => ^id_str, "pinned" => true}] = result
1621 test "pin status", %{conn: conn, user: user, activity: activity} do
1622 id_str = to_string(activity.id)
1624 assert %{"id" => ^id_str, "pinned" => true} =
1626 |> assign(:user, user)
1627 |> post("/api/v1/statuses/#{activity.id}/pin")
1628 |> json_response(200)
1630 assert [%{"id" => ^id_str, "pinned" => true}] =
1632 |> assign(:user, user)
1633 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1634 |> json_response(200)
1637 test "unpin status", %{conn: conn, user: user, activity: activity} do
1638 {:ok, _} = CommonAPI.pin(activity.id, user)
1640 id_str = to_string(activity.id)
1641 user = refresh_record(user)
1643 assert %{"id" => ^id_str, "pinned" => false} =
1645 |> assign(:user, user)
1646 |> post("/api/v1/statuses/#{activity.id}/unpin")
1647 |> json_response(200)
1651 |> assign(:user, user)
1652 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1653 |> json_response(200)
1656 test "max pinned statuses", %{conn: conn, user: user, activity: activity_one} do
1657 {:ok, activity_two} = CommonAPI.post(user, %{"status" => "HI!!!"})
1659 id_str_one = to_string(activity_one.id)
1661 assert %{"id" => ^id_str_one, "pinned" => true} =
1663 |> assign(:user, user)
1664 |> post("/api/v1/statuses/#{id_str_one}/pin")
1665 |> json_response(200)
1667 user = refresh_record(user)
1669 assert %{"error" => "You have already pinned the maximum number of statuses"} =
1671 |> assign(:user, user)
1672 |> post("/api/v1/statuses/#{activity_two.id}/pin")
1673 |> json_response(400)
1676 test "Status rich-media Card", %{conn: conn, user: user} do
1677 Pleroma.Config.put([:rich_media, :enabled], true)
1678 {:ok, activity} = CommonAPI.post(user, %{"status" => "http://example.com/ogp"})
1682 |> get("/api/v1/statuses/#{activity.id}/card")
1683 |> json_response(200)
1685 assert response == %{
1686 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1687 "provider_name" => "www.imdb.com",
1688 "provider_url" => "http://www.imdb.com",
1689 "title" => "The Rock",
1691 "url" => "http://www.imdb.com/title/tt0117500/",
1692 "description" => nil,
1695 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1696 "title" => "The Rock",
1697 "type" => "video.movie",
1698 "url" => "http://www.imdb.com/title/tt0117500/"
1703 Pleroma.Config.put([:rich_media, :enabled], false)
1708 user = insert(:user)
1709 for_user = insert(:user)
1712 CommonAPI.post(user, %{
1713 "status" => "heweoo?"
1717 CommonAPI.post(user, %{
1718 "status" => "heweoo!"
1723 |> assign(:user, for_user)
1724 |> post("/api/v1/statuses/#{activity1.id}/bookmark")
1726 assert json_response(response1, 200)["bookmarked"] == true
1730 |> assign(:user, for_user)
1731 |> post("/api/v1/statuses/#{activity2.id}/bookmark")
1733 assert json_response(response2, 200)["bookmarked"] == true
1737 |> assign(:user, for_user)
1738 |> get("/api/v1/bookmarks")
1740 assert [json_response(response2, 200), json_response(response1, 200)] ==
1741 json_response(bookmarks, 200)
1745 |> assign(:user, for_user)
1746 |> post("/api/v1/statuses/#{activity1.id}/unbookmark")
1748 assert json_response(response1, 200)["bookmarked"] == false
1752 |> assign(:user, for_user)
1753 |> get("/api/v1/bookmarks")
1755 assert [json_response(response2, 200)] == json_response(bookmarks, 200)