1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do
6 use Pleroma.Web.ConnCase
8 alias Pleroma.Web.TwitterAPI.TwitterAPI
9 alias Pleroma.{Repo, User, Object, Activity, Notification}
10 alias Pleroma.Web.{OStatus, CommonAPI}
11 alias Pleroma.Web.ActivityPub.ActivityPub
12 alias Pleroma.Web.MastodonAPI.FilterView
14 import Pleroma.Factory
15 import ExUnit.CaptureLog
19 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
23 test "the home timeline", %{conn: conn} do
25 following = insert(:user)
27 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
31 |> assign(:user, user)
32 |> get("/api/v1/timelines/home")
34 assert length(json_response(conn, 200)) == 0
36 {:ok, user} = User.follow(user, following)
40 |> assign(:user, user)
41 |> get("/api/v1/timelines/home")
43 assert [%{"content" => "test"}] = json_response(conn, 200)
46 test "the public timeline", %{conn: conn} do
47 following = insert(:user)
50 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
53 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
57 |> get("/api/v1/timelines/public", %{"local" => "False"})
59 assert length(json_response(conn, 200)) == 2
63 |> get("/api/v1/timelines/public", %{"local" => "True"})
65 assert [%{"content" => "test"}] = json_response(conn, 200)
69 |> get("/api/v1/timelines/public", %{"local" => "1"})
71 assert [%{"content" => "test"}] = json_response(conn, 200)
75 test "posting a status", %{conn: conn} do
78 idempotency_key = "Pikachu rocks!"
82 |> assign(:user, user)
83 |> put_req_header("idempotency-key", idempotency_key)
84 |> post("/api/v1/statuses", %{
86 "spoiler_text" => "2hu",
87 "sensitive" => "false"
90 {:ok, ttl} = Cachex.ttl(:idempotency_cache, idempotency_key)
92 assert ttl > :timer.seconds(6 * 60 * 60 - 1)
94 assert %{"content" => "cofe", "id" => id, "spoiler_text" => "2hu", "sensitive" => false} =
95 json_response(conn_one, 200)
97 assert Repo.get(Activity, id)
101 |> assign(:user, user)
102 |> put_req_header("idempotency-key", idempotency_key)
103 |> post("/api/v1/statuses", %{
105 "spoiler_text" => "2hu",
106 "sensitive" => "false"
109 assert %{"id" => second_id} = json_response(conn_two, 200)
111 assert id == second_id
115 |> assign(:user, user)
116 |> post("/api/v1/statuses", %{
118 "spoiler_text" => "2hu",
119 "sensitive" => "false"
122 assert %{"id" => third_id} = json_response(conn_three, 200)
124 refute id == third_id
127 test "posting a sensitive status", %{conn: conn} do
132 |> assign(:user, user)
133 |> post("/api/v1/statuses", %{"status" => "cofe", "sensitive" => true})
135 assert %{"content" => "cofe", "id" => id, "sensitive" => true} = json_response(conn, 200)
136 assert Repo.get(Activity, id)
139 test "posting a status with OGP link preview", %{conn: conn} do
144 |> assign(:user, user)
145 |> post("/api/v1/statuses", %{
146 "status" => "http://example.com/ogp"
149 assert %{"id" => id, "card" => %{"title" => "The Rock"}} = json_response(conn, 200)
150 assert Repo.get(Activity, id)
153 test "posting a direct status", %{conn: conn} do
154 user1 = insert(:user)
155 user2 = insert(:user)
156 content = "direct cofe @#{user2.nickname}"
160 |> assign(:user, user1)
161 |> post("api/v1/statuses", %{"status" => content, "visibility" => "direct"})
163 assert %{"id" => id, "visibility" => "direct"} = json_response(conn, 200)
164 assert activity = Repo.get(Activity, id)
165 assert activity.recipients == [user2.ap_id, user1.ap_id]
166 assert activity.data["to"] == [user2.ap_id]
167 assert activity.data["cc"] == []
170 test "direct timeline", %{conn: conn} do
171 user_one = insert(:user)
172 user_two = insert(:user)
174 {:ok, user_two} = User.follow(user_two, user_one)
177 CommonAPI.post(user_one, %{
178 "status" => "Hi @#{user_two.nickname}!",
179 "visibility" => "direct"
182 {:ok, _follower_only} =
183 CommonAPI.post(user_one, %{
184 "status" => "Hi @#{user_two.nickname}!",
185 "visibility" => "private"
188 # Only direct should be visible here
191 |> assign(:user, user_two)
192 |> get("api/v1/timelines/direct")
194 [status] = json_response(res_conn, 200)
196 assert %{"visibility" => "direct"} = status
197 assert status["url"] != direct.data["id"]
199 # User should be able to see his own direct message
202 |> assign(:user, user_one)
203 |> get("api/v1/timelines/direct")
205 [status] = json_response(res_conn, 200)
207 assert %{"visibility" => "direct"} = status
209 # Both should be visible here
212 |> assign(:user, user_two)
213 |> get("api/v1/timelines/home")
215 [_s1, _s2] = json_response(res_conn, 200)
218 Enum.each(1..20, fn _ ->
220 CommonAPI.post(user_one, %{
221 "status" => "Hi @#{user_two.nickname}!",
222 "visibility" => "direct"
228 |> assign(:user, user_two)
229 |> get("api/v1/timelines/direct")
231 statuses = json_response(res_conn, 200)
232 assert length(statuses) == 20
236 |> assign(:user, user_two)
237 |> get("api/v1/timelines/direct", %{max_id: List.last(statuses)["id"]})
239 [status] = json_response(res_conn, 200)
241 assert status["url"] != direct.data["id"]
244 test "replying to a status", %{conn: conn} do
247 {:ok, replied_to} = TwitterAPI.create_status(user, %{"status" => "cofe"})
251 |> assign(:user, user)
252 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id})
254 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
256 activity = Repo.get(Activity, id)
258 assert activity.data["context"] == replied_to.data["context"]
259 assert activity.data["object"]["inReplyToStatusId"] == replied_to.id
262 test "posting a status with an invalid in_reply_to_id", %{conn: conn} do
267 |> assign(:user, user)
268 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => ""})
270 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
272 activity = Repo.get(Activity, id)
277 test "verify_credentials", %{conn: conn} do
282 |> assign(:user, user)
283 |> get("/api/v1/accounts/verify_credentials")
285 assert %{"id" => id, "source" => %{"privacy" => "public"}} = json_response(conn, 200)
286 assert id == to_string(user.id)
289 test "verify_credentials default scope unlisted", %{conn: conn} do
290 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "unlisted"}})
294 |> assign(:user, user)
295 |> get("/api/v1/accounts/verify_credentials")
297 assert %{"id" => id, "source" => %{"privacy" => "unlisted"}} = json_response(conn, 200)
298 assert id == to_string(user.id)
301 test "get a status", %{conn: conn} do
302 activity = insert(:note_activity)
306 |> get("/api/v1/statuses/#{activity.id}")
308 assert %{"id" => id} = json_response(conn, 200)
309 assert id == to_string(activity.id)
312 describe "deleting a status" do
313 test "when you created it", %{conn: conn} do
314 activity = insert(:note_activity)
315 author = User.get_by_ap_id(activity.data["actor"])
319 |> assign(:user, author)
320 |> delete("/api/v1/statuses/#{activity.id}")
322 assert %{} = json_response(conn, 200)
324 refute Repo.get(Activity, activity.id)
327 test "when you didn't create it", %{conn: conn} do
328 activity = insert(:note_activity)
333 |> assign(:user, user)
334 |> delete("/api/v1/statuses/#{activity.id}")
336 assert %{"error" => _} = json_response(conn, 403)
338 assert Repo.get(Activity, activity.id) == activity
342 describe "filters" do
343 test "creating a filter", %{conn: conn} do
346 filter = %Pleroma.Filter{
353 |> assign(:user, user)
354 |> post("/api/v1/filters", %{"phrase" => filter.phrase, context: filter.context})
356 assert response = json_response(conn, 200)
357 assert response["phrase"] == filter.phrase
358 assert response["context"] == filter.context
359 assert response["id"] != nil
360 assert response["id"] != ""
363 test "fetching a list of filters", %{conn: conn} do
366 query_one = %Pleroma.Filter{
373 query_two = %Pleroma.Filter{
380 {:ok, filter_one} = Pleroma.Filter.create(query_one)
381 {:ok, filter_two} = Pleroma.Filter.create(query_two)
385 |> assign(:user, user)
386 |> get("/api/v1/filters")
387 |> json_response(200)
393 filters: [filter_two, filter_one]
397 test "get a filter", %{conn: conn} do
400 query = %Pleroma.Filter{
407 {:ok, filter} = Pleroma.Filter.create(query)
411 |> assign(:user, user)
412 |> get("/api/v1/filters/#{filter.filter_id}")
414 assert _response = json_response(conn, 200)
417 test "update a filter", %{conn: conn} do
420 query = %Pleroma.Filter{
427 {:ok, _filter} = Pleroma.Filter.create(query)
429 new = %Pleroma.Filter{
436 |> assign(:user, user)
437 |> put("/api/v1/filters/#{query.filter_id}", %{
442 assert response = json_response(conn, 200)
443 assert response["phrase"] == new.phrase
444 assert response["context"] == new.context
447 test "delete a filter", %{conn: conn} do
450 query = %Pleroma.Filter{
457 {:ok, filter} = Pleroma.Filter.create(query)
461 |> assign(:user, user)
462 |> delete("/api/v1/filters/#{filter.filter_id}")
464 assert response = json_response(conn, 200)
465 assert response == %{}
470 test "creating a list", %{conn: conn} do
475 |> assign(:user, user)
476 |> post("/api/v1/lists", %{"title" => "cuties"})
478 assert %{"title" => title} = json_response(conn, 200)
479 assert title == "cuties"
482 test "adding users to a list", %{conn: conn} do
484 other_user = insert(:user)
485 {:ok, list} = Pleroma.List.create("name", user)
489 |> assign(:user, user)
490 |> post("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
492 assert %{} == json_response(conn, 200)
493 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
494 assert following == [other_user.follower_address]
497 test "removing users from a list", %{conn: conn} do
499 other_user = insert(:user)
500 third_user = insert(:user)
501 {:ok, list} = Pleroma.List.create("name", user)
502 {:ok, list} = Pleroma.List.follow(list, other_user)
503 {:ok, list} = Pleroma.List.follow(list, third_user)
507 |> assign(:user, user)
508 |> delete("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
510 assert %{} == json_response(conn, 200)
511 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
512 assert following == [third_user.follower_address]
515 test "listing users in a list", %{conn: conn} do
517 other_user = insert(:user)
518 {:ok, list} = Pleroma.List.create("name", user)
519 {:ok, list} = Pleroma.List.follow(list, other_user)
523 |> assign(:user, user)
524 |> get("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
526 assert [%{"id" => id}] = json_response(conn, 200)
527 assert id == to_string(other_user.id)
530 test "retrieving a list", %{conn: conn} do
532 {:ok, list} = Pleroma.List.create("name", user)
536 |> assign(:user, user)
537 |> get("/api/v1/lists/#{list.id}")
539 assert %{"id" => id} = json_response(conn, 200)
540 assert id == to_string(list.id)
543 test "renaming a list", %{conn: conn} do
545 {:ok, list} = Pleroma.List.create("name", user)
549 |> assign(:user, user)
550 |> put("/api/v1/lists/#{list.id}", %{"title" => "newname"})
552 assert %{"title" => name} = json_response(conn, 200)
553 assert name == "newname"
556 test "deleting a list", %{conn: conn} do
558 {:ok, list} = Pleroma.List.create("name", user)
562 |> assign(:user, user)
563 |> delete("/api/v1/lists/#{list.id}")
565 assert %{} = json_response(conn, 200)
566 assert is_nil(Repo.get(Pleroma.List, list.id))
569 test "list timeline", %{conn: conn} do
571 other_user = insert(:user)
572 {:ok, _activity_one} = TwitterAPI.create_status(user, %{"status" => "Marisa is cute."})
573 {:ok, activity_two} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
574 {:ok, list} = Pleroma.List.create("name", user)
575 {:ok, list} = Pleroma.List.follow(list, other_user)
579 |> assign(:user, user)
580 |> get("/api/v1/timelines/list/#{list.id}")
582 assert [%{"id" => id}] = json_response(conn, 200)
584 assert id == to_string(activity_two.id)
587 test "list timeline does not leak non-public statuses for unfollowed users", %{conn: conn} do
589 other_user = insert(:user)
590 {:ok, activity_one} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
592 {:ok, _activity_two} =
593 TwitterAPI.create_status(other_user, %{
594 "status" => "Marisa is cute.",
595 "visibility" => "private"
598 {:ok, list} = Pleroma.List.create("name", user)
599 {:ok, list} = Pleroma.List.follow(list, other_user)
603 |> assign(:user, user)
604 |> get("/api/v1/timelines/list/#{list.id}")
606 assert [%{"id" => id}] = json_response(conn, 200)
608 assert id == to_string(activity_one.id)
612 describe "notifications" do
613 test "list of notifications", %{conn: conn} do
615 other_user = insert(:user)
618 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
620 {:ok, [_notification]} = Notification.create_notifications(activity)
624 |> assign(:user, user)
625 |> get("/api/v1/notifications")
628 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
630 }\">@<span>#{user.nickname}</span></a></span>"
632 assert [%{"status" => %{"content" => response}} | _rest] = json_response(conn, 200)
633 assert response == expected_response
636 test "getting a single notification", %{conn: conn} do
638 other_user = insert(:user)
641 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
643 {:ok, [notification]} = Notification.create_notifications(activity)
647 |> assign(:user, user)
648 |> get("/api/v1/notifications/#{notification.id}")
651 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
653 }\">@<span>#{user.nickname}</span></a></span>"
655 assert %{"status" => %{"content" => response}} = json_response(conn, 200)
656 assert response == expected_response
659 test "dismissing a single notification", %{conn: conn} do
661 other_user = insert(:user)
664 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
666 {:ok, [notification]} = Notification.create_notifications(activity)
670 |> assign(:user, user)
671 |> post("/api/v1/notifications/dismiss", %{"id" => notification.id})
673 assert %{} = json_response(conn, 200)
676 test "clearing all notifications", %{conn: conn} do
678 other_user = insert(:user)
681 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
683 {:ok, [_notification]} = Notification.create_notifications(activity)
687 |> assign(:user, user)
688 |> post("/api/v1/notifications/clear")
690 assert %{} = json_response(conn, 200)
694 |> assign(:user, user)
695 |> get("/api/v1/notifications")
697 assert all = json_response(conn, 200)
702 describe "reblogging" do
703 test "reblogs and returns the reblogged status", %{conn: conn} do
704 activity = insert(:note_activity)
709 |> assign(:user, user)
710 |> post("/api/v1/statuses/#{activity.id}/reblog")
712 assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} =
713 json_response(conn, 200)
715 assert to_string(activity.id) == id
719 describe "unreblogging" do
720 test "unreblogs and returns the unreblogged status", %{conn: conn} do
721 activity = insert(:note_activity)
724 {:ok, _, _} = CommonAPI.repeat(activity.id, user)
728 |> assign(:user, user)
729 |> post("/api/v1/statuses/#{activity.id}/unreblog")
731 assert %{"id" => id, "reblogged" => false, "reblogs_count" => 0} = json_response(conn, 200)
733 assert to_string(activity.id) == id
737 describe "favoriting" do
738 test "favs a status and returns it", %{conn: conn} do
739 activity = insert(:note_activity)
744 |> assign(:user, user)
745 |> post("/api/v1/statuses/#{activity.id}/favourite")
747 assert %{"id" => id, "favourites_count" => 1, "favourited" => true} =
748 json_response(conn, 200)
750 assert to_string(activity.id) == id
753 test "returns 500 for a wrong id", %{conn: conn} do
758 |> assign(:user, user)
759 |> post("/api/v1/statuses/1/favourite")
760 |> json_response(500)
762 assert resp == "Something went wrong"
766 describe "unfavoriting" do
767 test "unfavorites a status and returns it", %{conn: conn} do
768 activity = insert(:note_activity)
771 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
775 |> assign(:user, user)
776 |> post("/api/v1/statuses/#{activity.id}/unfavourite")
778 assert %{"id" => id, "favourites_count" => 0, "favourited" => false} =
779 json_response(conn, 200)
781 assert to_string(activity.id) == id
785 describe "user timelines" do
786 test "gets a users statuses", %{conn: conn} do
787 user_one = insert(:user)
788 user_two = insert(:user)
789 user_three = insert(:user)
791 {:ok, user_three} = User.follow(user_three, user_one)
793 {:ok, activity} = CommonAPI.post(user_one, %{"status" => "HI!!!"})
795 {:ok, direct_activity} =
796 CommonAPI.post(user_one, %{
797 "status" => "Hi, @#{user_two.nickname}.",
798 "visibility" => "direct"
801 {:ok, private_activity} =
802 CommonAPI.post(user_one, %{"status" => "private", "visibility" => "private"})
806 |> get("/api/v1/accounts/#{user_one.id}/statuses")
808 assert [%{"id" => id}] = json_response(resp, 200)
809 assert id == to_string(activity.id)
813 |> assign(:user, user_two)
814 |> get("/api/v1/accounts/#{user_one.id}/statuses")
816 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
817 assert id_one == to_string(direct_activity.id)
818 assert id_two == to_string(activity.id)
822 |> assign(:user, user_three)
823 |> get("/api/v1/accounts/#{user_one.id}/statuses")
825 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
826 assert id_one == to_string(private_activity.id)
827 assert id_two == to_string(activity.id)
830 test "unimplemented pinned statuses feature", %{conn: conn} do
831 note = insert(:note_activity)
832 user = User.get_by_ap_id(note.data["actor"])
836 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
838 assert json_response(conn, 200) == []
841 test "gets an users media", %{conn: conn} do
842 note = insert(:note_activity)
843 user = User.get_by_ap_id(note.data["actor"])
846 content_type: "image/jpg",
847 path: Path.absname("test/fixtures/image.jpg"),
848 filename: "an_image.jpg"
852 TwitterAPI.upload(file, user, "json")
856 TwitterAPI.create_status(user, %{"status" => "cofe", "media_ids" => [media["media_id"]]})
860 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "true"})
862 assert [%{"id" => id}] = json_response(conn, 200)
863 assert id == to_string(image_post.id)
867 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "1"})
869 assert [%{"id" => id}] = json_response(conn, 200)
870 assert id == to_string(image_post.id)
873 test "gets a user's statuses without reblogs", %{conn: conn} do
875 {:ok, post} = CommonAPI.post(user, %{"status" => "HI!!!"})
876 {:ok, _, _} = CommonAPI.repeat(post.id, user)
880 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "true"})
882 assert [%{"id" => id}] = json_response(conn, 200)
883 assert id == to_string(post.id)
887 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "1"})
889 assert [%{"id" => id}] = json_response(conn, 200)
890 assert id == to_string(post.id)
894 describe "user relationships" do
895 test "returns the relationships for the current user", %{conn: conn} do
897 other_user = insert(:user)
898 {:ok, user} = User.follow(user, other_user)
902 |> assign(:user, user)
903 |> get("/api/v1/accounts/relationships", %{"id" => [other_user.id]})
905 assert [relationship] = json_response(conn, 200)
907 assert to_string(other_user.id) == relationship["id"]
911 describe "locked accounts" do
912 test "/api/v1/follow_requests works" do
913 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
914 other_user = insert(:user)
916 {:ok, _activity} = ActivityPub.follow(other_user, user)
918 user = Repo.get(User, user.id)
919 other_user = Repo.get(User, other_user.id)
921 assert User.following?(other_user, user) == false
925 |> assign(:user, user)
926 |> get("/api/v1/follow_requests")
928 assert [relationship] = json_response(conn, 200)
929 assert to_string(other_user.id) == relationship["id"]
932 test "/api/v1/follow_requests/:id/authorize works" do
933 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
934 other_user = insert(:user)
936 {:ok, _activity} = ActivityPub.follow(other_user, user)
938 user = Repo.get(User, user.id)
939 other_user = Repo.get(User, other_user.id)
941 assert User.following?(other_user, user) == false
945 |> assign(:user, user)
946 |> post("/api/v1/follow_requests/#{other_user.id}/authorize")
948 assert relationship = json_response(conn, 200)
949 assert to_string(other_user.id) == relationship["id"]
951 user = Repo.get(User, user.id)
952 other_user = Repo.get(User, other_user.id)
954 assert User.following?(other_user, user) == true
957 test "verify_credentials", %{conn: conn} do
958 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "private"}})
962 |> assign(:user, user)
963 |> get("/api/v1/accounts/verify_credentials")
965 assert %{"id" => id, "source" => %{"privacy" => "private"}} = json_response(conn, 200)
966 assert id == to_string(user.id)
969 test "/api/v1/follow_requests/:id/reject works" do
970 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
971 other_user = insert(:user)
973 {:ok, _activity} = ActivityPub.follow(other_user, user)
977 |> assign(:user, user)
978 |> post("/api/v1/follow_requests/#{other_user.id}/reject")
980 assert relationship = json_response(conn, 200)
981 assert to_string(other_user.id) == relationship["id"]
983 user = Repo.get(User, user.id)
984 other_user = Repo.get(User, other_user.id)
986 assert User.following?(other_user, user) == false
990 test "account fetching", %{conn: conn} do
995 |> get("/api/v1/accounts/#{user.id}")
997 assert %{"id" => id} = json_response(conn, 200)
998 assert id == to_string(user.id)
1002 |> get("/api/v1/accounts/-1")
1004 assert %{"error" => "Can't find user"} = json_response(conn, 404)
1007 test "media upload", %{conn: conn} do
1008 file = %Plug.Upload{
1009 content_type: "image/jpg",
1010 path: Path.absname("test/fixtures/image.jpg"),
1011 filename: "an_image.jpg"
1014 desc = "Description of the image"
1016 user = insert(:user)
1020 |> assign(:user, user)
1021 |> post("/api/v1/media", %{"file" => file, "description" => desc})
1023 assert media = json_response(conn, 200)
1025 assert media["type"] == "image"
1026 assert media["description"] == desc
1029 object = Repo.get(Object, media["id"])
1030 assert object.data["actor"] == User.ap_id(user)
1033 test "hashtag timeline", %{conn: conn} do
1034 following = insert(:user)
1037 {:ok, activity} = TwitterAPI.create_status(following, %{"status" => "test #2hu"})
1039 {:ok, [_activity]} =
1040 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
1044 |> get("/api/v1/timelines/tag/2hu")
1046 assert [%{"id" => id}] = json_response(nconn, 200)
1048 assert id == to_string(activity.id)
1050 # works for different capitalization too
1053 |> get("/api/v1/timelines/tag/2HU")
1055 assert [%{"id" => id}] = json_response(nconn, 200)
1057 assert id == to_string(activity.id)
1061 test "multi-hashtag timeline", %{conn: conn} do
1062 user = insert(:user)
1064 {:ok, activity_test} = CommonAPI.post(user, %{"status" => "#test"})
1065 {:ok, activity_test1} = CommonAPI.post(user, %{"status" => "#test #test1"})
1066 {:ok, activity_none} = CommonAPI.post(user, %{"status" => "#test #none"})
1070 |> get("/api/v1/timelines/tag/test", %{"any" => ["test1"]})
1072 [status_none, status_test1, status_test] = json_response(any_test, 200)
1074 assert to_string(activity_test.id) == status_test["id"]
1075 assert to_string(activity_test1.id) == status_test1["id"]
1076 assert to_string(activity_none.id) == status_none["id"]
1080 |> get("/api/v1/timelines/tag/test", %{"all" => ["test1"], "none" => ["none"]})
1082 assert [status_test1] == json_response(restricted_test, 200)
1084 all_test = conn |> get("/api/v1/timelines/tag/test", %{"all" => ["none"]})
1086 assert [status_none] == json_response(all_test, 200)
1089 test "getting followers", %{conn: conn} do
1090 user = insert(:user)
1091 other_user = insert(:user)
1092 {:ok, user} = User.follow(user, other_user)
1096 |> get("/api/v1/accounts/#{other_user.id}/followers")
1098 assert [%{"id" => id}] = json_response(conn, 200)
1099 assert id == to_string(user.id)
1102 test "getting followers, hide_network", %{conn: conn} do
1103 user = insert(:user)
1104 other_user = insert(:user, %{info: %{hide_network: true}})
1105 {:ok, _user} = User.follow(user, other_user)
1109 |> get("/api/v1/accounts/#{other_user.id}/followers")
1111 assert [] == json_response(conn, 200)
1114 test "getting followers, hide_network, same user requesting", %{conn: conn} do
1115 user = insert(:user)
1116 other_user = insert(:user, %{info: %{hide_network: true}})
1117 {:ok, _user} = User.follow(user, other_user)
1121 |> assign(:user, other_user)
1122 |> get("/api/v1/accounts/#{other_user.id}/followers")
1124 refute [] == json_response(conn, 200)
1127 test "getting following", %{conn: conn} do
1128 user = insert(:user)
1129 other_user = insert(:user)
1130 {:ok, user} = User.follow(user, other_user)
1134 |> get("/api/v1/accounts/#{user.id}/following")
1136 assert [%{"id" => id}] = json_response(conn, 200)
1137 assert id == to_string(other_user.id)
1140 test "getting following, hide_network", %{conn: conn} do
1141 user = insert(:user, %{info: %{hide_network: true}})
1142 other_user = insert(:user)
1143 {:ok, user} = User.follow(user, other_user)
1147 |> get("/api/v1/accounts/#{user.id}/following")
1149 assert [] == json_response(conn, 200)
1152 test "getting following, hide_network, same user requesting", %{conn: conn} do
1153 user = insert(:user, %{info: %{hide_network: true}})
1154 other_user = insert(:user)
1155 {:ok, user} = User.follow(user, other_user)
1159 |> assign(:user, user)
1160 |> get("/api/v1/accounts/#{user.id}/following")
1162 refute [] == json_response(conn, 200)
1165 test "following / unfollowing a user", %{conn: conn} do
1166 user = insert(:user)
1167 other_user = insert(:user)
1171 |> assign(:user, user)
1172 |> post("/api/v1/accounts/#{other_user.id}/follow")
1174 assert %{"id" => _id, "following" => true} = json_response(conn, 200)
1176 user = Repo.get(User, user.id)
1180 |> assign(:user, user)
1181 |> post("/api/v1/accounts/#{other_user.id}/unfollow")
1183 assert %{"id" => _id, "following" => false} = json_response(conn, 200)
1185 user = Repo.get(User, user.id)
1189 |> assign(:user, user)
1190 |> post("/api/v1/follows", %{"uri" => other_user.nickname})
1192 assert %{"id" => id} = json_response(conn, 200)
1193 assert id == to_string(other_user.id)
1196 test "blocking / unblocking a user", %{conn: conn} do
1197 user = insert(:user)
1198 other_user = insert(:user)
1202 |> assign(:user, user)
1203 |> post("/api/v1/accounts/#{other_user.id}/block")
1205 assert %{"id" => _id, "blocking" => true} = json_response(conn, 200)
1207 user = Repo.get(User, user.id)
1211 |> assign(:user, user)
1212 |> post("/api/v1/accounts/#{other_user.id}/unblock")
1214 assert %{"id" => _id, "blocking" => false} = json_response(conn, 200)
1217 test "getting a list of blocks", %{conn: conn} do
1218 user = insert(:user)
1219 other_user = insert(:user)
1221 {:ok, user} = User.block(user, other_user)
1225 |> assign(:user, user)
1226 |> get("/api/v1/blocks")
1228 other_user_id = to_string(other_user.id)
1229 assert [%{"id" => ^other_user_id}] = json_response(conn, 200)
1232 test "blocking / unblocking a domain", %{conn: conn} do
1233 user = insert(:user)
1234 other_user = insert(:user, %{ap_id: "https://dogwhistle.zone/@pundit"})
1238 |> assign(:user, user)
1239 |> post("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1241 assert %{} = json_response(conn, 200)
1242 user = User.get_cached_by_ap_id(user.ap_id)
1243 assert User.blocks?(user, other_user)
1247 |> assign(:user, user)
1248 |> delete("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1250 assert %{} = json_response(conn, 200)
1251 user = User.get_cached_by_ap_id(user.ap_id)
1252 refute User.blocks?(user, other_user)
1255 test "getting a list of domain blocks", %{conn: conn} do
1256 user = insert(:user)
1258 {:ok, user} = User.block_domain(user, "bad.site")
1259 {:ok, user} = User.block_domain(user, "even.worse.site")
1263 |> assign(:user, user)
1264 |> get("/api/v1/domain_blocks")
1266 domain_blocks = json_response(conn, 200)
1268 assert "bad.site" in domain_blocks
1269 assert "even.worse.site" in domain_blocks
1272 test "unimplemented mute endpoints" do
1273 user = insert(:user)
1274 other_user = insert(:user)
1277 |> Enum.each(fn endpoint ->
1280 |> assign(:user, user)
1281 |> post("/api/v1/accounts/#{other_user.id}/#{endpoint}")
1283 assert %{"id" => id} = json_response(conn, 200)
1284 assert id == to_string(other_user.id)
1288 test "unimplemented mutes, follow_requests, blocks, domain blocks" do
1289 user = insert(:user)
1291 ["blocks", "domain_blocks", "mutes", "follow_requests"]
1292 |> Enum.each(fn endpoint ->
1295 |> assign(:user, user)
1296 |> get("/api/v1/#{endpoint}")
1298 assert [] = json_response(conn, 200)
1302 test "account search", %{conn: conn} do
1303 user = insert(:user)
1304 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1305 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1309 |> assign(:user, user)
1310 |> get("/api/v1/accounts/search", %{"q" => "shp"})
1311 |> json_response(200)
1313 result_ids = for result <- results, do: result["acct"]
1315 assert user_two.nickname in result_ids
1316 assert user_three.nickname in result_ids
1320 |> assign(:user, user)
1321 |> get("/api/v1/accounts/search", %{"q" => "2hu"})
1322 |> json_response(200)
1324 result_ids = for result <- results, do: result["acct"]
1326 assert user_three.nickname in result_ids
1329 test "search", %{conn: conn} do
1330 user = insert(:user)
1331 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1332 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1334 {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
1337 CommonAPI.post(user, %{
1338 "status" => "This is about 2hu, but private",
1339 "visibility" => "private"
1342 {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
1346 |> get("/api/v1/search", %{"q" => "2hu"})
1348 assert results = json_response(conn, 200)
1350 [account | _] = results["accounts"]
1351 assert account["id"] == to_string(user_three.id)
1353 assert results["hashtags"] == []
1355 [status] = results["statuses"]
1356 assert status["id"] == to_string(activity.id)
1359 test "search fetches remote statuses", %{conn: conn} do
1363 |> get("/api/v1/search", %{"q" => "https://shitposter.club/notice/2827873"})
1365 assert results = json_response(conn, 200)
1367 [status] = results["statuses"]
1368 assert status["uri"] == "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"
1372 test "search doesn't show statuses that it shouldn't", %{conn: conn} do
1374 CommonAPI.post(insert(:user), %{
1375 "status" => "This is about 2hu, but private",
1376 "visibility" => "private"
1382 |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]})
1384 assert results = json_response(conn, 200)
1386 [] = results["statuses"]
1390 test "search fetches remote accounts", %{conn: conn} do
1393 |> get("/api/v1/search", %{"q" => "shp@social.heldscal.la", "resolve" => "true"})
1395 assert results = json_response(conn, 200)
1396 [account] = results["accounts"]
1397 assert account["acct"] == "shp@social.heldscal.la"
1400 test "returns the favorites of a user", %{conn: conn} do
1401 user = insert(:user)
1402 other_user = insert(:user)
1404 {:ok, _} = CommonAPI.post(other_user, %{"status" => "bla"})
1405 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "traps are happy"})
1407 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
1411 |> assign(:user, user)
1412 |> get("/api/v1/favourites")
1414 assert [status] = json_response(first_conn, 200)
1415 assert status["id"] == to_string(activity.id)
1417 assert [{"link", _link_header}] =
1418 Enum.filter(first_conn.resp_headers, fn element -> match?({"link", _}, element) end)
1420 # Honours query params
1421 {:ok, second_activity} =
1422 CommonAPI.post(other_user, %{
1424 "Trees Are Never Sad Look At Them Every Once In Awhile They're Quite Beautiful."
1427 {:ok, _, _} = CommonAPI.favorite(second_activity.id, user)
1429 last_like = status["id"]
1433 |> assign(:user, user)
1434 |> get("/api/v1/favourites?since_id=#{last_like}")
1436 assert [second_status] = json_response(second_conn, 200)
1437 assert second_status["id"] == to_string(second_activity.id)
1441 |> assign(:user, user)
1442 |> get("/api/v1/favourites?limit=0")
1444 assert [] = json_response(third_conn, 200)
1447 describe "updating credentials" do
1448 test "updates the user's bio", %{conn: conn} do
1449 user = insert(:user)
1450 user2 = insert(:user)
1454 |> assign(:user, user)
1455 |> patch("/api/v1/accounts/update_credentials", %{
1456 "note" => "I drink #cofe with @#{user2.nickname}"
1459 assert user = json_response(conn, 200)
1461 assert user["note"] ==
1462 "I drink <a class=\"hashtag\" data-tag=\"cofe\" href=\"http://localhost:4001/tag/cofe\">#cofe</a> with <span class=\"h-card\"><a data-user=\"#{
1464 }\" class=\"u-url mention\" href=\"#{user2.ap_id}\">@<span>#{user2.nickname}</span></a></span>"
1467 test "updates the user's locking status", %{conn: conn} do
1468 user = insert(:user)
1472 |> assign(:user, user)
1473 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
1475 assert user = json_response(conn, 200)
1476 assert user["locked"] == true
1479 test "updates the user's name", %{conn: conn} do
1480 user = insert(:user)
1484 |> assign(:user, user)
1485 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
1487 assert user = json_response(conn, 200)
1488 assert user["display_name"] == "markorepairs"
1491 test "updates the user's avatar", %{conn: conn} do
1492 user = insert(:user)
1494 new_avatar = %Plug.Upload{
1495 content_type: "image/jpg",
1496 path: Path.absname("test/fixtures/image.jpg"),
1497 filename: "an_image.jpg"
1502 |> assign(:user, user)
1503 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
1505 assert user_response = json_response(conn, 200)
1506 assert user_response["avatar"] != User.avatar_url(user)
1509 test "updates the user's banner", %{conn: conn} do
1510 user = insert(:user)
1512 new_header = %Plug.Upload{
1513 content_type: "image/jpg",
1514 path: Path.absname("test/fixtures/image.jpg"),
1515 filename: "an_image.jpg"
1520 |> assign(:user, user)
1521 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
1523 assert user_response = json_response(conn, 200)
1524 assert user_response["header"] != User.banner_url(user)
1528 test "get instance information", %{conn: conn} do
1529 user = insert(:user, %{local: true})
1531 user2 = insert(:user, %{local: true})
1532 {:ok, _user2} = User.deactivate(user2, !user2.info.deactivated)
1534 insert(:user, %{local: false, nickname: "u@peer1.com"})
1535 insert(:user, %{local: false, nickname: "u@peer2.com"})
1537 {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})
1539 # Stats should count users with missing or nil `info.deactivated` value
1540 user = Repo.get(User, user.id)
1541 info_change = Changeset.change(user.info, %{deactivated: nil})
1545 |> Changeset.change()
1546 |> Changeset.put_embed(:info, info_change)
1547 |> User.update_and_set_cache()
1549 Pleroma.Stats.update_stats()
1551 conn = get(conn, "/api/v1/instance")
1553 assert result = json_response(conn, 200)
1555 stats = result["stats"]
1558 assert stats["user_count"] == 1
1559 assert stats["status_count"] == 1
1560 assert stats["domain_count"] == 2
1563 test "get peers", %{conn: conn} do
1564 insert(:user, %{local: false, nickname: "u@peer1.com"})
1565 insert(:user, %{local: false, nickname: "u@peer2.com"})
1567 Pleroma.Stats.update_stats()
1569 conn = get(conn, "/api/v1/instance/peers")
1571 assert result = json_response(conn, 200)
1573 assert ["peer1.com", "peer2.com"] == Enum.sort(result)
1576 test "put settings", %{conn: conn} do
1577 user = insert(:user)
1581 |> assign(:user, user)
1582 |> put("/api/web/settings", %{"data" => %{"programming" => "socks"}})
1584 assert _result = json_response(conn, 200)
1586 user = User.get_cached_by_ap_id(user.ap_id)
1587 assert user.info.settings == %{"programming" => "socks"}
1590 describe "pinned statuses" do
1592 Pleroma.Config.put([:instance, :max_pinned_statuses], 1)
1594 user = insert(:user)
1595 {:ok, activity} = CommonAPI.post(user, %{"status" => "HI!!!"})
1597 [user: user, activity: activity]
1600 test "returns pinned statuses", %{conn: conn, user: user, activity: activity} do
1601 {:ok, _} = CommonAPI.pin(activity.id, user)
1605 |> assign(:user, user)
1606 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1607 |> json_response(200)
1609 id_str = to_string(activity.id)
1611 assert [%{"id" => ^id_str, "pinned" => true}] = result
1614 test "pin status", %{conn: conn, user: user, activity: activity} do
1615 id_str = to_string(activity.id)
1617 assert %{"id" => ^id_str, "pinned" => true} =
1619 |> assign(:user, user)
1620 |> post("/api/v1/statuses/#{activity.id}/pin")
1621 |> json_response(200)
1623 assert [%{"id" => ^id_str, "pinned" => true}] =
1625 |> assign(:user, user)
1626 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1627 |> json_response(200)
1630 test "unpin status", %{conn: conn, user: user, activity: activity} do
1631 {:ok, _} = CommonAPI.pin(activity.id, user)
1633 id_str = to_string(activity.id)
1634 user = refresh_record(user)
1636 assert %{"id" => ^id_str, "pinned" => false} =
1638 |> assign(:user, user)
1639 |> post("/api/v1/statuses/#{activity.id}/unpin")
1640 |> json_response(200)
1644 |> assign(:user, user)
1645 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1646 |> json_response(200)
1649 test "max pinned statuses", %{conn: conn, user: user, activity: activity_one} do
1650 {:ok, activity_two} = CommonAPI.post(user, %{"status" => "HI!!!"})
1652 id_str_one = to_string(activity_one.id)
1654 assert %{"id" => ^id_str_one, "pinned" => true} =
1656 |> assign(:user, user)
1657 |> post("/api/v1/statuses/#{id_str_one}/pin")
1658 |> json_response(200)
1660 user = refresh_record(user)
1662 assert %{"error" => "You have already pinned the maximum number of statuses"} =
1664 |> assign(:user, user)
1665 |> post("/api/v1/statuses/#{activity_two.id}/pin")
1666 |> json_response(400)
1669 test "Status rich-media Card", %{conn: conn, user: user} do
1670 {:ok, activity} = CommonAPI.post(user, %{"status" => "http://example.com/ogp"})
1674 |> get("/api/v1/statuses/#{activity.id}/card")
1675 |> json_response(200)
1677 assert response == %{
1678 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1679 "provider_name" => "www.imdb.com",
1680 "provider_url" => "http://www.imdb.com",
1681 "title" => "The Rock",
1683 "url" => "http://www.imdb.com/title/tt0117500/",
1684 "description" => nil,
1687 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1688 "title" => "The Rock",
1689 "type" => "video.movie",
1690 "url" => "http://www.imdb.com/title/tt0117500/"