X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=lib%2Fpleroma%2Fweb%2Fadmin_api%2Fadmin_api_controller.ex;h=33f9689cd3a9df76819ce9027e7c38450a883faa;hb=f635b675b2cc0bc10b395cd71ae1720b0696d364;hp=0cc84430d64bec10f067fac5bf8d94f895ec9d96;hpb=578a9117370c3756c56448ad663664f73155a50b;p=akkoma diff --git a/lib/pleroma/web/admin_api/admin_api_controller.ex b/lib/pleroma/web/admin_api/admin_api_controller.ex index 0cc84430d..33f9689cd 100644 --- a/lib/pleroma/web/admin_api/admin_api_controller.ex +++ b/lib/pleroma/web/admin_api/admin_api_controller.ex @@ -1,67 +1,226 @@ +# Pleroma: A lightweight social networking server +# Copyright © 2017-2019 Pleroma Authors +# SPDX-License-Identifier: AGPL-3.0-only + defmodule Pleroma.Web.AdminAPI.AdminAPIController do + @users_page_size 50 + use Pleroma.Web, :controller - alias Pleroma.{User, Repo} + alias Pleroma.User alias Pleroma.Web.ActivityPub.Relay + alias Pleroma.Web.MastodonAPI.Admin.AccountView + + import Pleroma.Web.ControllerHelper, only: [json_response: 3] require Logger action_fallback(:errors) - def user_delete(conn, %{nickname: nickname}) do - user = User.get_by_nickname(nickname) - - if user[:local] == true do - User.delete(user) - else - User.delete(user) - end + def user_delete(conn, %{"nickname" => nickname}) do + User.get_by_nickname(nickname) + |> User.delete() conn - |> send(200) + |> json(nickname) end def user_create( conn, - %{user: %{nickname: nickname, email: email, password: password} = user} + %{"nickname" => nickname, "email" => email, "password" => password} ) do - new_user = %User{ + user_data = %{ nickname: nickname, - name: user.name || nickname, + name: nickname, email: email, password: password, password_confirmation: password, - bio: user.bio || "." + bio: "." } - User.register_changeset(%User{}, new_user) + changeset = User.register_changeset(%User{}, user_data, confirmed: true) + {:ok, user} = User.register(changeset) + + conn + |> json(user.nickname) + end + + def user_toggle_activation(conn, %{"nickname" => nickname}) do + user = User.get_by_nickname(nickname) + + {:ok, updated_user} = User.deactivate(user, !user.info.deactivated) + + conn + |> json(AccountView.render("show.json", %{user: updated_user})) + end + + def tag_users(conn, %{"nicknames" => nicknames, "tags" => tags}) do + with {:ok, _} <- User.tag(nicknames, tags), + do: json_response(conn, :no_content, "") + end + + def untag_users(conn, %{"nicknames" => nicknames, "tags" => tags}) do + with {:ok, _} <- User.untag(nicknames, tags), + do: json_response(conn, :no_content, "") + end + + def list_users(%{assigns: %{user: admin}} = conn, %{"page" => page_string}) do + with {page, _} <- Integer.parse(page_string), + users <- User.all(page, @users_page_size), + count <- User.count_all_except_one(admin), + do: + conn + |> json( + AccountView.render("index.json", + users: users, + count: count, + page_size: @users_page_size + ) + ) + end + + def search_users(%{assigns: %{user: admin}} = conn, %{"query" => term} = params) do + users = + User.search(term, + query: User.maybe_local_user_query(params["local"] == "true"), + resolve: true, + for_user: admin, + limit: @users_page_size + ) + + conn + |> json( + AccountView.render("index.json", + users: users, + count: length(users), + page_size: @users_page_size + ) + ) + end + + def right_add(conn, %{"permission_group" => permission_group, "nickname" => nickname}) + when permission_group in ["moderator", "admin"] do + user = User.get_by_nickname(nickname) + + info = + %{} + |> Map.put("is_" <> permission_group, true) + + info_cng = User.Info.admin_api_update(user.info, info) - Repo.insert!(user) + cng = + user + |> Ecto.Changeset.change() + |> Ecto.Changeset.put_embed(:info, info_cng) + {:ok, _user} = User.update_and_set_cache(cng) + + json(conn, info) + end + + def right_add(conn, _) do conn - |> send(200) + |> put_status(404) + |> json(%{error: "No such permission_group"}) end - def relay_follow(conn, %{relay_url: target}) do - :ok = Relay.follow(target) + def right_get(conn, %{"nickname" => nickname}) do + user = User.get_by_nickname(nickname) conn - |> send(200) + |> json(%{ + is_moderator: user.info.is_moderator, + is_admin: user.info.is_admin + }) end - def relay_unfollow(conn, %{relay_url: target}) do - :ok = Relay.unfollow(target) + def right_delete( + %{assigns: %{user: %User{:nickname => admin_nickname}}} = conn, + %{ + "permission_group" => permission_group, + "nickname" => nickname + } + ) + when permission_group in ["moderator", "admin"] do + if admin_nickname == nickname do + conn + |> put_status(403) + |> json(%{error: "You can't revoke your own admin status."}) + else + user = User.get_by_nickname(nickname) + + info = + %{} + |> Map.put("is_" <> permission_group, false) + + info_cng = User.Info.admin_api_update(user.info, info) + + cng = + Ecto.Changeset.change(user) + |> Ecto.Changeset.put_embed(:info, info_cng) + + {:ok, _user} = User.update_and_set_cache(cng) + + json(conn, info) + end + end + def right_delete(conn, _) do conn - |> send(200) + |> put_status(404) + |> json(%{error: "No such permission_group"}) end + def set_activation_status(conn, %{"nickname" => nickname, "status" => status}) do + with {:ok, status} <- Ecto.Type.cast(:boolean, status), + %User{} = user <- User.get_by_nickname(nickname), + {:ok, _} <- User.deactivate(user, !status), + do: json_response(conn, :no_content, "") + end + + def relay_follow(conn, %{"relay_url" => target}) do + with {:ok, _message} <- Relay.follow(target) do + json(conn, target) + else + _ -> + conn + |> put_status(500) + |> json(target) + end + end + + def relay_unfollow(conn, %{"relay_url" => target}) do + with {:ok, _message} <- Relay.unfollow(target) do + json(conn, target) + else + _ -> + conn + |> put_status(500) + |> json(target) + end + end + + @doc "Sends registration invite via email" + def email_invite(%{assigns: %{user: user}} = conn, %{"email" => email} = params) do + with true <- + Pleroma.Config.get([:instance, :invites_enabled]) && + !Pleroma.Config.get([:instance, :registrations_open]), + {:ok, invite_token} <- Pleroma.UserInviteToken.create_token(), + email <- + Pleroma.UserEmail.user_invitation_email(user, invite_token, email, params["name"]), + {:ok, _} <- Pleroma.Mailer.deliver(email) do + json_response(conn, :no_content, "") + end + end + + @doc "Get a account registeration invite token (base64 string)" def get_invite_token(conn, _params) do - {:ok, token} <- Pleroma.UserInviteToken.create_token() + {:ok, token} = Pleroma.UserInviteToken.create_token() conn - |> puts(token) + |> json(token.token) end + @doc "Get a password reset token (base64 string) for given nickname" def get_password_reset(conn, %{"nickname" => nickname}) do (%User{local: true} = user) = User.get_by_nickname(nickname) {:ok, token} = Pleroma.PasswordResetToken.create_token(user)