Merge branch 'develop' into feature/custom-runtime-modules
[akkoma] / docs / API / admin_api.md
1 # Admin API
2
3 Authentication is required and the user must be an admin.
4
5 Configuration options:
6
7 * `[:auth, :enforce_oauth_admin_scope_usage]` — OAuth admin scope requirement toggle.
8 If `true`, admin actions explicitly demand admin OAuth scope(s) presence in OAuth token (client app must support admin scopes).
9 If `false` and token doesn't have admin scope(s), `is_admin` user flag grants access to admin-specific actions.
10 Note that client app needs to explicitly support admin scopes and request them when obtaining auth token.
11
12 ## `GET /api/pleroma/admin/users`
13
14 ### List users
15
16 - Query Params:
17 - *optional* `query`: **string** search term (e.g. nickname, domain, nickname@domain)
18 - *optional* `filters`: **string** comma-separated string of filters:
19 - `local`: only local users
20 - `external`: only external users
21 - `active`: only active users
22 - `deactivated`: only deactivated users
23 - `is_admin`: users with admin role
24 - `is_moderator`: users with moderator role
25 - *optional* `page`: **integer** page number
26 - *optional* `page_size`: **integer** number of users per page (default is `50`)
27 - *optional* `tags`: **[string]** tags list
28 - *optional* `name`: **string** user display name
29 - *optional* `email`: **string** user email
30 - Example: `https://mypleroma.org/api/pleroma/admin/users?query=john&filters=local,active&page=1&page_size=10&tags[]=some_tag&tags[]=another_tag&name=display_name&email=email@example.com`
31 - Response:
32
33 ```json
34 {
35 "page_size": integer,
36 "count": integer,
37 "users": [
38 {
39 "deactivated": bool,
40 "id": integer,
41 "nickname": string,
42 "roles": {
43 "admin": bool,
44 "moderator": bool
45 },
46 "local": bool,
47 "tags": array,
48 "avatar": string,
49 "display_name": string
50 },
51 ...
52 ]
53 }
54 ```
55
56 ## DEPRECATED `DELETE /api/pleroma/admin/users`
57
58 ### Remove a user
59
60 - Params:
61 - `nickname`
62 - Response: User’s nickname
63
64 ## `DELETE /api/pleroma/admin/users`
65
66 ### Remove a user
67
68 - Params:
69 - `nicknames`
70 - Response: Array of user nicknames
71
72 ### Create a user
73
74 - Method: `POST`
75 - Params:
76 `users`: [
77 {
78 `nickname`,
79 `email`,
80 `password`
81 }
82 ]
83 - Response: User’s nickname
84
85 ## `POST /api/pleroma/admin/users/follow`
86
87 ### Make a user follow another user
88
89 - Params:
90 - `follower`: The nickname of the follower
91 - `followed`: The nickname of the followed
92 - Response:
93 - "ok"
94
95 ## `POST /api/pleroma/admin/users/unfollow`
96
97 ### Make a user unfollow another user
98
99 - Params:
100 - `follower`: The nickname of the follower
101 - `followed`: The nickname of the followed
102 - Response:
103 - "ok"
104
105 ## `PATCH /api/pleroma/admin/users/:nickname/toggle_activation`
106
107 ### Toggle user activation
108
109 - Params:
110 - `nickname`
111 - Response: User’s object
112
113 ```json
114 {
115 "deactivated": bool,
116 "id": integer,
117 "nickname": string
118 }
119 ```
120
121 ## `PUT /api/pleroma/admin/users/tag`
122
123 ### Tag a list of users
124
125 - Params:
126 - `nicknames` (array)
127 - `tags` (array)
128
129 ## `DELETE /api/pleroma/admin/users/tag`
130
131 ### Untag a list of users
132
133 - Params:
134 - `nicknames` (array)
135 - `tags` (array)
136
137 ## `GET /api/pleroma/admin/users/:nickname/permission_group`
138
139 ### Get user user permission groups membership
140
141 - Params: none
142 - Response:
143
144 ```json
145 {
146 "is_moderator": bool,
147 "is_admin": bool
148 }
149 ```
150
151 ## `GET /api/pleroma/admin/users/:nickname/permission_group/:permission_group`
152
153 Note: Available `:permission_group` is currently moderator and admin. 404 is returned when the permission group doesn’t exist.
154
155 ### Get user user permission groups membership per permission group
156
157 - Params: none
158 - Response:
159
160 ```json
161 {
162 "is_moderator": bool,
163 "is_admin": bool
164 }
165 ```
166
167 ## DEPRECATED `POST /api/pleroma/admin/users/:nickname/permission_group/:permission_group`
168
169 ### Add user to permission group
170
171 - Params: none
172 - Response:
173 - On failure: `{"error": "…"}`
174 - On success: JSON of the user
175
176 ## `POST /api/pleroma/admin/users/permission_group/:permission_group`
177
178 ### Add users to permission group
179
180 - Params:
181 - `nicknames`: nicknames array
182 - Response:
183 - On failure: `{"error": "…"}`
184 - On success: JSON of the user
185
186 ## DEPRECATED `DELETE /api/pleroma/admin/users/:nickname/permission_group/:permission_group`
187
188 ## `DELETE /api/pleroma/admin/users/:nickname/permission_group/:permission_group`
189
190 ### Remove user from permission group
191
192 - Params: none
193 - Response:
194 - On failure: `{"error": "…"}`
195 - On success: JSON of the user
196 - Note: An admin cannot revoke their own admin status.
197
198 ## `DELETE /api/pleroma/admin/users/permission_group/:permission_group`
199
200 ### Remove users from permission group
201
202 - Params:
203 - `nicknames`: nicknames array
204 - Response:
205 - On failure: `{"error": "…"}`
206 - On success: JSON of the user
207 - Note: An admin cannot revoke their own admin status.
208
209 ## `PATCH /api/pleroma/admin/users/activate`
210
211 ### Activate user
212
213 - Params:
214 - `nicknames`: nicknames array
215 - Response:
216
217 ```json
218 {
219 users: [
220 {
221 // user object
222 }
223 ]
224 }
225 ```
226
227 ## `PATCH /api/pleroma/admin/users/deactivate`
228
229 ### Deactivate user
230
231 - Params:
232 - `nicknames`: nicknames array
233 - Response:
234
235 ```json
236 {
237 users: [
238 {
239 // user object
240 }
241 ]
242 }
243 ```
244
245 ## `GET /api/pleroma/admin/users/:nickname_or_id`
246
247 ### Retrive the details of a user
248
249 - Params:
250 - `nickname` or `id`
251 - Response:
252 - On failure: `Not found`
253 - On success: JSON of the user
254
255 ## `GET /api/pleroma/admin/users/:nickname_or_id/statuses`
256
257 ### Retrive user's latest statuses
258
259 - Params:
260 - `nickname` or `id`
261 - *optional* `page_size`: number of statuses to return (default is `20`)
262 - *optional* `godmode`: `true`/`false` – allows to see private statuses
263 - Response:
264 - On failure: `Not found`
265 - On success: JSON array of user's latest statuses
266
267 ## `POST /api/pleroma/admin/relay`
268
269 ### Follow a Relay
270
271 - Params:
272 - `relay_url`
273 - Response:
274 - On success: URL of the followed relay
275
276 ## `DELETE /api/pleroma/admin/relay`
277
278 ### Unfollow a Relay
279
280 - Params:
281 - `relay_url`
282 - Response:
283 - On success: URL of the unfollowed relay
284
285 ## `GET /api/pleroma/admin/relay`
286
287 ### List Relays
288
289 - Params: none
290 - Response:
291 - On success: JSON array of relays
292
293 ## `POST /api/pleroma/admin/users/invite_token`
294
295 ### Create an account registration invite token
296
297 - Params:
298 - *optional* `max_use` (integer)
299 - *optional* `expires_at` (date string e.g. "2019-04-07")
300 - Response:
301
302 ```json
303 {
304 "id": integer,
305 "token": string,
306 "used": boolean,
307 "expires_at": date,
308 "uses": integer,
309 "max_use": integer,
310 "invite_type": string (possible values: `one_time`, `reusable`, `date_limited`, `reusable_date_limited`)
311 }
312 ```
313
314 ## `GET /api/pleroma/admin/users/invites`
315
316 ### Get a list of generated invites
317
318 - Params: none
319 - Response:
320
321 ```json
322 {
323
324 "invites": [
325 {
326 "id": integer,
327 "token": string,
328 "used": boolean,
329 "expires_at": date,
330 "uses": integer,
331 "max_use": integer,
332 "invite_type": string (possible values: `one_time`, `reusable`, `date_limited`, `reusable_date_limited`)
333 },
334 ...
335 ]
336 }
337 ```
338
339 ## `POST /api/pleroma/admin/users/revoke_invite`
340
341 ### Revoke invite by token
342
343 - Params:
344 - `token`
345 - Response:
346
347 ```json
348 {
349 "id": integer,
350 "token": string,
351 "used": boolean,
352 "expires_at": date,
353 "uses": integer,
354 "max_use": integer,
355 "invite_type": string (possible values: `one_time`, `reusable`, `date_limited`, `reusable_date_limited`)
356
357 }
358 ```
359
360 ## `POST /api/pleroma/admin/users/email_invite`
361
362 ### Sends registration invite via email
363
364 - Params:
365 - `email`
366 - `name`, optional
367
368 ## `GET /api/pleroma/admin/users/:nickname/password_reset`
369
370 ### Get a password reset token for a given nickname
371
372 - Params: none
373 - Response:
374
375 ```json
376 {
377 "token": "base64 reset token",
378 "link": "https://pleroma.social/api/pleroma/password_reset/url-encoded-base64-token"
379 }
380 ```
381
382 ## `PATCH /api/pleroma/admin/users/force_password_reset`
383
384 ### Force passord reset for a user with a given nickname
385
386 - Params:
387 - `nicknames`
388 - Response: none (code `204`)
389
390 ## `GET /api/pleroma/admin/reports`
391
392 ### Get a list of reports
393
394 - Params:
395 - *optional* `state`: **string** the state of reports. Valid values are `open`, `closed` and `resolved`
396 - *optional* `limit`: **integer** the number of records to retrieve
397 - *optional* `page`: **integer** page number
398 - *optional* `page_size`: **integer** number of log entries per page (default is `50`)
399 - Response:
400 - On failure: 403 Forbidden error `{"error": "error_msg"}` when requested by anonymous or non-admin
401 - On success: JSON, returns a list of reports, where:
402 - `account`: the user who has been reported
403 - `actor`: the user who has sent the report
404 - `statuses`: list of statuses that have been included to the report
405
406 ```json
407 {
408 "totalReports" : 1,
409 "reports": [
410 {
411 "account": {
412 "acct": "user",
413 "avatar": "https://pleroma.example.org/images/avi.png",
414 "avatar_static": "https://pleroma.example.org/images/avi.png",
415 "bot": false,
416 "created_at": "2019-04-23T17:32:04.000Z",
417 "display_name": "User",
418 "emojis": [],
419 "fields": [],
420 "followers_count": 1,
421 "following_count": 1,
422 "header": "https://pleroma.example.org/images/banner.png",
423 "header_static": "https://pleroma.example.org/images/banner.png",
424 "id": "9i6dAJqSGSKMzLG2Lo",
425 "locked": false,
426 "note": "",
427 "pleroma": {
428 "confirmation_pending": false,
429 "hide_favorites": true,
430 "hide_followers": false,
431 "hide_follows": false,
432 "is_admin": false,
433 "is_moderator": false,
434 "relationship": {},
435 "tags": []
436 },
437 "source": {
438 "note": "",
439 "pleroma": {},
440 "sensitive": false
441 },
442 "tags": ["force_unlisted"],
443 "statuses_count": 3,
444 "url": "https://pleroma.example.org/users/user",
445 "username": "user"
446 },
447 "actor": {
448 "acct": "lain",
449 "avatar": "https://pleroma.example.org/images/avi.png",
450 "avatar_static": "https://pleroma.example.org/images/avi.png",
451 "bot": false,
452 "created_at": "2019-03-28T17:36:03.000Z",
453 "display_name": "Roger Braun",
454 "emojis": [],
455 "fields": [],
456 "followers_count": 1,
457 "following_count": 1,
458 "header": "https://pleroma.example.org/images/banner.png",
459 "header_static": "https://pleroma.example.org/images/banner.png",
460 "id": "9hEkA5JsvAdlSrocam",
461 "locked": false,
462 "note": "",
463 "pleroma": {
464 "confirmation_pending": false,
465 "hide_favorites": false,
466 "hide_followers": false,
467 "hide_follows": false,
468 "is_admin": false,
469 "is_moderator": false,
470 "relationship": {},
471 "tags": []
472 },
473 "source": {
474 "note": "",
475 "pleroma": {},
476 "sensitive": false
477 },
478 "tags": ["force_unlisted"],
479 "statuses_count": 1,
480 "url": "https://pleroma.example.org/users/lain",
481 "username": "lain"
482 },
483 "content": "Please delete it",
484 "created_at": "2019-04-29T19:48:15.000Z",
485 "id": "9iJGOv1j8hxuw19bcm",
486 "state": "open",
487 "statuses": [
488 {
489 "account": { ... },
490 "application": {
491 "name": "Web",
492 "website": null
493 },
494 "bookmarked": false,
495 "card": null,
496 "content": "<span class=\"h-card\"><a data-user=\"9hEkA5JsvAdlSrocam\" class=\"u-url mention\" href=\"https://pleroma.example.org/users/lain\">@<span>lain</span></a></span> click on my link <a href=\"https://www.google.com/\">https://www.google.com/</a>",
497 "created_at": "2019-04-23T19:15:47.000Z",
498 "emojis": [],
499 "favourited": false,
500 "favourites_count": 0,
501 "id": "9i6mQ9uVrrOmOime8m",
502 "in_reply_to_account_id": null,
503 "in_reply_to_id": null,
504 "language": null,
505 "media_attachments": [],
506 "mentions": [
507 {
508 "acct": "lain",
509 "id": "9hEkA5JsvAdlSrocam",
510 "url": "https://pleroma.example.org/users/lain",
511 "username": "lain"
512 },
513 {
514 "acct": "user",
515 "id": "9i6dAJqSGSKMzLG2Lo",
516 "url": "https://pleroma.example.org/users/user",
517 "username": "user"
518 }
519 ],
520 "muted": false,
521 "pinned": false,
522 "pleroma": {
523 "content": {
524 "text/plain": "@lain click on my link https://www.google.com/"
525 },
526 "conversation_id": 28,
527 "in_reply_to_account_acct": null,
528 "local": true,
529 "spoiler_text": {
530 "text/plain": ""
531 }
532 },
533 "reblog": null,
534 "reblogged": false,
535 "reblogs_count": 0,
536 "replies_count": 0,
537 "sensitive": false,
538 "spoiler_text": "",
539 "tags": [],
540 "uri": "https://pleroma.example.org/objects/8717b90f-8e09-4b58-97b0-e3305472b396",
541 "url": "https://pleroma.example.org/notice/9i6mQ9uVrrOmOime8m",
542 "visibility": "direct"
543 }
544 ]
545 }
546 ]
547 }
548 ```
549
550 ## `GET /api/pleroma/admin/grouped_reports`
551
552 ### Get a list of reports, grouped by status
553
554 - Params: none
555 - On success: JSON, returns a list of reports, where:
556 - `date`: date of the latest report
557 - `account`: the user who has been reported (see `/api/pleroma/admin/reports` for reference)
558 - `status`: reported status (see `/api/pleroma/admin/reports` for reference)
559 - `actors`: users who had reported this status (see `/api/pleroma/admin/reports` for reference)
560 - `reports`: reports (see `/api/pleroma/admin/reports` for reference)
561
562 ```json
563 "reports": [
564 {
565 "date": "2019-10-07T12:31:39.615149Z",
566 "account": { ... },
567 "status": { ... },
568 "actors": [{ ... }, { ... }],
569 "reports": [{ ... }]
570 }
571 ]
572 ```
573
574 ## `GET /api/pleroma/admin/reports/:id`
575
576 ### Get an individual report
577
578 - Params:
579 - `id`
580 - Response:
581 - On failure:
582 - 403 Forbidden `{"error": "error_msg"}`
583 - 404 Not Found `"Not found"`
584 - On success: JSON, Report object (see above)
585
586 ## `PATCH /api/pleroma/admin/reports`
587
588 ### Change the state of one or multiple reports
589
590 - Params:
591
592 ```json
593 `reports`: [
594 {
595 `id`, // required, report id
596 `state` // required, the new state. Valid values are `open`, `closed` and `resolved`
597 },
598 ...
599 ]
600 ```
601
602 - Response:
603 - On failure:
604 - 400 Bad Request, JSON:
605
606 ```json
607 [
608 {
609 `id`, // report id
610 `error` // error message
611 }
612 ]
613 ```
614
615 - On success: `204`, empty response
616
617 ## `POST /api/pleroma/admin/reports/:id/notes`
618
619 ### Create report note
620
621 - Params:
622 - `id`: required, report id
623 - `content`: required, the message
624 - Response:
625 - On failure:
626 - 400 Bad Request `"Invalid parameters"` when `status` is missing
627 - On success: `204`, empty response
628
629 ## `POST /api/pleroma/admin/reports/:report_id/notes/:id`
630
631 ### Delete report note
632
633 - Params:
634 - `report_id`: required, report id
635 - `id`: required, note id
636 - Response:
637 - On failure:
638 - 400 Bad Request `"Invalid parameters"` when `status` is missing
639 - On success: `204`, empty response
640
641 ## `PUT /api/pleroma/admin/statuses/:id`
642
643 ### Change the scope of an individual reported status
644
645 - Params:
646 - `id`
647 - `sensitive`: optional, valid values are `true` or `false`
648 - `visibility`: optional, valid values are `public`, `private` and `unlisted`
649 - Response:
650 - On failure:
651 - 400 Bad Request `"Unsupported visibility"`
652 - 403 Forbidden `{"error": "error_msg"}`
653 - 404 Not Found `"Not found"`
654 - On success: JSON, Mastodon Status entity
655
656 ## `DELETE /api/pleroma/admin/statuses/:id`
657
658 ### Delete an individual reported status
659
660 - Params:
661 - `id`
662 - Response:
663 - On failure:
664 - 403 Forbidden `{"error": "error_msg"}`
665 - 404 Not Found `"Not found"`
666 - On success: 200 OK `{}`
667
668 ## `GET /api/pleroma/admin/config/migrate_to_db`
669
670 ### Run mix task pleroma.config migrate_to_db
671
672 Copy settings on key `:pleroma` to DB.
673
674 - Params: none
675 - Response:
676
677 ```json
678 {}
679 ```
680
681 ## `GET /api/pleroma/admin/config/migrate_from_db`
682
683 ### Run mix task pleroma.config migrate_from_db
684
685 Copy all settings from DB to `config/prod.exported_from_db.secret.exs` with deletion from DB.
686
687 - Params: none
688 - Response:
689
690 ```json
691 {}
692 ```
693
694 ## `GET /api/pleroma/admin/config`
695
696 ### List config settings
697
698 List config settings only works with `:pleroma => :instance => :dynamic_configuration` setting to `true`.
699
700 - Params: none
701 - Response:
702
703 ```json
704 {
705 configs: [
706 {
707 "group": string,
708 "key": string or string with leading `:` for atoms,
709 "value": string or {} or [] or {"tuple": []}
710 }
711 ]
712 }
713 ```
714
715 ## `POST /api/pleroma/admin/config`
716
717 ### Update config settings
718
719 Updating config settings only works with `:pleroma => :instance => :dynamic_configuration` setting to `true`.
720 Module name can be passed as string, which starts with `Pleroma`, e.g. `"Pleroma.Upload"`.
721 Atom keys and values can be passed with `:` in the beginning, e.g. `":upload"`.
722 Tuples can be passed as `{"tuple": ["first_val", Pleroma.Module, []]}`.
723 `{"tuple": ["some_string", "Pleroma.Some.Module", []]}` will be converted to `{"some_string", Pleroma.Some.Module, []}`.
724 Keywords can be passed as lists with 2 child tuples, e.g.
725 `[{"tuple": ["first_val", Pleroma.Module]}, {"tuple": ["second_val", true]}]`.
726
727 If value contains list of settings `[subkey: val1, subkey2: val2, subkey3: val3]`, it's possible to remove only subkeys instead of all settings passing `subkeys` parameter. E.g.:
728 {"group": "pleroma", "key": "some_key", "delete": "true", "subkeys": [":subkey", ":subkey3"]}.
729
730 Compile time settings (need instance reboot):
731 - all settings by this keys:
732 - `:hackney_pools`
733 - `:chat`
734 - `Pleroma.Web.Endpoint`
735 - `Pleroma.Repo`
736 - part settings:
737 - `Pleroma.Captcha` -> `:seconds_valid`
738 - `Pleroma.Upload` -> `:proxy_remote`
739 - `:instance` -> `:upload_limit`
740
741 - Params:
742 - `configs` => [
743 - `group` (string)
744 - `key` (string or string with leading `:` for atoms)
745 - `value` (string, [], {} or {"tuple": []})
746 - `delete` = true (optional, if parameter must be deleted)
747 - `subkeys` [(string with leading `:` for atoms)] (optional, works only if `delete=true` parameter is passed, otherwise will be ignored)
748 ]
749
750 - Request (example):
751
752 ```json
753 {
754 configs: [
755 {
756 "group": "pleroma",
757 "key": "Pleroma.Upload",
758 "value": [
759 {"tuple": [":uploader", "Pleroma.Uploaders.Local"]},
760 {"tuple": [":filters", ["Pleroma.Upload.Filter.Dedupe"]]},
761 {"tuple": [":link_name", true]},
762 {"tuple": [":proxy_remote", false]},
763 {"tuple": [":proxy_opts", [
764 {"tuple": [":redirect_on_failure", false]},
765 {"tuple": [":max_body_length", 1048576]},
766 {"tuple": [":http": [
767 {"tuple": [":follow_redirect", true]},
768 {"tuple": [":pool", ":upload"]},
769 ]]}
770 ]
771 ]},
772 {"tuple": [":dispatch", {
773 "tuple": ["/api/v1/streaming", "Pleroma.Web.MastodonAPI.WebsocketHandler", []]
774 }]}
775 ]
776 }
777 ]
778 }
779 ```
780
781 - Response:
782
783 ```json
784 {
785 configs: [
786 {
787 "group": string,
788 "key": string or string with leading `:` for atoms,
789 "value": string or {} or [] or {"tuple": []}
790 }
791 ]
792 }
793 ```
794
795 ## `GET /api/pleroma/admin/moderation_log`
796
797 ### Get moderation log
798
799 - Params:
800 - *optional* `page`: **integer** page number
801 - *optional* `page_size`: **integer** number of log entries per page (default is `50`)
802 - *optional* `start_date`: **datetime (ISO 8601)** filter logs by creation date, start from `start_date`. Accepts datetime in ISO 8601 format (YYYY-MM-DDThh:mm:ss), e.g. `2005-08-09T18:31:42`
803 - *optional* `end_date`: **datetime (ISO 8601)** filter logs by creation date, end by from `end_date`. Accepts datetime in ISO 8601 format (YYYY-MM-DDThh:mm:ss), e.g. 2005-08-09T18:31:42
804 - *optional* `user_id`: **integer** filter logs by actor's id
805 - *optional* `search`: **string** search logs by the log message
806 - Response:
807
808 ```json
809 [
810 {
811 "data": {
812 "actor": {
813 "id": 1,
814 "nickname": "lain"
815 },
816 "action": "relay_follow"
817 },
818 "time": 1502812026, // timestamp
819 "message": "[2017-08-15 15:47:06] @nick0 followed relay: https://example.org/relay" // log message
820 }
821 ]
822 ```
823
824 ## `POST /api/pleroma/admin/reload_emoji`
825
826 ### Reload the instance's custom emoji
827
828 - Authentication: required
829 - Params: None
830 - Response: JSON, "ok" and 200 status
831
832 ## `PATCH /api/pleroma/admin/users/confirm_email`
833
834 ### Confirm users' emails
835
836 - Params:
837 - `nicknames`
838 - Response: Array of user nicknames
839
840 ## `PATCH /api/pleroma/admin/users/resend_confirmation_email`
841
842 ### Resend confirmation email
843
844 - Params:
845 - `nicknames`
846 - Response: Array of user nicknames