1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.ApiSpec.AccountOperation do
6 alias OpenApiSpex.Operation
7 alias OpenApiSpex.Reference
8 alias OpenApiSpex.Schema
9 alias Pleroma.Web.ApiSpec.Schemas.Account
10 alias Pleroma.Web.ApiSpec.Schemas.AccountRelationship
11 alias Pleroma.Web.ApiSpec.Schemas.ActorType
12 alias Pleroma.Web.ApiSpec.Schemas.ApiError
13 alias Pleroma.Web.ApiSpec.Schemas.BooleanLike
14 alias Pleroma.Web.ApiSpec.Schemas.List
15 alias Pleroma.Web.ApiSpec.Schemas.Status
16 alias Pleroma.Web.ApiSpec.Schemas.VisibilityScope
18 import Pleroma.Web.ApiSpec.Helpers
20 @spec open_api_operation(atom) :: Operation.t()
21 def open_api_operation(action) do
22 operation = String.to_existing_atom("#{action}_operation")
23 apply(__MODULE__, operation, [])
26 @spec create_operation() :: Operation.t()
27 def create_operation do
29 tags: ["Account credentials"],
30 summary: "Register an account",
32 "Creates a user and account records. Returns an account access token for the app that initiated the request. The app should save this token for later, and should wait for the user to confirm their account by clicking a link in their email inbox.",
33 operationId: "AccountController.create",
34 requestBody: request_body("Parameters", create_request(), required: true),
36 200 => Operation.response("Account", "application/json", create_response()),
37 400 => Operation.response("Error", "application/json", ApiError),
38 403 => Operation.response("Error", "application/json", ApiError),
39 429 => Operation.response("Error", "application/json", ApiError)
44 def verify_credentials_operation do
46 tags: ["Account credentials"],
47 description: "Test to make sure that the user token works.",
48 summary: "Verify account credentials",
49 operationId: "AccountController.verify_credentials",
50 security: [%{"oAuth" => ["read:accounts"]}],
52 200 => Operation.response("Account", "application/json", Account)
57 def update_credentials_operation do
59 tags: ["Account credentials"],
60 summary: "Update account credentials",
61 description: "Update the user's display and preferences.",
62 operationId: "AccountController.update_credentials",
63 security: [%{"oAuth" => ["write:accounts"]}],
64 requestBody: request_body("Parameters", update_credentials_request(), required: true),
66 200 => Operation.response("Account", "application/json", Account),
67 403 => Operation.response("Error", "application/json", ApiError)
72 def relationships_operation do
74 tags: ["Retrieve account information"],
75 summary: "Relationship with current account",
76 operationId: "AccountController.relationships",
77 description: "Find out whether a given account is followed, blocked, muted, etc.",
78 security: [%{"oAuth" => ["read:follows"]}],
84 oneOf: [%Schema{type: :array, items: %Schema{type: :string}}, %Schema{type: :string}]
91 200 => Operation.response("Account", "application/json", array_of_relationships())
98 tags: ["Retrieve account information"],
100 operationId: "AccountController.show",
101 description: "View information about a profile.",
103 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
104 with_relationships_param()
107 200 => Operation.response("Account", "application/json", Account),
108 401 => Operation.response("Error", "application/json", ApiError),
109 404 => Operation.response("Error", "application/json", ApiError)
114 def statuses_operation do
117 tags: ["Retrieve account information"],
118 operationId: "AccountController.statuses",
120 "Statuses posted to the given account. Public (for public statuses only), or user token + `read:statuses` (for private statuses the user is authorized to see)",
123 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
124 Operation.parameter(:pinned, :query, BooleanLike, "Include only pinned statuses"),
125 Operation.parameter(:tagged, :query, :string, "With tag"),
130 "Include only statuses with media attached"
136 "Include statuses from muted accounts."
138 Operation.parameter(:exclude_reblogs, :query, BooleanLike, "Exclude reblogs"),
139 Operation.parameter(:exclude_replies, :query, BooleanLike, "Exclude replies"),
141 :exclude_visibilities,
143 %Schema{type: :array, items: VisibilityScope},
144 "Exclude visibilities"
150 "Include reactions from muted accounts."
152 ] ++ pagination_params(),
154 200 => Operation.response("Statuses", "application/json", array_of_statuses()),
155 401 => Operation.response("Error", "application/json", ApiError),
156 404 => Operation.response("Error", "application/json", ApiError)
161 def followers_operation do
163 tags: ["Retrieve account information"],
164 summary: "Followers",
165 operationId: "AccountController.followers",
166 security: [%{"oAuth" => ["read:accounts"]}],
168 "Accounts which follow the given account, if network is not hidden by the account owner.",
170 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
171 Operation.parameter(:id, :query, :string, "ID of the resource owner"),
172 with_relationships_param() | pagination_params()
175 200 => Operation.response("Accounts", "application/json", array_of_accounts())
180 def following_operation do
182 tags: ["Retrieve account information"],
183 summary: "Following",
184 operationId: "AccountController.following",
185 security: [%{"oAuth" => ["read:accounts"]}],
187 "Accounts which the given account is following, if network is not hidden by the account owner.",
189 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
190 Operation.parameter(:id, :query, :string, "ID of the resource owner"),
191 with_relationships_param() | pagination_params()
193 responses: %{200 => Operation.response("Accounts", "application/json", array_of_accounts())}
197 def lists_operation do
199 tags: ["Retrieve account information"],
200 summary: "Lists containing this account",
201 operationId: "AccountController.lists",
202 security: [%{"oAuth" => ["read:lists"]}],
203 description: "User lists that you have added this account to.",
204 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
205 responses: %{200 => Operation.response("Lists", "application/json", array_of_lists())}
209 def follow_operation do
211 tags: ["Account actions"],
213 operationId: "AccountController.follow",
214 security: [%{"oAuth" => ["follow", "write:follows"]}],
215 description: "Follow the given account",
217 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"}
226 allOf: [BooleanLike],
227 description: "Receive this account's reblogs in home timeline? Defaults to true.",
231 allOf: [BooleanLike],
233 "Receive notifications for all statuses posted by the account? Defaults to false.",
241 200 => Operation.response("Relationship", "application/json", AccountRelationship),
242 400 => Operation.response("Error", "application/json", ApiError),
243 404 => Operation.response("Error", "application/json", ApiError)
248 def unfollow_operation do
250 tags: ["Account actions"],
252 operationId: "AccountController.unfollow",
253 security: [%{"oAuth" => ["follow", "write:follows"]}],
254 description: "Unfollow the given account",
255 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
257 200 => Operation.response("Relationship", "application/json", AccountRelationship),
258 400 => Operation.response("Error", "application/json", ApiError),
259 404 => Operation.response("Error", "application/json", ApiError)
264 def mute_operation do
266 tags: ["Account actions"],
268 operationId: "AccountController.mute",
269 security: [%{"oAuth" => ["follow", "write:mutes"]}],
270 requestBody: request_body("Parameters", mute_request()),
272 "Mute the given account. Clients should filter statuses and notifications from this account, if received (e.g. due to a boost in the Home timeline).",
274 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
278 %Schema{allOf: [BooleanLike], default: true},
279 "Mute notifications in addition to statuses? Defaults to `true`."
284 %Schema{type: :integer, default: 0},
285 "Expire the mute in `expires_in` seconds. Default 0 for infinity"
289 200 => Operation.response("Relationship", "application/json", AccountRelationship)
294 def unmute_operation do
296 tags: ["Account actions"],
298 operationId: "AccountController.unmute",
299 security: [%{"oAuth" => ["follow", "write:mutes"]}],
300 description: "Unmute the given account.",
301 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
303 200 => Operation.response("Relationship", "application/json", AccountRelationship)
308 def block_operation do
310 tags: ["Account actions"],
312 operationId: "AccountController.block",
313 security: [%{"oAuth" => ["follow", "write:blocks"]}],
315 "Block the given account. Clients should filter statuses from this account if received (e.g. due to a boost in the Home timeline)",
316 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
318 200 => Operation.response("Relationship", "application/json", AccountRelationship)
323 def unblock_operation do
325 tags: ["Account actions"],
327 operationId: "AccountController.unblock",
328 security: [%{"oAuth" => ["follow", "write:blocks"]}],
329 description: "Unblock the given account.",
330 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
332 200 => Operation.response("Relationship", "application/json", AccountRelationship)
337 def remove_from_followers_operation do
339 tags: ["Account actions"],
340 summary: "Remove from followers",
341 operationId: "AccountController.remove_from_followers",
342 security: [%{"oAuth" => ["follow", "write:follows"]}],
343 description: "Remove the given account from followers",
344 parameters: [%Reference{"$ref": "#/components/parameters/accountIdOrNickname"}],
346 200 => Operation.response("Relationship", "application/json", AccountRelationship),
347 400 => Operation.response("Error", "application/json", ApiError),
348 404 => Operation.response("Error", "application/json", ApiError)
353 def note_operation do
355 tags: ["Account actions"],
356 summary: "Set a private note about a user.",
357 operationId: "AccountController.note",
358 security: [%{"oAuth" => ["follow", "write:accounts"]}],
359 requestBody: request_body("Parameters", note_request()),
360 description: "Create a note for the given account.",
362 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"},
366 %Schema{type: :string},
371 200 => Operation.response("Relationship", "application/json", AccountRelationship)
376 def follow_by_uri_operation do
378 tags: ["Account actions"],
379 summary: "Follow by URI",
380 operationId: "AccountController.follows",
381 security: [%{"oAuth" => ["follow", "write:follows"]}],
382 requestBody: request_body("Parameters", follow_by_uri_request(), required: true),
384 200 => Operation.response("Account", "application/json", AccountRelationship),
385 400 => Operation.response("Error", "application/json", ApiError),
386 404 => Operation.response("Error", "application/json", ApiError)
391 def mutes_operation do
393 tags: ["Blocks and mutes"],
394 summary: "Retrieve list of mutes",
395 operationId: "AccountController.mutes",
396 description: "Accounts the user has muted.",
397 security: [%{"oAuth" => ["follow", "read:mutes"]}],
398 parameters: [with_relationships_param() | pagination_params()],
400 200 => Operation.response("Accounts", "application/json", array_of_accounts())
405 def blocks_operation do
407 tags: ["Blocks and mutes"],
408 summary: "Retrieve list of blocks",
409 operationId: "AccountController.blocks",
410 description: "View your blocks. See also accounts/:id/{block,unblock}",
411 security: [%{"oAuth" => ["read:blocks"]}],
412 parameters: pagination_params(),
414 200 => Operation.response("Accounts", "application/json", array_of_accounts())
419 def lookup_operation do
421 tags: ["Account lookup"],
422 summary: "Find a user by nickname",
423 operationId: "AccountController.lookup",
433 200 => Operation.response("Account", "application/json", Account),
434 404 => Operation.response("Error", "application/json", ApiError)
439 def endorsements_operation do
441 tags: ["Retrieve account information"],
442 summary: "Endorsements",
443 operationId: "AccountController.endorsements",
444 description: "Not implemented",
445 security: [%{"oAuth" => ["read:accounts"]}],
447 200 => empty_array_response()
452 def identity_proofs_operation do
454 tags: ["Retrieve account information"],
455 summary: "Identity proofs",
456 operationId: "AccountController.identity_proofs",
457 # Validators complains about unused path params otherwise
459 %Reference{"$ref": "#/components/parameters/accountIdOrNickname"}
461 description: "Not implemented",
463 200 => empty_array_response()
468 defp create_request do
470 title: "AccountCreateRequest",
471 description: "POST body for creating an account",
473 required: [:username, :password, :agreement],
479 "Text that will be reviewed by moderators if registrations require manual approval"
481 username: %Schema{type: :string, description: "The desired username for the account"},
486 "The email address to be used for login. Required when `account_activation_required` is enabled.",
491 description: "The password to be used for login",
495 allOf: [BooleanLike],
497 "Whether the user agrees to the local rules, terms, and policies. These should be presented to the user in order to allow them to consent before setting this parameter to TRUE."
502 description: "The language of the confirmation email that will be sent"
504 # Pleroma-specific properties:
505 fullname: %Schema{type: :string, nullable: true, description: "Full name"},
506 bio: %Schema{type: :string, description: "Bio", nullable: true, default: ""},
507 captcha_solution: %Schema{
510 description: "Provider-specific captcha solution"
512 captcha_token: %Schema{
515 description: "Provider-specific captcha token"
517 captcha_answer_data: %Schema{
520 description: "Provider-specific captcha data"
525 description: "Invite token required when the registrations aren't public"
530 description: "User's preferred language for emails"
534 "username" => "cofe",
535 "email" => "cofe@example.com",
536 "password" => "secret",
537 "agreement" => "true",
543 # Note: this is a token response (if login succeeds!), but there's no oauth operation file yet.
544 defp create_response do
546 title: "AccountCreateResponse",
547 description: "Response schema for an account",
550 # The response when auto-login on create succeeds (token is issued):
551 token_type: %Schema{type: :string},
552 access_token: %Schema{type: :string},
553 refresh_token: %Schema{type: :string},
554 scope: %Schema{type: :string},
555 created_at: %Schema{type: :integer, format: :"date-time"},
556 me: %Schema{type: :string},
557 expires_in: %Schema{type: :integer},
559 # The response when registration succeeds but auto-login fails (no token):
560 identifier: %Schema{type: :string},
561 message: %Schema{type: :string}
563 # Note: example of successful registration with failed login response:
565 # "identifier" => "missing_confirmed_email",
566 # "message" => "You have been registered. Please check your email for further instructions."
569 "token_type" => "Bearer",
570 "access_token" => "i9hAVVzGld86Pl5JtLtizKoXVvtTlSCJvwaugCxvZzk",
571 "refresh_token" => "i9hAVVzGld86Pl5JtLtizKoXVvtTlSCJvwaugCxvZzz",
572 "created_at" => 1_585_918_714,
574 "scope" => "read write follow push",
575 "me" => "https://gensokyo.2hu/users/raymoo"
580 defp update_credentials_request do
582 title: "AccountUpdateCredentialsRequest",
583 description: "POST body for creating an account",
587 allOf: [BooleanLike],
589 description: "Whether the account has a bot flag."
591 display_name: %Schema{
594 description: "The display name to use for the profile."
596 note: %Schema{type: :string, description: "The account bio."},
600 description: "Avatar image encoded using multipart/form-data",
606 description: "Header image encoded using multipart/form-data",
610 allOf: [BooleanLike],
612 description: "Whether manual approval of follow requests is required."
614 fields_attributes: %Schema{
617 %Schema{type: :array, items: attribute_field()},
618 %Schema{type: :object, additionalProperties: attribute_field()}
621 # NOTE: `source` field is not supported
626 # privacy: %Schema{type: :string},
627 # sensitive: %Schema{type: :boolean},
628 # language: %Schema{type: :string}
632 # Pleroma-specific fields
633 no_rich_text: %Schema{
634 allOf: [BooleanLike],
636 description: "html tags are stripped from all statuses requested from the API"
638 hide_followers: %Schema{
639 allOf: [BooleanLike],
641 description: "user's followers will be hidden"
643 hide_follows: %Schema{
644 allOf: [BooleanLike],
646 description: "user's follows will be hidden"
648 hide_followers_count: %Schema{
649 allOf: [BooleanLike],
651 description: "user's follower count will be hidden"
653 hide_follows_count: %Schema{
654 allOf: [BooleanLike],
656 description: "user's follow count will be hidden"
658 hide_favorites: %Schema{
659 allOf: [BooleanLike],
661 description: "user's favorites timeline will be hidden"
664 allOf: [BooleanLike],
666 description: "user's role (e.g admin, moderator) will be exposed to anyone in the
669 default_scope: VisibilityScope,
670 pleroma_settings_store: %Schema{
673 description: "Opaque user settings to be saved on the backend."
675 skip_thread_containment: %Schema{
676 allOf: [BooleanLike],
678 description: "Skip filtering out broken threads"
680 allow_following_move: %Schema{
681 allOf: [BooleanLike],
683 description: "Allows automatically follow moved following accounts"
685 also_known_as: %Schema{
687 items: %Schema{type: :string},
689 description: "List of alternate ActivityPub IDs"
691 pleroma_background_image: %Schema{
694 description: "Sets the background image of the user.",
697 discoverable: %Schema{
698 allOf: [BooleanLike],
701 "Discovery (listing, indexing) of this account by external services (search bots etc.) is allowed."
703 actor_type: ActorType
707 display_name: "cofe",
709 fields_attributes: [%{name: "foo", value: "bar"}],
711 hide_followers: true,
713 hide_followers_count: false,
714 hide_follows_count: false,
715 hide_favorites: false,
717 default_scope: "private",
718 pleroma_settings_store: %{"pleroma-fe" => %{"key" => "val"}},
719 skip_thread_containment: false,
720 allow_following_move: false,
721 also_known_as: ["https://foo.bar/users/foo"],
728 def array_of_accounts do
730 title: "ArrayOfAccounts",
733 example: [Account.schema().example]
737 defp array_of_relationships do
739 title: "ArrayOfRelationships",
740 description: "Response schema for account relationships",
742 items: AccountRelationship,
747 "showing_reblogs" => true,
748 "followed_by" => true,
750 "blocked_by" => true,
752 "muting_notifications" => false,
754 "requested" => false,
755 "domain_blocking" => false,
756 "subscribing" => false,
757 "notifying" => false,
763 "showing_reblogs" => true,
764 "followed_by" => true,
766 "blocked_by" => true,
768 "muting_notifications" => false,
771 "domain_blocking" => false,
772 "subscribing" => false,
773 "notifying" => false,
779 "showing_reblogs" => true,
780 "followed_by" => true,
782 "blocked_by" => false,
784 "muting_notifications" => false,
786 "requested" => false,
787 "domain_blocking" => true,
788 "subscribing" => true,
796 defp follow_by_uri_request do
798 title: "AccountFollowsRequest",
799 description: "POST body for muting an account",
802 uri: %Schema{type: :string, nullable: true, format: :uri}
810 title: "AccountMuteRequest",
811 description: "POST body for muting an account",
814 notifications: %Schema{
815 allOf: [BooleanLike],
817 description: "Mute notifications in addition to statuses? Defaults to true.",
823 description: "Expire the mute in `expires_in` seconds. Default 0 for infinity",
828 "notifications" => true,
829 "expires_in" => 86_400
836 title: "AccountNoteRequest",
837 description: "POST body for adding a note for an account",
842 description: "Account note body"
846 "comment" => "Example note"
851 defp array_of_lists do
853 title: "ArrayOfLists",
854 description: "Response schema for lists",
858 %{"id" => "123", "title" => "my list"},
859 %{"id" => "1337", "title" => "anotehr list"}
864 defp array_of_statuses do
866 title: "ArrayOfStatuses",
872 defp attribute_field do
874 title: "AccountAttributeField",
875 description: "Request schema for account custom fields",
878 name: %Schema{type: :string},
879 value: %Schema{type: :string}
881 required: [:name, :value],
884 "value" => "https://pleroma.com"