1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.TwitterAPI.RemoteFollowControllerTest do
6 use Pleroma.Web.ConnCase
9 alias Pleroma.Web.CommonAPI
10 import ExUnit.CaptureLog
11 import Pleroma.Factory
14 Tesla.Mock.mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
18 clear_config([:instance])
19 clear_config([:frontend_configurations, :pleroma_fe])
20 clear_config([:user, :deny_follow_blocked])
22 describe "GET /ostatus_subscribe - remote_follow/2" do
23 test "adds status to pleroma instance if the `acct` is a status", %{conn: conn} do
26 remote_follow_path(conn, :follow, %{
27 acct: "https://mastodon.social/users/emelie/statuses/101849165031453009"
30 |> redirected_to() =~ "/notice/"
33 test "show follow account page if the `acct` is a account link", %{conn: conn} do
36 |> get(remote_follow_path(conn, :follow, %{acct: "https://mastodon.social/users/emelie"}))
39 assert response =~ "Log in to follow"
42 test "show follow page if the `acct` is a account link", %{conn: conn} do
47 |> assign(:user, user)
48 |> get(remote_follow_path(conn, :follow, %{acct: "https://mastodon.social/users/emelie"}))
51 assert response =~ "Remote follow"
54 test "show follow page with error when user cannot fecth by `acct` link", %{conn: conn} do
57 assert capture_log(fn ->
60 |> assign(:user, user)
62 remote_follow_path(conn, :follow, %{
63 acct: "https://mastodon.social/users/not_found"
68 assert response =~ "Error fetching user"
69 end) =~ "Object has been deleted"
73 describe "POST /ostatus_subscribe - do_follow/2 with assigned user " do
74 test "required `follow | write:follows` scope", %{conn: conn} do
77 read_token = insert(:oauth_token, user: user, scopes: ["read"])
79 assert capture_log(fn ->
82 |> assign(:user, user)
83 |> assign(:token, read_token)
84 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => user2.id}})
87 assert response =~ "Error following account"
88 end) =~ "Insufficient permissions: follow | write:follows."
91 test "follows user", %{conn: conn} do
97 |> assign(:user, user)
98 |> assign(:token, insert(:oauth_token, user: user, scopes: ["write:follows"]))
99 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => user2.id}})
101 assert redirected_to(conn) == "/users/#{user2.id}"
104 test "returns error when user is deactivated", %{conn: conn} do
105 user = insert(:user, deactivated: true)
106 user2 = insert(:user)
110 |> assign(:user, user)
111 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => user2.id}})
114 assert response =~ "Error following account"
117 test "returns error when user is blocked", %{conn: conn} do
118 Pleroma.Config.put([:user, :deny_follow_blocked], true)
120 user2 = insert(:user)
122 {:ok, _user_block} = Pleroma.User.block(user2, user)
126 |> assign(:user, user)
127 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => user2.id}})
130 assert response =~ "Error following account"
133 test "returns error when followee not found", %{conn: conn} do
138 |> assign(:user, user)
139 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => "jimm"}})
142 assert response =~ "Error following account"
145 test "returns success result when user already in followers", %{conn: conn} do
147 user2 = insert(:user)
148 {:ok, _, _, _} = CommonAPI.follow(user, user2)
152 |> assign(:user, refresh_record(user))
153 |> assign(:token, insert(:oauth_token, user: user, scopes: ["write:follows"]))
154 |> post(remote_follow_path(conn, :do_follow), %{"user" => %{"id" => user2.id}})
156 assert redirected_to(conn) == "/users/#{user2.id}"
160 describe "POST /ostatus_subscribe - follow/2 without assigned user " do
161 test "follows", %{conn: conn} do
163 user2 = insert(:user)
167 |> post(remote_follow_path(conn, :do_follow), %{
168 "authorization" => %{"name" => user.nickname, "password" => "test", "id" => user2.id}
171 assert redirected_to(conn) == "/users/#{user2.id}"
172 assert user2.follower_address in User.following(user)
175 test "returns error when followee not found", %{conn: conn} do
180 |> post(remote_follow_path(conn, :do_follow), %{
181 "authorization" => %{"name" => user.nickname, "password" => "test", "id" => "jimm"}
185 assert response =~ "Error following account"
188 test "returns error when login invalid", %{conn: conn} do
193 |> post(remote_follow_path(conn, :do_follow), %{
194 "authorization" => %{"name" => "jimm", "password" => "test", "id" => user.id}
198 assert response =~ "Wrong username or password"
201 test "returns error when password invalid", %{conn: conn} do
203 user2 = insert(:user)
207 |> post(remote_follow_path(conn, :do_follow), %{
208 "authorization" => %{"name" => user.nickname, "password" => "42", "id" => user2.id}
212 assert response =~ "Wrong username or password"
215 test "returns error when user is blocked", %{conn: conn} do
216 Pleroma.Config.put([:user, :deny_follow_blocked], true)
218 user2 = insert(:user)
219 {:ok, _user_block} = Pleroma.User.block(user2, user)
223 |> post(remote_follow_path(conn, :do_follow), %{
224 "authorization" => %{"name" => user.nickname, "password" => "test", "id" => user2.id}
228 assert response =~ "Error following account"