Fix object spoofing vulnerability in attachments
[akkoma] / test / pleroma / web / activity_pub / activity_pub_test.exs
1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
4
5 defmodule Pleroma.Web.ActivityPub.ActivityPubTest do
6 use Pleroma.DataCase
7 use Oban.Testing, repo: Pleroma.Repo
8
9 alias Pleroma.Activity
10 alias Pleroma.Builders.ActivityBuilder
11 alias Pleroma.Config
12 alias Pleroma.Notification
13 alias Pleroma.Object
14 alias Pleroma.User
15 alias Pleroma.Web.ActivityPub.ActivityPub
16 alias Pleroma.Web.ActivityPub.Utils
17 alias Pleroma.Web.AdminAPI.AccountView
18 alias Pleroma.Web.CommonAPI
19
20 import ExUnit.CaptureLog
21 import Mock
22 import Pleroma.Factory
23 import Tesla.Mock
24
25 setup do
26 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
27 :ok
28 end
29
30 setup do: clear_config([:instance, :federating])
31
32 describe "streaming out participations" do
33 test "it streams them out" do
34 user = insert(:user)
35 {:ok, activity} = CommonAPI.post(user, %{status: ".", visibility: "direct"})
36
37 {:ok, conversation} = Pleroma.Conversation.create_or_bump_for(activity)
38
39 participations =
40 conversation.participations
41 |> Repo.preload(:user)
42
43 with_mock Pleroma.Web.Streamer,
44 stream: fn _, _ -> nil end do
45 ActivityPub.stream_out_participations(conversation.participations)
46
47 assert called(Pleroma.Web.Streamer.stream("participation", participations))
48 end
49 end
50
51 test "streams them out on activity creation" do
52 user_one = insert(:user)
53 user_two = insert(:user)
54
55 with_mock Pleroma.Web.Streamer,
56 stream: fn _, _ -> nil end do
57 {:ok, activity} =
58 CommonAPI.post(user_one, %{
59 status: "@#{user_two.nickname}",
60 visibility: "direct"
61 })
62
63 conversation =
64 activity.data["context"]
65 |> Pleroma.Conversation.get_for_ap_id()
66 |> Repo.preload(participations: :user)
67
68 assert called(Pleroma.Web.Streamer.stream("participation", conversation.participations))
69 end
70 end
71 end
72
73 describe "fetching restricted by visibility" do
74 test "it restricts by the appropriate visibility" do
75 user = insert(:user)
76
77 {:ok, public_activity} = CommonAPI.post(user, %{status: ".", visibility: "public"})
78
79 {:ok, direct_activity} = CommonAPI.post(user, %{status: ".", visibility: "direct"})
80
81 {:ok, unlisted_activity} = CommonAPI.post(user, %{status: ".", visibility: "unlisted"})
82
83 {:ok, private_activity} = CommonAPI.post(user, %{status: ".", visibility: "private"})
84
85 activities = ActivityPub.fetch_activities([], %{visibility: "direct", actor_id: user.ap_id})
86
87 assert activities == [direct_activity]
88
89 activities =
90 ActivityPub.fetch_activities([], %{visibility: "unlisted", actor_id: user.ap_id})
91
92 assert activities == [unlisted_activity]
93
94 activities =
95 ActivityPub.fetch_activities([], %{visibility: "private", actor_id: user.ap_id})
96
97 assert activities == [private_activity]
98
99 activities = ActivityPub.fetch_activities([], %{visibility: "public", actor_id: user.ap_id})
100
101 assert activities == [public_activity]
102
103 activities =
104 ActivityPub.fetch_activities([], %{
105 visibility: ~w[private public],
106 actor_id: user.ap_id
107 })
108
109 assert activities == [public_activity, private_activity]
110 end
111 end
112
113 describe "fetching excluded by visibility" do
114 test "it excludes by the appropriate visibility" do
115 user = insert(:user)
116
117 {:ok, public_activity} = CommonAPI.post(user, %{status: ".", visibility: "public"})
118
119 {:ok, direct_activity} = CommonAPI.post(user, %{status: ".", visibility: "direct"})
120
121 {:ok, unlisted_activity} = CommonAPI.post(user, %{status: ".", visibility: "unlisted"})
122
123 {:ok, private_activity} = CommonAPI.post(user, %{status: ".", visibility: "private"})
124
125 activities =
126 ActivityPub.fetch_activities([], %{
127 exclude_visibilities: "direct",
128 actor_id: user.ap_id
129 })
130
131 assert public_activity in activities
132 assert unlisted_activity in activities
133 assert private_activity in activities
134 refute direct_activity in activities
135
136 activities =
137 ActivityPub.fetch_activities([], %{
138 exclude_visibilities: "unlisted",
139 actor_id: user.ap_id
140 })
141
142 assert public_activity in activities
143 refute unlisted_activity in activities
144 assert private_activity in activities
145 assert direct_activity in activities
146
147 activities =
148 ActivityPub.fetch_activities([], %{
149 exclude_visibilities: "private",
150 actor_id: user.ap_id
151 })
152
153 assert public_activity in activities
154 assert unlisted_activity in activities
155 refute private_activity in activities
156 assert direct_activity in activities
157
158 activities =
159 ActivityPub.fetch_activities([], %{
160 exclude_visibilities: "public",
161 actor_id: user.ap_id
162 })
163
164 refute public_activity in activities
165 assert unlisted_activity in activities
166 assert private_activity in activities
167 assert direct_activity in activities
168 end
169 end
170
171 describe "building a user from his ap id" do
172 test "it returns a user" do
173 user_id = "http://mastodon.example.org/users/admin"
174 {:ok, user} = ActivityPub.make_user_from_ap_id(user_id)
175 assert user.ap_id == user_id
176 assert user.nickname == "admin@mastodon.example.org"
177 assert user.ap_enabled
178 assert user.follower_address == "http://mastodon.example.org/users/admin/followers"
179 end
180
181 test "it returns a user that is invisible" do
182 user_id = "http://mastodon.example.org/users/relay"
183 {:ok, user} = ActivityPub.make_user_from_ap_id(user_id)
184 assert User.invisible?(user)
185 end
186
187 test "it returns a user that accepts chat messages" do
188 user_id = "http://mastodon.example.org/users/admin"
189 {:ok, user} = ActivityPub.make_user_from_ap_id(user_id)
190
191 assert user.accepts_chat_messages
192 end
193 end
194
195 test "it fetches the appropriate tag-restricted posts" do
196 user = insert(:user)
197
198 {:ok, status_one} = CommonAPI.post(user, %{status: ". #test"})
199 {:ok, status_two} = CommonAPI.post(user, %{status: ". #essais"})
200 {:ok, status_three} = CommonAPI.post(user, %{status: ". #test #reject"})
201
202 fetch_one = ActivityPub.fetch_activities([], %{type: "Create", tag: "test"})
203
204 fetch_two = ActivityPub.fetch_activities([], %{type: "Create", tag: ["test", "essais"]})
205
206 fetch_three =
207 ActivityPub.fetch_activities([], %{
208 type: "Create",
209 tag: ["test", "essais"],
210 tag_reject: ["reject"]
211 })
212
213 fetch_four =
214 ActivityPub.fetch_activities([], %{
215 type: "Create",
216 tag: ["test"],
217 tag_all: ["test", "reject"]
218 })
219
220 assert fetch_one == [status_one, status_three]
221 assert fetch_two == [status_one, status_two, status_three]
222 assert fetch_three == [status_one, status_two]
223 assert fetch_four == [status_three]
224 end
225
226 describe "insertion" do
227 test "drops activities beyond a certain limit" do
228 limit = Config.get([:instance, :remote_limit])
229
230 random_text =
231 :crypto.strong_rand_bytes(limit + 1)
232 |> Base.encode64()
233 |> binary_part(0, limit + 1)
234
235 data = %{
236 "ok" => true,
237 "object" => %{
238 "content" => random_text
239 }
240 }
241
242 assert {:error, :remote_limit} = ActivityPub.insert(data)
243 end
244
245 test "doesn't drop activities with content being null" do
246 user = insert(:user)
247
248 data = %{
249 "actor" => user.ap_id,
250 "to" => [],
251 "object" => %{
252 "actor" => user.ap_id,
253 "to" => [],
254 "type" => "Note",
255 "content" => nil
256 }
257 }
258
259 assert {:ok, _} = ActivityPub.insert(data)
260 end
261
262 test "returns the activity if one with the same id is already in" do
263 activity = insert(:note_activity)
264 {:ok, new_activity} = ActivityPub.insert(activity.data)
265
266 assert activity.id == new_activity.id
267 end
268
269 test "inserts a given map into the activity database, giving it an id if it has none." do
270 user = insert(:user)
271
272 data = %{
273 "actor" => user.ap_id,
274 "to" => [],
275 "object" => %{
276 "actor" => user.ap_id,
277 "to" => [],
278 "type" => "Note",
279 "content" => "hey"
280 }
281 }
282
283 {:ok, %Activity{} = activity} = ActivityPub.insert(data)
284 assert activity.data["ok"] == data["ok"]
285 assert is_binary(activity.data["id"])
286
287 given_id = "bla"
288
289 data = %{
290 "id" => given_id,
291 "actor" => user.ap_id,
292 "to" => [],
293 "context" => "blabla",
294 "object" => %{
295 "actor" => user.ap_id,
296 "to" => [],
297 "type" => "Note",
298 "content" => "hey"
299 }
300 }
301
302 {:ok, %Activity{} = activity} = ActivityPub.insert(data)
303 assert activity.data["ok"] == data["ok"]
304 assert activity.data["id"] == given_id
305 assert activity.data["context"] == "blabla"
306 assert activity.data["context_id"]
307 end
308
309 test "adds a context when none is there" do
310 user = insert(:user)
311
312 data = %{
313 "actor" => user.ap_id,
314 "to" => [],
315 "object" => %{
316 "actor" => user.ap_id,
317 "to" => [],
318 "type" => "Note",
319 "content" => "hey"
320 }
321 }
322
323 {:ok, %Activity{} = activity} = ActivityPub.insert(data)
324 object = Pleroma.Object.normalize(activity)
325
326 assert is_binary(activity.data["context"])
327 assert is_binary(object.data["context"])
328 assert activity.data["context_id"]
329 assert object.data["context_id"]
330 end
331
332 test "adds an id to a given object if it lacks one and is a note and inserts it to the object database" do
333 user = insert(:user)
334
335 data = %{
336 "actor" => user.ap_id,
337 "to" => [],
338 "object" => %{
339 "actor" => user.ap_id,
340 "to" => [],
341 "type" => "Note",
342 "content" => "hey"
343 }
344 }
345
346 {:ok, %Activity{} = activity} = ActivityPub.insert(data)
347 assert object = Object.normalize(activity)
348 assert is_binary(object.data["id"])
349 end
350 end
351
352 describe "listen activities" do
353 test "does not increase user note count" do
354 user = insert(:user)
355
356 {:ok, activity} =
357 ActivityPub.listen(%{
358 to: ["https://www.w3.org/ns/activitystreams#Public"],
359 actor: user,
360 context: "",
361 object: %{
362 "actor" => user.ap_id,
363 "to" => ["https://www.w3.org/ns/activitystreams#Public"],
364 "artist" => "lain",
365 "title" => "lain radio episode 1",
366 "length" => 180_000,
367 "type" => "Audio"
368 }
369 })
370
371 assert activity.actor == user.ap_id
372
373 user = User.get_cached_by_id(user.id)
374 assert user.note_count == 0
375 end
376
377 test "can be fetched into a timeline" do
378 _listen_activity_1 = insert(:listen)
379 _listen_activity_2 = insert(:listen)
380 _listen_activity_3 = insert(:listen)
381
382 timeline = ActivityPub.fetch_activities([], %{type: ["Listen"]})
383
384 assert length(timeline) == 3
385 end
386 end
387
388 describe "create activities" do
389 setup do
390 [user: insert(:user)]
391 end
392
393 test "it reverts create", %{user: user} do
394 with_mock(Utils, [:passthrough], maybe_federate: fn _ -> {:error, :reverted} end) do
395 assert {:error, :reverted} =
396 ActivityPub.create(%{
397 to: ["user1", "user2"],
398 actor: user,
399 context: "",
400 object: %{
401 "to" => ["user1", "user2"],
402 "type" => "Note",
403 "content" => "testing"
404 }
405 })
406 end
407
408 assert Repo.aggregate(Activity, :count, :id) == 0
409 assert Repo.aggregate(Object, :count, :id) == 0
410 end
411
412 test "creates activity if expiration is not configured and expires_at is not passed", %{
413 user: user
414 } do
415 clear_config([Pleroma.Workers.PurgeExpiredActivity, :enabled], false)
416
417 assert {:ok, _} =
418 ActivityPub.create(%{
419 to: ["user1", "user2"],
420 actor: user,
421 context: "",
422 object: %{
423 "to" => ["user1", "user2"],
424 "type" => "Note",
425 "content" => "testing"
426 }
427 })
428 end
429
430 test "rejects activity if expires_at present but expiration is not configured", %{user: user} do
431 clear_config([Pleroma.Workers.PurgeExpiredActivity, :enabled], false)
432
433 assert {:error, :expired_activities_disabled} =
434 ActivityPub.create(%{
435 to: ["user1", "user2"],
436 actor: user,
437 context: "",
438 object: %{
439 "to" => ["user1", "user2"],
440 "type" => "Note",
441 "content" => "testing"
442 },
443 additional: %{
444 "expires_at" => DateTime.utc_now()
445 }
446 })
447
448 assert Repo.aggregate(Activity, :count, :id) == 0
449 assert Repo.aggregate(Object, :count, :id) == 0
450 end
451
452 test "removes doubled 'to' recipients", %{user: user} do
453 {:ok, activity} =
454 ActivityPub.create(%{
455 to: ["user1", "user1", "user2"],
456 actor: user,
457 context: "",
458 object: %{
459 "to" => ["user1", "user1", "user2"],
460 "type" => "Note",
461 "content" => "testing"
462 }
463 })
464
465 assert activity.data["to"] == ["user1", "user2"]
466 assert activity.actor == user.ap_id
467 assert activity.recipients == ["user1", "user2", user.ap_id]
468 end
469
470 test "increases user note count only for public activities", %{user: user} do
471 {:ok, _} =
472 CommonAPI.post(User.get_cached_by_id(user.id), %{
473 status: "1",
474 visibility: "public"
475 })
476
477 {:ok, _} =
478 CommonAPI.post(User.get_cached_by_id(user.id), %{
479 status: "2",
480 visibility: "unlisted"
481 })
482
483 {:ok, _} =
484 CommonAPI.post(User.get_cached_by_id(user.id), %{
485 status: "2",
486 visibility: "private"
487 })
488
489 {:ok, _} =
490 CommonAPI.post(User.get_cached_by_id(user.id), %{
491 status: "3",
492 visibility: "direct"
493 })
494
495 user = User.get_cached_by_id(user.id)
496 assert user.note_count == 2
497 end
498
499 test "increases replies count", %{user: user} do
500 user2 = insert(:user)
501
502 {:ok, activity} = CommonAPI.post(user, %{status: "1", visibility: "public"})
503 ap_id = activity.data["id"]
504 reply_data = %{status: "1", in_reply_to_status_id: activity.id}
505
506 # public
507 {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, :visibility, "public"))
508 assert %{data: _data, object: object} = Activity.get_by_ap_id_with_object(ap_id)
509 assert object.data["repliesCount"] == 1
510
511 # unlisted
512 {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, :visibility, "unlisted"))
513 assert %{data: _data, object: object} = Activity.get_by_ap_id_with_object(ap_id)
514 assert object.data["repliesCount"] == 2
515
516 # private
517 {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, :visibility, "private"))
518 assert %{data: _data, object: object} = Activity.get_by_ap_id_with_object(ap_id)
519 assert object.data["repliesCount"] == 2
520
521 # direct
522 {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, :visibility, "direct"))
523 assert %{data: _data, object: object} = Activity.get_by_ap_id_with_object(ap_id)
524 assert object.data["repliesCount"] == 2
525 end
526 end
527
528 describe "fetch activities for recipients" do
529 test "retrieve the activities for certain recipients" do
530 {:ok, activity_one} = ActivityBuilder.insert(%{"to" => ["someone"]})
531 {:ok, activity_two} = ActivityBuilder.insert(%{"to" => ["someone_else"]})
532 {:ok, _activity_three} = ActivityBuilder.insert(%{"to" => ["noone"]})
533
534 activities = ActivityPub.fetch_activities(["someone", "someone_else"])
535 assert length(activities) == 2
536 assert activities == [activity_one, activity_two]
537 end
538 end
539
540 describe "fetch activities in context" do
541 test "retrieves activities that have a given context" do
542 {:ok, activity} = ActivityBuilder.insert(%{"type" => "Create", "context" => "2hu"})
543 {:ok, activity_two} = ActivityBuilder.insert(%{"type" => "Create", "context" => "2hu"})
544 {:ok, _activity_three} = ActivityBuilder.insert(%{"type" => "Create", "context" => "3hu"})
545 {:ok, _activity_four} = ActivityBuilder.insert(%{"type" => "Announce", "context" => "2hu"})
546 activity_five = insert(:note_activity)
547 user = insert(:user)
548
549 {:ok, _user_relationship} = User.block(user, %{ap_id: activity_five.data["actor"]})
550
551 activities = ActivityPub.fetch_activities_for_context("2hu", %{blocking_user: user})
552 assert activities == [activity_two, activity]
553 end
554
555 test "doesn't return activities with filtered words" do
556 user = insert(:user)
557 user_two = insert(:user)
558 insert(:filter, user: user, phrase: "test", hide: true)
559
560 {:ok, %{id: id1, data: %{"context" => context}}} = CommonAPI.post(user, %{status: "1"})
561
562 {:ok, %{id: id2}} = CommonAPI.post(user_two, %{status: "2", in_reply_to_status_id: id1})
563
564 {:ok, %{id: id3} = user_activity} =
565 CommonAPI.post(user, %{status: "3 test?", in_reply_to_status_id: id2})
566
567 {:ok, %{id: id4} = filtered_activity} =
568 CommonAPI.post(user_two, %{status: "4 test!", in_reply_to_status_id: id3})
569
570 {:ok, _} = CommonAPI.post(user, %{status: "5", in_reply_to_status_id: id4})
571
572 activities =
573 context
574 |> ActivityPub.fetch_activities_for_context(%{user: user})
575 |> Enum.map(& &1.id)
576
577 assert length(activities) == 4
578 assert user_activity.id in activities
579 refute filtered_activity.id in activities
580 end
581 end
582
583 test "doesn't return blocked activities" do
584 activity_one = insert(:note_activity)
585 activity_two = insert(:note_activity)
586 activity_three = insert(:note_activity)
587 user = insert(:user)
588 booster = insert(:user)
589 {:ok, _user_relationship} = User.block(user, %{ap_id: activity_one.data["actor"]})
590
591 activities = ActivityPub.fetch_activities([], %{blocking_user: user, skip_preload: true})
592
593 assert Enum.member?(activities, activity_two)
594 assert Enum.member?(activities, activity_three)
595 refute Enum.member?(activities, activity_one)
596
597 {:ok, _user_block} = User.unblock(user, %{ap_id: activity_one.data["actor"]})
598
599 activities = ActivityPub.fetch_activities([], %{blocking_user: user, skip_preload: true})
600
601 assert Enum.member?(activities, activity_two)
602 assert Enum.member?(activities, activity_three)
603 assert Enum.member?(activities, activity_one)
604
605 {:ok, _user_relationship} = User.block(user, %{ap_id: activity_three.data["actor"]})
606 {:ok, %{data: %{"object" => id}}} = CommonAPI.repeat(activity_three.id, booster)
607 %Activity{} = boost_activity = Activity.get_create_by_object_ap_id(id)
608 activity_three = Activity.get_by_id(activity_three.id)
609
610 activities = ActivityPub.fetch_activities([], %{blocking_user: user, skip_preload: true})
611
612 assert Enum.member?(activities, activity_two)
613 refute Enum.member?(activities, activity_three)
614 refute Enum.member?(activities, boost_activity)
615 assert Enum.member?(activities, activity_one)
616
617 activities = ActivityPub.fetch_activities([], %{blocking_user: nil, skip_preload: true})
618
619 assert Enum.member?(activities, activity_two)
620 assert Enum.member?(activities, activity_three)
621 assert Enum.member?(activities, boost_activity)
622 assert Enum.member?(activities, activity_one)
623 end
624
625 test "doesn't return transitive interactions concerning blocked users" do
626 blocker = insert(:user)
627 blockee = insert(:user)
628 friend = insert(:user)
629
630 {:ok, _user_relationship} = User.block(blocker, blockee)
631
632 {:ok, activity_one} = CommonAPI.post(friend, %{status: "hey!"})
633
634 {:ok, activity_two} = CommonAPI.post(friend, %{status: "hey! @#{blockee.nickname}"})
635
636 {:ok, activity_three} = CommonAPI.post(blockee, %{status: "hey! @#{friend.nickname}"})
637
638 {:ok, activity_four} = CommonAPI.post(blockee, %{status: "hey! @#{blocker.nickname}"})
639
640 activities = ActivityPub.fetch_activities([], %{blocking_user: blocker})
641
642 assert Enum.member?(activities, activity_one)
643 refute Enum.member?(activities, activity_two)
644 refute Enum.member?(activities, activity_three)
645 refute Enum.member?(activities, activity_four)
646 end
647
648 test "doesn't return announce activities with blocked users in 'to'" do
649 blocker = insert(:user)
650 blockee = insert(:user)
651 friend = insert(:user)
652
653 {:ok, _user_relationship} = User.block(blocker, blockee)
654
655 {:ok, activity_one} = CommonAPI.post(friend, %{status: "hey!"})
656
657 {:ok, activity_two} = CommonAPI.post(blockee, %{status: "hey! @#{friend.nickname}"})
658
659 {:ok, activity_three} = CommonAPI.repeat(activity_two.id, friend)
660
661 activities =
662 ActivityPub.fetch_activities([], %{blocking_user: blocker})
663 |> Enum.map(fn act -> act.id end)
664
665 assert Enum.member?(activities, activity_one.id)
666 refute Enum.member?(activities, activity_two.id)
667 refute Enum.member?(activities, activity_three.id)
668 end
669
670 test "doesn't return announce activities with blocked users in 'cc'" do
671 blocker = insert(:user)
672 blockee = insert(:user)
673 friend = insert(:user)
674
675 {:ok, _user_relationship} = User.block(blocker, blockee)
676
677 {:ok, activity_one} = CommonAPI.post(friend, %{status: "hey!"})
678
679 {:ok, activity_two} = CommonAPI.post(blockee, %{status: "hey! @#{friend.nickname}"})
680
681 assert object = Pleroma.Object.normalize(activity_two)
682
683 data = %{
684 "actor" => friend.ap_id,
685 "object" => object.data["id"],
686 "context" => object.data["context"],
687 "type" => "Announce",
688 "to" => ["https://www.w3.org/ns/activitystreams#Public"],
689 "cc" => [blockee.ap_id]
690 }
691
692 assert {:ok, activity_three} = ActivityPub.insert(data)
693
694 activities =
695 ActivityPub.fetch_activities([], %{blocking_user: blocker})
696 |> Enum.map(fn act -> act.id end)
697
698 assert Enum.member?(activities, activity_one.id)
699 refute Enum.member?(activities, activity_two.id)
700 refute Enum.member?(activities, activity_three.id)
701 end
702
703 test "doesn't return activities from blocked domains" do
704 domain = "dogwhistle.zone"
705 domain_user = insert(:user, %{ap_id: "https://#{domain}/@pundit"})
706 note = insert(:note, %{data: %{"actor" => domain_user.ap_id}})
707 activity = insert(:note_activity, %{note: note})
708 user = insert(:user)
709 {:ok, user} = User.block_domain(user, domain)
710
711 activities = ActivityPub.fetch_activities([], %{blocking_user: user, skip_preload: true})
712
713 refute activity in activities
714
715 followed_user = insert(:user)
716 CommonAPI.follow(user, followed_user)
717 {:ok, repeat_activity} = CommonAPI.repeat(activity.id, followed_user)
718
719 activities = ActivityPub.fetch_activities([], %{blocking_user: user, skip_preload: true})
720
721 refute repeat_activity in activities
722 end
723
724 test "does return activities from followed users on blocked domains" do
725 domain = "meanies.social"
726 domain_user = insert(:user, %{ap_id: "https://#{domain}/@pundit"})
727 blocker = insert(:user)
728
729 {:ok, blocker} = User.follow(blocker, domain_user)
730 {:ok, blocker} = User.block_domain(blocker, domain)
731
732 assert User.following?(blocker, domain_user)
733 assert User.blocks_domain?(blocker, domain_user)
734 refute User.blocks?(blocker, domain_user)
735
736 note = insert(:note, %{data: %{"actor" => domain_user.ap_id}})
737 activity = insert(:note_activity, %{note: note})
738
739 activities = ActivityPub.fetch_activities([], %{blocking_user: blocker, skip_preload: true})
740
741 assert activity in activities
742
743 # And check that if the guy we DO follow boosts someone else from their domain,
744 # that should be hidden
745 another_user = insert(:user, %{ap_id: "https://#{domain}/@meanie2"})
746 bad_note = insert(:note, %{data: %{"actor" => another_user.ap_id}})
747 bad_activity = insert(:note_activity, %{note: bad_note})
748 {:ok, repeat_activity} = CommonAPI.repeat(bad_activity.id, domain_user)
749
750 activities = ActivityPub.fetch_activities([], %{blocking_user: blocker, skip_preload: true})
751
752 refute repeat_activity in activities
753 end
754
755 test "returns your own posts regardless of mute" do
756 user = insert(:user)
757 muted = insert(:user)
758
759 {:ok, muted_post} = CommonAPI.post(muted, %{status: "Im stupid"})
760
761 {:ok, reply} =
762 CommonAPI.post(user, %{status: "I'm muting you", in_reply_to_status_id: muted_post.id})
763
764 {:ok, _} = User.mute(user, muted)
765
766 [activity] = ActivityPub.fetch_activities([], %{muting_user: user, skip_preload: true})
767
768 assert activity.id == reply.id
769 end
770
771 test "doesn't return muted activities" do
772 activity_one = insert(:note_activity)
773 activity_two = insert(:note_activity)
774 activity_three = insert(:note_activity)
775 user = insert(:user)
776 booster = insert(:user)
777
778 activity_one_actor = User.get_by_ap_id(activity_one.data["actor"])
779 {:ok, _user_relationships} = User.mute(user, activity_one_actor)
780
781 activities = ActivityPub.fetch_activities([], %{muting_user: user, skip_preload: true})
782
783 assert Enum.member?(activities, activity_two)
784 assert Enum.member?(activities, activity_three)
785 refute Enum.member?(activities, activity_one)
786
787 # Calling with 'with_muted' will deliver muted activities, too.
788 activities =
789 ActivityPub.fetch_activities([], %{
790 muting_user: user,
791 with_muted: true,
792 skip_preload: true
793 })
794
795 assert Enum.member?(activities, activity_two)
796 assert Enum.member?(activities, activity_three)
797 assert Enum.member?(activities, activity_one)
798
799 {:ok, _user_mute} = User.unmute(user, activity_one_actor)
800
801 activities = ActivityPub.fetch_activities([], %{muting_user: user, skip_preload: true})
802
803 assert Enum.member?(activities, activity_two)
804 assert Enum.member?(activities, activity_three)
805 assert Enum.member?(activities, activity_one)
806
807 activity_three_actor = User.get_by_ap_id(activity_three.data["actor"])
808 {:ok, _user_relationships} = User.mute(user, activity_three_actor)
809 {:ok, %{data: %{"object" => id}}} = CommonAPI.repeat(activity_three.id, booster)
810 %Activity{} = boost_activity = Activity.get_create_by_object_ap_id(id)
811 activity_three = Activity.get_by_id(activity_three.id)
812
813 activities = ActivityPub.fetch_activities([], %{muting_user: user, skip_preload: true})
814
815 assert Enum.member?(activities, activity_two)
816 refute Enum.member?(activities, activity_three)
817 refute Enum.member?(activities, boost_activity)
818 assert Enum.member?(activities, activity_one)
819
820 activities = ActivityPub.fetch_activities([], %{muting_user: nil, skip_preload: true})
821
822 assert Enum.member?(activities, activity_two)
823 assert Enum.member?(activities, activity_three)
824 assert Enum.member?(activities, boost_activity)
825 assert Enum.member?(activities, activity_one)
826 end
827
828 test "doesn't return thread muted activities" do
829 user = insert(:user)
830 _activity_one = insert(:note_activity)
831 note_two = insert(:note, data: %{"context" => "suya.."})
832 activity_two = insert(:note_activity, note: note_two)
833
834 {:ok, _activity_two} = CommonAPI.add_mute(user, activity_two)
835
836 assert [_activity_one] = ActivityPub.fetch_activities([], %{muting_user: user})
837 end
838
839 test "returns thread muted activities when with_muted is set" do
840 user = insert(:user)
841 _activity_one = insert(:note_activity)
842 note_two = insert(:note, data: %{"context" => "suya.."})
843 activity_two = insert(:note_activity, note: note_two)
844
845 {:ok, _activity_two} = CommonAPI.add_mute(user, activity_two)
846
847 assert [_activity_two, _activity_one] =
848 ActivityPub.fetch_activities([], %{muting_user: user, with_muted: true})
849 end
850
851 test "does include announces on request" do
852 activity_three = insert(:note_activity)
853 user = insert(:user)
854 booster = insert(:user)
855
856 {:ok, user} = User.follow(user, booster)
857
858 {:ok, announce} = CommonAPI.repeat(activity_three.id, booster)
859
860 [announce_activity] = ActivityPub.fetch_activities([user.ap_id | User.following(user)])
861
862 assert announce_activity.id == announce.id
863 end
864
865 test "excludes reblogs on request" do
866 user = insert(:user)
867 {:ok, expected_activity} = ActivityBuilder.insert(%{"type" => "Create"}, %{:user => user})
868 {:ok, _} = ActivityBuilder.insert(%{"type" => "Announce"}, %{:user => user})
869
870 [activity] = ActivityPub.fetch_user_activities(user, nil, %{exclude_reblogs: true})
871
872 assert activity == expected_activity
873 end
874
875 describe "irreversible filters" do
876 setup do
877 user = insert(:user)
878 user_two = insert(:user)
879
880 insert(:filter, user: user_two, phrase: "cofe", hide: true)
881 insert(:filter, user: user_two, phrase: "ok boomer", hide: true)
882 insert(:filter, user: user_two, phrase: "test", hide: false)
883
884 params = %{
885 type: ["Create", "Announce"],
886 user: user_two
887 }
888
889 {:ok, %{user: user, user_two: user_two, params: params}}
890 end
891
892 test "it returns statuses if they don't contain exact filter words", %{
893 user: user,
894 params: params
895 } do
896 {:ok, _} = CommonAPI.post(user, %{status: "hey"})
897 {:ok, _} = CommonAPI.post(user, %{status: "got cofefe?"})
898 {:ok, _} = CommonAPI.post(user, %{status: "I am not a boomer"})
899 {:ok, _} = CommonAPI.post(user, %{status: "ok boomers"})
900 {:ok, _} = CommonAPI.post(user, %{status: "ccofee is not a word"})
901 {:ok, _} = CommonAPI.post(user, %{status: "this is a test"})
902
903 activities = ActivityPub.fetch_activities([], params)
904
905 assert Enum.count(activities) == 6
906 end
907
908 test "it does not filter user's own statuses", %{user_two: user_two, params: params} do
909 {:ok, _} = CommonAPI.post(user_two, %{status: "Give me some cofe!"})
910 {:ok, _} = CommonAPI.post(user_two, %{status: "ok boomer"})
911
912 activities = ActivityPub.fetch_activities([], params)
913
914 assert Enum.count(activities) == 2
915 end
916
917 test "it excludes statuses with filter words", %{user: user, params: params} do
918 {:ok, _} = CommonAPI.post(user, %{status: "Give me some cofe!"})
919 {:ok, _} = CommonAPI.post(user, %{status: "ok boomer"})
920 {:ok, _} = CommonAPI.post(user, %{status: "is it a cOfE?"})
921 {:ok, _} = CommonAPI.post(user, %{status: "cofe is all I need"})
922 {:ok, _} = CommonAPI.post(user, %{status: "— ok BOOMER\n"})
923
924 activities = ActivityPub.fetch_activities([], params)
925
926 assert Enum.empty?(activities)
927 end
928
929 test "it returns all statuses if user does not have any filters" do
930 another_user = insert(:user)
931 {:ok, _} = CommonAPI.post(another_user, %{status: "got cofe?"})
932 {:ok, _} = CommonAPI.post(another_user, %{status: "test!"})
933
934 activities =
935 ActivityPub.fetch_activities([], %{
936 type: ["Create", "Announce"],
937 user: another_user
938 })
939
940 assert Enum.count(activities) == 2
941 end
942 end
943
944 describe "public fetch activities" do
945 test "doesn't retrieve unlisted activities" do
946 user = insert(:user)
947
948 {:ok, _unlisted_activity} = CommonAPI.post(user, %{status: "yeah", visibility: "unlisted"})
949
950 {:ok, listed_activity} = CommonAPI.post(user, %{status: "yeah"})
951
952 [activity] = ActivityPub.fetch_public_activities()
953
954 assert activity == listed_activity
955 end
956
957 test "retrieves public activities" do
958 _activities = ActivityPub.fetch_public_activities()
959
960 %{public: public} = ActivityBuilder.public_and_non_public()
961
962 activities = ActivityPub.fetch_public_activities()
963 assert length(activities) == 1
964 assert Enum.at(activities, 0) == public
965 end
966
967 test "retrieves a maximum of 20 activities" do
968 ActivityBuilder.insert_list(10)
969 expected_activities = ActivityBuilder.insert_list(20)
970
971 activities = ActivityPub.fetch_public_activities()
972
973 assert collect_ids(activities) == collect_ids(expected_activities)
974 assert length(activities) == 20
975 end
976
977 test "retrieves ids starting from a since_id" do
978 activities = ActivityBuilder.insert_list(30)
979 expected_activities = ActivityBuilder.insert_list(10)
980 since_id = List.last(activities).id
981
982 activities = ActivityPub.fetch_public_activities(%{since_id: since_id})
983
984 assert collect_ids(activities) == collect_ids(expected_activities)
985 assert length(activities) == 10
986 end
987
988 test "retrieves ids up to max_id" do
989 ActivityBuilder.insert_list(10)
990 expected_activities = ActivityBuilder.insert_list(20)
991
992 %{id: max_id} =
993 10
994 |> ActivityBuilder.insert_list()
995 |> List.first()
996
997 activities = ActivityPub.fetch_public_activities(%{max_id: max_id})
998
999 assert length(activities) == 20
1000 assert collect_ids(activities) == collect_ids(expected_activities)
1001 end
1002
1003 test "paginates via offset/limit" do
1004 _first_part_activities = ActivityBuilder.insert_list(10)
1005 second_part_activities = ActivityBuilder.insert_list(10)
1006
1007 later_activities = ActivityBuilder.insert_list(10)
1008
1009 activities = ActivityPub.fetch_public_activities(%{page: "2", page_size: "20"}, :offset)
1010
1011 assert length(activities) == 20
1012
1013 assert collect_ids(activities) ==
1014 collect_ids(second_part_activities) ++ collect_ids(later_activities)
1015 end
1016
1017 test "doesn't return reblogs for users for whom reblogs have been muted" do
1018 activity = insert(:note_activity)
1019 user = insert(:user)
1020 booster = insert(:user)
1021 {:ok, _reblog_mute} = CommonAPI.hide_reblogs(user, booster)
1022
1023 {:ok, activity} = CommonAPI.repeat(activity.id, booster)
1024
1025 activities = ActivityPub.fetch_activities([], %{muting_user: user})
1026
1027 refute Enum.any?(activities, fn %{id: id} -> id == activity.id end)
1028 end
1029
1030 test "returns reblogs for users for whom reblogs have not been muted" do
1031 activity = insert(:note_activity)
1032 user = insert(:user)
1033 booster = insert(:user)
1034 {:ok, _reblog_mute} = CommonAPI.hide_reblogs(user, booster)
1035 {:ok, _reblog_mute} = CommonAPI.show_reblogs(user, booster)
1036
1037 {:ok, activity} = CommonAPI.repeat(activity.id, booster)
1038
1039 activities = ActivityPub.fetch_activities([], %{muting_user: user})
1040
1041 assert Enum.any?(activities, fn %{id: id} -> id == activity.id end)
1042 end
1043 end
1044
1045 describe "uploading files" do
1046 setup do
1047 test_file = %Plug.Upload{
1048 content_type: "image/jpeg",
1049 path: Path.absname("test/fixtures/image.jpg"),
1050 filename: "an_image.jpg"
1051 }
1052
1053 %{test_file: test_file}
1054 end
1055
1056 test "sets a description if given", %{test_file: file} do
1057 {:ok, %Object{} = object} = ActivityPub.upload(file, description: "a cool file")
1058 assert object.data["name"] == "a cool file"
1059 end
1060
1061 test "it sets the default description depending on the configuration", %{test_file: file} do
1062 clear_config([Pleroma.Upload, :default_description])
1063
1064 Pleroma.Config.put([Pleroma.Upload, :default_description], nil)
1065 {:ok, %Object{} = object} = ActivityPub.upload(file)
1066 assert object.data["name"] == ""
1067
1068 Pleroma.Config.put([Pleroma.Upload, :default_description], :filename)
1069 {:ok, %Object{} = object} = ActivityPub.upload(file)
1070 assert object.data["name"] == "an_image.jpg"
1071
1072 Pleroma.Config.put([Pleroma.Upload, :default_description], "unnamed attachment")
1073 {:ok, %Object{} = object} = ActivityPub.upload(file)
1074 assert object.data["name"] == "unnamed attachment"
1075 end
1076
1077 test "copies the file to the configured folder", %{test_file: file} do
1078 clear_config([Pleroma.Upload, :default_description], :filename)
1079 {:ok, %Object{} = object} = ActivityPub.upload(file)
1080 assert object.data["name"] == "an_image.jpg"
1081 end
1082
1083 test "works with base64 encoded images" do
1084 file = %{
1085 img: data_uri()
1086 }
1087
1088 {:ok, %Object{}} = ActivityPub.upload(file)
1089 end
1090 end
1091
1092 describe "fetch the latest Follow" do
1093 test "fetches the latest Follow activity" do
1094 %Activity{data: %{"type" => "Follow"}} = activity = insert(:follow_activity)
1095 follower = Repo.get_by(User, ap_id: activity.data["actor"])
1096 followed = Repo.get_by(User, ap_id: activity.data["object"])
1097
1098 assert activity == Utils.fetch_latest_follow(follower, followed)
1099 end
1100 end
1101
1102 describe "unfollowing" do
1103 test "it reverts unfollow activity" do
1104 follower = insert(:user)
1105 followed = insert(:user)
1106
1107 {:ok, _, _, follow_activity} = CommonAPI.follow(follower, followed)
1108
1109 with_mock(Utils, [:passthrough], maybe_federate: fn _ -> {:error, :reverted} end) do
1110 assert {:error, :reverted} = ActivityPub.unfollow(follower, followed)
1111 end
1112
1113 activity = Activity.get_by_id(follow_activity.id)
1114 assert activity.data["type"] == "Follow"
1115 assert activity.data["actor"] == follower.ap_id
1116
1117 assert activity.data["object"] == followed.ap_id
1118 end
1119
1120 test "creates an undo activity for the last follow" do
1121 follower = insert(:user)
1122 followed = insert(:user)
1123
1124 {:ok, _, _, follow_activity} = CommonAPI.follow(follower, followed)
1125 {:ok, activity} = ActivityPub.unfollow(follower, followed)
1126
1127 assert activity.data["type"] == "Undo"
1128 assert activity.data["actor"] == follower.ap_id
1129
1130 embedded_object = activity.data["object"]
1131 assert is_map(embedded_object)
1132 assert embedded_object["type"] == "Follow"
1133 assert embedded_object["object"] == followed.ap_id
1134 assert embedded_object["id"] == follow_activity.data["id"]
1135 end
1136
1137 test "creates an undo activity for a pending follow request" do
1138 follower = insert(:user)
1139 followed = insert(:user, %{is_locked: true})
1140
1141 {:ok, _, _, follow_activity} = CommonAPI.follow(follower, followed)
1142 {:ok, activity} = ActivityPub.unfollow(follower, followed)
1143
1144 assert activity.data["type"] == "Undo"
1145 assert activity.data["actor"] == follower.ap_id
1146
1147 embedded_object = activity.data["object"]
1148 assert is_map(embedded_object)
1149 assert embedded_object["type"] == "Follow"
1150 assert embedded_object["object"] == followed.ap_id
1151 assert embedded_object["id"] == follow_activity.data["id"]
1152 end
1153 end
1154
1155 describe "timeline post-processing" do
1156 test "it filters broken threads" do
1157 user1 = insert(:user)
1158 user2 = insert(:user)
1159 user3 = insert(:user)
1160
1161 {:ok, user1} = User.follow(user1, user3)
1162 assert User.following?(user1, user3)
1163
1164 {:ok, user2} = User.follow(user2, user3)
1165 assert User.following?(user2, user3)
1166
1167 {:ok, user3} = User.follow(user3, user2)
1168 assert User.following?(user3, user2)
1169
1170 {:ok, public_activity} = CommonAPI.post(user3, %{status: "hi 1"})
1171
1172 {:ok, private_activity_1} = CommonAPI.post(user3, %{status: "hi 2", visibility: "private"})
1173
1174 {:ok, private_activity_2} =
1175 CommonAPI.post(user2, %{
1176 status: "hi 3",
1177 visibility: "private",
1178 in_reply_to_status_id: private_activity_1.id
1179 })
1180
1181 {:ok, private_activity_3} =
1182 CommonAPI.post(user3, %{
1183 status: "hi 4",
1184 visibility: "private",
1185 in_reply_to_status_id: private_activity_2.id
1186 })
1187
1188 activities =
1189 ActivityPub.fetch_activities([user1.ap_id | User.following(user1)])
1190 |> Enum.map(fn a -> a.id end)
1191
1192 private_activity_1 = Activity.get_by_ap_id_with_object(private_activity_1.data["id"])
1193
1194 assert [public_activity.id, private_activity_1.id, private_activity_3.id] == activities
1195
1196 assert length(activities) == 3
1197
1198 activities =
1199 ActivityPub.fetch_activities([user1.ap_id | User.following(user1)], %{user: user1})
1200 |> Enum.map(fn a -> a.id end)
1201
1202 assert [public_activity.id, private_activity_1.id] == activities
1203 assert length(activities) == 2
1204 end
1205 end
1206
1207 describe "flag/1" do
1208 setup do
1209 reporter = insert(:user)
1210 target_account = insert(:user)
1211 content = "foobar"
1212 {:ok, activity} = CommonAPI.post(target_account, %{status: content})
1213 context = Utils.generate_context_id()
1214
1215 reporter_ap_id = reporter.ap_id
1216 target_ap_id = target_account.ap_id
1217 activity_ap_id = activity.data["id"]
1218
1219 activity_with_object = Activity.get_by_ap_id_with_object(activity_ap_id)
1220
1221 {:ok,
1222 %{
1223 reporter: reporter,
1224 context: context,
1225 target_account: target_account,
1226 reported_activity: activity,
1227 content: content,
1228 activity_ap_id: activity_ap_id,
1229 activity_with_object: activity_with_object,
1230 reporter_ap_id: reporter_ap_id,
1231 target_ap_id: target_ap_id
1232 }}
1233 end
1234
1235 test "it can create a Flag activity",
1236 %{
1237 reporter: reporter,
1238 context: context,
1239 target_account: target_account,
1240 reported_activity: reported_activity,
1241 content: content,
1242 activity_ap_id: activity_ap_id,
1243 activity_with_object: activity_with_object,
1244 reporter_ap_id: reporter_ap_id,
1245 target_ap_id: target_ap_id
1246 } do
1247 assert {:ok, activity} =
1248 ActivityPub.flag(%{
1249 actor: reporter,
1250 context: context,
1251 account: target_account,
1252 statuses: [reported_activity],
1253 content: content
1254 })
1255
1256 note_obj = %{
1257 "type" => "Note",
1258 "id" => activity_ap_id,
1259 "content" => content,
1260 "published" => activity_with_object.object.data["published"],
1261 "actor" =>
1262 AccountView.render("show.json", %{user: target_account, skip_visibility_check: true})
1263 }
1264
1265 assert %Activity{
1266 actor: ^reporter_ap_id,
1267 data: %{
1268 "type" => "Flag",
1269 "content" => ^content,
1270 "context" => ^context,
1271 "object" => [^target_ap_id, ^note_obj]
1272 }
1273 } = activity
1274 end
1275
1276 test_with_mock "strips status data from Flag, before federating it",
1277 %{
1278 reporter: reporter,
1279 context: context,
1280 target_account: target_account,
1281 reported_activity: reported_activity,
1282 content: content
1283 },
1284 Utils,
1285 [:passthrough],
1286 [] do
1287 {:ok, activity} =
1288 ActivityPub.flag(%{
1289 actor: reporter,
1290 context: context,
1291 account: target_account,
1292 statuses: [reported_activity],
1293 content: content
1294 })
1295
1296 new_data =
1297 put_in(activity.data, ["object"], [target_account.ap_id, reported_activity.data["id"]])
1298
1299 assert_called(Utils.maybe_federate(%{activity | data: new_data}))
1300 end
1301 end
1302
1303 test "fetch_activities/2 returns activities addressed to a list " do
1304 user = insert(:user)
1305 member = insert(:user)
1306 {:ok, list} = Pleroma.List.create("foo", user)
1307 {:ok, list} = Pleroma.List.follow(list, member)
1308
1309 {:ok, activity} = CommonAPI.post(user, %{status: "foobar", visibility: "list:#{list.id}"})
1310
1311 activity = Repo.preload(activity, :bookmark)
1312 activity = %Activity{activity | thread_muted?: !!activity.thread_muted?}
1313
1314 assert ActivityPub.fetch_activities([], %{user: user}) == [activity]
1315 end
1316
1317 def data_uri do
1318 File.read!("test/fixtures/avatar_data_uri")
1319 end
1320
1321 describe "fetch_activities_bounded" do
1322 test "fetches private posts for followed users" do
1323 user = insert(:user)
1324
1325 {:ok, activity} =
1326 CommonAPI.post(user, %{
1327 status: "thought I looked cute might delete later :3",
1328 visibility: "private"
1329 })
1330
1331 [result] = ActivityPub.fetch_activities_bounded([user.follower_address], [])
1332 assert result.id == activity.id
1333 end
1334
1335 test "fetches only public posts for other users" do
1336 user = insert(:user)
1337 {:ok, activity} = CommonAPI.post(user, %{status: "#cofe", visibility: "public"})
1338
1339 {:ok, _private_activity} =
1340 CommonAPI.post(user, %{
1341 status: "why is tenshi eating a corndog so cute?",
1342 visibility: "private"
1343 })
1344
1345 [result] = ActivityPub.fetch_activities_bounded([], [user.follower_address])
1346 assert result.id == activity.id
1347 end
1348 end
1349
1350 describe "fetch_follow_information_for_user" do
1351 test "syncronizes following/followers counters" do
1352 user =
1353 insert(:user,
1354 local: false,
1355 follower_address: "http://localhost:4001/users/fuser2/followers",
1356 following_address: "http://localhost:4001/users/fuser2/following"
1357 )
1358
1359 {:ok, info} = ActivityPub.fetch_follow_information_for_user(user)
1360 assert info.follower_count == 527
1361 assert info.following_count == 267
1362 end
1363
1364 test "detects hidden followers" do
1365 mock(fn env ->
1366 case env.url do
1367 "http://localhost:4001/users/masto_closed/followers?page=1" ->
1368 %Tesla.Env{status: 403, body: ""}
1369
1370 _ ->
1371 apply(HttpRequestMock, :request, [env])
1372 end
1373 end)
1374
1375 user =
1376 insert(:user,
1377 local: false,
1378 follower_address: "http://localhost:4001/users/masto_closed/followers",
1379 following_address: "http://localhost:4001/users/masto_closed/following"
1380 )
1381
1382 {:ok, follow_info} = ActivityPub.fetch_follow_information_for_user(user)
1383 assert follow_info.hide_followers == true
1384 assert follow_info.hide_follows == false
1385 end
1386
1387 test "detects hidden follows" do
1388 mock(fn env ->
1389 case env.url do
1390 "http://localhost:4001/users/masto_closed/following?page=1" ->
1391 %Tesla.Env{status: 403, body: ""}
1392
1393 _ ->
1394 apply(HttpRequestMock, :request, [env])
1395 end
1396 end)
1397
1398 user =
1399 insert(:user,
1400 local: false,
1401 follower_address: "http://localhost:4001/users/masto_closed/followers",
1402 following_address: "http://localhost:4001/users/masto_closed/following"
1403 )
1404
1405 {:ok, follow_info} = ActivityPub.fetch_follow_information_for_user(user)
1406 assert follow_info.hide_followers == false
1407 assert follow_info.hide_follows == true
1408 end
1409
1410 test "detects hidden follows/followers for friendica" do
1411 user =
1412 insert(:user,
1413 local: false,
1414 follower_address: "http://localhost:8080/followers/fuser3",
1415 following_address: "http://localhost:8080/following/fuser3"
1416 )
1417
1418 {:ok, follow_info} = ActivityPub.fetch_follow_information_for_user(user)
1419 assert follow_info.hide_followers == true
1420 assert follow_info.follower_count == 296
1421 assert follow_info.following_count == 32
1422 assert follow_info.hide_follows == true
1423 end
1424
1425 test "doesn't crash when follower and following counters are hidden" do
1426 mock(fn env ->
1427 case env.url do
1428 "http://localhost:4001/users/masto_hidden_counters/following" ->
1429 json(
1430 %{
1431 "@context" => "https://www.w3.org/ns/activitystreams",
1432 "id" => "http://localhost:4001/users/masto_hidden_counters/followers"
1433 },
1434 headers: HttpRequestMock.activitypub_object_headers()
1435 )
1436
1437 "http://localhost:4001/users/masto_hidden_counters/following?page=1" ->
1438 %Tesla.Env{status: 403, body: ""}
1439
1440 "http://localhost:4001/users/masto_hidden_counters/followers" ->
1441 json(
1442 %{
1443 "@context" => "https://www.w3.org/ns/activitystreams",
1444 "id" => "http://localhost:4001/users/masto_hidden_counters/following"
1445 },
1446 headers: HttpRequestMock.activitypub_object_headers()
1447 )
1448
1449 "http://localhost:4001/users/masto_hidden_counters/followers?page=1" ->
1450 %Tesla.Env{status: 403, body: ""}
1451 end
1452 end)
1453
1454 user =
1455 insert(:user,
1456 local: false,
1457 follower_address: "http://localhost:4001/users/masto_hidden_counters/followers",
1458 following_address: "http://localhost:4001/users/masto_hidden_counters/following"
1459 )
1460
1461 {:ok, follow_info} = ActivityPub.fetch_follow_information_for_user(user)
1462
1463 assert follow_info.hide_followers == true
1464 assert follow_info.follower_count == 0
1465 assert follow_info.hide_follows == true
1466 assert follow_info.following_count == 0
1467 end
1468 end
1469
1470 describe "fetch_favourites/3" do
1471 test "returns a favourite activities sorted by adds to favorite" do
1472 user = insert(:user)
1473 other_user = insert(:user)
1474 user1 = insert(:user)
1475 user2 = insert(:user)
1476 {:ok, a1} = CommonAPI.post(user1, %{status: "bla"})
1477 {:ok, _a2} = CommonAPI.post(user2, %{status: "traps are happy"})
1478 {:ok, a3} = CommonAPI.post(user2, %{status: "Trees Are "})
1479 {:ok, a4} = CommonAPI.post(user2, %{status: "Agent Smith "})
1480 {:ok, a5} = CommonAPI.post(user1, %{status: "Red or Blue "})
1481
1482 {:ok, _} = CommonAPI.favorite(user, a4.id)
1483 {:ok, _} = CommonAPI.favorite(other_user, a3.id)
1484 {:ok, _} = CommonAPI.favorite(user, a3.id)
1485 {:ok, _} = CommonAPI.favorite(other_user, a5.id)
1486 {:ok, _} = CommonAPI.favorite(user, a5.id)
1487 {:ok, _} = CommonAPI.favorite(other_user, a4.id)
1488 {:ok, _} = CommonAPI.favorite(user, a1.id)
1489 {:ok, _} = CommonAPI.favorite(other_user, a1.id)
1490 result = ActivityPub.fetch_favourites(user)
1491
1492 assert Enum.map(result, & &1.id) == [a1.id, a5.id, a3.id, a4.id]
1493
1494 result = ActivityPub.fetch_favourites(user, %{limit: 2})
1495 assert Enum.map(result, & &1.id) == [a1.id, a5.id]
1496 end
1497 end
1498
1499 describe "Move activity" do
1500 test "create" do
1501 %{ap_id: old_ap_id} = old_user = insert(:user)
1502 %{ap_id: new_ap_id} = new_user = insert(:user, also_known_as: [old_ap_id])
1503 follower = insert(:user)
1504 follower_move_opted_out = insert(:user, allow_following_move: false)
1505
1506 User.follow(follower, old_user)
1507 User.follow(follower_move_opted_out, old_user)
1508
1509 assert User.following?(follower, old_user)
1510 assert User.following?(follower_move_opted_out, old_user)
1511
1512 assert {:ok, activity} = ActivityPub.move(old_user, new_user)
1513
1514 assert %Activity{
1515 actor: ^old_ap_id,
1516 data: %{
1517 "actor" => ^old_ap_id,
1518 "object" => ^old_ap_id,
1519 "target" => ^new_ap_id,
1520 "type" => "Move"
1521 },
1522 local: true
1523 } = activity
1524
1525 params = %{
1526 "op" => "move_following",
1527 "origin_id" => old_user.id,
1528 "target_id" => new_user.id
1529 }
1530
1531 assert_enqueued(worker: Pleroma.Workers.BackgroundWorker, args: params)
1532
1533 Pleroma.Workers.BackgroundWorker.perform(%Oban.Job{args: params})
1534
1535 refute User.following?(follower, old_user)
1536 assert User.following?(follower, new_user)
1537
1538 assert User.following?(follower_move_opted_out, old_user)
1539 refute User.following?(follower_move_opted_out, new_user)
1540
1541 activity = %Activity{activity | object: nil}
1542
1543 assert [%Notification{activity: ^activity}] = Notification.for_user(follower)
1544
1545 assert [%Notification{activity: ^activity}] = Notification.for_user(follower_move_opted_out)
1546 end
1547
1548 test "old user must be in the new user's `also_known_as` list" do
1549 old_user = insert(:user)
1550 new_user = insert(:user)
1551
1552 assert {:error, "Target account must have the origin in `alsoKnownAs`"} =
1553 ActivityPub.move(old_user, new_user)
1554 end
1555 end
1556
1557 test "doesn't retrieve replies activities with exclude_replies" do
1558 user = insert(:user)
1559
1560 {:ok, activity} = CommonAPI.post(user, %{status: "yeah"})
1561
1562 {:ok, _reply} = CommonAPI.post(user, %{status: "yeah", in_reply_to_status_id: activity.id})
1563
1564 [result] = ActivityPub.fetch_public_activities(%{exclude_replies: true})
1565
1566 assert result.id == activity.id
1567
1568 assert length(ActivityPub.fetch_public_activities()) == 2
1569 end
1570
1571 describe "replies filtering with public messages" do
1572 setup :public_messages
1573
1574 test "public timeline", %{users: %{u1: user}} do
1575 activities_ids =
1576 %{}
1577 |> Map.put(:type, ["Create", "Announce"])
1578 |> Map.put(:local_only, false)
1579 |> Map.put(:blocking_user, user)
1580 |> Map.put(:muting_user, user)
1581 |> Map.put(:reply_filtering_user, user)
1582 |> ActivityPub.fetch_public_activities()
1583 |> Enum.map(& &1.id)
1584
1585 assert length(activities_ids) == 16
1586 end
1587
1588 test "public timeline with reply_visibility `following`", %{
1589 users: %{u1: user},
1590 u1: u1,
1591 u2: u2,
1592 u3: u3,
1593 u4: u4,
1594 activities: activities
1595 } do
1596 activities_ids =
1597 %{}
1598 |> Map.put(:type, ["Create", "Announce"])
1599 |> Map.put(:local_only, false)
1600 |> Map.put(:blocking_user, user)
1601 |> Map.put(:muting_user, user)
1602 |> Map.put(:reply_visibility, "following")
1603 |> Map.put(:reply_filtering_user, user)
1604 |> ActivityPub.fetch_public_activities()
1605 |> Enum.map(& &1.id)
1606
1607 assert length(activities_ids) == 14
1608
1609 visible_ids =
1610 Map.values(u1) ++ Map.values(u2) ++ Map.values(u4) ++ Map.values(activities) ++ [u3[:r1]]
1611
1612 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1613 end
1614
1615 test "public timeline with reply_visibility `self`", %{
1616 users: %{u1: user},
1617 u1: u1,
1618 u2: u2,
1619 u3: u3,
1620 u4: u4,
1621 activities: activities
1622 } do
1623 activities_ids =
1624 %{}
1625 |> Map.put(:type, ["Create", "Announce"])
1626 |> Map.put(:local_only, false)
1627 |> Map.put(:blocking_user, user)
1628 |> Map.put(:muting_user, user)
1629 |> Map.put(:reply_visibility, "self")
1630 |> Map.put(:reply_filtering_user, user)
1631 |> ActivityPub.fetch_public_activities()
1632 |> Enum.map(& &1.id)
1633
1634 assert length(activities_ids) == 10
1635 visible_ids = Map.values(u1) ++ [u2[:r1], u3[:r1], u4[:r1]] ++ Map.values(activities)
1636 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1637 end
1638
1639 test "home timeline", %{
1640 users: %{u1: user},
1641 activities: activities,
1642 u1: u1,
1643 u2: u2,
1644 u3: u3,
1645 u4: u4
1646 } do
1647 params =
1648 %{}
1649 |> Map.put(:type, ["Create", "Announce"])
1650 |> Map.put(:blocking_user, user)
1651 |> Map.put(:muting_user, user)
1652 |> Map.put(:user, user)
1653 |> Map.put(:reply_filtering_user, user)
1654
1655 activities_ids =
1656 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1657 |> Enum.map(& &1.id)
1658
1659 assert length(activities_ids) == 13
1660
1661 visible_ids =
1662 Map.values(u1) ++
1663 Map.values(u3) ++
1664 [
1665 activities[:a1],
1666 activities[:a2],
1667 activities[:a4],
1668 u2[:r1],
1669 u2[:r3],
1670 u4[:r1],
1671 u4[:r2]
1672 ]
1673
1674 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1675 end
1676
1677 test "home timeline with reply_visibility `following`", %{
1678 users: %{u1: user},
1679 activities: activities,
1680 u1: u1,
1681 u2: u2,
1682 u3: u3,
1683 u4: u4
1684 } do
1685 params =
1686 %{}
1687 |> Map.put(:type, ["Create", "Announce"])
1688 |> Map.put(:blocking_user, user)
1689 |> Map.put(:muting_user, user)
1690 |> Map.put(:user, user)
1691 |> Map.put(:reply_visibility, "following")
1692 |> Map.put(:reply_filtering_user, user)
1693
1694 activities_ids =
1695 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1696 |> Enum.map(& &1.id)
1697
1698 assert length(activities_ids) == 11
1699
1700 visible_ids =
1701 Map.values(u1) ++
1702 [
1703 activities[:a1],
1704 activities[:a2],
1705 activities[:a4],
1706 u2[:r1],
1707 u2[:r3],
1708 u3[:r1],
1709 u4[:r1],
1710 u4[:r2]
1711 ]
1712
1713 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1714 end
1715
1716 test "home timeline with reply_visibility `self`", %{
1717 users: %{u1: user},
1718 activities: activities,
1719 u1: u1,
1720 u2: u2,
1721 u3: u3,
1722 u4: u4
1723 } do
1724 params =
1725 %{}
1726 |> Map.put(:type, ["Create", "Announce"])
1727 |> Map.put(:blocking_user, user)
1728 |> Map.put(:muting_user, user)
1729 |> Map.put(:user, user)
1730 |> Map.put(:reply_visibility, "self")
1731 |> Map.put(:reply_filtering_user, user)
1732
1733 activities_ids =
1734 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1735 |> Enum.map(& &1.id)
1736
1737 assert length(activities_ids) == 9
1738
1739 visible_ids =
1740 Map.values(u1) ++
1741 [
1742 activities[:a1],
1743 activities[:a2],
1744 activities[:a4],
1745 u2[:r1],
1746 u3[:r1],
1747 u4[:r1]
1748 ]
1749
1750 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1751 end
1752
1753 test "filtering out announces where the user is the actor of the announced message" do
1754 user = insert(:user)
1755 other_user = insert(:user)
1756 third_user = insert(:user)
1757 User.follow(user, other_user)
1758
1759 {:ok, post} = CommonAPI.post(user, %{status: "yo"})
1760 {:ok, other_post} = CommonAPI.post(third_user, %{status: "yo"})
1761 {:ok, _announce} = CommonAPI.repeat(post.id, other_user)
1762 {:ok, _announce} = CommonAPI.repeat(post.id, third_user)
1763 {:ok, announce} = CommonAPI.repeat(other_post.id, other_user)
1764
1765 params = %{
1766 type: ["Announce"]
1767 }
1768
1769 results =
1770 [user.ap_id | User.following(user)]
1771 |> ActivityPub.fetch_activities(params)
1772
1773 assert length(results) == 3
1774
1775 params = %{
1776 type: ["Announce"],
1777 announce_filtering_user: user
1778 }
1779
1780 [result] =
1781 [user.ap_id | User.following(user)]
1782 |> ActivityPub.fetch_activities(params)
1783
1784 assert result.id == announce.id
1785 end
1786 end
1787
1788 describe "replies filtering with private messages" do
1789 setup :private_messages
1790
1791 test "public timeline", %{users: %{u1: user}} do
1792 activities_ids =
1793 %{}
1794 |> Map.put(:type, ["Create", "Announce"])
1795 |> Map.put(:local_only, false)
1796 |> Map.put(:blocking_user, user)
1797 |> Map.put(:muting_user, user)
1798 |> Map.put(:user, user)
1799 |> ActivityPub.fetch_public_activities()
1800 |> Enum.map(& &1.id)
1801
1802 assert activities_ids == []
1803 end
1804
1805 test "public timeline with default reply_visibility `following`", %{users: %{u1: user}} do
1806 activities_ids =
1807 %{}
1808 |> Map.put(:type, ["Create", "Announce"])
1809 |> Map.put(:local_only, false)
1810 |> Map.put(:blocking_user, user)
1811 |> Map.put(:muting_user, user)
1812 |> Map.put(:reply_visibility, "following")
1813 |> Map.put(:reply_filtering_user, user)
1814 |> Map.put(:user, user)
1815 |> ActivityPub.fetch_public_activities()
1816 |> Enum.map(& &1.id)
1817
1818 assert activities_ids == []
1819 end
1820
1821 test "public timeline with default reply_visibility `self`", %{users: %{u1: user}} do
1822 activities_ids =
1823 %{}
1824 |> Map.put(:type, ["Create", "Announce"])
1825 |> Map.put(:local_only, false)
1826 |> Map.put(:blocking_user, user)
1827 |> Map.put(:muting_user, user)
1828 |> Map.put(:reply_visibility, "self")
1829 |> Map.put(:reply_filtering_user, user)
1830 |> Map.put(:user, user)
1831 |> ActivityPub.fetch_public_activities()
1832 |> Enum.map(& &1.id)
1833
1834 assert activities_ids == []
1835
1836 activities_ids =
1837 %{}
1838 |> Map.put(:reply_visibility, "self")
1839 |> Map.put(:reply_filtering_user, nil)
1840 |> ActivityPub.fetch_public_activities()
1841
1842 assert activities_ids == []
1843 end
1844
1845 test "home timeline", %{users: %{u1: user}} do
1846 params =
1847 %{}
1848 |> Map.put(:type, ["Create", "Announce"])
1849 |> Map.put(:blocking_user, user)
1850 |> Map.put(:muting_user, user)
1851 |> Map.put(:user, user)
1852
1853 activities_ids =
1854 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1855 |> Enum.map(& &1.id)
1856
1857 assert length(activities_ids) == 12
1858 end
1859
1860 test "home timeline with default reply_visibility `following`", %{users: %{u1: user}} do
1861 params =
1862 %{}
1863 |> Map.put(:type, ["Create", "Announce"])
1864 |> Map.put(:blocking_user, user)
1865 |> Map.put(:muting_user, user)
1866 |> Map.put(:user, user)
1867 |> Map.put(:reply_visibility, "following")
1868 |> Map.put(:reply_filtering_user, user)
1869
1870 activities_ids =
1871 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1872 |> Enum.map(& &1.id)
1873
1874 assert length(activities_ids) == 12
1875 end
1876
1877 test "home timeline with default reply_visibility `self`", %{
1878 users: %{u1: user},
1879 activities: activities,
1880 u1: u1,
1881 u2: u2,
1882 u3: u3,
1883 u4: u4
1884 } do
1885 params =
1886 %{}
1887 |> Map.put(:type, ["Create", "Announce"])
1888 |> Map.put(:blocking_user, user)
1889 |> Map.put(:muting_user, user)
1890 |> Map.put(:user, user)
1891 |> Map.put(:reply_visibility, "self")
1892 |> Map.put(:reply_filtering_user, user)
1893
1894 activities_ids =
1895 ActivityPub.fetch_activities([user.ap_id | User.following(user)], params)
1896 |> Enum.map(& &1.id)
1897
1898 assert length(activities_ids) == 10
1899
1900 visible_ids =
1901 Map.values(u1) ++ Map.values(u4) ++ [u2[:r1], u3[:r1]] ++ Map.values(activities)
1902
1903 assert Enum.all?(visible_ids, &(&1 in activities_ids))
1904 end
1905 end
1906
1907 defp public_messages(_) do
1908 [u1, u2, u3, u4] = insert_list(4, :user)
1909 {:ok, u1} = User.follow(u1, u2)
1910 {:ok, u2} = User.follow(u2, u1)
1911 {:ok, u1} = User.follow(u1, u4)
1912 {:ok, u4} = User.follow(u4, u1)
1913
1914 {:ok, u2} = User.follow(u2, u3)
1915 {:ok, u3} = User.follow(u3, u2)
1916
1917 {:ok, a1} = CommonAPI.post(u1, %{status: "Status"})
1918
1919 {:ok, r1_1} =
1920 CommonAPI.post(u2, %{
1921 status: "@#{u1.nickname} reply from u2 to u1",
1922 in_reply_to_status_id: a1.id
1923 })
1924
1925 {:ok, r1_2} =
1926 CommonAPI.post(u3, %{
1927 status: "@#{u1.nickname} reply from u3 to u1",
1928 in_reply_to_status_id: a1.id
1929 })
1930
1931 {:ok, r1_3} =
1932 CommonAPI.post(u4, %{
1933 status: "@#{u1.nickname} reply from u4 to u1",
1934 in_reply_to_status_id: a1.id
1935 })
1936
1937 {:ok, a2} = CommonAPI.post(u2, %{status: "Status"})
1938
1939 {:ok, r2_1} =
1940 CommonAPI.post(u1, %{
1941 status: "@#{u2.nickname} reply from u1 to u2",
1942 in_reply_to_status_id: a2.id
1943 })
1944
1945 {:ok, r2_2} =
1946 CommonAPI.post(u3, %{
1947 status: "@#{u2.nickname} reply from u3 to u2",
1948 in_reply_to_status_id: a2.id
1949 })
1950
1951 {:ok, r2_3} =
1952 CommonAPI.post(u4, %{
1953 status: "@#{u2.nickname} reply from u4 to u2",
1954 in_reply_to_status_id: a2.id
1955 })
1956
1957 {:ok, a3} = CommonAPI.post(u3, %{status: "Status"})
1958
1959 {:ok, r3_1} =
1960 CommonAPI.post(u1, %{
1961 status: "@#{u3.nickname} reply from u1 to u3",
1962 in_reply_to_status_id: a3.id
1963 })
1964
1965 {:ok, r3_2} =
1966 CommonAPI.post(u2, %{
1967 status: "@#{u3.nickname} reply from u2 to u3",
1968 in_reply_to_status_id: a3.id
1969 })
1970
1971 {:ok, r3_3} =
1972 CommonAPI.post(u4, %{
1973 status: "@#{u3.nickname} reply from u4 to u3",
1974 in_reply_to_status_id: a3.id
1975 })
1976
1977 {:ok, a4} = CommonAPI.post(u4, %{status: "Status"})
1978
1979 {:ok, r4_1} =
1980 CommonAPI.post(u1, %{
1981 status: "@#{u4.nickname} reply from u1 to u4",
1982 in_reply_to_status_id: a4.id
1983 })
1984
1985 {:ok, r4_2} =
1986 CommonAPI.post(u2, %{
1987 status: "@#{u4.nickname} reply from u2 to u4",
1988 in_reply_to_status_id: a4.id
1989 })
1990
1991 {:ok, r4_3} =
1992 CommonAPI.post(u3, %{
1993 status: "@#{u4.nickname} reply from u3 to u4",
1994 in_reply_to_status_id: a4.id
1995 })
1996
1997 {:ok,
1998 users: %{u1: u1, u2: u2, u3: u3, u4: u4},
1999 activities: %{a1: a1.id, a2: a2.id, a3: a3.id, a4: a4.id},
2000 u1: %{r1: r1_1.id, r2: r1_2.id, r3: r1_3.id},
2001 u2: %{r1: r2_1.id, r2: r2_2.id, r3: r2_3.id},
2002 u3: %{r1: r3_1.id, r2: r3_2.id, r3: r3_3.id},
2003 u4: %{r1: r4_1.id, r2: r4_2.id, r3: r4_3.id}}
2004 end
2005
2006 defp private_messages(_) do
2007 [u1, u2, u3, u4] = insert_list(4, :user)
2008 {:ok, u1} = User.follow(u1, u2)
2009 {:ok, u2} = User.follow(u2, u1)
2010 {:ok, u1} = User.follow(u1, u3)
2011 {:ok, u3} = User.follow(u3, u1)
2012 {:ok, u1} = User.follow(u1, u4)
2013 {:ok, u4} = User.follow(u4, u1)
2014
2015 {:ok, u2} = User.follow(u2, u3)
2016 {:ok, u3} = User.follow(u3, u2)
2017
2018 {:ok, a1} = CommonAPI.post(u1, %{status: "Status", visibility: "private"})
2019
2020 {:ok, r1_1} =
2021 CommonAPI.post(u2, %{
2022 status: "@#{u1.nickname} reply from u2 to u1",
2023 in_reply_to_status_id: a1.id,
2024 visibility: "private"
2025 })
2026
2027 {:ok, r1_2} =
2028 CommonAPI.post(u3, %{
2029 status: "@#{u1.nickname} reply from u3 to u1",
2030 in_reply_to_status_id: a1.id,
2031 visibility: "private"
2032 })
2033
2034 {:ok, r1_3} =
2035 CommonAPI.post(u4, %{
2036 status: "@#{u1.nickname} reply from u4 to u1",
2037 in_reply_to_status_id: a1.id,
2038 visibility: "private"
2039 })
2040
2041 {:ok, a2} = CommonAPI.post(u2, %{status: "Status", visibility: "private"})
2042
2043 {:ok, r2_1} =
2044 CommonAPI.post(u1, %{
2045 status: "@#{u2.nickname} reply from u1 to u2",
2046 in_reply_to_status_id: a2.id,
2047 visibility: "private"
2048 })
2049
2050 {:ok, r2_2} =
2051 CommonAPI.post(u3, %{
2052 status: "@#{u2.nickname} reply from u3 to u2",
2053 in_reply_to_status_id: a2.id,
2054 visibility: "private"
2055 })
2056
2057 {:ok, a3} = CommonAPI.post(u3, %{status: "Status", visibility: "private"})
2058
2059 {:ok, r3_1} =
2060 CommonAPI.post(u1, %{
2061 status: "@#{u3.nickname} reply from u1 to u3",
2062 in_reply_to_status_id: a3.id,
2063 visibility: "private"
2064 })
2065
2066 {:ok, r3_2} =
2067 CommonAPI.post(u2, %{
2068 status: "@#{u3.nickname} reply from u2 to u3",
2069 in_reply_to_status_id: a3.id,
2070 visibility: "private"
2071 })
2072
2073 {:ok, a4} = CommonAPI.post(u4, %{status: "Status", visibility: "private"})
2074
2075 {:ok, r4_1} =
2076 CommonAPI.post(u1, %{
2077 status: "@#{u4.nickname} reply from u1 to u4",
2078 in_reply_to_status_id: a4.id,
2079 visibility: "private"
2080 })
2081
2082 {:ok,
2083 users: %{u1: u1, u2: u2, u3: u3, u4: u4},
2084 activities: %{a1: a1.id, a2: a2.id, a3: a3.id, a4: a4.id},
2085 u1: %{r1: r1_1.id, r2: r1_2.id, r3: r1_3.id},
2086 u2: %{r1: r2_1.id, r2: r2_2.id},
2087 u3: %{r1: r3_1.id, r2: r3_2.id},
2088 u4: %{r1: r4_1.id}}
2089 end
2090
2091 describe "maybe_update_follow_information/1" do
2092 setup do
2093 clear_config([:instance, :external_user_synchronization], true)
2094
2095 user = %{
2096 local: false,
2097 ap_id: "https://gensokyo.2hu/users/raymoo",
2098 following_address: "https://gensokyo.2hu/users/following",
2099 follower_address: "https://gensokyo.2hu/users/followers",
2100 type: "Person"
2101 }
2102
2103 %{user: user}
2104 end
2105
2106 test "logs an error when it can't fetch the info", %{user: user} do
2107 assert capture_log(fn ->
2108 ActivityPub.maybe_update_follow_information(user)
2109 end) =~ "Follower/Following counter update for #{user.ap_id} failed"
2110 end
2111
2112 test "just returns the input if the user type is Application", %{
2113 user: user
2114 } do
2115 user =
2116 user
2117 |> Map.put(:type, "Application")
2118
2119 refute capture_log(fn ->
2120 assert ^user = ActivityPub.maybe_update_follow_information(user)
2121 end) =~ "Follower/Following counter update for #{user.ap_id} failed"
2122 end
2123
2124 test "it just returns the input if the user has no following/follower addresses", %{
2125 user: user
2126 } do
2127 user =
2128 user
2129 |> Map.put(:following_address, nil)
2130 |> Map.put(:follower_address, nil)
2131
2132 refute capture_log(fn ->
2133 assert ^user = ActivityPub.maybe_update_follow_information(user)
2134 end) =~ "Follower/Following counter update for #{user.ap_id} failed"
2135 end
2136 end
2137
2138 describe "global activity expiration" do
2139 test "creates an activity expiration for local Create activities" do
2140 clear_config([:mrf, :policies], Pleroma.Web.ActivityPub.MRF.ActivityExpirationPolicy)
2141
2142 {:ok, activity} = ActivityBuilder.insert(%{"type" => "Create", "context" => "3hu"})
2143 {:ok, follow} = ActivityBuilder.insert(%{"type" => "Follow", "context" => "3hu"})
2144
2145 assert_enqueued(
2146 worker: Pleroma.Workers.PurgeExpiredActivity,
2147 args: %{activity_id: activity.id},
2148 scheduled_at:
2149 activity.inserted_at
2150 |> DateTime.from_naive!("Etc/UTC")
2151 |> Timex.shift(days: 365)
2152 )
2153
2154 refute_enqueued(
2155 worker: Pleroma.Workers.PurgeExpiredActivity,
2156 args: %{activity_id: follow.id}
2157 )
2158 end
2159 end
2160
2161 describe "handling of clashing nicknames" do
2162 test "renames an existing user with a clashing nickname and a different ap id" do
2163 orig_user =
2164 insert(
2165 :user,
2166 local: false,
2167 nickname: "admin@mastodon.example.org",
2168 ap_id: "http://mastodon.example.org/users/harinezumigari"
2169 )
2170
2171 %{
2172 nickname: orig_user.nickname,
2173 ap_id: orig_user.ap_id <> "part_2"
2174 }
2175 |> ActivityPub.maybe_handle_clashing_nickname()
2176
2177 user = User.get_by_id(orig_user.id)
2178
2179 assert user.nickname == "#{orig_user.id}.admin@mastodon.example.org"
2180 end
2181
2182 test "does nothing with a clashing nickname and the same ap id" do
2183 orig_user =
2184 insert(
2185 :user,
2186 local: false,
2187 nickname: "admin@mastodon.example.org",
2188 ap_id: "http://mastodon.example.org/users/harinezumigari"
2189 )
2190
2191 %{
2192 nickname: orig_user.nickname,
2193 ap_id: orig_user.ap_id
2194 }
2195 |> ActivityPub.maybe_handle_clashing_nickname()
2196
2197 user = User.get_by_id(orig_user.id)
2198
2199 assert user.nickname == orig_user.nickname
2200 end
2201 end
2202
2203 describe "reply filtering" do
2204 test "`following` still contains announcements by friends" do
2205 user = insert(:user)
2206 followed = insert(:user)
2207 not_followed = insert(:user)
2208
2209 User.follow(user, followed)
2210
2211 {:ok, followed_post} = CommonAPI.post(followed, %{status: "Hello"})
2212
2213 {:ok, not_followed_to_followed} =
2214 CommonAPI.post(not_followed, %{
2215 status: "Also hello",
2216 in_reply_to_status_id: followed_post.id
2217 })
2218
2219 {:ok, retoot} = CommonAPI.repeat(not_followed_to_followed.id, followed)
2220
2221 params =
2222 %{}
2223 |> Map.put(:type, ["Create", "Announce"])
2224 |> Map.put(:blocking_user, user)
2225 |> Map.put(:muting_user, user)
2226 |> Map.put(:reply_filtering_user, user)
2227 |> Map.put(:reply_visibility, "following")
2228 |> Map.put(:announce_filtering_user, user)
2229 |> Map.put(:user, user)
2230
2231 activities =
2232 [user.ap_id | User.following(user)]
2233 |> ActivityPub.fetch_activities(params)
2234
2235 followed_post_id = followed_post.id
2236 retoot_id = retoot.id
2237
2238 assert [%{id: ^followed_post_id}, %{id: ^retoot_id}] = activities
2239
2240 assert length(activities) == 2
2241 end
2242
2243 # This test is skipped because, while this is the desired behavior,
2244 # there seems to be no good way to achieve it with the method that
2245 # we currently use for detecting to who a reply is directed.
2246 # This is a TODO and should be fixed by a later rewrite of the code
2247 # in question.
2248 @tag skip: true
2249 test "`following` still contains self-replies by friends" do
2250 user = insert(:user)
2251 followed = insert(:user)
2252 not_followed = insert(:user)
2253
2254 User.follow(user, followed)
2255
2256 {:ok, followed_post} = CommonAPI.post(followed, %{status: "Hello"})
2257 {:ok, not_followed_post} = CommonAPI.post(not_followed, %{status: "Also hello"})
2258
2259 {:ok, _followed_to_not_followed} =
2260 CommonAPI.post(followed, %{status: "sup", in_reply_to_status_id: not_followed_post.id})
2261
2262 {:ok, _followed_self_reply} =
2263 CommonAPI.post(followed, %{status: "Also cofe", in_reply_to_status_id: followed_post.id})
2264
2265 params =
2266 %{}
2267 |> Map.put(:type, ["Create", "Announce"])
2268 |> Map.put(:blocking_user, user)
2269 |> Map.put(:muting_user, user)
2270 |> Map.put(:reply_filtering_user, user)
2271 |> Map.put(:reply_visibility, "following")
2272 |> Map.put(:announce_filtering_user, user)
2273 |> Map.put(:user, user)
2274
2275 activities =
2276 [user.ap_id | User.following(user)]
2277 |> ActivityPub.fetch_activities(params)
2278
2279 assert length(activities) == 2
2280 end
2281 end
2282
2283 test "allow fetching of accounts with an empty string name field" do
2284 Tesla.Mock.mock(fn
2285 %{method: :get, url: "https://princess.cat/users/mewmew"} ->
2286 file = File.read!("test/fixtures/mewmew_no_name.json")
2287 %Tesla.Env{status: 200, body: file, headers: HttpRequestMock.activitypub_object_headers()}
2288 end)
2289
2290 {:ok, user} = ActivityPub.make_user_from_ap_id("https://princess.cat/users/mewmew")
2291 assert user.name == " "
2292 end
2293 end