1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIController.UpdateCredentialsTest do
9 use Pleroma.Web.ConnCase
11 import Pleroma.Factory
12 clear_config([:instance, :max_account_fields])
14 describe "updating credentials" do
15 test "sets user settings in a generic way", %{conn: conn} do
20 |> assign(:user, user)
21 |> patch("/api/v1/accounts/update_credentials", %{
22 "pleroma_settings_store" => %{
29 assert user = json_response(res_conn, 200)
30 assert user["pleroma"]["settings_store"] == %{"pleroma_fe" => %{"theme" => "bla"}}
32 user = Repo.get(User, user["id"])
36 |> assign(:user, user)
37 |> patch("/api/v1/accounts/update_credentials", %{
38 "pleroma_settings_store" => %{
45 assert user = json_response(res_conn, 200)
47 assert user["pleroma"]["settings_store"] ==
49 "pleroma_fe" => %{"theme" => "bla"},
50 "masto_fe" => %{"theme" => "bla"}
53 user = Repo.get(User, user["id"])
57 |> assign(:user, user)
58 |> patch("/api/v1/accounts/update_credentials", %{
59 "pleroma_settings_store" => %{
66 assert user = json_response(res_conn, 200)
68 assert user["pleroma"]["settings_store"] ==
70 "pleroma_fe" => %{"theme" => "bla"},
71 "masto_fe" => %{"theme" => "blub"}
75 test "updates the user's bio", %{conn: conn} do
81 |> assign(:user, user)
82 |> patch("/api/v1/accounts/update_credentials", %{
83 "note" => "I drink #cofe with @#{user2.nickname}"
86 assert user = json_response(conn, 200)
88 assert user["note"] ==
89 ~s(I drink <a class="hashtag" data-tag="cofe" href="http://localhost:4001/tag/cofe" rel="tag">#cofe</a> with <span class="h-card"><a data-user=") <>
91 ~s(" class="u-url mention" href=") <>
92 user2.ap_id <> ~s(">@<span>) <> user2.nickname <> ~s(</span></a></span>)
95 test "updates the user's locking status", %{conn: conn} do
100 |> assign(:user, user)
101 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
103 assert user = json_response(conn, 200)
104 assert user["locked"] == true
107 test "updates the user's default scope", %{conn: conn} do
112 |> assign(:user, user)
113 |> patch("/api/v1/accounts/update_credentials", %{default_scope: "cofe"})
115 assert user = json_response(conn, 200)
116 assert user["source"]["privacy"] == "cofe"
119 test "updates the user's hide_followers status", %{conn: conn} do
124 |> assign(:user, user)
125 |> patch("/api/v1/accounts/update_credentials", %{hide_followers: "true"})
127 assert user = json_response(conn, 200)
128 assert user["pleroma"]["hide_followers"] == true
131 test "updates the user's hide_followers_count and hide_follows_count", %{conn: conn} do
136 |> assign(:user, user)
137 |> patch("/api/v1/accounts/update_credentials", %{
138 hide_followers_count: "true",
139 hide_follows_count: "true"
142 assert user = json_response(conn, 200)
143 assert user["pleroma"]["hide_followers_count"] == true
144 assert user["pleroma"]["hide_follows_count"] == true
147 test "updates the user's skip_thread_containment option", %{conn: conn} do
152 |> assign(:user, user)
153 |> patch("/api/v1/accounts/update_credentials", %{skip_thread_containment: "true"})
154 |> json_response(200)
156 assert response["pleroma"]["skip_thread_containment"] == true
157 assert refresh_record(user).info.skip_thread_containment
160 test "updates the user's hide_follows status", %{conn: conn} do
165 |> assign(:user, user)
166 |> patch("/api/v1/accounts/update_credentials", %{hide_follows: "true"})
168 assert user = json_response(conn, 200)
169 assert user["pleroma"]["hide_follows"] == true
172 test "updates the user's hide_favorites status", %{conn: conn} do
177 |> assign(:user, user)
178 |> patch("/api/v1/accounts/update_credentials", %{hide_favorites: "true"})
180 assert user = json_response(conn, 200)
181 assert user["pleroma"]["hide_favorites"] == true
184 test "updates the user's show_role status", %{conn: conn} do
189 |> assign(:user, user)
190 |> patch("/api/v1/accounts/update_credentials", %{show_role: "false"})
192 assert user = json_response(conn, 200)
193 assert user["source"]["pleroma"]["show_role"] == false
196 test "updates the user's no_rich_text status", %{conn: conn} do
201 |> assign(:user, user)
202 |> patch("/api/v1/accounts/update_credentials", %{no_rich_text: "true"})
204 assert user = json_response(conn, 200)
205 assert user["source"]["pleroma"]["no_rich_text"] == true
208 test "updates the user's name", %{conn: conn} do
213 |> assign(:user, user)
214 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
216 assert user = json_response(conn, 200)
217 assert user["display_name"] == "markorepairs"
220 test "updates the user's avatar", %{conn: conn} do
223 new_avatar = %Plug.Upload{
224 content_type: "image/jpg",
225 path: Path.absname("test/fixtures/image.jpg"),
226 filename: "an_image.jpg"
231 |> assign(:user, user)
232 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
234 assert user_response = json_response(conn, 200)
235 assert user_response["avatar"] != User.avatar_url(user)
238 test "updates the user's banner", %{conn: conn} do
241 new_header = %Plug.Upload{
242 content_type: "image/jpg",
243 path: Path.absname("test/fixtures/image.jpg"),
244 filename: "an_image.jpg"
249 |> assign(:user, user)
250 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
252 assert user_response = json_response(conn, 200)
253 assert user_response["header"] != User.banner_url(user)
256 test "updates the user's background", %{conn: conn} do
259 new_header = %Plug.Upload{
260 content_type: "image/jpg",
261 path: Path.absname("test/fixtures/image.jpg"),
262 filename: "an_image.jpg"
267 |> assign(:user, user)
268 |> patch("/api/v1/accounts/update_credentials", %{
269 "pleroma_background_image" => new_header
272 assert user_response = json_response(conn, 200)
273 assert user_response["pleroma"]["background_image"]
276 test "requires 'write' permission", %{conn: conn} do
277 token1 = insert(:oauth_token, scopes: ["read"])
278 token2 = insert(:oauth_token, scopes: ["write", "follow"])
280 for token <- [token1, token2] do
283 |> put_req_header("authorization", "Bearer #{token.token}")
284 |> patch("/api/v1/accounts/update_credentials", %{})
286 if token == token1 do
287 assert %{"error" => "Insufficient permissions: write."} == json_response(conn, 403)
289 assert json_response(conn, 200)
294 test "updates profile emojos", %{conn: conn} do
297 note = "*sips :blank:*"
298 name = "I am :firefox:"
302 |> assign(:user, user)
303 |> patch("/api/v1/accounts/update_credentials", %{
305 "display_name" => name
308 assert json_response(conn, 200)
312 |> get("/api/v1/accounts/#{user.id}")
314 assert user = json_response(conn, 200)
316 assert user["note"] == note
317 assert user["display_name"] == name
318 assert [%{"shortcode" => "blank"}, %{"shortcode" => "firefox"}] = user["emojis"]
321 test "update fields", %{conn: conn} do
325 %{"name" => "<a href=\"http://google.com\">foo</a>", "value" => "<script>bar</script>"},
326 %{"name" => "link", "value" => "cofe.io"}
331 |> assign(:user, user)
332 |> patch("/api/v1/accounts/update_credentials", %{"fields" => fields})
333 |> json_response(200)
335 assert account["fields"] == [
336 %{"name" => "foo", "value" => "bar"},
337 %{"name" => "link", "value" => "<a href=\"http://cofe.io\">cofe.io</a>"}
340 assert account["source"]["fields"] == [
342 "name" => "<a href=\"http://google.com\">foo</a>",
343 "value" => "<script>bar</script>"
345 %{"name" => "link", "value" => "cofe.io"}
348 name_limit = Pleroma.Config.get([:instance, :account_field_name_length])
349 value_limit = Pleroma.Config.get([:instance, :account_field_value_length])
351 long_value = Enum.map(0..value_limit, fn _ -> "x" end) |> Enum.join()
353 fields = [%{"name" => "<b>foo<b>", "value" => long_value}]
355 assert %{"error" => "Invalid request"} ==
357 |> assign(:user, user)
358 |> patch("/api/v1/accounts/update_credentials", %{"fields" => fields})
359 |> json_response(403)
361 long_name = Enum.map(0..name_limit, fn _ -> "x" end) |> Enum.join()
363 fields = [%{"name" => long_name, "value" => "bar"}]
365 assert %{"error" => "Invalid request"} ==
367 |> assign(:user, user)
368 |> patch("/api/v1/accounts/update_credentials", %{"fields" => fields})
369 |> json_response(403)
371 Pleroma.Config.put([:instance, :max_account_fields], 1)
374 %{"name" => "<b>foo<b>", "value" => "<i>bar</i>"},
375 %{"name" => "link", "value" => "cofe.io"}
378 assert %{"error" => "Invalid request"} ==
380 |> assign(:user, user)
381 |> patch("/api/v1/accounts/update_credentials", %{"fields" => fields})
382 |> json_response(403)