1 # Pleroma: A lightweight social networking server
2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
3 # SPDX-License-Identifier: AGPL-3.0-only
5 defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do
6 use Pleroma.Web.ConnCase
8 alias Pleroma.Web.TwitterAPI.TwitterAPI
9 alias Pleroma.{Repo, User, Object, Activity, Notification}
10 alias Pleroma.Web.{OStatus, CommonAPI}
11 alias Pleroma.Web.ActivityPub.ActivityPub
12 alias Pleroma.Web.MastodonAPI.FilterView
14 import Pleroma.Factory
15 import ExUnit.CaptureLog
19 mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
23 test "the home timeline", %{conn: conn} do
25 following = insert(:user)
27 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
31 |> assign(:user, user)
32 |> get("/api/v1/timelines/home")
34 assert length(json_response(conn, 200)) == 0
36 {:ok, user} = User.follow(user, following)
40 |> assign(:user, user)
41 |> get("/api/v1/timelines/home")
43 assert [%{"content" => "test"}] = json_response(conn, 200)
46 test "the public timeline", %{conn: conn} do
47 following = insert(:user)
50 {:ok, _activity} = TwitterAPI.create_status(following, %{"status" => "test"})
53 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
57 |> get("/api/v1/timelines/public", %{"local" => "False"})
59 assert length(json_response(conn, 200)) == 2
63 |> get("/api/v1/timelines/public", %{"local" => "True"})
65 assert [%{"content" => "test"}] = json_response(conn, 200)
69 |> get("/api/v1/timelines/public", %{"local" => "1"})
71 assert [%{"content" => "test"}] = json_response(conn, 200)
75 test "posting a status", %{conn: conn} do
78 idempotency_key = "Pikachu rocks!"
82 |> assign(:user, user)
83 |> put_req_header("idempotency-key", idempotency_key)
84 |> post("/api/v1/statuses", %{
86 "spoiler_text" => "2hu",
87 "sensitive" => "false"
90 {:ok, ttl} = Cachex.ttl(:idempotency_cache, idempotency_key)
92 assert ttl > :timer.seconds(6 * 60 * 60 - 1)
94 assert %{"content" => "cofe", "id" => id, "spoiler_text" => "2hu", "sensitive" => false} =
95 json_response(conn_one, 200)
97 assert Repo.get(Activity, id)
101 |> assign(:user, user)
102 |> put_req_header("idempotency-key", idempotency_key)
103 |> post("/api/v1/statuses", %{
105 "spoiler_text" => "2hu",
106 "sensitive" => "false"
109 assert %{"id" => second_id} = json_response(conn_two, 200)
111 assert id == second_id
115 |> assign(:user, user)
116 |> post("/api/v1/statuses", %{
118 "spoiler_text" => "2hu",
119 "sensitive" => "false"
122 assert %{"id" => third_id} = json_response(conn_three, 200)
124 refute id == third_id
127 test "posting a sensitive status", %{conn: conn} do
132 |> assign(:user, user)
133 |> post("/api/v1/statuses", %{"status" => "cofe", "sensitive" => true})
135 assert %{"content" => "cofe", "id" => id, "sensitive" => true} = json_response(conn, 200)
136 assert Repo.get(Activity, id)
139 test "posting a direct status", %{conn: conn} do
140 user1 = insert(:user)
141 user2 = insert(:user)
142 content = "direct cofe @#{user2.nickname}"
146 |> assign(:user, user1)
147 |> post("api/v1/statuses", %{"status" => content, "visibility" => "direct"})
149 assert %{"id" => id, "visibility" => "direct"} = json_response(conn, 200)
150 assert activity = Repo.get(Activity, id)
151 assert activity.recipients == [user2.ap_id, user1.ap_id]
152 assert activity.data["to"] == [user2.ap_id]
153 assert activity.data["cc"] == []
156 test "direct timeline", %{conn: conn} do
157 user_one = insert(:user)
158 user_two = insert(:user)
160 {:ok, user_two} = User.follow(user_two, user_one)
163 CommonAPI.post(user_one, %{
164 "status" => "Hi @#{user_two.nickname}!",
165 "visibility" => "direct"
168 {:ok, _follower_only} =
169 CommonAPI.post(user_one, %{
170 "status" => "Hi @#{user_two.nickname}!",
171 "visibility" => "private"
174 # Only direct should be visible here
177 |> assign(:user, user_two)
178 |> get("api/v1/timelines/direct")
180 [status] = json_response(res_conn, 200)
182 assert %{"visibility" => "direct"} = status
183 assert status["url"] != direct.data["id"]
185 # User should be able to see his own direct message
188 |> assign(:user, user_one)
189 |> get("api/v1/timelines/direct")
191 [status] = json_response(res_conn, 200)
193 assert %{"visibility" => "direct"} = status
195 # Both should be visible here
198 |> assign(:user, user_two)
199 |> get("api/v1/timelines/home")
201 [_s1, _s2] = json_response(res_conn, 200)
204 Enum.each(1..20, fn _ ->
206 CommonAPI.post(user_one, %{
207 "status" => "Hi @#{user_two.nickname}!",
208 "visibility" => "direct"
214 |> assign(:user, user_two)
215 |> get("api/v1/timelines/direct")
217 statuses = json_response(res_conn, 200)
218 assert length(statuses) == 20
222 |> assign(:user, user_two)
223 |> get("api/v1/timelines/direct", %{max_id: List.last(statuses)["id"]})
225 [status] = json_response(res_conn, 200)
227 assert status["url"] != direct.data["id"]
230 test "replying to a status", %{conn: conn} do
233 {:ok, replied_to} = TwitterAPI.create_status(user, %{"status" => "cofe"})
237 |> assign(:user, user)
238 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id})
240 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
242 activity = Repo.get(Activity, id)
244 assert activity.data["context"] == replied_to.data["context"]
245 assert activity.data["object"]["inReplyToStatusId"] == replied_to.id
248 test "posting a status with an invalid in_reply_to_id", %{conn: conn} do
253 |> assign(:user, user)
254 |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => ""})
256 assert %{"content" => "xD", "id" => id} = json_response(conn, 200)
258 activity = Repo.get(Activity, id)
263 test "verify_credentials", %{conn: conn} do
268 |> assign(:user, user)
269 |> get("/api/v1/accounts/verify_credentials")
271 assert %{"id" => id, "source" => %{"privacy" => "public"}} = json_response(conn, 200)
272 assert id == to_string(user.id)
275 test "verify_credentials default scope unlisted", %{conn: conn} do
276 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "unlisted"}})
280 |> assign(:user, user)
281 |> get("/api/v1/accounts/verify_credentials")
283 assert %{"id" => id, "source" => %{"privacy" => "unlisted"}} = json_response(conn, 200)
284 assert id == to_string(user.id)
287 test "get a status", %{conn: conn} do
288 activity = insert(:note_activity)
292 |> get("/api/v1/statuses/#{activity.id}")
294 assert %{"id" => id} = json_response(conn, 200)
295 assert id == to_string(activity.id)
298 describe "deleting a status" do
299 test "when you created it", %{conn: conn} do
300 activity = insert(:note_activity)
301 author = User.get_by_ap_id(activity.data["actor"])
305 |> assign(:user, author)
306 |> delete("/api/v1/statuses/#{activity.id}")
308 assert %{} = json_response(conn, 200)
310 refute Repo.get(Activity, activity.id)
313 test "when you didn't create it", %{conn: conn} do
314 activity = insert(:note_activity)
319 |> assign(:user, user)
320 |> delete("/api/v1/statuses/#{activity.id}")
322 assert %{"error" => _} = json_response(conn, 403)
324 assert Repo.get(Activity, activity.id) == activity
328 describe "filters" do
329 test "creating a filter", %{conn: conn} do
332 filter = %Pleroma.Filter{
339 |> assign(:user, user)
340 |> post("/api/v1/filters", %{"phrase" => filter.phrase, context: filter.context})
342 assert response = json_response(conn, 200)
343 assert response["phrase"] == filter.phrase
344 assert response["context"] == filter.context
345 assert response["id"] != nil
346 assert response["id"] != ""
349 test "fetching a list of filters", %{conn: conn} do
352 query_one = %Pleroma.Filter{
359 query_two = %Pleroma.Filter{
366 {:ok, filter_one} = Pleroma.Filter.create(query_one)
367 {:ok, filter_two} = Pleroma.Filter.create(query_two)
371 |> assign(:user, user)
372 |> get("/api/v1/filters")
373 |> json_response(200)
379 filters: [filter_two, filter_one]
383 test "get a filter", %{conn: conn} do
386 query = %Pleroma.Filter{
393 {:ok, filter} = Pleroma.Filter.create(query)
397 |> assign(:user, user)
398 |> get("/api/v1/filters/#{filter.filter_id}")
400 assert _response = json_response(conn, 200)
403 test "update a filter", %{conn: conn} do
406 query = %Pleroma.Filter{
413 {:ok, _filter} = Pleroma.Filter.create(query)
415 new = %Pleroma.Filter{
422 |> assign(:user, user)
423 |> put("/api/v1/filters/#{query.filter_id}", %{
428 assert response = json_response(conn, 200)
429 assert response["phrase"] == new.phrase
430 assert response["context"] == new.context
433 test "delete a filter", %{conn: conn} do
436 query = %Pleroma.Filter{
443 {:ok, filter} = Pleroma.Filter.create(query)
447 |> assign(:user, user)
448 |> delete("/api/v1/filters/#{filter.filter_id}")
450 assert response = json_response(conn, 200)
451 assert response == %{}
456 test "creating a list", %{conn: conn} do
461 |> assign(:user, user)
462 |> post("/api/v1/lists", %{"title" => "cuties"})
464 assert %{"title" => title} = json_response(conn, 200)
465 assert title == "cuties"
468 test "adding users to a list", %{conn: conn} do
470 other_user = insert(:user)
471 {:ok, list} = Pleroma.List.create("name", user)
475 |> assign(:user, user)
476 |> post("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
478 assert %{} == json_response(conn, 200)
479 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
480 assert following == [other_user.follower_address]
483 test "removing users from a list", %{conn: conn} do
485 other_user = insert(:user)
486 third_user = insert(:user)
487 {:ok, list} = Pleroma.List.create("name", user)
488 {:ok, list} = Pleroma.List.follow(list, other_user)
489 {:ok, list} = Pleroma.List.follow(list, third_user)
493 |> assign(:user, user)
494 |> delete("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
496 assert %{} == json_response(conn, 200)
497 %Pleroma.List{following: following} = Pleroma.List.get(list.id, user)
498 assert following == [third_user.follower_address]
501 test "listing users in a list", %{conn: conn} do
503 other_user = insert(:user)
504 {:ok, list} = Pleroma.List.create("name", user)
505 {:ok, list} = Pleroma.List.follow(list, other_user)
509 |> assign(:user, user)
510 |> get("/api/v1/lists/#{list.id}/accounts", %{"account_ids" => [other_user.id]})
512 assert [%{"id" => id}] = json_response(conn, 200)
513 assert id == to_string(other_user.id)
516 test "retrieving a list", %{conn: conn} do
518 {:ok, list} = Pleroma.List.create("name", user)
522 |> assign(:user, user)
523 |> get("/api/v1/lists/#{list.id}")
525 assert %{"id" => id} = json_response(conn, 200)
526 assert id == to_string(list.id)
529 test "renaming a list", %{conn: conn} do
531 {:ok, list} = Pleroma.List.create("name", user)
535 |> assign(:user, user)
536 |> put("/api/v1/lists/#{list.id}", %{"title" => "newname"})
538 assert %{"title" => name} = json_response(conn, 200)
539 assert name == "newname"
542 test "deleting a list", %{conn: conn} do
544 {:ok, list} = Pleroma.List.create("name", user)
548 |> assign(:user, user)
549 |> delete("/api/v1/lists/#{list.id}")
551 assert %{} = json_response(conn, 200)
552 assert is_nil(Repo.get(Pleroma.List, list.id))
555 test "list timeline", %{conn: conn} do
557 other_user = insert(:user)
558 {:ok, _activity_one} = TwitterAPI.create_status(user, %{"status" => "Marisa is cute."})
559 {:ok, activity_two} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
560 {:ok, list} = Pleroma.List.create("name", user)
561 {:ok, list} = Pleroma.List.follow(list, other_user)
565 |> assign(:user, user)
566 |> get("/api/v1/timelines/list/#{list.id}")
568 assert [%{"id" => id}] = json_response(conn, 200)
570 assert id == to_string(activity_two.id)
573 test "list timeline does not leak non-public statuses for unfollowed users", %{conn: conn} do
575 other_user = insert(:user)
576 {:ok, activity_one} = TwitterAPI.create_status(other_user, %{"status" => "Marisa is cute."})
578 {:ok, _activity_two} =
579 TwitterAPI.create_status(other_user, %{
580 "status" => "Marisa is cute.",
581 "visibility" => "private"
584 {:ok, list} = Pleroma.List.create("name", user)
585 {:ok, list} = Pleroma.List.follow(list, other_user)
589 |> assign(:user, user)
590 |> get("/api/v1/timelines/list/#{list.id}")
592 assert [%{"id" => id}] = json_response(conn, 200)
594 assert id == to_string(activity_one.id)
598 describe "notifications" do
599 test "list of notifications", %{conn: conn} do
601 other_user = insert(:user)
604 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
606 {:ok, [_notification]} = Notification.create_notifications(activity)
610 |> assign(:user, user)
611 |> get("/api/v1/notifications")
614 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
616 }\">@<span>#{user.nickname}</span></a></span>"
618 assert [%{"status" => %{"content" => response}} | _rest] = json_response(conn, 200)
619 assert response == expected_response
622 test "getting a single notification", %{conn: conn} do
624 other_user = insert(:user)
627 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
629 {:ok, [notification]} = Notification.create_notifications(activity)
633 |> assign(:user, user)
634 |> get("/api/v1/notifications/#{notification.id}")
637 "hi <span class=\"h-card\"><a data-user=\"#{user.id}\" class=\"u-url mention\" href=\"#{
639 }\">@<span>#{user.nickname}</span></a></span>"
641 assert %{"status" => %{"content" => response}} = json_response(conn, 200)
642 assert response == expected_response
645 test "dismissing a single notification", %{conn: conn} do
647 other_user = insert(:user)
650 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
652 {:ok, [notification]} = Notification.create_notifications(activity)
656 |> assign(:user, user)
657 |> post("/api/v1/notifications/dismiss", %{"id" => notification.id})
659 assert %{} = json_response(conn, 200)
662 test "clearing all notifications", %{conn: conn} do
664 other_user = insert(:user)
667 TwitterAPI.create_status(other_user, %{"status" => "hi @#{user.nickname}"})
669 {:ok, [_notification]} = Notification.create_notifications(activity)
673 |> assign(:user, user)
674 |> post("/api/v1/notifications/clear")
676 assert %{} = json_response(conn, 200)
680 |> assign(:user, user)
681 |> get("/api/v1/notifications")
683 assert all = json_response(conn, 200)
688 describe "reblogging" do
689 test "reblogs and returns the reblogged status", %{conn: conn} do
690 activity = insert(:note_activity)
695 |> assign(:user, user)
696 |> post("/api/v1/statuses/#{activity.id}/reblog")
698 assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} =
699 json_response(conn, 200)
701 assert to_string(activity.id) == id
705 describe "unreblogging" do
706 test "unreblogs and returns the unreblogged status", %{conn: conn} do
707 activity = insert(:note_activity)
710 {:ok, _, _} = CommonAPI.repeat(activity.id, user)
714 |> assign(:user, user)
715 |> post("/api/v1/statuses/#{activity.id}/unreblog")
717 assert %{"id" => id, "reblogged" => false, "reblogs_count" => 0} = json_response(conn, 200)
719 assert to_string(activity.id) == id
723 describe "favoriting" do
724 test "favs a status and returns it", %{conn: conn} do
725 activity = insert(:note_activity)
730 |> assign(:user, user)
731 |> post("/api/v1/statuses/#{activity.id}/favourite")
733 assert %{"id" => id, "favourites_count" => 1, "favourited" => true} =
734 json_response(conn, 200)
736 assert to_string(activity.id) == id
739 test "returns 500 for a wrong id", %{conn: conn} do
744 |> assign(:user, user)
745 |> post("/api/v1/statuses/1/favourite")
746 |> json_response(500)
748 assert resp == "Something went wrong"
752 describe "unfavoriting" do
753 test "unfavorites a status and returns it", %{conn: conn} do
754 activity = insert(:note_activity)
757 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
761 |> assign(:user, user)
762 |> post("/api/v1/statuses/#{activity.id}/unfavourite")
764 assert %{"id" => id, "favourites_count" => 0, "favourited" => false} =
765 json_response(conn, 200)
767 assert to_string(activity.id) == id
771 describe "user timelines" do
772 test "gets a users statuses", %{conn: conn} do
773 user_one = insert(:user)
774 user_two = insert(:user)
775 user_three = insert(:user)
777 {:ok, user_three} = User.follow(user_three, user_one)
779 {:ok, activity} = CommonAPI.post(user_one, %{"status" => "HI!!!"})
781 {:ok, direct_activity} =
782 CommonAPI.post(user_one, %{
783 "status" => "Hi, @#{user_two.nickname}.",
784 "visibility" => "direct"
787 {:ok, private_activity} =
788 CommonAPI.post(user_one, %{"status" => "private", "visibility" => "private"})
792 |> get("/api/v1/accounts/#{user_one.id}/statuses")
794 assert [%{"id" => id}] = json_response(resp, 200)
795 assert id == to_string(activity.id)
799 |> assign(:user, user_two)
800 |> get("/api/v1/accounts/#{user_one.id}/statuses")
802 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
803 assert id_one == to_string(direct_activity.id)
804 assert id_two == to_string(activity.id)
808 |> assign(:user, user_three)
809 |> get("/api/v1/accounts/#{user_one.id}/statuses")
811 assert [%{"id" => id_one}, %{"id" => id_two}] = json_response(resp, 200)
812 assert id_one == to_string(private_activity.id)
813 assert id_two == to_string(activity.id)
816 test "unimplemented pinned statuses feature", %{conn: conn} do
817 note = insert(:note_activity)
818 user = User.get_by_ap_id(note.data["actor"])
822 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
824 assert json_response(conn, 200) == []
827 test "gets an users media", %{conn: conn} do
828 note = insert(:note_activity)
829 user = User.get_by_ap_id(note.data["actor"])
832 content_type: "image/jpg",
833 path: Path.absname("test/fixtures/image.jpg"),
834 filename: "an_image.jpg"
838 TwitterAPI.upload(file, user, "json")
842 TwitterAPI.create_status(user, %{"status" => "cofe", "media_ids" => [media["media_id"]]})
846 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "true"})
848 assert [%{"id" => id}] = json_response(conn, 200)
849 assert id == to_string(image_post.id)
853 |> get("/api/v1/accounts/#{user.id}/statuses", %{"only_media" => "1"})
855 assert [%{"id" => id}] = json_response(conn, 200)
856 assert id == to_string(image_post.id)
859 test "gets a user's statuses without reblogs", %{conn: conn} do
861 {:ok, post} = CommonAPI.post(user, %{"status" => "HI!!!"})
862 {:ok, _, _} = CommonAPI.repeat(post.id, user)
866 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "true"})
868 assert [%{"id" => id}] = json_response(conn, 200)
869 assert id == to_string(post.id)
873 |> get("/api/v1/accounts/#{user.id}/statuses", %{"exclude_reblogs" => "1"})
875 assert [%{"id" => id}] = json_response(conn, 200)
876 assert id == to_string(post.id)
880 describe "user relationships" do
881 test "returns the relationships for the current user", %{conn: conn} do
883 other_user = insert(:user)
884 {:ok, user} = User.follow(user, other_user)
888 |> assign(:user, user)
889 |> get("/api/v1/accounts/relationships", %{"id" => [other_user.id]})
891 assert [relationship] = json_response(conn, 200)
893 assert to_string(other_user.id) == relationship["id"]
897 describe "locked accounts" do
898 test "/api/v1/follow_requests works" do
899 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
900 other_user = insert(:user)
902 {:ok, _activity} = ActivityPub.follow(other_user, user)
904 user = Repo.get(User, user.id)
905 other_user = Repo.get(User, other_user.id)
907 assert User.following?(other_user, user) == false
911 |> assign(:user, user)
912 |> get("/api/v1/follow_requests")
914 assert [relationship] = json_response(conn, 200)
915 assert to_string(other_user.id) == relationship["id"]
918 test "/api/v1/follow_requests/:id/authorize works" do
919 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
920 other_user = insert(:user)
922 {:ok, _activity} = ActivityPub.follow(other_user, user)
924 user = Repo.get(User, user.id)
925 other_user = Repo.get(User, other_user.id)
927 assert User.following?(other_user, user) == false
931 |> assign(:user, user)
932 |> post("/api/v1/follow_requests/#{other_user.id}/authorize")
934 assert relationship = json_response(conn, 200)
935 assert to_string(other_user.id) == relationship["id"]
937 user = Repo.get(User, user.id)
938 other_user = Repo.get(User, other_user.id)
940 assert User.following?(other_user, user) == true
943 test "verify_credentials", %{conn: conn} do
944 user = insert(:user, %{info: %Pleroma.User.Info{default_scope: "private"}})
948 |> assign(:user, user)
949 |> get("/api/v1/accounts/verify_credentials")
951 assert %{"id" => id, "source" => %{"privacy" => "private"}} = json_response(conn, 200)
952 assert id == to_string(user.id)
955 test "/api/v1/follow_requests/:id/reject works" do
956 user = insert(:user, %{info: %Pleroma.User.Info{locked: true}})
957 other_user = insert(:user)
959 {:ok, _activity} = ActivityPub.follow(other_user, user)
963 |> assign(:user, user)
964 |> post("/api/v1/follow_requests/#{other_user.id}/reject")
966 assert relationship = json_response(conn, 200)
967 assert to_string(other_user.id) == relationship["id"]
969 user = Repo.get(User, user.id)
970 other_user = Repo.get(User, other_user.id)
972 assert User.following?(other_user, user) == false
976 test "account fetching", %{conn: conn} do
981 |> get("/api/v1/accounts/#{user.id}")
983 assert %{"id" => id} = json_response(conn, 200)
984 assert id == to_string(user.id)
988 |> get("/api/v1/accounts/-1")
990 assert %{"error" => "Can't find user"} = json_response(conn, 404)
993 test "media upload", %{conn: conn} do
995 content_type: "image/jpg",
996 path: Path.absname("test/fixtures/image.jpg"),
997 filename: "an_image.jpg"
1000 desc = "Description of the image"
1002 user = insert(:user)
1006 |> assign(:user, user)
1007 |> post("/api/v1/media", %{"file" => file, "description" => desc})
1009 assert media = json_response(conn, 200)
1011 assert media["type"] == "image"
1012 assert media["description"] == desc
1015 object = Repo.get(Object, media["id"])
1016 assert object.data["actor"] == User.ap_id(user)
1019 test "hashtag timeline", %{conn: conn} do
1020 following = insert(:user)
1023 {:ok, activity} = TwitterAPI.create_status(following, %{"status" => "test #2hu"})
1025 {:ok, [_activity]} =
1026 OStatus.fetch_activity_from_url("https://shitposter.club/notice/2827873")
1030 |> get("/api/v1/timelines/tag/2hu")
1032 assert [%{"id" => id}] = json_response(nconn, 200)
1034 assert id == to_string(activity.id)
1036 # works for different capitalization too
1039 |> get("/api/v1/timelines/tag/2HU")
1041 assert [%{"id" => id}] = json_response(nconn, 200)
1043 assert id == to_string(activity.id)
1047 test "getting followers", %{conn: conn} do
1048 user = insert(:user)
1049 other_user = insert(:user)
1050 {:ok, user} = User.follow(user, other_user)
1054 |> get("/api/v1/accounts/#{other_user.id}/followers")
1056 assert [%{"id" => id}] = json_response(conn, 200)
1057 assert id == to_string(user.id)
1060 test "getting followers, hide_network", %{conn: conn} do
1061 user = insert(:user)
1062 other_user = insert(:user, %{info: %{hide_network: true}})
1063 {:ok, _user} = User.follow(user, other_user)
1067 |> get("/api/v1/accounts/#{other_user.id}/followers")
1069 assert [] == json_response(conn, 200)
1072 test "getting followers, hide_network, same user requesting", %{conn: conn} do
1073 user = insert(:user)
1074 other_user = insert(:user, %{info: %{hide_network: true}})
1075 {:ok, _user} = User.follow(user, other_user)
1079 |> assign(:user, other_user)
1080 |> get("/api/v1/accounts/#{other_user.id}/followers")
1082 refute [] == json_response(conn, 200)
1085 test "getting following", %{conn: conn} do
1086 user = insert(:user)
1087 other_user = insert(:user)
1088 {:ok, user} = User.follow(user, other_user)
1092 |> get("/api/v1/accounts/#{user.id}/following")
1094 assert [%{"id" => id}] = json_response(conn, 200)
1095 assert id == to_string(other_user.id)
1098 test "getting following, hide_network", %{conn: conn} do
1099 user = insert(:user, %{info: %{hide_network: true}})
1100 other_user = insert(:user)
1101 {:ok, user} = User.follow(user, other_user)
1105 |> get("/api/v1/accounts/#{user.id}/following")
1107 assert [] == json_response(conn, 200)
1110 test "getting following, hide_network, same user requesting", %{conn: conn} do
1111 user = insert(:user, %{info: %{hide_network: true}})
1112 other_user = insert(:user)
1113 {:ok, user} = User.follow(user, other_user)
1117 |> assign(:user, user)
1118 |> get("/api/v1/accounts/#{user.id}/following")
1120 refute [] == json_response(conn, 200)
1123 test "following / unfollowing a user", %{conn: conn} do
1124 user = insert(:user)
1125 other_user = insert(:user)
1129 |> assign(:user, user)
1130 |> post("/api/v1/accounts/#{other_user.id}/follow")
1132 assert %{"id" => _id, "following" => true} = json_response(conn, 200)
1134 user = Repo.get(User, user.id)
1138 |> assign(:user, user)
1139 |> post("/api/v1/accounts/#{other_user.id}/unfollow")
1141 assert %{"id" => _id, "following" => false} = json_response(conn, 200)
1143 user = Repo.get(User, user.id)
1147 |> assign(:user, user)
1148 |> post("/api/v1/follows", %{"uri" => other_user.nickname})
1150 assert %{"id" => id} = json_response(conn, 200)
1151 assert id == to_string(other_user.id)
1154 test "blocking / unblocking a user", %{conn: conn} do
1155 user = insert(:user)
1156 other_user = insert(:user)
1160 |> assign(:user, user)
1161 |> post("/api/v1/accounts/#{other_user.id}/block")
1163 assert %{"id" => _id, "blocking" => true} = json_response(conn, 200)
1165 user = Repo.get(User, user.id)
1169 |> assign(:user, user)
1170 |> post("/api/v1/accounts/#{other_user.id}/unblock")
1172 assert %{"id" => _id, "blocking" => false} = json_response(conn, 200)
1175 test "getting a list of blocks", %{conn: conn} do
1176 user = insert(:user)
1177 other_user = insert(:user)
1179 {:ok, user} = User.block(user, other_user)
1183 |> assign(:user, user)
1184 |> get("/api/v1/blocks")
1186 other_user_id = to_string(other_user.id)
1187 assert [%{"id" => ^other_user_id}] = json_response(conn, 200)
1190 test "blocking / unblocking a domain", %{conn: conn} do
1191 user = insert(:user)
1192 other_user = insert(:user, %{ap_id: "https://dogwhistle.zone/@pundit"})
1196 |> assign(:user, user)
1197 |> post("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1199 assert %{} = json_response(conn, 200)
1200 user = User.get_cached_by_ap_id(user.ap_id)
1201 assert User.blocks?(user, other_user)
1205 |> assign(:user, user)
1206 |> delete("/api/v1/domain_blocks", %{"domain" => "dogwhistle.zone"})
1208 assert %{} = json_response(conn, 200)
1209 user = User.get_cached_by_ap_id(user.ap_id)
1210 refute User.blocks?(user, other_user)
1213 test "getting a list of domain blocks", %{conn: conn} do
1214 user = insert(:user)
1216 {:ok, user} = User.block_domain(user, "bad.site")
1217 {:ok, user} = User.block_domain(user, "even.worse.site")
1221 |> assign(:user, user)
1222 |> get("/api/v1/domain_blocks")
1224 domain_blocks = json_response(conn, 200)
1226 assert "bad.site" in domain_blocks
1227 assert "even.worse.site" in domain_blocks
1230 test "unimplemented mute endpoints" do
1231 user = insert(:user)
1232 other_user = insert(:user)
1235 |> Enum.each(fn endpoint ->
1238 |> assign(:user, user)
1239 |> post("/api/v1/accounts/#{other_user.id}/#{endpoint}")
1241 assert %{"id" => id} = json_response(conn, 200)
1242 assert id == to_string(other_user.id)
1246 test "unimplemented mutes, follow_requests, blocks, domain blocks" do
1247 user = insert(:user)
1249 ["blocks", "domain_blocks", "mutes", "follow_requests"]
1250 |> Enum.each(fn endpoint ->
1253 |> assign(:user, user)
1254 |> get("/api/v1/#{endpoint}")
1256 assert [] = json_response(conn, 200)
1260 test "account search", %{conn: conn} do
1261 user = insert(:user)
1262 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1263 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1267 |> assign(:user, user)
1268 |> get("/api/v1/accounts/search", %{"q" => "shp"})
1269 |> json_response(200)
1271 result_ids = for result <- results, do: result["acct"]
1273 assert user_two.nickname in result_ids
1274 assert user_three.nickname in result_ids
1278 |> assign(:user, user)
1279 |> get("/api/v1/accounts/search", %{"q" => "2hu"})
1280 |> json_response(200)
1282 result_ids = for result <- results, do: result["acct"]
1284 assert user_three.nickname in result_ids
1287 test "search", %{conn: conn} do
1288 user = insert(:user)
1289 user_two = insert(:user, %{nickname: "shp@shitposter.club"})
1290 user_three = insert(:user, %{nickname: "shp@heldscal.la", name: "I love 2hu"})
1292 {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
1295 CommonAPI.post(user, %{
1296 "status" => "This is about 2hu, but private",
1297 "visibility" => "private"
1300 {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
1304 |> get("/api/v1/search", %{"q" => "2hu"})
1306 assert results = json_response(conn, 200)
1308 [account | _] = results["accounts"]
1309 assert account["id"] == to_string(user_three.id)
1311 assert results["hashtags"] == []
1313 [status] = results["statuses"]
1314 assert status["id"] == to_string(activity.id)
1317 test "search fetches remote statuses", %{conn: conn} do
1321 |> get("/api/v1/search", %{"q" => "https://shitposter.club/notice/2827873"})
1323 assert results = json_response(conn, 200)
1325 [status] = results["statuses"]
1326 assert status["uri"] == "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"
1330 test "search doesn't show statuses that it shouldn't", %{conn: conn} do
1332 CommonAPI.post(insert(:user), %{
1333 "status" => "This is about 2hu, but private",
1334 "visibility" => "private"
1340 |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]})
1342 assert results = json_response(conn, 200)
1344 [] = results["statuses"]
1348 test "search fetches remote accounts", %{conn: conn} do
1351 |> get("/api/v1/search", %{"q" => "shp@social.heldscal.la", "resolve" => "true"})
1353 assert results = json_response(conn, 200)
1354 [account] = results["accounts"]
1355 assert account["acct"] == "shp@social.heldscal.la"
1358 test "returns the favorites of a user", %{conn: conn} do
1359 user = insert(:user)
1360 other_user = insert(:user)
1362 {:ok, _} = CommonAPI.post(other_user, %{"status" => "bla"})
1363 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "traps are happy"})
1365 {:ok, _, _} = CommonAPI.favorite(activity.id, user)
1369 |> assign(:user, user)
1370 |> get("/api/v1/favourites")
1372 assert [status] = json_response(first_conn, 200)
1373 assert status["id"] == to_string(activity.id)
1375 assert [{"link", _link_header}] =
1376 Enum.filter(first_conn.resp_headers, fn element -> match?({"link", _}, element) end)
1378 # Honours query params
1379 {:ok, second_activity} =
1380 CommonAPI.post(other_user, %{
1382 "Trees Are Never Sad Look At Them Every Once In Awhile They're Quite Beautiful."
1385 {:ok, _, _} = CommonAPI.favorite(second_activity.id, user)
1387 last_like = status["id"]
1391 |> assign(:user, user)
1392 |> get("/api/v1/favourites?since_id=#{last_like}")
1394 assert [second_status] = json_response(second_conn, 200)
1395 assert second_status["id"] == to_string(second_activity.id)
1399 |> assign(:user, user)
1400 |> get("/api/v1/favourites?limit=0")
1402 assert [] = json_response(third_conn, 200)
1405 describe "updating credentials" do
1406 test "updates the user's bio", %{conn: conn} do
1407 user = insert(:user)
1408 user2 = insert(:user)
1412 |> assign(:user, user)
1413 |> patch("/api/v1/accounts/update_credentials", %{
1414 "note" => "I drink #cofe with @#{user2.nickname}"
1417 assert user = json_response(conn, 200)
1419 assert user["note"] ==
1420 "I drink <a class=\"hashtag\" data-tag=\"cofe\" href=\"http://localhost:4001/tag/cofe\">#cofe</a> with <span class=\"h-card\"><a data-user=\"#{
1422 }\" class=\"u-url mention\" href=\"#{user2.ap_id}\">@<span>#{user2.nickname}</span></a></span>"
1425 test "updates the user's locking status", %{conn: conn} do
1426 user = insert(:user)
1430 |> assign(:user, user)
1431 |> patch("/api/v1/accounts/update_credentials", %{locked: "true"})
1433 assert user = json_response(conn, 200)
1434 assert user["locked"] == true
1437 test "updates the user's name", %{conn: conn} do
1438 user = insert(:user)
1442 |> assign(:user, user)
1443 |> patch("/api/v1/accounts/update_credentials", %{"display_name" => "markorepairs"})
1445 assert user = json_response(conn, 200)
1446 assert user["display_name"] == "markorepairs"
1449 test "updates the user's avatar", %{conn: conn} do
1450 user = insert(:user)
1452 new_avatar = %Plug.Upload{
1453 content_type: "image/jpg",
1454 path: Path.absname("test/fixtures/image.jpg"),
1455 filename: "an_image.jpg"
1460 |> assign(:user, user)
1461 |> patch("/api/v1/accounts/update_credentials", %{"avatar" => new_avatar})
1463 assert user_response = json_response(conn, 200)
1464 assert user_response["avatar"] != User.avatar_url(user)
1467 test "updates the user's banner", %{conn: conn} do
1468 user = insert(:user)
1470 new_header = %Plug.Upload{
1471 content_type: "image/jpg",
1472 path: Path.absname("test/fixtures/image.jpg"),
1473 filename: "an_image.jpg"
1478 |> assign(:user, user)
1479 |> patch("/api/v1/accounts/update_credentials", %{"header" => new_header})
1481 assert user_response = json_response(conn, 200)
1482 assert user_response["header"] != User.banner_url(user)
1486 test "get instance information", %{conn: conn} do
1487 user = insert(:user, %{local: true})
1489 user2 = insert(:user, %{local: true})
1490 {:ok, _user2} = User.deactivate(user2, !user2.info.deactivated)
1492 insert(:user, %{local: false, nickname: "u@peer1.com"})
1493 insert(:user, %{local: false, nickname: "u@peer2.com"})
1495 {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})
1497 # Stats should count users with missing or nil `info.deactivated` value
1498 user = Repo.get(User, user.id)
1499 info_change = Changeset.change(user.info, %{deactivated: nil})
1503 |> Changeset.change()
1504 |> Changeset.put_embed(:info, info_change)
1505 |> User.update_and_set_cache()
1507 Pleroma.Stats.update_stats()
1509 conn = get(conn, "/api/v1/instance")
1511 assert result = json_response(conn, 200)
1513 stats = result["stats"]
1516 assert stats["user_count"] == 1
1517 assert stats["status_count"] == 1
1518 assert stats["domain_count"] == 2
1521 test "get peers", %{conn: conn} do
1522 insert(:user, %{local: false, nickname: "u@peer1.com"})
1523 insert(:user, %{local: false, nickname: "u@peer2.com"})
1525 Pleroma.Stats.update_stats()
1527 conn = get(conn, "/api/v1/instance/peers")
1529 assert result = json_response(conn, 200)
1531 assert ["peer1.com", "peer2.com"] == Enum.sort(result)
1534 test "put settings", %{conn: conn} do
1535 user = insert(:user)
1539 |> assign(:user, user)
1540 |> put("/api/web/settings", %{"data" => %{"programming" => "socks"}})
1542 assert _result = json_response(conn, 200)
1544 user = User.get_cached_by_ap_id(user.ap_id)
1545 assert user.info.settings == %{"programming" => "socks"}
1548 describe "pinned statuses" do
1550 Pleroma.Config.put([:instance, :max_pinned_statuses], 1)
1552 user = insert(:user)
1553 {:ok, activity} = CommonAPI.post(user, %{"status" => "HI!!!"})
1555 [user: user, activity: activity]
1558 test "returns pinned statuses", %{conn: conn, user: user, activity: activity} do
1559 {:ok, _} = CommonAPI.pin(activity.id, user)
1563 |> assign(:user, user)
1564 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1565 |> json_response(200)
1567 id_str = to_string(activity.id)
1569 assert [%{"id" => ^id_str, "pinned" => true}] = result
1572 test "pin status", %{conn: conn, user: user, activity: activity} do
1573 id_str = to_string(activity.id)
1575 assert %{"id" => ^id_str, "pinned" => true} =
1577 |> assign(:user, user)
1578 |> post("/api/v1/statuses/#{activity.id}/pin")
1579 |> json_response(200)
1581 assert [%{"id" => ^id_str, "pinned" => true}] =
1583 |> assign(:user, user)
1584 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1585 |> json_response(200)
1588 test "unpin status", %{conn: conn, user: user, activity: activity} do
1589 {:ok, _} = CommonAPI.pin(activity.id, user)
1591 id_str = to_string(activity.id)
1592 user = refresh_record(user)
1594 assert %{"id" => ^id_str, "pinned" => false} =
1596 |> assign(:user, user)
1597 |> post("/api/v1/statuses/#{activity.id}/unpin")
1598 |> json_response(200)
1602 |> assign(:user, user)
1603 |> get("/api/v1/accounts/#{user.id}/statuses?pinned=true")
1604 |> json_response(200)
1607 test "max pinned statuses", %{conn: conn, user: user, activity: activity_one} do
1608 {:ok, activity_two} = CommonAPI.post(user, %{"status" => "HI!!!"})
1610 id_str_one = to_string(activity_one.id)
1612 assert %{"id" => ^id_str_one, "pinned" => true} =
1614 |> assign(:user, user)
1615 |> post("/api/v1/statuses/#{id_str_one}/pin")
1616 |> json_response(200)
1618 user = refresh_record(user)
1620 assert %{"error" => "You have already pinned the maximum number of statuses"} =
1622 |> assign(:user, user)
1623 |> post("/api/v1/statuses/#{activity_two.id}/pin")
1624 |> json_response(400)
1627 test "Status rich-media Card", %{conn: conn, user: user} do
1628 {:ok, activity} = CommonAPI.post(user, %{"status" => "http://example.com/ogp"})
1632 |> get("/api/v1/statuses/#{activity.id}/card")
1633 |> json_response(200)
1635 assert response == %{
1636 "image" => "http://ia.media-imdb.com/images/rock.jpg",
1637 "title" => "The Rock",
1639 "url" => "http://www.imdb.com/title/tt0117500/"