git.squeep.com Git - akkoma/blob - test/web/twitter_api/twitter_api_controller_test.exs

   1 defmodule Pleroma.Web.TwitterAPI.ControllerTest do
   2   use Pleroma.Web.ConnCase
   3   alias Pleroma.Web.TwitterAPI.Representers.ActivityRepresenter
   4   alias Pleroma.Builders.{ActivityBuilder, UserBuilder}
   5   alias Pleroma.{Repo, Activity, User, Object, Notification}
   6   alias Pleroma.Web.ActivityPub.ActivityPub
   7   alias Pleroma.Web.TwitterAPI.UserView
   8   alias Pleroma.Web.TwitterAPI.NotificationView
   9   alias Pleroma.Web.CommonAPI
  10   alias Pleroma.Web.TwitterAPI.TwitterAPI
  11   alias Comeonin.Pbkdf2
  12
  13   import Pleroma.Factory
  14
  15   describe "POST /api/account/verify_credentials" do
  16     setup [:valid_user]
  17
  18     test "without valid credentials", %{conn: conn} do
  19       conn = post(conn, "/api/account/verify_credentials.json")
  20       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
  21     end
  22
  23     test "with credentials", %{conn: conn, user: user} do
  24       conn =
  25         conn
  26         |> with_credentials(user.nickname, "test")
  27         |> post("/api/account/verify_credentials.json")
  28
  29       assert response = json_response(conn, 200)
  30       assert response == UserView.render("show.json", %{user: user, token: response["token"]})
  31     end
  32   end
  33
  34   describe "POST /api/account/most_recent_notification" do
  35     setup [:valid_user]
  36
  37     test "without valid credentials", %{conn: conn} do
  38       conn = post(conn, "/api/account/most_recent_notification.json")
  39       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
  40     end
  41
  42     test "with credentials", %{conn: conn, user: user} do
  43       conn =
  44         conn
  45         |> with_credentials(user.nickname, "test")
  46         |> post("/api/account/most_recent_notification.json", %{id: "200"})
  47
  48       assert json_response(conn, 200)
  49       user = User.get_by_nickname(user.nickname)
  50       assert user.info["most_recent_notification"] == 200
  51     end
  52   end
  53
  54   describe "POST /statuses/update.json" do
  55     setup [:valid_user]
  56
  57     test "without valid credentials", %{conn: conn} do
  58       conn = post(conn, "/api/statuses/update.json")
  59       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
  60     end
  61
  62     test "with credentials", %{conn: conn, user: user} do
  63       conn_with_creds = conn |> with_credentials(user.nickname, "test")
  64       request_path = "/api/statuses/update.json"
  65
  66       error_response = %{
  67         "request" => request_path,
  68         "error" => "Client must provide a 'status' parameter with a value."
  69       }
  70
  71       conn = conn_with_creds |> post(request_path)
  72       assert json_response(conn, 400) == error_response
  73
  74       conn = conn_with_creds |> post(request_path, %{status: ""})
  75       assert json_response(conn, 400) == error_response
  76
  77       conn = conn_with_creds |> post(request_path, %{status: " "})
  78       assert json_response(conn, 400) == error_response
  79
  80       conn = conn_with_creds |> post(request_path, %{status: "Nice meme."})
  81
  82       assert json_response(conn, 200) ==
  83                ActivityRepresenter.to_map(Repo.one(Activity), %{user: user})
  84     end
  85   end
  86
  87   describe "GET /statuses/public_timeline.json" do
  88     test "returns statuses", %{conn: conn} do
  89       {:ok, user} = UserBuilder.insert()
  90       activities = ActivityBuilder.insert_list(30, %{}, %{user: user})
  91       ActivityBuilder.insert_list(10, %{}, %{user: user})
  92       since_id = List.last(activities).id
  93
  94       conn =
  95         conn
  96         |> get("/api/statuses/public_timeline.json", %{since_id: since_id})
  97
  98       response = json_response(conn, 200)
  99
 100       assert length(response) == 10
 101     end
 102   end
 103
 104   describe "GET /statuses/show/:id.json" do
 105     test "returns one status", %{conn: conn} do
 106       user = insert(:user)
 107       {:ok, activity} = CommonAPI.post(user, %{"status" => "Hey!"})
 108       actor = Repo.get_by!(User, ap_id: activity.data["actor"])
 109
 110       conn =
 111         conn
 112         |> get("/api/statuses/show/#{activity.id}.json")
 113
 114       response = json_response(conn, 200)
 115
 116       assert response == ActivityRepresenter.to_map(activity, %{user: actor})
 117     end
 118   end
 119
 120   describe "GET /users/show.json" do
 121     test "gets user with screen_name", %{conn: conn} do
 122       user = insert(:user)
 123
 124       conn =
 125         conn
 126         |> get("/api/users/show.json", %{"screen_name" => user.nickname})
 127
 128       response = json_response(conn, 200)
 129
 130       assert response["id"] == user.id
 131     end
 132
 133     test "gets user with user_id", %{conn: conn} do
 134       user = insert(:user)
 135
 136       conn =
 137         conn
 138         |> get("/api/users/show.json", %{"user_id" => user.id})
 139
 140       response = json_response(conn, 200)
 141
 142       assert response["id"] == user.id
 143     end
 144
 145     test "gets a user for a logged in user", %{conn: conn} do
 146       user = insert(:user)
 147       logged_in = insert(:user)
 148
 149       {:ok, logged_in, user, _activity} = TwitterAPI.follow(logged_in, %{"user_id" => user.id})
 150
 151       conn =
 152         conn
 153         |> with_credentials(logged_in.nickname, "test")
 154         |> get("/api/users/show.json", %{"user_id" => user.id})
 155
 156       response = json_response(conn, 200)
 157
 158       assert response["following"] == true
 159     end
 160   end
 161
 162   describe "GET /statusnet/conversation/:id.json" do
 163     test "returns the statuses in the conversation", %{conn: conn} do
 164       {:ok, _user} = UserBuilder.insert()
 165       {:ok, activity} = ActivityBuilder.insert(%{"type" => "Create", "context" => "2hu"})
 166       {:ok, _activity_two} = ActivityBuilder.insert(%{"type" => "Create", "context" => "2hu"})
 167       {:ok, _activity_three} = ActivityBuilder.insert(%{"type" => "Create", "context" => "3hu"})
 168
 169       conn =
 170         conn
 171         |> get("/api/statusnet/conversation/#{activity.data["context_id"]}.json")
 172
 173       response = json_response(conn, 200)
 174
 175       assert length(response) == 2
 176     end
 177   end
 178
 179   describe "GET /statuses/friends_timeline.json" do
 180     setup [:valid_user]
 181
 182     test "without valid credentials", %{conn: conn} do
 183       conn = get(conn, "/api/statuses/friends_timeline.json")
 184       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 185     end
 186
 187     test "with credentials", %{conn: conn, user: current_user} do
 188       user = insert(:user)
 189
 190       activities =
 191         ActivityBuilder.insert_list(30, %{"to" => [User.ap_followers(user)]}, %{user: user})
 192
 193       returned_activities =
 194         ActivityBuilder.insert_list(10, %{"to" => [User.ap_followers(user)]}, %{user: user})
 195
 196       other_user = insert(:user)
 197       ActivityBuilder.insert_list(10, %{}, %{user: other_user})
 198       since_id = List.last(activities).id
 199
 200       current_user =
 201         Ecto.Changeset.change(current_user, following: [User.ap_followers(user)])
 202         |> Repo.update!()
 203
 204       conn =
 205         conn
 206         |> with_credentials(current_user.nickname, "test")
 207         |> get("/api/statuses/friends_timeline.json", %{since_id: since_id})
 208
 209       response = json_response(conn, 200)
 210
 211       assert length(response) == 10
 212
 213       assert response ==
 214                Enum.map(returned_activities, fn activity ->
 215                  ActivityRepresenter.to_map(activity, %{
 216                    user: User.get_cached_by_ap_id(activity.data["actor"]),
 217                    for: current_user
 218                  })
 219                end)
 220     end
 221   end
 222
 223   describe "GET /statuses/mentions.json" do
 224     setup [:valid_user]
 225
 226     test "without valid credentials", %{conn: conn} do
 227       conn = get(conn, "/api/statuses/mentions.json")
 228       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 229     end
 230
 231     test "with credentials", %{conn: conn, user: current_user} do
 232       {:ok, activity} =
 233         ActivityBuilder.insert(%{"to" => [current_user.ap_id]}, %{user: current_user})
 234
 235       conn =
 236         conn
 237         |> with_credentials(current_user.nickname, "test")
 238         |> get("/api/statuses/mentions.json")
 239
 240       response = json_response(conn, 200)
 241
 242       assert length(response) == 1
 243
 244       assert Enum.at(response, 0) ==
 245                ActivityRepresenter.to_map(activity, %{
 246                  user: current_user,
 247                  mentioned: [current_user]
 248                })
 249     end
 250   end
 251
 252   describe "GET /api/qvitter/statuses/notifications.json" do
 253     setup [:valid_user]
 254
 255     test "without valid credentials", %{conn: conn} do
 256       conn = get(conn, "/api/qvitter/statuses/notifications.json")
 257       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 258     end
 259
 260     test "with credentials", %{conn: conn, user: current_user} do
 261       other_user = insert(:user)
 262
 263       {:ok, _activity} =
 264         ActivityBuilder.insert(%{"to" => [current_user.ap_id]}, %{user: other_user})
 265
 266       conn =
 267         conn
 268         |> with_credentials(current_user.nickname, "test")
 269         |> get("/api/qvitter/statuses/notifications.json")
 270
 271       response = json_response(conn, 200)
 272
 273       assert length(response) == 1
 274
 275       assert response ==
 276                NotificationView.render("notification.json", %{
 277                  notifications: Notification.for_user(current_user),
 278                  for: current_user
 279                })
 280     end
 281   end
 282
 283   describe "GET /statuses/user_timeline.json" do
 284     setup [:valid_user]
 285
 286     test "without any params", %{conn: conn} do
 287       conn = get(conn, "/api/statuses/user_timeline.json")
 288
 289       assert json_response(conn, 400) == %{
 290                "error" => "You need to specify screen_name or user_id",
 291                "request" => "/api/statuses/user_timeline.json"
 292              }
 293     end
 294
 295     test "with user_id", %{conn: conn} do
 296       user = insert(:user)
 297       {:ok, activity} = ActivityBuilder.insert(%{"id" => 1}, %{user: user})
 298
 299       conn = get(conn, "/api/statuses/user_timeline.json", %{"user_id" => user.id})
 300       response = json_response(conn, 200)
 301       assert length(response) == 1
 302       assert Enum.at(response, 0) == ActivityRepresenter.to_map(activity, %{user: user})
 303     end
 304
 305     test "with screen_name", %{conn: conn} do
 306       user = insert(:user)
 307       {:ok, activity} = ActivityBuilder.insert(%{"id" => 1}, %{user: user})
 308
 309       conn = get(conn, "/api/statuses/user_timeline.json", %{"screen_name" => user.nickname})
 310       response = json_response(conn, 200)
 311       assert length(response) == 1
 312       assert Enum.at(response, 0) == ActivityRepresenter.to_map(activity, %{user: user})
 313     end
 314
 315     test "with credentials", %{conn: conn, user: current_user} do
 316       {:ok, activity} = ActivityBuilder.insert(%{"id" => 1}, %{user: current_user})
 317
 318       conn =
 319         conn
 320         |> with_credentials(current_user.nickname, "test")
 321         |> get("/api/statuses/user_timeline.json")
 322
 323       response = json_response(conn, 200)
 324
 325       assert length(response) == 1
 326       assert Enum.at(response, 0) == ActivityRepresenter.to_map(activity, %{user: current_user})
 327     end
 328
 329     test "with credentials with user_id", %{conn: conn, user: current_user} do
 330       user = insert(:user)
 331       {:ok, activity} = ActivityBuilder.insert(%{"id" => 1}, %{user: user})
 332
 333       conn =
 334         conn
 335         |> with_credentials(current_user.nickname, "test")
 336         |> get("/api/statuses/user_timeline.json", %{"user_id" => user.id})
 337
 338       response = json_response(conn, 200)
 339
 340       assert length(response) == 1
 341       assert Enum.at(response, 0) == ActivityRepresenter.to_map(activity, %{user: user})
 342     end
 343
 344     test "with credentials screen_name", %{conn: conn, user: current_user} do
 345       user = insert(:user)
 346       {:ok, activity} = ActivityBuilder.insert(%{"id" => 1}, %{user: user})
 347
 348       conn =
 349         conn
 350         |> with_credentials(current_user.nickname, "test")
 351         |> get("/api/statuses/user_timeline.json", %{"screen_name" => user.nickname})
 352
 353       response = json_response(conn, 200)
 354
 355       assert length(response) == 1
 356       assert Enum.at(response, 0) == ActivityRepresenter.to_map(activity, %{user: user})
 357     end
 358   end
 359
 360   describe "POST /friendships/create.json" do
 361     setup [:valid_user]
 362
 363     test "without valid credentials", %{conn: conn} do
 364       conn = post(conn, "/api/friendships/create.json")
 365       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 366     end
 367
 368     test "with credentials", %{conn: conn, user: current_user} do
 369       followed = insert(:user)
 370
 371       conn =
 372         conn
 373         |> with_credentials(current_user.nickname, "test")
 374         |> post("/api/friendships/create.json", %{user_id: followed.id})
 375
 376       current_user = Repo.get(User, current_user.id)
 377       assert User.ap_followers(followed) in current_user.following
 378
 379       assert json_response(conn, 200) ==
 380                UserView.render("show.json", %{user: followed, for: current_user})
 381     end
 382   end
 383
 384   describe "POST /friendships/destroy.json" do
 385     setup [:valid_user]
 386
 387     test "without valid credentials", %{conn: conn} do
 388       conn = post(conn, "/api/friendships/destroy.json")
 389       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 390     end
 391
 392     test "with credentials", %{conn: conn, user: current_user} do
 393       followed = insert(:user)
 394
 395       {:ok, current_user} = User.follow(current_user, followed)
 396       assert User.ap_followers(followed) in current_user.following
 397       ActivityPub.follow(current_user, followed)
 398
 399       conn =
 400         conn
 401         |> with_credentials(current_user.nickname, "test")
 402         |> post("/api/friendships/destroy.json", %{user_id: followed.id})
 403
 404       current_user = Repo.get(User, current_user.id)
 405       assert current_user.following == [current_user.ap_id]
 406
 407       assert json_response(conn, 200) ==
 408                UserView.render("show.json", %{user: followed, for: current_user})
 409     end
 410   end
 411
 412   describe "POST /blocks/create.json" do
 413     setup [:valid_user]
 414
 415     test "without valid credentials", %{conn: conn} do
 416       conn = post(conn, "/api/blocks/create.json")
 417       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 418     end
 419
 420     test "with credentials", %{conn: conn, user: current_user} do
 421       blocked = insert(:user)
 422
 423       conn =
 424         conn
 425         |> with_credentials(current_user.nickname, "test")
 426         |> post("/api/blocks/create.json", %{user_id: blocked.id})
 427
 428       current_user = Repo.get(User, current_user.id)
 429       assert User.blocks?(current_user, blocked)
 430
 431       assert json_response(conn, 200) ==
 432                UserView.render("show.json", %{user: blocked, for: current_user})
 433     end
 434   end
 435
 436   describe "POST /blocks/destroy.json" do
 437     setup [:valid_user]
 438
 439     test "without valid credentials", %{conn: conn} do
 440       conn = post(conn, "/api/blocks/destroy.json")
 441       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 442     end
 443
 444     test "with credentials", %{conn: conn, user: current_user} do
 445       blocked = insert(:user)
 446
 447       {:ok, current_user, blocked} = TwitterAPI.block(current_user, %{"user_id" => blocked.id})
 448       assert User.blocks?(current_user, blocked)
 449
 450       conn =
 451         conn
 452         |> with_credentials(current_user.nickname, "test")
 453         |> post("/api/blocks/destroy.json", %{user_id: blocked.id})
 454
 455       current_user = Repo.get(User, current_user.id)
 456       assert current_user.info["blocks"] == []
 457
 458       assert json_response(conn, 200) ==
 459                UserView.render("show.json", %{user: blocked, for: current_user})
 460     end
 461   end
 462
 463   describe "GET /help/test.json" do
 464     test "returns \"ok\"", %{conn: conn} do
 465       conn = get(conn, "/api/help/test.json")
 466       assert json_response(conn, 200) == "ok"
 467     end
 468   end
 469
 470   describe "POST /api/qvitter/update_avatar.json" do
 471     setup [:valid_user]
 472
 473     test "without valid credentials", %{conn: conn} do
 474       conn = post(conn, "/api/qvitter/update_avatar.json")
 475       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 476     end
 477
 478     test "with credentials", %{conn: conn, user: current_user} do
 479       avatar_image = File.read!("test/fixtures/avatar_data_uri")
 480
 481       conn =
 482         conn
 483         |> with_credentials(current_user.nickname, "test")
 484         |> post("/api/qvitter/update_avatar.json", %{img: avatar_image})
 485
 486       current_user = Repo.get(User, current_user.id)
 487       assert is_map(current_user.avatar)
 488
 489       assert json_response(conn, 200) ==
 490                UserView.render("show.json", %{user: current_user, for: current_user})
 491     end
 492   end
 493
 494   describe "GET /api/qvitter/mutes.json" do
 495     setup [:valid_user]
 496
 497     test "unimplemented mutes without valid credentials", %{conn: conn} do
 498       conn = get(conn, "/api/qvitter/mutes.json")
 499       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 500     end
 501
 502     test "unimplemented mutes with credentials", %{conn: conn, user: current_user} do
 503       conn =
 504         conn
 505         |> with_credentials(current_user.nickname, "test")
 506         |> get("/api/qvitter/mutes.json")
 507       current_user = Repo.get(User, current_user.id)
 508
 509       assert [] = json_response(conn, 200)
 510     end
 511   end
 512
 513   describe "POST /api/favorites/create/:id" do
 514     setup [:valid_user]
 515
 516     test "without valid credentials", %{conn: conn} do
 517       note_activity = insert(:note_activity)
 518       conn = post(conn, "/api/favorites/create/#{note_activity.id}.json")
 519       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 520     end
 521
 522     test "with credentials", %{conn: conn, user: current_user} do
 523       note_activity = insert(:note_activity)
 524
 525       conn =
 526         conn
 527         |> with_credentials(current_user.nickname, "test")
 528         |> post("/api/favorites/create/#{note_activity.id}.json")
 529
 530       assert json_response(conn, 200)
 531     end
 532
 533     test "with credentials, invalid param", %{conn: conn, user: current_user} do
 534       conn =
 535         conn
 536         |> with_credentials(current_user.nickname, "test")
 537         |> post("/api/favorites/create/wrong.json")
 538
 539       assert json_response(conn, 400)
 540     end
 541
 542     test "with credentials, invalid activity", %{conn: conn, user: current_user} do
 543       conn =
 544         conn
 545         |> with_credentials(current_user.nickname, "test")
 546         |> post("/api/favorites/create/1.json")
 547
 548       assert json_response(conn, 500)
 549     end
 550   end
 551
 552   describe "POST /api/favorites/destroy/:id" do
 553     setup [:valid_user]
 554
 555     test "without valid credentials", %{conn: conn} do
 556       note_activity = insert(:note_activity)
 557       conn = post(conn, "/api/favorites/destroy/#{note_activity.id}.json")
 558       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 559     end
 560
 561     test "with credentials", %{conn: conn, user: current_user} do
 562       note_activity = insert(:note_activity)
 563       object = Object.get_by_ap_id(note_activity.data["object"]["id"])
 564       ActivityPub.like(current_user, object)
 565
 566       conn =
 567         conn
 568         |> with_credentials(current_user.nickname, "test")
 569         |> post("/api/favorites/destroy/#{note_activity.id}.json")
 570
 571       assert json_response(conn, 200)
 572     end
 573   end
 574
 575   describe "POST /api/statuses/retweet/:id" do
 576     setup [:valid_user]
 577
 578     test "without valid credentials", %{conn: conn} do
 579       note_activity = insert(:note_activity)
 580       conn = post(conn, "/api/statuses/retweet/#{note_activity.id}.json")
 581       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 582     end
 583
 584     test "with credentials", %{conn: conn, user: current_user} do
 585       note_activity = insert(:note_activity)
 586
 587       request_path = "/api/statuses/retweet/#{note_activity.id}.json"
 588
 589       response =
 590         conn
 591         |> with_credentials(current_user.nickname, "test")
 592         |> post(request_path)
 593
 594       activity = Repo.get(Activity, note_activity.id)
 595       activity_user = Repo.get_by(User, ap_id: note_activity.data["actor"])
 596
 597       assert json_response(response, 200) ==
 598                ActivityRepresenter.to_map(activity, %{user: activity_user, for: current_user})
 599     end
 600   end
 601
 602   describe "POST /api/statuses/unretweet/:id" do
 603     setup [:valid_user]
 604
 605     test "without valid credentials", %{conn: conn} do
 606       note_activity = insert(:note_activity)
 607       conn = post(conn, "/api/statuses/unretweet/#{note_activity.id}.json")
 608       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 609     end
 610
 611     test "with credentials", %{conn: conn, user: current_user} do
 612       note_activity = insert(:note_activity)
 613
 614       request_path = "/api/statuses/retweet/#{note_activity.id}.json"
 615
 616       _response =
 617         conn
 618         |> with_credentials(current_user.nickname, "test")
 619         |> post(request_path)
 620
 621       request_path = String.replace(request_path, "retweet", "unretweet")
 622
 623       response =
 624         conn
 625         |> with_credentials(current_user.nickname, "test")
 626         |> post(request_path)
 627
 628       activity = Repo.get(Activity, note_activity.id)
 629       activity_user = Repo.get_by(User, ap_id: note_activity.data["actor"])
 630
 631       assert json_response(response, 200) ==
 632                ActivityRepresenter.to_map(activity, %{user: activity_user, for: current_user})
 633     end
 634   end
 635
 636   describe "POST /api/account/register" do
 637     test "it creates a new user", %{conn: conn} do
 638       data = %{
 639         "nickname" => "lain",
 640         "email" => "lain@wired.jp",
 641         "fullname" => "lain iwakura",
 642         "bio" => "close the world.",
 643         "password" => "bear",
 644         "confirm" => "bear"
 645       }
 646
 647       conn =
 648         conn
 649         |> post("/api/account/register", data)
 650
 651       user = json_response(conn, 200)
 652
 653       fetched_user = Repo.get_by(User, nickname: "lain")
 654       assert user == UserView.render("show.json", %{user: fetched_user})
 655     end
 656
 657     test "it returns errors on a problem", %{conn: conn} do
 658       data = %{
 659         "email" => "lain@wired.jp",
 660         "fullname" => "lain iwakura",
 661         "bio" => "close the world.",
 662         "password" => "bear",
 663         "confirm" => "bear"
 664       }
 665
 666       conn =
 667         conn
 668         |> post("/api/account/register", data)
 669
 670       errors = json_response(conn, 400)
 671
 672       assert is_binary(errors["error"])
 673     end
 674   end
 675
 676   describe "GET /api/externalprofile/show" do
 677     test "it returns the user", %{conn: conn} do
 678       user = insert(:user)
 679       other_user = insert(:user)
 680
 681       conn =
 682         conn
 683         |> assign(:user, user)
 684         |> get("/api/externalprofile/show", %{profileurl: other_user.ap_id})
 685
 686       assert json_response(conn, 200) == UserView.render("show.json", %{user: other_user})
 687     end
 688   end
 689
 690   describe "GET /api/statuses/followers" do
 691     test "it returns a user's followers", %{conn: conn} do
 692       user = insert(:user)
 693       follower_one = insert(:user)
 694       follower_two = insert(:user)
 695       _not_follower = insert(:user)
 696
 697       {:ok, follower_one} = User.follow(follower_one, user)
 698       {:ok, follower_two} = User.follow(follower_two, user)
 699
 700       conn =
 701         conn
 702         |> assign(:user, user)
 703         |> get("/api/statuses/followers")
 704
 705       expected = UserView.render("index.json", %{users: [follower_one, follower_two], for: user})
 706       result = json_response(conn, 200)
 707       assert Enum.sort(expected) == Enum.sort(result)
 708     end
 709   end
 710
 711   describe "GET /api/statuses/friends" do
 712     test "it returns the logged in user's friends", %{conn: conn} do
 713       user = insert(:user)
 714       followed_one = insert(:user)
 715       followed_two = insert(:user)
 716       _not_followed = insert(:user)
 717
 718       {:ok, user} = User.follow(user, followed_one)
 719       {:ok, user} = User.follow(user, followed_two)
 720
 721       conn =
 722         conn
 723         |> assign(:user, user)
 724         |> get("/api/statuses/friends")
 725
 726       expected = UserView.render("index.json", %{users: [followed_one, followed_two], for: user})
 727       result = json_response(conn, 200)
 728       assert Enum.sort(expected) == Enum.sort(result)
 729     end
 730
 731     test "it returns a given user's friends with user_id", %{conn: conn} do
 732       user = insert(:user)
 733       followed_one = insert(:user)
 734       followed_two = insert(:user)
 735       _not_followed = insert(:user)
 736
 737       {:ok, user} = User.follow(user, followed_one)
 738       {:ok, user} = User.follow(user, followed_two)
 739
 740       conn =
 741         conn
 742         |> assign(:user, user)
 743         |> get("/api/statuses/friends", %{"user_id" => user.id})
 744
 745       assert MapSet.equal?(
 746                MapSet.new(json_response(conn, 200)),
 747                MapSet.new(
 748                  UserView.render("index.json", %{users: [followed_one, followed_two], for: user})
 749                )
 750              )
 751     end
 752
 753     test "it returns a given user's friends with screen_name", %{conn: conn} do
 754       user = insert(:user)
 755       followed_one = insert(:user)
 756       followed_two = insert(:user)
 757       _not_followed = insert(:user)
 758
 759       {:ok, user} = User.follow(user, followed_one)
 760       {:ok, user} = User.follow(user, followed_two)
 761
 762       conn =
 763         conn
 764         |> assign(:user, user)
 765         |> get("/api/statuses/friends", %{"screen_name" => user.nickname})
 766
 767       assert MapSet.equal?(
 768                MapSet.new(json_response(conn, 200)),
 769                MapSet.new(
 770                  UserView.render("index.json", %{users: [followed_one, followed_two], for: user})
 771                )
 772              )
 773     end
 774   end
 775
 776   describe "GET /friends/ids" do
 777     test "it returns a user's friends", %{conn: conn} do
 778       user = insert(:user)
 779       followed_one = insert(:user)
 780       followed_two = insert(:user)
 781       _not_followed = insert(:user)
 782
 783       {:ok, user} = User.follow(user, followed_one)
 784       {:ok, user} = User.follow(user, followed_two)
 785
 786       conn =
 787         conn
 788         |> assign(:user, user)
 789         |> get("/api/friends/ids")
 790
 791       expected = [followed_one.id, followed_two.id]
 792
 793       assert MapSet.equal?(
 794                MapSet.new(Poison.decode!(json_response(conn, 200))),
 795                MapSet.new(expected)
 796              )
 797     end
 798   end
 799
 800   describe "POST /api/account/update_profile.json" do
 801     test "it updates a user's profile", %{conn: conn} do
 802       user = insert(:user)
 803
 804       conn =
 805         conn
 806         |> assign(:user, user)
 807         |> post("/api/account/update_profile.json", %{
 808           "name" => "new name",
 809           "description" => "new description"
 810         })
 811
 812       user = Repo.get!(User, user.id)
 813       assert user.name == "new name"
 814       assert user.bio == "new description"
 815
 816       assert json_response(conn, 200) == UserView.render("user.json", %{user: user, for: user})
 817     end
 818
 819     test "it locks an account", %{conn: conn} do
 820       user = insert(:user)
 821
 822       conn =
 823         conn
 824         |> assign(:user, user)
 825         |> post("/api/account/update_profile.json", %{
 826           "locked" => "true"
 827         })
 828
 829       user = Repo.get!(User, user.id)
 830       assert user.info["locked"] == true
 831
 832       assert json_response(conn, 200) == UserView.render("user.json", %{user: user, for: user})
 833     end
 834
 835     test "it unlocks an account", %{conn: conn} do
 836       user = insert(:user)
 837
 838       conn =
 839         conn
 840         |> assign(:user, user)
 841         |> post("/api/account/update_profile.json", %{
 842           "locked" => "false"
 843         })
 844
 845       user = Repo.get!(User, user.id)
 846       assert user.info["locked"] == false
 847
 848       assert json_response(conn, 200) == UserView.render("user.json", %{user: user, for: user})
 849     end
 850   end
 851
 852   defp valid_user(_context) do
 853     user = insert(:user)
 854     [user: user]
 855   end
 856
 857   defp with_credentials(conn, username, password) do
 858     header_content = "Basic " <> Base.encode64("#{username}:#{password}")
 859     put_req_header(conn, "authorization", header_content)
 860   end
 861
 862   describe "GET /api/search.json" do
 863     test "it returns search results", %{conn: conn} do
 864       user = insert(:user)
 865       user_two = insert(:user, %{nickname: "shp@shitposter.club"})
 866
 867       {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about 2hu"})
 868       {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
 869
 870       conn =
 871         conn
 872         |> get("/api/search.json", %{"q" => "2hu", "page" => "1", "rpp" => "1"})
 873
 874       assert [status] = json_response(conn, 200)
 875       assert status["id"] == activity.id
 876     end
 877   end
 878
 879   describe "GET /api/statusnet/tags/timeline/:tag.json" do
 880     test "it returns the tags timeline", %{conn: conn} do
 881       user = insert(:user)
 882       user_two = insert(:user, %{nickname: "shp@shitposter.club"})
 883
 884       {:ok, activity} = CommonAPI.post(user, %{"status" => "This is about #2hu"})
 885       {:ok, _} = CommonAPI.post(user_two, %{"status" => "This isn't"})
 886
 887       conn =
 888         conn
 889         |> get("/api/statusnet/tags/timeline/2hu.json")
 890
 891       assert [status] = json_response(conn, 200)
 892       assert status["id"] == activity.id
 893     end
 894   end
 895
 896   test "Convert newlines to <br> in bio", %{conn: conn} do
 897     user = insert(:user)
 898
 899     _conn =
 900       conn
 901       |> assign(:user, user)
 902       |> post("/api/account/update_profile.json", %{
 903         "description" => "Hello,\r\nWorld! I\n am a test."
 904       })
 905
 906     user = Repo.get!(User, user.id)
 907     assert user.bio == "Hello,<br>World! I<br> am a test."
 908   end
 909
 910   describe "POST /api/pleroma/change_password" do
 911     setup [:valid_user]
 912
 913     test "without credentials", %{conn: conn} do
 914       conn = post(conn, "/api/pleroma/change_password")
 915       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 916     end
 917
 918     test "with credentials and invalid password", %{conn: conn, user: current_user} do
 919       conn =
 920         conn
 921         |> with_credentials(current_user.nickname, "test")
 922         |> post("/api/pleroma/change_password", %{
 923           "password" => "hi",
 924           "new_password" => "newpass",
 925           "new_password_confirmation" => "newpass"
 926         })
 927
 928       assert json_response(conn, 200) == %{"error" => "Invalid password."}
 929     end
 930
 931     test "with credentials, valid password and new password and confirmation not matching", %{
 932       conn: conn,
 933       user: current_user
 934     } do
 935       conn =
 936         conn
 937         |> with_credentials(current_user.nickname, "test")
 938         |> post("/api/pleroma/change_password", %{
 939           "password" => "test",
 940           "new_password" => "newpass",
 941           "new_password_confirmation" => "notnewpass"
 942         })
 943
 944       assert json_response(conn, 200) == %{
 945                "error" => "New password does not match confirmation."
 946              }
 947     end
 948
 949     test "with credentials, valid password and invalid new password", %{
 950       conn: conn,
 951       user: current_user
 952     } do
 953       conn =
 954         conn
 955         |> with_credentials(current_user.nickname, "test")
 956         |> post("/api/pleroma/change_password", %{
 957           "password" => "test",
 958           "new_password" => "",
 959           "new_password_confirmation" => ""
 960         })
 961
 962       assert json_response(conn, 200) == %{
 963                "error" => "New password can't be blank."
 964              }
 965     end
 966
 967     test "with credentials, valid password and matching new password and confirmation", %{
 968       conn: conn,
 969       user: current_user
 970     } do
 971       conn =
 972         conn
 973         |> with_credentials(current_user.nickname, "test")
 974         |> post("/api/pleroma/change_password", %{
 975           "password" => "test",
 976           "new_password" => "newpass",
 977           "new_password_confirmation" => "newpass"
 978         })
 979
 980       assert json_response(conn, 200) == %{"status" => "success"}
 981       fetched_user = Repo.get(User, current_user.id)
 982       assert Pbkdf2.checkpw("newpass", fetched_user.password_hash) == true
 983     end
 984   end
 985
 986   describe "POST /api/pleroma/delete_account" do
 987     setup [:valid_user]
 988
 989     test "without credentials", %{conn: conn} do
 990       conn = post(conn, "/api/pleroma/delete_account")
 991       assert json_response(conn, 403) == %{"error" => "Invalid credentials."}
 992     end
 993
 994     test "with credentials and invalid password", %{conn: conn, user: current_user} do
 995       conn =
 996         conn
 997         |> with_credentials(current_user.nickname, "test")
 998         |> post("/api/pleroma/delete_account", %{"password" => "hi"})
 999
1000       assert json_response(conn, 200) == %{"error" => "Invalid password."}
1001     end
1002
1003     test "with credentials and valid password", %{conn: conn, user: current_user} do
1004       conn =
1005         conn
1006         |> with_credentials(current_user.nickname, "test")
1007         |> post("/api/pleroma/delete_account", %{"password" => "test"})
1008
1009       assert json_response(conn, 200) == %{"status" => "success"}
1010       # Wait a second for the started task to end
1011       :timer.sleep(1000)
1012     end
1013   end
1014
1015   describe "GET /api/pleroma/friend_requests" do
1016     test "it lists friend requests" do
1017       user = insert(:user, %{info: %{"locked" => true}})
1018       other_user = insert(:user)
1019
1020       {:ok, activity} = ActivityPub.follow(other_user, user)
1021
1022       user = Repo.get(User, user.id)
1023       other_user = Repo.get(User, other_user.id)
1024
1025       assert User.following?(other_user, user) == false
1026
1027       conn =
1028         build_conn()
1029         |> assign(:user, user)
1030         |> get("/api/pleroma/friend_requests")
1031
1032       assert [relationship] = json_response(conn, 200)
1033       assert other_user.id == relationship["id"]
1034     end
1035   end
1036
1037   describe "POST /api/pleroma/friendships/approve" do
1038     test "it approves a friend request" do
1039       user = insert(:user, %{info: %{"locked" => true}})
1040       other_user = insert(:user)
1041
1042       {:ok, activity} = ActivityPub.follow(other_user, user)
1043
1044       user = Repo.get(User, user.id)
1045       other_user = Repo.get(User, other_user.id)
1046
1047       assert User.following?(other_user, user) == false
1048
1049       conn =
1050         build_conn()
1051         |> assign(:user, user)
1052         |> post("/api/pleroma/friendships/approve", %{"user_id" => to_string(other_user.id)})
1053
1054       assert relationship = json_response(conn, 200)
1055       assert other_user.id == relationship["id"]
1056       assert relationship["follows_you"] == true
1057     end
1058   end
1059
1060   describe "POST /api/pleroma/friendships/deny" do
1061     test "it denies a friend request" do
1062       user = insert(:user, %{info: %{"locked" => true}})
1063       other_user = insert(:user)
1064
1065       {:ok, activity} = ActivityPub.follow(other_user, user)
1066
1067       user = Repo.get(User, user.id)
1068       other_user = Repo.get(User, other_user.id)
1069
1070       assert User.following?(other_user, user) == false
1071
1072       conn =
1073         build_conn()
1074         |> assign(:user, user)
1075         |> post("/api/pleroma/friendships/deny", %{"user_id" => to_string(other_user.id)})
1076
1077       assert relationship = json_response(conn, 200)
1078       assert other_user.id == relationship["id"]
1079       assert relationship["follows_you"] == false
1080     end
1081   end
1082 end