gab-social/app/controllers/api/v1/statuses_controller.rb

138 lines
5.6 KiB
Ruby
Raw Normal View History

2019-07-02 08:10:25 +01:00
# frozen_string_literal: true
class Api::V1::StatusesController < Api::BaseController
include Authorization
2019-08-15 23:05:53 +01:00
before_action -> { authorize_if_got_token! :read, :'read:statuses' }, except: [:create, :update, :destroy]
before_action -> { doorkeeper_authorize! :write, :'write:statuses' }, only: [:create, :update, :destroy]
2020-04-22 06:00:11 +01:00
before_action :require_user!, except: [:show, :comments, :context, :card]
before_action :set_status, only: [:show, :comments, :context, :card, :update, :revisions]
2019-07-02 08:10:25 +01:00
respond_to :json
# This API was originally unlimited, pagination cannot be introduced without
# breaking backwards-compatibility. Arbitrarily high number to cover most
# conversations as quasi-unlimited, it would be too much work to render more
# than this anyway
2020-04-22 06:00:11 +01:00
# : TODO :
CONTEXT_LIMIT = 4_096
2019-07-02 08:10:25 +01:00
def show
@status = cache_collection([@status], Status).first
render json: @status, serializer: REST::StatusSerializer
end
2020-05-04 19:44:37 +01:00
# all desendants
2020-04-22 06:00:11 +01:00
def comments
2020-05-04 19:44:37 +01:00
descendants_results = @status.descendants(CONTEXT_LIMIT, current_account, nil, nil)
2020-04-22 06:00:11 +01:00
loaded_descendants = cache_collection(descendants_results, Status)
@context = Context.new(descendants: loaded_descendants)
statuses = [@status] + @context.descendants
render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id)
end
2019-07-02 08:10:25 +01:00
def context
ancestors_results = @status.in_reply_to_id.nil? ? [] : @status.ancestors(CONTEXT_LIMIT, current_account)
descendants_results = @status.descendants(CONTEXT_LIMIT, current_account)
loaded_ancestors = cache_collection(ancestors_results, Status)
loaded_descendants = cache_collection(descendants_results, Status)
@context = Context.new(ancestors: loaded_ancestors, descendants: loaded_descendants)
statuses = [@status] + @context.ancestors + @context.descendants
render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id)
end
2019-09-17 16:23:51 +01:00
def revisions
@revisions = @status.revisions
2019-07-02 08:10:25 +01:00
2019-09-17 16:23:51 +01:00
render json: @revisions, each_serializer: REST::StatusRevisionSerializer
2019-07-02 08:10:25 +01:00
end
def create
2020-06-17 18:25:10 +01:00
markdown = status_params[:markdown] unless status_params[:markdown] === status_params[:status]
2019-07-02 08:10:25 +01:00
@status = PostStatusService.new.call(current_user.account,
text: status_params[:status],
2020-06-17 18:25:10 +01:00
markdown: markdown,
autoJoinGroup: status_params[:autoJoinGroup],
2019-07-02 08:10:25 +01:00
thread: status_params[:in_reply_to_id].blank? ? nil : Status.find(status_params[:in_reply_to_id]),
media_ids: status_params[:media_ids],
sensitive: status_params[:sensitive],
spoiler_text: status_params[:spoiler_text],
visibility: status_params[:visibility],
scheduled_at: status_params[:scheduled_at],
expires_at: status_params[:expires_at],
2019-07-02 08:10:25 +01:00
application: doorkeeper_token.application,
poll: status_params[:poll],
idempotency: request.headers['Idempotency-Key'],
2019-07-30 01:26:35 +01:00
group_id: status_params[:group_id],
quote_of_id: status_params[:quote_of_id])
2019-07-02 08:10:25 +01:00
render json: @status, serializer: @status.is_a?(ScheduledStatus) ? REST::ScheduledStatusSerializer : REST::StatusSerializer
end
2019-08-15 23:05:53 +01:00
def update
authorize @status, :update?
2020-06-17 18:25:10 +01:00
markdown = status_params[:markdown] unless status_params[:markdown] === status_params[:status]
2019-08-15 23:05:53 +01:00
@status = EditStatusService.new.call(@status,
text: status_params[:status],
2020-06-17 18:25:10 +01:00
markdown: markdown,
2019-08-15 23:05:53 +01:00
media_ids: status_params[:media_ids],
expires_at: status_params[:expires_at],
2019-08-15 23:05:53 +01:00
sensitive: status_params[:sensitive],
spoiler_text: status_params[:spoiler_text],
visibility: status_params[:visibility],
application: doorkeeper_token.application,
idempotency: request.headers['Idempotency-Key'])
render json: @status, serializer: REST::StatusSerializer
end
2019-07-02 08:10:25 +01:00
def destroy
@status = Status.where(account_id: current_user.account).find(params[:id])
authorize @status, :destroy?
RemovalWorker.perform_async(@status.id)
render json: @status, serializer: REST::StatusSerializer, source_requested: true
end
private
def set_status
@status = Status.find(params[:id])
authorize @status, :show?
rescue GabSocial::NotPermittedError
raise ActiveRecord::RecordNotFound
end
def status_params
params.permit(
:status,
2020-04-22 06:00:11 +01:00
:markdown,
:autoJoinGroup,
2019-07-02 08:10:25 +01:00
:in_reply_to_id,
2019-07-30 01:26:35 +01:00
:quote_of_id,
2019-07-02 08:10:25 +01:00
:sensitive,
:spoiler_text,
:visibility,
:scheduled_at,
:expires_at,
2019-07-02 08:10:25 +01:00
:group_id,
media_ids: [],
poll: [
:multiple,
:hide_totals,
:expires_in,
options: [],
],
)
end
def pagination_params(core_params)
params.slice(:limit).permit(:limit).merge(core_params)
end
end