1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586 |
- # frozen_string_literal: true
- class Api::V1::StatusesController < Api::BaseController
- include Authorization
- before_action -> { authorize_if_got_token! :read, :'read:statuses' }, except: [:create, :destroy]
- before_action -> { doorkeeper_authorize! :write, :'write:statuses' }, only: [:create, :destroy]
- before_action :require_user!, except: [:show, :context, :card]
- before_action :set_status, only: [:show, :context, :card]
- respond_to :json
- # This API was originally unlimited, pagination cannot be introduced without
- # breaking backwards-compatibility. Arbitrarily high number to cover most
- # conversations as quasi-unlimited, it would be too much work to render more
- # than this anyway
- CONTEXT_LIMIT = 4_096
- def show
- @status = cache_collection([@status], Status).first
- render json: @status, serializer: REST::StatusSerializer
- end
- def context
- ancestors_results = @status.in_reply_to_id.nil? ? [] : @status.ancestors(CONTEXT_LIMIT, current_account)
- descendants_results = @status.descendants(CONTEXT_LIMIT, current_account)
- loaded_ancestors = cache_collection(ancestors_results, Status)
- loaded_descendants = cache_collection(descendants_results, Status)
- @context = Context.new(ancestors: loaded_ancestors, descendants: loaded_descendants)
- statuses = [@status] + @context.ancestors + @context.descendants
- render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id)
- end
- def card
- @card = @status.preview_cards.first
- if @card.nil?
- render_empty
- else
- render json: @card, serializer: REST::PreviewCardSerializer
- end
- end
- def create
- @status = PostStatusService.new.call(current_user.account,
- status_params[:status],
- status_params[:in_reply_to_id].blank? ? nil : Status.find(status_params[:in_reply_to_id]),
- media_ids: status_params[:media_ids],
- sensitive: status_params[:sensitive],
- spoiler_text: status_params[:spoiler_text],
- visibility: status_params[:visibility],
- application: doorkeeper_token.application,
- idempotency: request.headers['Idempotency-Key'])
- render json: @status, serializer: REST::StatusSerializer
- end
- def destroy
- @status = Status.where(account_id: current_user.account).find(params[:id])
- authorize @status, :destroy?
- RemovalWorker.perform_async(@status.id)
- render_empty
- end
- private
- def set_status
- @status = Status.find(params[:id])
- authorize @status, :show?
- rescue Mastodon::NotPermittedError
- # Reraise in order to get a 404 instead of a 403 error code
- raise ActiveRecord::RecordNotFound
- end
- def status_params
- params.permit(:status, :in_reply_to_id, :sensitive, :spoiler_text, :visibility, media_ids: [])
- end
- def pagination_params(core_params)
- params.slice(:limit).permit(:limit).merge(core_params)
- end
- end
|