routes.rb 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526
  1. # frozen_string_literal: true
  2. require 'sidekiq_unique_jobs/web'
  3. require 'sidekiq-scheduler/web'
  4. Sidekiq::Web.set :session_secret, Rails.application.secrets[:secret_key_base]
  5. Rails.application.routes.draw do
  6. root 'home#index'
  7. mount LetterOpenerWeb::Engine, at: 'letter_opener' if Rails.env.development?
  8. health_check_routes
  9. authenticate :user, lambda { |u| u.admin? } do
  10. mount Sidekiq::Web, at: 'sidekiq', as: :sidekiq
  11. mount PgHero::Engine, at: 'pghero', as: :pghero
  12. end
  13. use_doorkeeper do
  14. controllers authorizations: 'oauth/authorizations',
  15. authorized_applications: 'oauth/authorized_applications',
  16. tokens: 'oauth/tokens'
  17. end
  18. get '.well-known/host-meta', to: 'well_known/host_meta#show', as: :host_meta, defaults: { format: 'xml' }
  19. get '.well-known/nodeinfo', to: 'well_known/nodeinfo#index', as: :nodeinfo, defaults: { format: 'json' }
  20. get '.well-known/webfinger', to: 'well_known/webfinger#show', as: :webfinger
  21. get '.well-known/change-password', to: redirect('/auth/edit')
  22. get '.well-known/keybase-proof-config', to: 'well_known/keybase_proof_config#show'
  23. get '/nodeinfo/2.0', to: 'well_known/nodeinfo#show', as: :nodeinfo_schema
  24. get 'manifest', to: 'manifests#show', defaults: { format: 'json' }
  25. get 'intent', to: 'intents#show'
  26. get 'custom.css', to: 'custom_css#show', as: :custom_css
  27. resource :instance_actor, path: 'actor', only: [:show] do
  28. resource :inbox, only: [:create], module: :activitypub
  29. resource :outbox, only: [:show], module: :activitypub
  30. end
  31. devise_scope :user do
  32. get '/invite/:invite_code', to: 'auth/registrations#new', as: :public_invite
  33. namespace :auth do
  34. resource :setup, only: [:show, :update], controller: :setup
  35. resource :challenge, only: [:create], controller: :challenges
  36. get 'sessions/security_key_options', to: 'sessions#webauthn_options'
  37. end
  38. end
  39. devise_for :users, path: 'auth', controllers: {
  40. omniauth_callbacks: 'auth/omniauth_callbacks',
  41. sessions: 'auth/sessions',
  42. registrations: 'auth/registrations',
  43. passwords: 'auth/passwords',
  44. confirmations: 'auth/confirmations',
  45. }
  46. get '/users/:username', to: redirect('/@%{username}'), constraints: lambda { |req| req.format.nil? || req.format.html? }
  47. get '/authorize_follow', to: redirect { |_, request| "/authorize_interaction?#{request.params.to_query}" }
  48. resources :accounts, path: 'users', only: [:show], param: :username do
  49. get :remote_follow, to: 'remote_follow#new'
  50. post :remote_follow, to: 'remote_follow#create'
  51. resources :statuses, only: [:show] do
  52. member do
  53. get :activity
  54. get :embed
  55. end
  56. resources :replies, only: [:index], module: :activitypub
  57. end
  58. resources :followers, only: [:index], controller: :follower_accounts
  59. resources :following, only: [:index], controller: :following_accounts
  60. resource :follow, only: [:create], controller: :account_follow
  61. resource :unfollow, only: [:create], controller: :account_unfollow
  62. resource :outbox, only: [:show], module: :activitypub
  63. resource :inbox, only: [:create], module: :activitypub
  64. resource :claim, only: [:create], module: :activitypub
  65. resources :collections, only: [:show], module: :activitypub
  66. resource :followers_synchronization, only: [:show], module: :activitypub
  67. end
  68. resource :inbox, only: [:create], module: :activitypub
  69. get '/@:username', to: 'accounts#show', as: :short_account
  70. get '/@:username/with_replies', to: 'accounts#show', as: :short_account_with_replies
  71. get '/@:username/media', to: 'accounts#show', as: :short_account_media
  72. get '/@:username/tagged/:tag', to: 'accounts#show', as: :short_account_tag
  73. get '/@:account_username/:id', to: 'statuses#show', as: :short_account_status
  74. get '/@:account_username/:id/embed', to: 'statuses#embed', as: :embed_short_account_status
  75. get '/interact/:id', to: 'remote_interaction#new', as: :remote_interaction
  76. post '/interact/:id', to: 'remote_interaction#create'
  77. get '/explore', to: 'directories#index', as: :explore
  78. get '/explore/:id', to: 'directories#show', as: :explore_hashtag
  79. get '/settings', to: redirect('/settings/profile')
  80. namespace :settings do
  81. resource :profile, only: [:show, :update] do
  82. resources :pictures, only: :destroy
  83. end
  84. get :preferences, to: redirect('/settings/preferences/appearance')
  85. namespace :preferences do
  86. resource :appearance, only: [:show, :update], controller: :appearance
  87. resource :notifications, only: [:show, :update]
  88. resource :other, only: [:show, :update], controller: :other
  89. end
  90. resource :import, only: [:show, :create]
  91. resource :export, only: [:show, :create]
  92. namespace :exports, constraints: { format: :csv } do
  93. resources :follows, only: :index, controller: :following_accounts
  94. resources :blocks, only: :index, controller: :blocked_accounts
  95. resources :mutes, only: :index, controller: :muted_accounts
  96. resources :lists, only: :index, controller: :lists
  97. resources :domain_blocks, only: :index, controller: :blocked_domains
  98. resources :bookmarks, only: :index, controller: :bookmarks
  99. end
  100. resources :two_factor_authentication_methods, only: [:index] do
  101. collection do
  102. post :disable
  103. end
  104. end
  105. resource :otp_authentication, only: [:show, :create], controller: 'two_factor_authentication/otp_authentication'
  106. resources :webauthn_credentials, only: [:index, :new, :create, :destroy],
  107. path: 'security_keys',
  108. controller: 'two_factor_authentication/webauthn_credentials' do
  109. collection do
  110. get :options
  111. end
  112. end
  113. namespace :two_factor_authentication do
  114. resources :recovery_codes, only: [:create]
  115. resource :confirmation, only: [:new, :create]
  116. end
  117. resources :identity_proofs, only: [:index, :new, :create, :destroy]
  118. resources :applications, except: [:edit] do
  119. member do
  120. post :regenerate
  121. end
  122. end
  123. resource :delete, only: [:show, :destroy]
  124. resource :migration, only: [:show, :create]
  125. namespace :migration do
  126. resource :redirect, only: [:new, :create, :destroy]
  127. end
  128. resources :aliases, only: [:index, :create, :destroy]
  129. resources :sessions, only: [:destroy]
  130. resources :featured_tags, only: [:index, :create, :destroy]
  131. end
  132. resources :media, only: [:show] do
  133. get :player
  134. end
  135. resources :tags, only: [:show]
  136. resources :emojis, only: [:show]
  137. resources :invites, only: [:index, :create, :destroy]
  138. resources :filters, except: [:show]
  139. resource :relationships, only: [:show, :update]
  140. get '/public', to: 'public_timelines#show', as: :public_timeline
  141. get '/media_proxy/:id/(*any)', to: 'media_proxy#show', as: :media_proxy
  142. resource :authorize_interaction, only: [:show, :create]
  143. resource :share, only: [:show, :create]
  144. namespace :admin do
  145. get '/dashboard', to: 'dashboard#index'
  146. resources :domain_allows, only: [:new, :create, :show, :destroy]
  147. resources :domain_blocks, only: [:new, :create, :show, :destroy, :update, :edit]
  148. resources :email_domain_blocks, only: [:index, :new, :create, :destroy]
  149. resources :action_logs, only: [:index]
  150. resources :warning_presets, except: [:new]
  151. resources :announcements, except: [:show] do
  152. member do
  153. post :publish
  154. post :unpublish
  155. end
  156. end
  157. resource :settings, only: [:edit, :update]
  158. resources :site_uploads, only: [:destroy]
  159. resources :invites, only: [:index, :create, :destroy] do
  160. collection do
  161. post :deactivate_all
  162. end
  163. end
  164. resources :relays, only: [:index, :new, :create, :destroy] do
  165. member do
  166. post :enable
  167. post :disable
  168. end
  169. end
  170. resources :instances, only: [:index, :show], constraints: { id: /[^\/]+/ }
  171. resources :reports, only: [:index, :show] do
  172. member do
  173. post :assign_to_self
  174. post :unassign
  175. post :reopen
  176. post :resolve
  177. end
  178. resources :reported_statuses, only: [:create]
  179. end
  180. resources :report_notes, only: [:create, :destroy]
  181. resources :accounts, only: [:index, :show, :destroy] do
  182. member do
  183. post :enable
  184. post :unsensitive
  185. post :unsilence
  186. post :unsuspend
  187. post :redownload
  188. post :remove_avatar
  189. post :remove_header
  190. post :memorialize
  191. post :approve
  192. post :reject
  193. end
  194. resource :change_email, only: [:show, :update]
  195. resource :reset, only: [:create]
  196. resource :action, only: [:new, :create], controller: 'account_actions'
  197. resources :statuses, only: [:index, :show, :create, :update, :destroy]
  198. resources :relationships, only: [:index]
  199. resource :confirmation, only: [:create] do
  200. collection do
  201. post :resend
  202. end
  203. end
  204. resource :role, only: [] do
  205. member do
  206. post :promote
  207. post :demote
  208. end
  209. end
  210. end
  211. resources :pending_accounts, only: [:index] do
  212. collection do
  213. post :approve_all
  214. post :reject_all
  215. post :batch
  216. end
  217. end
  218. resources :users, only: [] do
  219. resource :two_factor_authentication, only: [:destroy]
  220. end
  221. resources :custom_emojis, only: [:index, :new, :create] do
  222. collection do
  223. post :batch
  224. end
  225. end
  226. resources :ip_blocks, only: [:index, :new, :create] do
  227. collection do
  228. post :batch
  229. end
  230. end
  231. resources :account_moderation_notes, only: [:create, :destroy]
  232. resources :tags, only: [:index, :show, :update] do
  233. collection do
  234. post :approve_all
  235. post :reject_all
  236. post :batch
  237. end
  238. end
  239. end
  240. get '/admin', to: redirect('/admin/dashboard', status: 302)
  241. namespace :api do
  242. # OEmbed
  243. get '/oembed', to: 'oembed#show', as: :oembed
  244. # Identity proofs
  245. get :proofs, to: 'proofs#index'
  246. # JSON / REST API
  247. namespace :v1 do
  248. resources :statuses, only: [:create, :show, :destroy] do
  249. scope module: :statuses do
  250. resources :reblogged_by, controller: :reblogged_by_accounts, only: :index
  251. resources :favourited_by, controller: :favourited_by_accounts, only: :index
  252. resource :reblog, only: :create
  253. post :unreblog, to: 'reblogs#destroy'
  254. resource :favourite, only: :create
  255. post :unfavourite, to: 'favourites#destroy'
  256. resource :bookmark, only: :create
  257. post :unbookmark, to: 'bookmarks#destroy'
  258. resource :mute, only: :create
  259. post :unmute, to: 'mutes#destroy'
  260. resource :pin, only: :create
  261. post :unpin, to: 'pins#destroy'
  262. end
  263. member do
  264. get :context
  265. end
  266. end
  267. namespace :timelines do
  268. resource :home, only: :show, controller: :home
  269. resource :public, only: :show, controller: :public
  270. resources :tag, only: :show
  271. resources :list, only: :show
  272. end
  273. resources :streaming, only: [:index]
  274. resources :custom_emojis, only: [:index]
  275. resources :suggestions, only: [:index, :destroy]
  276. resources :scheduled_statuses, only: [:index, :show, :update, :destroy]
  277. resources :preferences, only: [:index]
  278. resources :announcements, only: [:index] do
  279. scope module: :announcements do
  280. resources :reactions, only: [:update, :destroy]
  281. end
  282. member do
  283. post :dismiss
  284. end
  285. end
  286. # namespace :crypto do
  287. # resources :deliveries, only: :create
  288. # namespace :keys do
  289. # resource :upload, only: [:create]
  290. # resource :query, only: [:create]
  291. # resource :claim, only: [:create]
  292. # resource :count, only: [:show]
  293. # end
  294. # resources :encrypted_messages, only: [:index] do
  295. # collection do
  296. # post :clear
  297. # end
  298. # end
  299. # end
  300. resources :conversations, only: [:index, :destroy] do
  301. member do
  302. post :read
  303. end
  304. end
  305. resources :media, only: [:create, :update, :show]
  306. resources :blocks, only: [:index]
  307. resources :mutes, only: [:index]
  308. resources :favourites, only: [:index]
  309. resources :bookmarks, only: [:index]
  310. resources :reports, only: [:create]
  311. resources :trends, only: [:index]
  312. resources :filters, only: [:index, :create, :show, :update, :destroy]
  313. resources :endorsements, only: [:index]
  314. resources :markers, only: [:index, :create]
  315. namespace :apps do
  316. get :verify_credentials, to: 'credentials#show'
  317. end
  318. resources :apps, only: [:create]
  319. resource :instance, only: [:show] do
  320. resources :peers, only: [:index], controller: 'instances/peers'
  321. resource :activity, only: [:show], controller: 'instances/activity'
  322. end
  323. resource :domain_blocks, only: [:show, :create, :destroy]
  324. resource :directory, only: [:show]
  325. resources :follow_requests, only: [:index] do
  326. member do
  327. post :authorize
  328. post :reject
  329. end
  330. end
  331. resources :notifications, only: [:index, :show] do
  332. collection do
  333. post :clear
  334. end
  335. member do
  336. post :dismiss
  337. end
  338. end
  339. namespace :accounts do
  340. get :verify_credentials, to: 'credentials#show'
  341. patch :update_credentials, to: 'credentials#update'
  342. resource :search, only: :show, controller: :search
  343. resources :relationships, only: :index
  344. end
  345. resources :accounts, only: [:create, :show] do
  346. resources :statuses, only: :index, controller: 'accounts/statuses'
  347. resources :followers, only: :index, controller: 'accounts/follower_accounts'
  348. resources :following, only: :index, controller: 'accounts/following_accounts'
  349. resources :lists, only: :index, controller: 'accounts/lists'
  350. resources :identity_proofs, only: :index, controller: 'accounts/identity_proofs'
  351. resources :featured_tags, only: :index, controller: 'accounts/featured_tags'
  352. member do
  353. post :follow
  354. post :unfollow
  355. post :block
  356. post :unblock
  357. post :mute
  358. post :unmute
  359. end
  360. resource :pin, only: :create, controller: 'accounts/pins'
  361. post :unpin, to: 'accounts/pins#destroy'
  362. resource :note, only: :create, controller: 'accounts/notes'
  363. end
  364. resources :lists, only: [:index, :create, :show, :update, :destroy] do
  365. resource :accounts, only: [:show, :create, :destroy], controller: 'lists/accounts'
  366. end
  367. namespace :featured_tags do
  368. get :suggestions, to: 'suggestions#index'
  369. end
  370. resources :featured_tags, only: [:index, :create, :destroy]
  371. resources :polls, only: [:create, :show] do
  372. resources :votes, only: :create, controller: 'polls/votes'
  373. end
  374. namespace :push do
  375. resource :subscription, only: [:create, :show, :update, :destroy]
  376. end
  377. namespace :admin do
  378. resources :accounts, only: [:index, :show, :destroy] do
  379. member do
  380. post :enable
  381. post :unsensitive
  382. post :unsilence
  383. post :unsuspend
  384. post :approve
  385. post :reject
  386. end
  387. resource :action, only: [:create], controller: 'account_actions'
  388. end
  389. resources :reports, only: [:index, :show] do
  390. member do
  391. post :assign_to_self
  392. post :unassign
  393. post :reopen
  394. post :resolve
  395. end
  396. end
  397. end
  398. end
  399. namespace :v2 do
  400. resources :media, only: [:create]
  401. get '/search', to: 'search#index', as: :search
  402. end
  403. namespace :web do
  404. resource :settings, only: [:update]
  405. resource :embed, only: [:create]
  406. resources :push_subscriptions, only: [:create] do
  407. member do
  408. put :update
  409. end
  410. end
  411. end
  412. end
  413. get '/web/(*any)', to: 'home#index', as: :web
  414. get '/about', to: 'about#show'
  415. get '/about/more', to: 'about#more'
  416. get '/terms', to: 'about#terms'
  417. match '/', via: [:post, :put, :patch, :delete], to: 'application#raise_not_found', format: false
  418. match '*unmatched_route', via: :all, to: 'application#raise_not_found', format: false
  419. end