You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

105 lines
4.0 KiB

  1. # frozen_string_literal: true
  2. class Api::V1::StatusesController < Api::BaseController
  3. include Authorization
  4. before_action -> { authorize_if_got_token! :read, :'read:statuses' }, except: [:create, :destroy]
  5. before_action -> { doorkeeper_authorize! :write, :'write:statuses' }, only: [:create, :destroy]
  6. before_action :require_user!, except: [:show, :context]
  7. before_action :set_status, only: [:show, :context]
  8. respond_to :json
  9. # This API was originally unlimited, pagination cannot be introduced without
  10. # breaking backwards-compatibility. Arbitrarily high number to cover most
  11. # conversations as quasi-unlimited, it would be too much work to render more
  12. # than this anyway
  13. CONTEXT_LIMIT = 4_096
  14. def show
  15. @status = cache_collection([@status], Status).first
  16. render json: @status, serializer: REST::StatusSerializer
  17. end
  18. def context
  19. ancestors_results = @status.in_reply_to_id.nil? ? [] : @status.ancestors(CONTEXT_LIMIT, current_account)
  20. treeId = ENV['TREE_ADDRESS'].split('/')[-1].to_i
  21. depth = @status.id == treeId ? 1 : ((!ancestors_results.empty? && ancestors_results[0].id == treeId) ? 2 : nil)
  22. descendants_results = @status.descendants(CONTEXT_LIMIT, current_account, nil, nil, depth)
  23. loaded_ancestors = cache_collection(ancestors_results, Status)
  24. loaded_descendants = cache_collection(descendants_results, Status)
  25. @context = Context.new(ancestors: loaded_ancestors, descendants: loaded_descendants)
  26. statuses = [@status] + @context.ancestors + @context.descendants
  27. render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id)
  28. end
  29. def to_cn(n)
  30. "甲乙丙丁戊己庚辛壬癸"[n % 10] + [n % 20873, n % 20899].map{|i| i+0x4e00}.pack('U*')
  31. end
  32. def create
  33. thread = status_params[:in_reply_to_id].blank? ? nil : Status.find(status_params[:in_reply_to_id])
  34. masked = status_params[:status].end_with?('[mask]')
  35. sender = masked ? Account.find_local('mask_bot') : current_account
  36. st_text = masked ? ("$#{to_cn(7919**(current_account.id + 1000 * Time.new.day) % 10000000007)}: " + status_params[:status][0..4900]) : status_params[:status]
  37. @status = PostStatusService.new.call(sender,
  38. text: st_text,
  39. thread: thread,
  40. media_ids: status_params[:media_ids],
  41. sensitive: status_params[:sensitive],
  42. spoiler_text: status_params[:spoiler_text],
  43. visibility: status_params[:visibility],
  44. scheduled_at: status_params[:scheduled_at],
  45. application: doorkeeper_token.application,
  46. poll: status_params[:poll],
  47. idempotency: request.headers['Idempotency-Key'])
  48. render json: @status, serializer: @status.is_a?(ScheduledStatus) ? REST::ScheduledStatusSerializer : REST::StatusSerializer
  49. end
  50. def destroy
  51. @status = Status.where(account_id: current_user.account).find(params[:id])
  52. authorize @status, :destroy?
  53. @status.discard
  54. RemovalWorker.perform_async(@status.id, redraft: true)
  55. render json: @status, serializer: REST::StatusSerializer, source_requested: true
  56. end
  57. private
  58. def set_status
  59. @status = Status.find(params[:id])
  60. authorize @status, :show?
  61. rescue Mastodon::NotPermittedError
  62. raise ActiveRecord::RecordNotFound
  63. end
  64. def status_params
  65. params.permit(
  66. :status,
  67. :in_reply_to_id,
  68. :sensitive,
  69. :spoiler_text,
  70. :visibility,
  71. :scheduled_at,
  72. media_ids: [],
  73. poll: [
  74. :multiple,
  75. :hide_totals,
  76. :expires_in,
  77. options: [],
  78. ]
  79. )
  80. end
  81. def pagination_params(core_params)
  82. params.slice(:limit).permit(:limit).merge(core_params)
  83. end
  84. end