# frozen_string_literal: true class AnonTag @@namelist = (f = Rails.configuration.x.anon_namelist) ? File.readlines(f).collect(&:strip) : ['Alice', 'Bob', 'Carol', 'Dave'] @@used_name = [] @@map = {} @@last_use = Time.now def self.get_or_generate(pid, note) if Time.now - @@last_use > 1.day @@map = {} @@used_name = [] end @@last_use = Time.now pre = @@map.empty? ? '*' : '' if !@@map[pid] @@map[pid] = (@@namelist - @@used_name).sample() @@used_name.append(@@map[pid]) end @@map[pid].in?(note) ? nil : pre + @@map[pid] end end class Api::V1::StatusesController < Api::BaseController include Authorization before_action -> { authorize_if_got_token! :read, :'read:statuses' }, except: [:create, :destroy] before_action -> { doorkeeper_authorize! :write, :'write:statuses' }, only: [:create, :destroy] before_action :require_user!, except: [:show, :context] before_action :set_status, only: [:show, :context] before_action :set_thread, only: [:create] override_rate_limit_headers :create, family: :statuses # This API was originally unlimited, pagination cannot be introduced without # breaking backwards-compatibility. Arbitrarily high number to cover most # conversations as quasi-unlimited, it would be too much work to render more # than this anyway CONTEXT_LIMIT = 4_096 def show @status = cache_collection([@status], Status).first render json: @status, serializer: REST::StatusSerializer end def context ancestors_results = @status.in_reply_to_id.nil? ? [] : @status.ancestors(CONTEXT_LIMIT, current_account) treeId = Rails.configuration.x.tree_address.split('/')[-1].to_i depth = (@status.id == treeId || (!ancestors_results.empty? && ancestors_results[0].id == treeId)) ? 1 : nil descendants_results = @status.descendants(CONTEXT_LIMIT, current_account, nil, nil, depth) loaded_ancestors = cache_collection(ancestors_results, Status) loaded_descendants = cache_collection(descendants_results, Status) @context = Context.new(ancestors: loaded_ancestors, descendants: loaded_descendants) statuses = [@status] + @context.ancestors + @context.descendants render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id) end def create anon = Rails.configuration.x.anon_acc && status_params[:status].end_with?(Rails.configuration.x.anon_tag) && AnonTag.get_or_generate(current_user.account_id, Account.find(Rails.configuration.x.anon_acc).note) sender = anon ? Account.find(Rails.configuration.x.anon_acc) : current_user.account st_text = anon ? ("[#{anon}]:\n#{status_params[:status]}"[0..5000]) : status_params[:status] @status = PostStatusService.new.call(sender, text: st_text, thread: @thread, media_ids: status_params[:media_ids], sensitive: status_params[:sensitive], spoiler_text: status_params[:spoiler_text], visibility: status_params[:visibility], scheduled_at: status_params[:scheduled_at], application: doorkeeper_token.application, poll: status_params[:poll], idempotency: request.headers['Idempotency-Key'], with_rate_limit: true) render json: @status, serializer: @status.is_a?(ScheduledStatus) ? REST::ScheduledStatusSerializer : REST::StatusSerializer end def destroy @status = Status.where(account_id: current_user.account).find(params[:id]) authorize @status, :destroy? @status.discard RemovalWorker.perform_async(@status.id, redraft: true) render json: @status, serializer: REST::StatusSerializer, source_requested: true end private def set_status @status = Status.find(params[:id]) authorize @status, :show? rescue Mastodon::NotPermittedError not_found end def set_thread @thread = status_params[:in_reply_to_id].blank? ? nil : Status.find(status_params[:in_reply_to_id]) rescue ActiveRecord::RecordNotFound render json: { error: I18n.t('statuses.errors.in_reply_not_found') }, status: 404 end def status_params params.permit( :status, :in_reply_to_id, :sensitive, :spoiler_text, :visibility, :scheduled_at, media_ids: [], poll: [ :multiple, :hide_totals, :expires_in, options: [], ] ) end def pagination_params(core_params) params.slice(:limit).permit(:limit).merge(core_params) end end