parent
e4a241abef
commit
dbda87c31f
@ -1,22 +0,0 @@
|
||||
# frozen_string_literal: true
|
||||
|
||||
class ActivityPub::FollowsController < Api::BaseController
|
||||
include SignatureVerification
|
||||
|
||||
def show
|
||||
render json: follow_request,
|
||||
serializer: ActivityPub::FollowSerializer,
|
||||
adapter: ActivityPub::Adapter,
|
||||
content_type: 'application/activity+json'
|
||||
end
|
||||
|
||||
private
|
||||
|
||||
def follow_request
|
||||
FollowRequest.includes(:account).references(:account).find_by!(
|
||||
id: params.require(:id),
|
||||
accounts: { domain: nil, username: params.require(:account_username) },
|
||||
target_account: signed_request_account
|
||||
)
|
||||
end
|
||||
end
|
@ -1,43 +0,0 @@
|
||||
# frozen_string_literal: true
|
||||
|
||||
require 'rails_helper'
|
||||
|
||||
describe ActivityPub::FollowsController, type: :controller do
|
||||
let(:follow_request) { Fabricate(:follow_request, account: account) }
|
||||
|
||||
render_views
|
||||
|
||||
context 'with local account' do
|
||||
let(:account) { Fabricate(:account, domain: nil) }
|
||||
|
||||
it 'returns follow request' do
|
||||
signed_request = Request.new(:get, account_follow_url(account, follow_request))
|
||||
signed_request.on_behalf_of(follow_request.target_account)
|
||||
request.headers.merge! signed_request.headers
|
||||
|
||||
get :show, params: { id: follow_request, account_username: account.username }
|
||||
|
||||
expect(body_as_json[:id]).to eq ActivityPub::TagManager.instance.uri_for(follow_request)
|
||||
expect(response).to have_http_status :success
|
||||
end
|
||||
|
||||
it 'returns http 404 without signature' do
|
||||
get :show, params: { id: follow_request, account_username: account.username }
|
||||
expect(response).to have_http_status 404
|
||||
end
|
||||
end
|
||||
|
||||
context 'with remote account' do
|
||||
let(:account) { Fabricate(:account, domain: Faker::Internet.domain_name) }
|
||||
|
||||
it 'returns http 404' do
|
||||
signed_request = Request.new(:get, account_follow_url(account, follow_request))
|
||||
signed_request.on_behalf_of(follow_request.target_account)
|
||||
request.headers.merge! signed_request.headers
|
||||
|
||||
get :show, params: { id: follow_request, account_username: account.username }
|
||||
|
||||
expect(response).to have_http_status 404
|
||||
end
|
||||
end
|
||||
end
|
Loading…
Reference in new issue