33ea1c9008
* Fix Sidekiq warnings about JSON serialization This occurs on every symbol argument we pass, and every symbol key in hashes, because Sidekiq expects strings instead. See https://github.com/mperham/sidekiq/pull/5071 We do not need to change how workers parse their arguments because this has not changed and we were already converting to symbols adequately or using `with_indifferent_access`. * Set Sidekiq to raise on unsafe arguments in test mode In order to more easily catch issues that would produce warnings in production code.
101 lines
3.8 KiB
Ruby
101 lines
3.8 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Api::V1::StatusesController < Api::BaseController
|
|
include Authorization
|
|
|
|
before_action -> { authorize_if_got_token! :read, :'read:statuses' }, except: [:create, :destroy]
|
|
before_action -> { doorkeeper_authorize! :write, :'write:statuses' }, only: [:create, :destroy]
|
|
before_action :require_user!, except: [:show, :context]
|
|
before_action :set_status, only: [:show, :context]
|
|
before_action :set_thread, only: [:create]
|
|
|
|
override_rate_limit_headers :create, family: :statuses
|
|
|
|
# This API was originally unlimited, pagination cannot be introduced without
|
|
# breaking backwards-compatibility. Arbitrarily high number to cover most
|
|
# conversations as quasi-unlimited, it would be too much work to render more
|
|
# than this anyway
|
|
CONTEXT_LIMIT = 4_096
|
|
|
|
def show
|
|
@status = cache_collection([@status], Status).first
|
|
render json: @status, serializer: REST::StatusSerializer
|
|
end
|
|
|
|
def context
|
|
ancestors_results = @status.in_reply_to_id.nil? ? [] : @status.ancestors(CONTEXT_LIMIT, current_account)
|
|
descendants_results = @status.descendants(CONTEXT_LIMIT, current_account)
|
|
loaded_ancestors = cache_collection(ancestors_results, Status)
|
|
loaded_descendants = cache_collection(descendants_results, Status)
|
|
|
|
@context = Context.new(ancestors: loaded_ancestors, descendants: loaded_descendants)
|
|
statuses = [@status] + @context.ancestors + @context.descendants
|
|
|
|
render json: @context, serializer: REST::ContextSerializer, relationships: StatusRelationshipsPresenter.new(statuses, current_user&.account_id)
|
|
end
|
|
|
|
def create
|
|
@status = PostStatusService.new.call(current_user.account,
|
|
text: status_params[:status],
|
|
thread: @thread,
|
|
media_ids: status_params[:media_ids],
|
|
sensitive: status_params[:sensitive],
|
|
spoiler_text: status_params[:spoiler_text],
|
|
visibility: status_params[:visibility],
|
|
scheduled_at: status_params[:scheduled_at],
|
|
application: doorkeeper_token.application,
|
|
poll: status_params[:poll],
|
|
idempotency: request.headers['Idempotency-Key'],
|
|
with_rate_limit: true)
|
|
|
|
render json: @status, serializer: @status.is_a?(ScheduledStatus) ? REST::ScheduledStatusSerializer : REST::StatusSerializer
|
|
end
|
|
|
|
def destroy
|
|
@status = Status.where(account_id: current_user.account).find(params[:id])
|
|
authorize @status, :destroy?
|
|
|
|
@status.discard
|
|
RemovalWorker.perform_async(@status.id, { 'redraft' => true })
|
|
@status.account.statuses_count = @status.account.statuses_count - 1
|
|
|
|
render json: @status, serializer: REST::StatusSerializer, source_requested: true
|
|
end
|
|
|
|
private
|
|
|
|
def set_status
|
|
@status = Status.find(params[:id])
|
|
authorize @status, :show?
|
|
rescue Mastodon::NotPermittedError
|
|
not_found
|
|
end
|
|
|
|
def set_thread
|
|
@thread = status_params[:in_reply_to_id].blank? ? nil : Status.find(status_params[:in_reply_to_id])
|
|
rescue ActiveRecord::RecordNotFound
|
|
render json: { error: I18n.t('statuses.errors.in_reply_not_found') }, status: 404
|
|
end
|
|
|
|
def status_params
|
|
params.permit(
|
|
:status,
|
|
:in_reply_to_id,
|
|
:sensitive,
|
|
:spoiler_text,
|
|
:visibility,
|
|
:scheduled_at,
|
|
media_ids: [],
|
|
poll: [
|
|
:multiple,
|
|
:hide_totals,
|
|
:expires_in,
|
|
options: [],
|
|
]
|
|
)
|
|
end
|
|
|
|
def pagination_params(core_params)
|
|
params.slice(:limit).permit(:limit).merge(core_params)
|
|
end
|
|
end
|