* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
		
			
				
	
	
		
			31 lines
		
	
	
	
		
			732 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			31 lines
		
	
	
	
		
			732 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| class Api::V1::FollowsController < Api::BaseController
 | |
|   before_action -> { doorkeeper_authorize! :follow, :'write:follows' }
 | |
|   before_action :require_user!
 | |
| 
 | |
|   respond_to :json
 | |
| 
 | |
|   def create
 | |
|     raise ActiveRecord::RecordNotFound if follow_params[:uri].blank?
 | |
| 
 | |
|     @account = FollowService.new.call(current_user.account, target_uri).try(:target_account)
 | |
| 
 | |
|     if @account.nil?
 | |
|       username, domain = target_uri.split('@')
 | |
|       @account         = Account.find_remote!(username, domain)
 | |
|     end
 | |
| 
 | |
|     render json: @account, serializer: REST::AccountSerializer
 | |
|   end
 | |
| 
 | |
|   private
 | |
| 
 | |
|   def target_uri
 | |
|     follow_params[:uri].strip.gsub(/\A@/, '')
 | |
|   end
 | |
| 
 | |
|   def follow_params
 | |
|     params.permit(:uri)
 | |
|   end
 | |
| end
 |