34fdf77f48
* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
35 lines
976 B
Ruby
35 lines
976 B
Ruby
# frozen_string_literal: true
|
|
|
|
class Api::V1::Statuses::ReblogsController < Api::BaseController
|
|
include Authorization
|
|
|
|
before_action -> { doorkeeper_authorize! :write, :'write:statuses' }
|
|
before_action :require_user!
|
|
|
|
respond_to :json
|
|
|
|
def create
|
|
@status = ReblogService.new.call(current_user.account, status_for_reblog)
|
|
render json: @status, serializer: REST::StatusSerializer
|
|
end
|
|
|
|
def destroy
|
|
@status = status_for_destroy.reblog
|
|
@reblogs_map = { @status.id => false }
|
|
|
|
authorize status_for_destroy, :unreblog?
|
|
RemovalWorker.perform_async(status_for_destroy.id)
|
|
|
|
render json: @status, serializer: REST::StatusSerializer, relationships: StatusRelationshipsPresenter.new([@status], current_user&.account_id, reblogs_map: @reblogs_map)
|
|
end
|
|
|
|
private
|
|
|
|
def status_for_reblog
|
|
Status.find params[:status_id]
|
|
end
|
|
|
|
def status_for_destroy
|
|
current_user.account.statuses.where(reblog_of_id: params[:status_id]).first!
|
|
end
|
|
end
|