561e1f2470
Pulled from https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3721. This makes backups require its own scope (`read:backups`) instead of the `read:accounts` scope. Co-authored-by: Tusooa Zhu <tusooa@kazv.moe> Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/218 Co-authored-by: Norm <normandy@biribiri.dev> Co-committed-by: Norm <normandy@biribiri.dev>
28 lines
950 B
Elixir
28 lines
950 B
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Web.PleromaAPI.BackupController do
|
|
use Pleroma.Web, :controller
|
|
|
|
alias Pleroma.User.Backup
|
|
alias Pleroma.Web.Plugs.OAuthScopesPlug
|
|
|
|
action_fallback(Pleroma.Web.MastodonAPI.FallbackController)
|
|
plug(OAuthScopesPlug, %{scopes: ["read:backups"]} when action in [:index, :create])
|
|
plug(Pleroma.Web.ApiSpec.CastAndValidate)
|
|
|
|
defdelegate open_api_operation(action), to: Pleroma.Web.ApiSpec.PleromaBackupOperation
|
|
|
|
def index(%{assigns: %{user: user}} = conn, _params) do
|
|
backups = Backup.list(user)
|
|
render(conn, "index.json", backups: backups)
|
|
end
|
|
|
|
def create(%{assigns: %{user: user}} = conn, _params) do
|
|
with {:ok, _} <- Backup.create(user) do
|
|
backups = Backup.list(user)
|
|
render(conn, "index.json", backups: backups)
|
|
end
|
|
end
|
|
end
|