06a0cf4278
This is more intuitive for users. On the flip side, this makes the API more confusing since now min_id/max_id no longer correspond to ids returned in the response and only link headers can be used to traverse all response pages. However, Mastodon already does this according to its documentation, so clients should already handle this well. The only other usage of get_follow_requests_query is only interested in the total count of requests (from active users), thus changing its select part is safe. Also gets rid of (outside tests unused) User.get_follow_requests. Fixes: https://akkoma.dev/AkkomaGang/akkoma/issues/380
71 lines
2.3 KiB
Elixir
71 lines
2.3 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Web.MastodonAPI.FollowRequestController do
|
|
use Pleroma.Web, :controller
|
|
|
|
import Pleroma.Web.ControllerHelper,
|
|
only: [add_link_headers: 2]
|
|
|
|
alias Pleroma.FollowingRelationship
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.CommonAPI
|
|
alias Pleroma.Web.Plugs.OAuthScopesPlug
|
|
alias Pleroma.Pagination
|
|
|
|
plug(Pleroma.Web.ApiSpec.CastAndValidate)
|
|
plug(:assign_follower when action != :index)
|
|
|
|
action_fallback(:errors)
|
|
|
|
plug(OAuthScopesPlug, %{scopes: ["follow", "read:follows"]} when action == :index)
|
|
|
|
plug(
|
|
OAuthScopesPlug,
|
|
%{scopes: ["follow", "write:follows"]} when action != :index
|
|
)
|
|
|
|
defdelegate open_api_operation(action), to: Pleroma.Web.ApiSpec.FollowRequestOperation
|
|
|
|
@doc "GET /api/v1/follow_requests"
|
|
def index(%{assigns: %{user: followed}} = conn, params) do
|
|
follow_requests =
|
|
followed
|
|
|> FollowingRelationship.get_follow_requesting_users_with_request_id()
|
|
|> Pagination.fetch_paginated(params, :keyset)
|
|
|
|
requesting_users = Pagination.unwrap(follow_requests)
|
|
|
|
conn
|
|
|> add_link_headers(follow_requests)
|
|
|> render("index.json", for: followed, users: requesting_users, as: :user)
|
|
end
|
|
|
|
@doc "POST /api/v1/follow_requests/:id/authorize"
|
|
def authorize(%{assigns: %{user: followed, follower: follower}} = conn, _params) do
|
|
with {:ok, follower} <- CommonAPI.accept_follow_request(follower, followed) do
|
|
render(conn, "relationship.json", user: followed, target: follower)
|
|
end
|
|
end
|
|
|
|
@doc "POST /api/v1/follow_requests/:id/reject"
|
|
def reject(%{assigns: %{user: followed, follower: follower}} = conn, _params) do
|
|
with {:ok, follower} <- CommonAPI.reject_follow_request(follower, followed) do
|
|
render(conn, "relationship.json", user: followed, target: follower)
|
|
end
|
|
end
|
|
|
|
defp assign_follower(%{params: %{id: id}} = conn, _) do
|
|
case User.get_cached_by_id(id) do
|
|
%User{} = follower -> assign(conn, :follower, follower)
|
|
nil -> Pleroma.Web.MastodonAPI.FallbackController.call(conn, {:error, :not_found}) |> halt()
|
|
end
|
|
end
|
|
|
|
defp errors(conn, {:error, message}) do
|
|
conn
|
|
|> put_status(:forbidden)
|
|
|> json(%{error: message})
|
|
end
|
|
end
|