 2ab9499258
			
		
	
	
		2ab9499258
		
	
	
	
	
		
			
			Transforming scopes is no longer necessary since we are dropping support for accessing admin api without `admin:` prefix in scopes.
		
			
				
	
	
		
			114 lines
		
	
	
	
		
			3.2 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
			
		
		
	
	
			114 lines
		
	
	
	
		
			3.2 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
| # Pleroma: A lightweight social networking server
 | |
| # Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
 | |
| # SPDX-License-Identifier: AGPL-3.0-only
 | |
| 
 | |
| defmodule Pleroma.Web.AdminAPI.ReportController do
 | |
|   use Pleroma.Web, :controller
 | |
| 
 | |
|   import Pleroma.Web.ControllerHelper, only: [json_response: 3]
 | |
| 
 | |
|   alias Pleroma.Activity
 | |
|   alias Pleroma.ModerationLog
 | |
|   alias Pleroma.ReportNote
 | |
|   alias Pleroma.Web.ActivityPub.Utils
 | |
|   alias Pleroma.Web.AdminAPI
 | |
|   alias Pleroma.Web.AdminAPI.Report
 | |
|   alias Pleroma.Web.CommonAPI
 | |
|   alias Pleroma.Web.Plugs.OAuthScopesPlug
 | |
| 
 | |
|   require Logger
 | |
| 
 | |
|   plug(Pleroma.Web.ApiSpec.CastAndValidate)
 | |
|   plug(OAuthScopesPlug, %{scopes: ["admin:read:reports"]} when action in [:index, :show])
 | |
| 
 | |
|   plug(
 | |
|     OAuthScopesPlug,
 | |
|     %{scopes: ["admin:write:reports"]}
 | |
|     when action in [:update, :notes_create, :notes_delete]
 | |
|   )
 | |
| 
 | |
|   action_fallback(AdminAPI.FallbackController)
 | |
| 
 | |
|   defdelegate open_api_operation(action), to: Pleroma.Web.ApiSpec.Admin.ReportOperation
 | |
| 
 | |
|   def index(conn, params) do
 | |
|     reports = Utils.get_reports(params, params.page, params.page_size)
 | |
| 
 | |
|     render(conn, "index.json", reports: reports)
 | |
|   end
 | |
| 
 | |
|   def show(conn, %{id: id}) do
 | |
|     with %Activity{} = report <- Activity.get_report(id) do
 | |
|       render(conn, "show.json", Report.extract_report_info(report))
 | |
|     else
 | |
|       _ -> {:error, :not_found}
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   def update(%{assigns: %{user: admin}, body_params: %{reports: reports}} = conn, _) do
 | |
|     result =
 | |
|       Enum.map(reports, fn report ->
 | |
|         case CommonAPI.update_report_state(report.id, report.state) do
 | |
|           {:ok, activity} ->
 | |
|             report = Activity.get_by_id_with_user_actor(activity.id)
 | |
| 
 | |
|             ModerationLog.insert_log(%{
 | |
|               action: "report_update",
 | |
|               actor: admin,
 | |
|               subject: activity,
 | |
|               subject_actor: report.user_actor
 | |
|             })
 | |
| 
 | |
|             activity
 | |
| 
 | |
|           {:error, message} ->
 | |
|             %{id: report.id, error: message}
 | |
|         end
 | |
|       end)
 | |
| 
 | |
|     if Enum.any?(result, &Map.has_key?(&1, :error)) do
 | |
|       json_response(conn, :bad_request, result)
 | |
|     else
 | |
|       json_response(conn, :no_content, "")
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   def notes_create(%{assigns: %{user: user}, body_params: %{content: content}} = conn, %{
 | |
|         id: report_id
 | |
|       }) do
 | |
|     with {:ok, _} <- ReportNote.create(user.id, report_id, content),
 | |
|          report <- Activity.get_by_id_with_user_actor(report_id) do
 | |
|       ModerationLog.insert_log(%{
 | |
|         action: "report_note",
 | |
|         actor: user,
 | |
|         subject: report,
 | |
|         subject_actor: report.user_actor,
 | |
|         text: content
 | |
|       })
 | |
| 
 | |
|       json_response(conn, :no_content, "")
 | |
|     else
 | |
|       _ -> json_response(conn, :bad_request, "")
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   def notes_delete(%{assigns: %{user: user}} = conn, %{
 | |
|         id: note_id,
 | |
|         report_id: report_id
 | |
|       }) do
 | |
|     with {:ok, note} <- ReportNote.destroy(note_id),
 | |
|          report <- Activity.get_by_id_with_user_actor(report_id) do
 | |
|       ModerationLog.insert_log(%{
 | |
|         action: "report_note_delete",
 | |
|         actor: user,
 | |
|         subject: report,
 | |
|         subject_actor: report.user_actor,
 | |
|         text: note.content
 | |
|       })
 | |
| 
 | |
|       json_response(conn, :no_content, "")
 | |
|     else
 | |
|       _ -> json_response(conn, :bad_request, "")
 | |
|     end
 | |
|   end
 | |
| end
 |