112 lines
3.7 KiB
Elixir
112 lines
3.7 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Web.TwitterAPI.RemoteFollowController do
|
|
use Pleroma.Web, :controller
|
|
|
|
require Logger
|
|
|
|
alias Pleroma.Activity
|
|
alias Pleroma.Object.Fetcher
|
|
alias Pleroma.Plugs.OAuthScopesPlug
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.Auth.Authenticator
|
|
alias Pleroma.Web.CommonAPI
|
|
|
|
@status_types ["Article", "Event", "Note", "Video", "Page", "Question"]
|
|
|
|
# Note: follower can submit the form (with password auth) not being signed in (having no token)
|
|
plug(
|
|
OAuthScopesPlug,
|
|
%{fallback: :proceed_unauthenticated, scopes: ["follow", "write:follows"]}
|
|
when action in [:do_follow]
|
|
)
|
|
|
|
# GET /ostatus_subscribe
|
|
#
|
|
def follow(%{assigns: %{user: user}} = conn, %{"acct" => acct}) do
|
|
case is_status?(acct) do
|
|
true -> follow_status(conn, user, acct)
|
|
_ -> follow_account(conn, user, acct)
|
|
end
|
|
end
|
|
|
|
defp follow_status(conn, _user, acct) do
|
|
with {:ok, object} <- Fetcher.fetch_object_from_id(acct),
|
|
%Activity{id: activity_id} <- Activity.get_create_by_object_ap_id(object.data["id"]) do
|
|
redirect(conn, to: o_status_path(conn, :notice, activity_id))
|
|
else
|
|
error ->
|
|
handle_follow_error(conn, error)
|
|
end
|
|
end
|
|
|
|
defp follow_account(conn, user, acct) do
|
|
with {:ok, followee} <- User.get_or_fetch(acct) do
|
|
render(conn, follow_template(user), %{error: false, followee: followee, acct: acct})
|
|
else
|
|
{:error, _reason} ->
|
|
render(conn, follow_template(user), %{error: :error})
|
|
end
|
|
end
|
|
|
|
defp follow_template(%User{} = _user), do: "follow.html"
|
|
defp follow_template(_), do: "follow_login.html"
|
|
|
|
defp is_status?(acct) do
|
|
case Fetcher.fetch_and_contain_remote_object_from_id(acct) do
|
|
{:ok, %{"type" => type}} when type in @status_types ->
|
|
true
|
|
|
|
_ ->
|
|
false
|
|
end
|
|
end
|
|
|
|
# POST /ostatus_subscribe
|
|
#
|
|
def do_follow(%{assigns: %{user: %User{} = user}} = conn, %{"user" => %{"id" => id}}) do
|
|
with {:fetch_user, %User{} = followee} <- {:fetch_user, User.get_cached_by_id(id)},
|
|
{:ok, _, _, _} <- CommonAPI.follow(user, followee) do
|
|
render(conn, "followed.html", %{error: false})
|
|
else
|
|
error ->
|
|
handle_follow_error(conn, error)
|
|
end
|
|
end
|
|
|
|
def do_follow(conn, %{"authorization" => %{"name" => _, "password" => _, "id" => id}}) do
|
|
with {:fetch_user, %User{} = followee} <- {:fetch_user, User.get_cached_by_id(id)},
|
|
{_, {:ok, user}, _} <- {:auth, Authenticator.get_user(conn), followee},
|
|
{:ok, _, _, _} <- CommonAPI.follow(user, followee) do
|
|
render(conn, "followed.html", %{error: false})
|
|
else
|
|
error ->
|
|
handle_follow_error(conn, error)
|
|
end
|
|
end
|
|
|
|
def do_follow(%{assigns: %{user: nil}} = conn, _) do
|
|
Logger.debug("Insufficient permissions: follow | write:follows.")
|
|
render(conn, "followed.html", %{error: "Insufficient permissions: follow | write:follows."})
|
|
end
|
|
|
|
defp handle_follow_error(conn, {:auth, _, followee} = _) do
|
|
render(conn, "follow_login.html", %{error: "Wrong username or password", followee: followee})
|
|
end
|
|
|
|
defp handle_follow_error(conn, {:fetch_user, error} = _) do
|
|
Logger.debug("Remote follow failed with error #{inspect(error)}")
|
|
render(conn, "followed.html", %{error: "Could not find user"})
|
|
end
|
|
|
|
defp handle_follow_error(conn, {:error, "Could not follow user:" <> _} = _) do
|
|
render(conn, "followed.html", %{error: "Error following account"})
|
|
end
|
|
|
|
defp handle_follow_error(conn, error) do
|
|
Logger.debug("Remote follow failed with error #{inspect(error)}")
|
|
render(conn, "followed.html", %{error: "Something went wrong."})
|
|
end
|
|
end
|