280 lines
		
	
	
	
		
			7.9 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
			
		
		
	
	
			280 lines
		
	
	
	
		
			7.9 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
# Pleroma: A lightweight social networking server
 | 
						|
# Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
 | 
						|
# SPDX-License-Identifier: AGPL-3.0-only
 | 
						|
 | 
						|
defmodule Pleroma.Web.OStatus.OStatusControllerTest do
 | 
						|
  use Pleroma.Web.ConnCase
 | 
						|
 | 
						|
  import Pleroma.Factory
 | 
						|
 | 
						|
  alias Pleroma.Object
 | 
						|
  alias Pleroma.User
 | 
						|
  alias Pleroma.Web.CommonAPI
 | 
						|
 | 
						|
  setup_all do
 | 
						|
    Tesla.Mock.mock_global(fn env -> apply(HttpRequestMock, :request, [env]) end)
 | 
						|
    :ok
 | 
						|
  end
 | 
						|
 | 
						|
  clear_config_all([:instance, :federating]) do
 | 
						|
    Pleroma.Config.put([:instance, :federating], true)
 | 
						|
  end
 | 
						|
 | 
						|
  describe "GET object/2" do
 | 
						|
    test "redirects to /notice/id for html format", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      object = Object.normalize(note_activity)
 | 
						|
      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, object.data["id"]))
 | 
						|
      url = "/objects/#{uuid}"
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "text/html")
 | 
						|
        |> get(url)
 | 
						|
 | 
						|
      assert redirected_to(conn) == "/notice/#{note_activity.id}"
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s on private objects", %{conn: conn} do
 | 
						|
      note_activity = insert(:direct_note_activity)
 | 
						|
      object = Object.normalize(note_activity)
 | 
						|
      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, object.data["id"]))
 | 
						|
 | 
						|
      conn
 | 
						|
      |> get("/objects/#{uuid}")
 | 
						|
      |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s on nonexisting objects", %{conn: conn} do
 | 
						|
      conn
 | 
						|
      |> get("/objects/123")
 | 
						|
      |> response(404)
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  describe "GET activity/2" do
 | 
						|
    test "redirects to /notice/id for html format", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, note_activity.data["id"]))
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "text/html")
 | 
						|
        |> get("/activities/#{uuid}")
 | 
						|
 | 
						|
      assert redirected_to(conn) == "/notice/#{note_activity.id}"
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s on private activities", %{conn: conn} do
 | 
						|
      note_activity = insert(:direct_note_activity)
 | 
						|
      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, note_activity.data["id"]))
 | 
						|
 | 
						|
      conn
 | 
						|
      |> get("/activities/#{uuid}")
 | 
						|
      |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s on nonexistent activities", %{conn: conn} do
 | 
						|
      conn
 | 
						|
      |> get("/activities/123")
 | 
						|
      |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "gets an activity in AS2 format", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, note_activity.data["id"]))
 | 
						|
      url = "/activities/#{uuid}"
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "application/activity+json")
 | 
						|
        |> get(url)
 | 
						|
 | 
						|
      assert json_response(conn, 200)
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  describe "GET notice/2" do
 | 
						|
    test "redirects to a proper object URL when json requested and the object is local", %{
 | 
						|
      conn: conn
 | 
						|
    } do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      expected_redirect_url = Object.normalize(note_activity).data["id"]
 | 
						|
 | 
						|
      redirect_url =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "application/activity+json")
 | 
						|
        |> get("/notice/#{note_activity.id}")
 | 
						|
        |> redirected_to()
 | 
						|
 | 
						|
      assert redirect_url == expected_redirect_url
 | 
						|
    end
 | 
						|
 | 
						|
    test "returns a 404 on remote notice when json requested", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity, local: false)
 | 
						|
 | 
						|
      conn
 | 
						|
      |> put_req_header("accept", "application/activity+json")
 | 
						|
      |> get("/notice/#{note_activity.id}")
 | 
						|
      |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "500s when actor not found", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      user = User.get_cached_by_ap_id(note_activity.data["actor"])
 | 
						|
      User.invalidate_cache(user)
 | 
						|
      Pleroma.Repo.delete(user)
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> get("/notice/#{note_activity.id}")
 | 
						|
 | 
						|
      assert response(conn, 500) == ~S({"error":"Something went wrong"})
 | 
						|
    end
 | 
						|
 | 
						|
    test "render html for redirect for html format", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
 | 
						|
      resp =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "text/html")
 | 
						|
        |> get("/notice/#{note_activity.id}")
 | 
						|
        |> response(200)
 | 
						|
 | 
						|
      assert resp =~
 | 
						|
               "<meta content=\"#{Pleroma.Web.base_url()}/notice/#{note_activity.id}\" property=\"og:url\">"
 | 
						|
 | 
						|
      user = insert(:user)
 | 
						|
 | 
						|
      {:ok, like_activity, _} = CommonAPI.favorite(note_activity.id, user)
 | 
						|
 | 
						|
      assert like_activity.data["type"] == "Like"
 | 
						|
 | 
						|
      resp =
 | 
						|
        conn
 | 
						|
        |> put_req_header("accept", "text/html")
 | 
						|
        |> get("/notice/#{like_activity.id}")
 | 
						|
        |> response(200)
 | 
						|
 | 
						|
      assert resp =~ "<!--server-generated-meta-->"
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s a private notice", %{conn: conn} do
 | 
						|
      note_activity = insert(:direct_note_activity)
 | 
						|
      url = "/notice/#{note_activity.id}"
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> get(url)
 | 
						|
 | 
						|
      assert response(conn, 404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s a nonexisting notice", %{conn: conn} do
 | 
						|
      url = "/notice/123"
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> get(url)
 | 
						|
 | 
						|
      assert response(conn, 404)
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  describe "GET /notice/:id/embed_player" do
 | 
						|
    test "render embed player", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      object = Pleroma.Object.normalize(note_activity)
 | 
						|
 | 
						|
      object_data =
 | 
						|
        Map.put(object.data, "attachment", [
 | 
						|
          %{
 | 
						|
            "url" => [
 | 
						|
              %{
 | 
						|
                "href" =>
 | 
						|
                  "https://peertube.moe/static/webseed/df5f464b-be8d-46fb-ad81-2d4c2d1630e3-480.mp4",
 | 
						|
                "mediaType" => "video/mp4",
 | 
						|
                "type" => "Link"
 | 
						|
              }
 | 
						|
            ]
 | 
						|
          }
 | 
						|
        ])
 | 
						|
 | 
						|
      object
 | 
						|
      |> Ecto.Changeset.change(data: object_data)
 | 
						|
      |> Pleroma.Repo.update()
 | 
						|
 | 
						|
      conn =
 | 
						|
        conn
 | 
						|
        |> get("/notice/#{note_activity.id}/embed_player")
 | 
						|
 | 
						|
      assert Plug.Conn.get_resp_header(conn, "x-frame-options") == ["ALLOW"]
 | 
						|
 | 
						|
      assert Plug.Conn.get_resp_header(
 | 
						|
               conn,
 | 
						|
               "content-security-policy"
 | 
						|
             ) == [
 | 
						|
               "default-src 'none';style-src 'self' 'unsafe-inline';img-src 'self' data: https:; media-src 'self' https:;"
 | 
						|
             ]
 | 
						|
 | 
						|
      assert response(conn, 200) =~
 | 
						|
               "<video controls loop><source src=\"https://peertube.moe/static/webseed/df5f464b-be8d-46fb-ad81-2d4c2d1630e3-480.mp4\" type=\"video/mp4\">Your browser does not support video/mp4 playback.</video>"
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s when activity isn't create", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity, data_attrs: %{"type" => "Like"})
 | 
						|
 | 
						|
      assert conn
 | 
						|
             |> get("/notice/#{note_activity.id}/embed_player")
 | 
						|
             |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s when activity is direct message", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity, data_attrs: %{"directMessage" => true})
 | 
						|
 | 
						|
      assert conn
 | 
						|
             |> get("/notice/#{note_activity.id}/embed_player")
 | 
						|
             |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s when attachment is empty", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      object = Pleroma.Object.normalize(note_activity)
 | 
						|
      object_data = Map.put(object.data, "attachment", [])
 | 
						|
 | 
						|
      object
 | 
						|
      |> Ecto.Changeset.change(data: object_data)
 | 
						|
      |> Pleroma.Repo.update()
 | 
						|
 | 
						|
      assert conn
 | 
						|
             |> get("/notice/#{note_activity.id}/embed_player")
 | 
						|
             |> response(404)
 | 
						|
    end
 | 
						|
 | 
						|
    test "404s when attachment isn't audio or video", %{conn: conn} do
 | 
						|
      note_activity = insert(:note_activity)
 | 
						|
      object = Pleroma.Object.normalize(note_activity)
 | 
						|
 | 
						|
      object_data =
 | 
						|
        Map.put(object.data, "attachment", [
 | 
						|
          %{
 | 
						|
            "url" => [
 | 
						|
              %{
 | 
						|
                "href" => "https://peertube.moe/static/webseed/480.jpg",
 | 
						|
                "mediaType" => "image/jpg",
 | 
						|
                "type" => "Link"
 | 
						|
              }
 | 
						|
            ]
 | 
						|
          }
 | 
						|
        ])
 | 
						|
 | 
						|
      object
 | 
						|
      |> Ecto.Changeset.change(data: object_data)
 | 
						|
      |> Pleroma.Repo.update()
 | 
						|
 | 
						|
      assert conn
 | 
						|
             |> get("/notice/#{note_activity.id}/embed_player")
 | 
						|
             |> response(404)
 | 
						|
    end
 | 
						|
  end
 | 
						|
end
 |