318 lines
No EOL
13 KiB
C#
318 lines
No EOL
13 KiB
C#
using Iceshrimp.Backend.Controllers.Attributes;
|
|
using Iceshrimp.Backend.Controllers.Mastodon.Attributes;
|
|
using Iceshrimp.Backend.Controllers.Mastodon.Schemas;
|
|
using Iceshrimp.Backend.Controllers.Mastodon.Schemas.Entities;
|
|
using Iceshrimp.Backend.Core.Database;
|
|
using Iceshrimp.Backend.Core.Database.Tables;
|
|
using Iceshrimp.Backend.Core.Extensions;
|
|
using Iceshrimp.Backend.Core.Helpers;
|
|
using Iceshrimp.Backend.Core.Middleware;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.AspNetCore.RateLimiting;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Iceshrimp.Backend.Controllers.Mastodon.Renderers;
|
|
using Microsoft.AspNetCore.Cors;
|
|
|
|
namespace Iceshrimp.Backend.Controllers.Mastodon;
|
|
|
|
[MastodonApiController]
|
|
[Route("/api/v1/accounts")]
|
|
[EnableCors("mastodon")]
|
|
[Authenticate]
|
|
[EnableRateLimiting("sliding")]
|
|
[Produces("application/json")]
|
|
public class AccountController(
|
|
DatabaseContext db,
|
|
UserRenderer userRenderer,
|
|
NoteRenderer noteRenderer,
|
|
ActivityPub.ActivityRenderer activityRenderer,
|
|
ActivityPub.ActivityDeliverService deliverSvc
|
|
) : Controller {
|
|
[HttpGet("verify_credentials")]
|
|
[Authorize("read:accounts")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Account))]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized, Type = typeof(MastodonErrorResponse))]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> VerifyUserCredentials() {
|
|
var user = HttpContext.GetUserOrFail();
|
|
var res = await userRenderer.RenderAsync(user);
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpGet("{id}")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Account))]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> GetUser(string id) {
|
|
var user = await db.Users.IncludeCommonProperties().FirstOrDefaultAsync(p => p.Id == id)
|
|
?? throw GracefulException.RecordNotFound();
|
|
var res = await userRenderer.RenderAsync(user);
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpPost("{id}/follow")]
|
|
[Authorize("write:follows")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Relationship))]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized, Type = typeof(MastodonErrorResponse))]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden, Type = typeof(MastodonErrorResponse))]
|
|
//TODO: [FromHybrid] request (bool reblogs, bool notify, bool languages)
|
|
public async Task<IActionResult> FollowUser(string id) {
|
|
var user = HttpContext.GetUserOrFail();
|
|
if (user.Id == id)
|
|
throw GracefulException.BadRequest("You cannot follow yourself");
|
|
|
|
var followee = await db.Users.IncludeCommonProperties()
|
|
.Where(p => p.Id == id)
|
|
.PrecomputeRelationshipData(user)
|
|
.FirstOrDefaultAsync()
|
|
?? throw GracefulException.RecordNotFound();
|
|
|
|
if ((followee.PrecomputedIsBlockedBy ?? true) || (followee.PrecomputedIsBlocking ?? true))
|
|
throw GracefulException.Forbidden("This action is not allowed");
|
|
|
|
if (!(followee.PrecomputedIsFollowedBy ?? false) && !(followee.PrecomputedIsRequestedBy ?? false)) {
|
|
if (followee.Host != null) {
|
|
var activity = activityRenderer.RenderFollow(user, followee);
|
|
await deliverSvc.DeliverToAsync(activity, user, followee);
|
|
}
|
|
|
|
if (followee.IsLocked || followee.Host != null) {
|
|
var request = new FollowRequest {
|
|
Id = IdHelpers.GenerateSlowflakeId(),
|
|
CreatedAt = DateTime.UtcNow,
|
|
Followee = followee,
|
|
Follower = user,
|
|
FolloweeHost = followee.Host,
|
|
FollowerHost = user.Host,
|
|
FolloweeInbox = followee.Inbox,
|
|
FollowerInbox = user.Inbox,
|
|
FolloweeSharedInbox = followee.SharedInbox,
|
|
FollowerSharedInbox = user.SharedInbox
|
|
};
|
|
|
|
await db.AddAsync(request);
|
|
}
|
|
else {
|
|
var following = new Following {
|
|
Id = IdHelpers.GenerateSlowflakeId(),
|
|
CreatedAt = DateTime.UtcNow,
|
|
Followee = followee,
|
|
Follower = user,
|
|
FolloweeHost = followee.Host,
|
|
FollowerHost = user.Host,
|
|
FolloweeInbox = followee.Inbox,
|
|
FollowerInbox = user.Inbox,
|
|
FolloweeSharedInbox = followee.SharedInbox,
|
|
FollowerSharedInbox = user.SharedInbox
|
|
};
|
|
|
|
await db.AddAsync(following);
|
|
}
|
|
|
|
// If user is local, we need to increment following/follower counts here, otherwise we'll do it when receiving the Accept activity
|
|
if (followee.Host == null) {
|
|
followee.FollowersCount++;
|
|
user.FollowingCount++;
|
|
}
|
|
|
|
await db.SaveChangesAsync();
|
|
|
|
if (followee.IsLocked)
|
|
followee.PrecomputedIsRequestedBy = true;
|
|
else
|
|
followee.PrecomputedIsFollowedBy = true;
|
|
}
|
|
|
|
var res = new Relationship {
|
|
Id = followee.Id,
|
|
Following = followee.PrecomputedIsFollowedBy ?? false,
|
|
FollowedBy = followee.PrecomputedIsFollowing ?? false,
|
|
Blocking = followee.PrecomputedIsBlockedBy ?? false,
|
|
BlockedBy = followee.PrecomputedIsBlocking ?? false,
|
|
Requested = followee.PrecomputedIsRequestedBy ?? false,
|
|
RequestedBy = followee.PrecomputedIsRequested ?? false,
|
|
Muting = followee.PrecomputedIsMutedBy ?? false,
|
|
Endorsed = false, //FIXME
|
|
Note = "", //FIXME
|
|
Notifying = false, //FIXME
|
|
DomainBlocking = false, //FIXME
|
|
MutingNotifications = false, //FIXME
|
|
ShowingReblogs = true //FIXME
|
|
};
|
|
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpPost("{id}/unfollow")]
|
|
[Authorize("write:follows")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Relationship))]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized, Type = typeof(MastodonErrorResponse))]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> UnfollowUser(string id) {
|
|
var user = HttpContext.GetUserOrFail();
|
|
if (user.Id == id)
|
|
throw GracefulException.BadRequest("You cannot unfollow yourself");
|
|
|
|
var followee = await db.Users.IncludeCommonProperties()
|
|
.Where(p => p.Id == id)
|
|
.PrecomputeRelationshipData(user)
|
|
.FirstOrDefaultAsync()
|
|
?? throw GracefulException.RecordNotFound();
|
|
|
|
if ((followee.PrecomputedIsFollowedBy ?? false) || (followee.PrecomputedIsRequestedBy ?? false)) {
|
|
if (followee.Host != null) {
|
|
var activity = activityRenderer.RenderUnfollow(user, followee);
|
|
await deliverSvc.DeliverToAsync(activity, user, followee);
|
|
}
|
|
}
|
|
|
|
if (followee.PrecomputedIsFollowedBy ?? false) {
|
|
var followings = await db.Followings.Where(p => p.Follower == user && p.Followee == followee).ToListAsync();
|
|
user.FollowingCount -= followings.Count;
|
|
followee.FollowersCount -= followings.Count;
|
|
db.RemoveRange(followings);
|
|
await db.SaveChangesAsync();
|
|
|
|
followee.PrecomputedIsFollowedBy = false;
|
|
}
|
|
|
|
if (followee.PrecomputedIsRequestedBy ?? false) {
|
|
await db.FollowRequests.Where(p => p.Follower == user && p.Followee == followee).ExecuteDeleteAsync();
|
|
followee.PrecomputedIsRequestedBy = false;
|
|
}
|
|
|
|
var res = new Relationship {
|
|
Id = followee.Id,
|
|
Following = followee.PrecomputedIsFollowedBy ?? false,
|
|
FollowedBy = followee.PrecomputedIsFollowing ?? false,
|
|
Blocking = followee.PrecomputedIsBlockedBy ?? false,
|
|
BlockedBy = followee.PrecomputedIsBlocking ?? false,
|
|
Requested = followee.PrecomputedIsRequestedBy ?? false,
|
|
RequestedBy = followee.PrecomputedIsRequested ?? false,
|
|
Muting = followee.PrecomputedIsMutedBy ?? false,
|
|
Endorsed = false, //FIXME
|
|
Note = "", //FIXME
|
|
Notifying = false, //FIXME
|
|
DomainBlocking = false, //FIXME
|
|
MutingNotifications = false, //FIXME
|
|
ShowingReblogs = true //FIXME
|
|
};
|
|
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpGet("relationships")]
|
|
[Authorize("read:follows")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Relationship[]))]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized, Type = typeof(MastodonErrorResponse))]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> GetRelationships([FromQuery(Name = "id")] List<string> ids) {
|
|
var user = HttpContext.GetUserOrFail();
|
|
|
|
var users = await db.Users.IncludeCommonProperties()
|
|
.Where(p => ids.Contains(p.Id))
|
|
.PrecomputeRelationshipData(user)
|
|
.ToListAsync();
|
|
|
|
var res = users.Select(u => new Relationship {
|
|
Id = u.Id,
|
|
Following = u.PrecomputedIsFollowedBy ?? false,
|
|
FollowedBy = u.PrecomputedIsFollowing ?? false,
|
|
Blocking = u.PrecomputedIsBlockedBy ?? false,
|
|
BlockedBy = u.PrecomputedIsBlocking ?? false,
|
|
Requested = u.PrecomputedIsRequestedBy ?? false,
|
|
RequestedBy = u.PrecomputedIsRequested ?? false,
|
|
Muting = u.PrecomputedIsMutedBy ?? false,
|
|
Endorsed = false, //FIXME
|
|
Note = "", //FIXME
|
|
Notifying = false, //FIXME
|
|
DomainBlocking = false, //FIXME
|
|
MutingNotifications = false, //FIXME
|
|
ShowingReblogs = true //FIXME
|
|
});
|
|
|
|
return Ok(res);
|
|
}
|
|
|
|
|
|
[HttpGet("{id}/statuses")]
|
|
[Authorize("read:statuses")]
|
|
[LinkPagination(20, 40)]
|
|
[Produces("application/json")]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(IEnumerable<Status>))]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized, Type = typeof(MastodonErrorResponse))]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> GetUserStatuses(string id, AccountSchemas.AccountStatusesRequest request,
|
|
PaginationQuery query) {
|
|
var user = HttpContext.GetUserOrFail();
|
|
var account = await db.Users.FirstOrDefaultAsync(p => p.Id == id) ?? throw GracefulException.RecordNotFound();
|
|
|
|
var res = await db.Notes
|
|
.IncludeCommonProperties()
|
|
.FilterByUser(account)
|
|
.FilterByAccountStatusesRequest(request, account)
|
|
.EnsureVisibleFor(user)
|
|
.Paginate(query, ControllerContext)
|
|
.PrecomputeVisibilities(user)
|
|
.RenderAllForMastodonAsync(noteRenderer);
|
|
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpGet("{id}/followers")]
|
|
[Authenticate("read:accounts")]
|
|
[LinkPagination(40, 80)]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(IEnumerable<Account>))]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> GetUserFollowers(string id, PaginationQuery query) {
|
|
var user = HttpContext.GetUser();
|
|
var account = await db.Users
|
|
.Include(p => p.UserProfile)
|
|
.FirstOrDefaultAsync(p => p.Id == id) ?? throw GracefulException.RecordNotFound();
|
|
|
|
if (user == null || user.Id != account.Id) {
|
|
if (account.UserProfile?.FFVisibility == UserProfile.UserProfileFFVisibility.Private)
|
|
return Ok((List<Account>) []);
|
|
if (account.UserProfile?.FFVisibility == UserProfile.UserProfileFFVisibility.Followers)
|
|
if (user == null || !await db.Users.AnyAsync(p => p == account && p.Followers.Contains(user)))
|
|
return Ok((List<Account>) []);
|
|
}
|
|
|
|
var res = await db.Users
|
|
.Where(p => p == account)
|
|
.SelectMany(p => p.Followers)
|
|
.IncludeCommonProperties()
|
|
.Paginate(query, ControllerContext)
|
|
.RenderAllForMastodonAsync(userRenderer);
|
|
|
|
return Ok(res);
|
|
}
|
|
|
|
[HttpGet("{id}/following")]
|
|
[Authenticate("read:accounts")]
|
|
[LinkPagination(40, 80)]
|
|
[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(IEnumerable<Account>))]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(MastodonErrorResponse))]
|
|
public async Task<IActionResult> GetUserFollowing(string id, PaginationQuery query) {
|
|
var user = HttpContext.GetUser();
|
|
var account = await db.Users
|
|
.Include(p => p.UserProfile)
|
|
.FirstOrDefaultAsync(p => p.Id == id) ?? throw GracefulException.RecordNotFound();
|
|
|
|
if (user == null || user.Id != account.Id) {
|
|
if (account.UserProfile?.FFVisibility == UserProfile.UserProfileFFVisibility.Private)
|
|
return Ok((List<Account>) []);
|
|
if (account.UserProfile?.FFVisibility == UserProfile.UserProfileFFVisibility.Followers)
|
|
if (user == null || !await db.Users.AnyAsync(p => p == account && p.Followers.Contains(user)))
|
|
return Ok((List<Account>) []);
|
|
}
|
|
|
|
var res = await db.Users
|
|
.Where(p => p == account)
|
|
.SelectMany(p => p.Following)
|
|
.IncludeCommonProperties()
|
|
.Paginate(query, ControllerContext)
|
|
.RenderAllForMastodonAsync(userRenderer);
|
|
|
|
return Ok(res);
|
|
}
|
|
} |