5bf67ca913
* Add HTTP signature requirement for served ActivityPub resources * Change `SECURE_MODE` to `AUTHORIZED_FETCH` * Add 'Signature' to 'Vary' header and improve code style * Improve code style by adding `public_fetch_mode?` method
70 lines
2 KiB
Ruby
70 lines
2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class ActivityPub::RepliesController < Api::BaseController
|
|
include SignatureAuthentication
|
|
include Authorization
|
|
include AccountOwnedConcern
|
|
|
|
DESCENDANTS_LIMIT = 60
|
|
|
|
before_action :require_signature!, if: :authorized_fetch_mode?
|
|
before_action :set_status
|
|
before_action :set_cache_headers
|
|
before_action :set_replies
|
|
|
|
def index
|
|
expires_in 0, public: public_fetch_mode?
|
|
render json: replies_collection_presenter, serializer: ActivityPub::CollectionSerializer, adapter: ActivityPub::Adapter, content_type: 'application/activity+json', skip_activities: true
|
|
end
|
|
|
|
private
|
|
|
|
def set_status
|
|
@status = @account.statuses.find(params[:status_id])
|
|
authorize @status, :show?
|
|
rescue Mastodon::NotPermittedError
|
|
raise ActiveRecord::RecordNotFound
|
|
end
|
|
|
|
def set_replies
|
|
@replies = page_params[:other_accounts] ? Status.where.not(account_id: @account.id) : @account.statuses
|
|
@replies = @replies.where(in_reply_to_id: @status.id, visibility: [:public, :unlisted])
|
|
@replies = @replies.paginate_by_min_id(DESCENDANTS_LIMIT, params[:min_id])
|
|
end
|
|
|
|
def replies_collection_presenter
|
|
page = ActivityPub::CollectionPresenter.new(
|
|
id: account_status_replies_url(@account, @status, page_params),
|
|
type: :unordered,
|
|
part_of: account_status_replies_url(@account, @status),
|
|
next: next_page,
|
|
items: @replies.map { |status| status.local ? status : status.id }
|
|
)
|
|
|
|
return page if page_requested?
|
|
|
|
ActivityPub::CollectionPresenter.new(
|
|
id: account_status_replies_url(@account, @status),
|
|
type: :unordered,
|
|
first: page
|
|
)
|
|
end
|
|
|
|
def page_requested?
|
|
params[:page] == 'true'
|
|
end
|
|
|
|
def next_page
|
|
account_status_replies_url(
|
|
@account,
|
|
@status,
|
|
page: true,
|
|
min_id: @replies&.last&.id,
|
|
other_accounts: !(@replies&.last&.account_id == @account.id && @replies.size == DESCENDANTS_LIMIT)
|
|
)
|
|
end
|
|
|
|
def page_params
|
|
params_slice(:other_accounts, :min_id).merge(page: true)
|
|
end
|
|
end
|