mirror of
https://github.com/pixelfed/pixelfed.git
synced 2024-11-10 08:44:49 +00:00
2109 lines
65 KiB
PHP
2109 lines
65 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use Illuminate\Http\Request;
|
|
use App\Http\Controllers\Controller;
|
|
use Illuminate\Support\Str;
|
|
use App\Util\ActivityPub\Helpers;
|
|
use App\Util\Media\Filter;
|
|
use Laravel\Passport\Passport;
|
|
use Auth, Cache, DB, URL;
|
|
use App\{
|
|
Bookmark,
|
|
Follower,
|
|
FollowRequest,
|
|
Like,
|
|
Media,
|
|
Notification,
|
|
Profile,
|
|
Status,
|
|
User,
|
|
UserFilter,
|
|
};
|
|
use League\Fractal;
|
|
use App\Transformer\Api\Mastodon\v1\{
|
|
AccountTransformer,
|
|
MediaTransformer,
|
|
NotificationTransformer,
|
|
StatusTransformer,
|
|
};
|
|
use App\Transformer\Api\{
|
|
RelationshipTransformer,
|
|
};
|
|
use App\Http\Controllers\FollowerController;
|
|
use League\Fractal\Serializer\ArraySerializer;
|
|
use League\Fractal\Pagination\IlluminatePaginatorAdapter;
|
|
use App\Http\Controllers\StatusController;
|
|
use App\Jobs\LikePipeline\LikePipeline;
|
|
use App\Jobs\SharePipeline\SharePipeline;
|
|
use App\Jobs\StatusPipeline\NewStatusPipeline;
|
|
use App\Jobs\StatusPipeline\StatusDelete;
|
|
use App\Jobs\FollowPipeline\FollowPipeline;
|
|
use App\Jobs\ImageOptimizePipeline\ImageOptimize;
|
|
use App\Jobs\VideoPipeline\{
|
|
VideoOptimize,
|
|
VideoPostProcess,
|
|
VideoThumbnail
|
|
};
|
|
use App\Services\{
|
|
NotificationService,
|
|
MediaPathService,
|
|
SearchApiV2Service,
|
|
StatusService,
|
|
MediaBlocklistService
|
|
};
|
|
|
|
class ApiV1Controller extends Controller
|
|
{
|
|
protected $fractal;
|
|
|
|
public function __construct()
|
|
{
|
|
$this->fractal = new Fractal\Manager();
|
|
$this->fractal->setSerializer(new ArraySerializer());
|
|
}
|
|
|
|
public function apps(Request $request)
|
|
{
|
|
abort_if(!config('pixelfed.oauth_enabled'), 404);
|
|
|
|
$this->validate($request, [
|
|
'client_name' => 'required',
|
|
'redirect_uris' => 'required',
|
|
'scopes' => 'nullable',
|
|
'website' => 'nullable'
|
|
]);
|
|
|
|
$uris = implode(',', explode('\n', $request->redirect_uris));
|
|
|
|
$client = Passport::client()->forceFill([
|
|
'user_id' => null,
|
|
'name' => e($request->client_name),
|
|
'secret' => Str::random(40),
|
|
'redirect' => $uris,
|
|
'personal_access_client' => false,
|
|
'password_client' => false,
|
|
'revoked' => false,
|
|
]);
|
|
|
|
$client->save();
|
|
|
|
$res = [
|
|
'id' => $client->id,
|
|
'name' => $client->name,
|
|
'website' => null,
|
|
'redirect_uri' => $client->redirect,
|
|
'client_id' => $client->id,
|
|
'client_secret' => $client->secret,
|
|
'vapid_key' => null
|
|
];
|
|
|
|
return response()->json($res, 200, [
|
|
'Access-Control-Allow-Origin' => '*'
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/verify_credentials
|
|
*
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function verifyCredentials(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
$id = $request->user()->id;
|
|
|
|
if($request->user()->last_active_at) {
|
|
$key = 'user:last_active_at:id:'.$id;
|
|
$ttl = now()->addMinutes(5);
|
|
Cache::remember($key, $ttl, function() use($id) {
|
|
$user = User::findOrFail($id);
|
|
$user->last_active_at = now();
|
|
$user->save();
|
|
return;
|
|
});
|
|
}
|
|
|
|
$profile = Profile::whereNull('status')->whereUserId($id)->firstOrFail();
|
|
$resource = new Fractal\Resource\Item($profile, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
$res['source'] = [
|
|
'privacy' => $profile->is_private ? 'private' : 'public',
|
|
'sensitive' => $profile->cw ? true : false,
|
|
'language' => null,
|
|
'note' => '',
|
|
'fields' => []
|
|
];
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/{id}
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountById(Request $request, $id)
|
|
{
|
|
$profile = Profile::whereNull('status')->findOrFail($id);
|
|
$resource = new Fractal\Resource\Item($profile, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* PATCH /api/v1/accounts/update_credentials
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountUpdateCredentials(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'display_name' => 'nullable|string',
|
|
'note' => 'nullable|string',
|
|
'locked' => 'nullable',
|
|
// 'source.privacy' => 'nullable|in:unlisted,public,private',
|
|
// 'source.sensitive' => 'nullable|boolean'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
$profile = $user->profile;
|
|
|
|
$displayName = $request->input('display_name');
|
|
$note = $request->input('note');
|
|
$locked = $request->input('locked');
|
|
// $privacy = $request->input('source.privacy');
|
|
// $sensitive = $request->input('source.sensitive');
|
|
|
|
$changes = false;
|
|
|
|
if($displayName !== $user->name) {
|
|
$user->name = $displayName;
|
|
$profile->name = $displayName;
|
|
$changes = true;
|
|
}
|
|
|
|
if($note !== $profile->bio) {
|
|
$profile->bio = e($note);
|
|
$changes = true;
|
|
}
|
|
|
|
if(!is_null($locked)) {
|
|
$profile->is_private = $locked;
|
|
$changes = true;
|
|
}
|
|
|
|
if($changes) {
|
|
$user->save();
|
|
$profile->save();
|
|
}
|
|
|
|
$resource = new Fractal\Resource\Item($profile, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/{id}/followers
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountFollowersById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$profile = Profile::whereNull('status')->findOrFail($id);
|
|
$limit = $request->input('limit') ?? 40;
|
|
|
|
if($profile->domain) {
|
|
$res = [];
|
|
} else {
|
|
if($profile->id == $user->profile_id) {
|
|
$followers = $profile->followers()->paginate($limit);
|
|
$resource = new Fractal\Resource\Collection($followers, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
} else {
|
|
if($profile->is_private) {
|
|
abort_if(!$profile->followedBy($user->profile), 403);
|
|
}
|
|
$settings = $profile->user->settings;
|
|
if( in_array($user->profile_id, $profile->blockedIds()->toArray()) ||
|
|
$settings->show_profile_followers == false
|
|
) {
|
|
$res = [];
|
|
} else {
|
|
$followers = $profile->followers()->paginate($limit);
|
|
$resource = new Fractal\Resource\Collection($followers, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
}
|
|
}
|
|
}
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/{id}/following
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountFollowingById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$profile = Profile::whereNull('status')->findOrFail($id);
|
|
$limit = $request->input('limit') ?? 40;
|
|
|
|
if($profile->domain) {
|
|
$res = [];
|
|
} else {
|
|
if($profile->id == $user->profile_id) {
|
|
$following = $profile->following()->paginate($limit);
|
|
$resource = new Fractal\Resource\Collection($following, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
} else {
|
|
if($profile->is_private) {
|
|
abort_if(!$profile->followedBy($user->profile), 403);
|
|
}
|
|
$settings = $profile->user->settings;
|
|
if( in_array($user->profile_id, $profile->blockedIds()->toArray()) ||
|
|
$settings->show_profile_following == false
|
|
) {
|
|
$res = [];
|
|
} else {
|
|
$following = $profile->following()->paginate($limit);
|
|
$resource = new Fractal\Resource\Collection($following, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/{id}/statuses
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\StatusTransformer
|
|
*/
|
|
public function accountStatusesById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'only_media' => 'nullable',
|
|
'pinned' => 'nullable',
|
|
'exclude_replies' => 'nullable',
|
|
'max_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'since_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'min_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'limit' => 'nullable|integer|min:1|max:80'
|
|
]);
|
|
|
|
$profile = Profile::whereNull('status')->findOrFail($id);
|
|
|
|
$limit = $request->limit ?? 20;
|
|
$max_id = $request->max_id;
|
|
$min_id = $request->min_id;
|
|
$pid = $request->user()->profile_id;
|
|
$scope = $request->only_media == true ?
|
|
['photo', 'photo:album', 'video', 'video:album'] :
|
|
['photo', 'photo:album', 'video', 'video:album', 'share', 'reply'];
|
|
|
|
if($pid == $profile->id) {
|
|
$visibility = ['public', 'unlisted', 'private'];
|
|
} else if($profile->is_private) {
|
|
$following = Cache::remember('profile:following:'.$pid, now()->addMinutes(1440), function() use($pid) {
|
|
$following = Follower::whereProfileId($pid)->pluck('following_id');
|
|
return $following->push($pid)->toArray();
|
|
});
|
|
$visibility = true == in_array($profile->id, $following) ? ['public', 'unlisted', 'private'] : [];
|
|
} else {
|
|
$following = Cache::remember('profile:following:'.$pid, now()->addMinutes(1440), function() use($pid) {
|
|
$following = Follower::whereProfileId($pid)->pluck('following_id');
|
|
return $following->push($pid)->toArray();
|
|
});
|
|
$visibility = true == in_array($profile->id, $following) ? ['public', 'unlisted', 'private'] : ['public', 'unlisted'];
|
|
}
|
|
|
|
if($min_id || $max_id) {
|
|
$dir = $min_id ? '>' : '<';
|
|
$id = $min_id ?? $max_id;
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'place_id',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereProfileId($profile->id)
|
|
->whereIn('type', $scope)
|
|
->where('id', $dir, $id)
|
|
->whereIn('visibility', $visibility)
|
|
->latest()
|
|
->limit($limit)
|
|
->get();
|
|
} else {
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'place_id',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereProfileId($profile->id)
|
|
->whereIn('type', $scope)
|
|
->whereIn('visibility', $visibility)
|
|
->latest()
|
|
->limit($limit)
|
|
->get();
|
|
}
|
|
|
|
$resource = new Fractal\Resource\Collection($timeline, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/follow
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\RelationshipTransformer
|
|
*/
|
|
public function accountFollowById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$target = Profile::where('id', '!=', $user->profile_id)
|
|
->whereNull('status')
|
|
->findOrFail($id);
|
|
|
|
$private = (bool) $target->is_private;
|
|
$remote = (bool) $target->domain;
|
|
$blocked = UserFilter::whereUserId($target->id)
|
|
->whereFilterType('block')
|
|
->whereFilterableId($user->profile_id)
|
|
->whereFilterableType('App\Profile')
|
|
->exists();
|
|
|
|
if($blocked == true) {
|
|
abort(400, 'You cannot follow this user.');
|
|
}
|
|
|
|
$isFollowing = Follower::whereProfileId($user->profile_id)
|
|
->whereFollowingId($target->id)
|
|
->exists();
|
|
|
|
// Following already, return empty relationship
|
|
if($isFollowing == true) {
|
|
$resource = new Fractal\Resource\Item($target, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
// Rate limits, max 7500 followers per account
|
|
if($user->profile->following()->count() >= Follower::MAX_FOLLOWING) {
|
|
abort(400, 'You cannot follow more than ' . Follower::MAX_FOLLOWING . ' accounts');
|
|
}
|
|
|
|
// Rate limits, follow 30 accounts per hour max
|
|
if($user->profile->following()->where('followers.created_at', '>', now()->subHour())->count() >= Follower::FOLLOW_PER_HOUR) {
|
|
abort(400, 'You can only follow ' . Follower::FOLLOW_PER_HOUR . ' users per hour');
|
|
}
|
|
|
|
if($private == true) {
|
|
$follow = FollowRequest::firstOrCreate([
|
|
'follower_id' => $user->profile_id,
|
|
'following_id' => $target->id
|
|
]);
|
|
if($remote == true && config('federation.activitypub.remoteFollow') == true) {
|
|
(new FollowerController())->sendFollow($user->profile, $target);
|
|
}
|
|
} else {
|
|
$follower = new Follower();
|
|
$follower->profile_id = $user->profile_id;
|
|
$follower->following_id = $target->id;
|
|
$follower->save();
|
|
|
|
if($remote == true && config('federation.activitypub.remoteFollow') == true) {
|
|
(new FollowerController())->sendFollow($user->profile, $target);
|
|
}
|
|
FollowPipeline::dispatch($follower);
|
|
}
|
|
|
|
Cache::forget('profile:following:'.$target->id);
|
|
Cache::forget('profile:followers:'.$target->id);
|
|
Cache::forget('profile:following:'.$user->profile_id);
|
|
Cache::forget('profile:followers:'.$user->profile_id);
|
|
Cache::forget('api:local:exp:rec:'.$user->profile_id);
|
|
Cache::forget('user:account:id:'.$target->user_id);
|
|
Cache::forget('user:account:id:'.$user->id);
|
|
Cache::forget('profile:follower_count:'.$target->id);
|
|
Cache::forget('profile:follower_count:'.$user->profile_id);
|
|
Cache::forget('profile:following_count:'.$target->id);
|
|
Cache::forget('profile:following_count:'.$user->profile_id);
|
|
|
|
$resource = new Fractal\Resource\Item($target, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/unfollow
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\RelationshipTransformer
|
|
*/
|
|
public function accountUnfollowById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$target = Profile::where('id', '!=', $user->profile_id)
|
|
->whereNull('status')
|
|
->findOrFail($id);
|
|
|
|
$private = (bool) $target->is_private;
|
|
$remote = (bool) $target->domain;
|
|
|
|
$isFollowing = Follower::whereProfileId($user->profile_id)
|
|
->whereFollowingId($target->id)
|
|
->exists();
|
|
|
|
if($isFollowing == false) {
|
|
$resource = new Fractal\Resource\Item($target, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
// Rate limits, follow 30 accounts per hour max
|
|
if($user->profile->following()->where('followers.updated_at', '>', now()->subHour())->count() >= Follower::FOLLOW_PER_HOUR) {
|
|
abort(400, 'You can only follow or unfollow ' . Follower::FOLLOW_PER_HOUR . ' users per hour');
|
|
}
|
|
|
|
FollowRequest::whereFollowerId($user->profile_id)
|
|
->whereFollowingId($target->id)
|
|
->delete();
|
|
|
|
Follower::whereProfileId($user->profile_id)
|
|
->whereFollowingId($target->id)
|
|
->delete();
|
|
|
|
if($remote == true && config('federation.activitypub.remoteFollow') == true) {
|
|
(new FollowerController())->sendUndoFollow($user->profile, $target);
|
|
}
|
|
|
|
Cache::forget('profile:following:'.$target->id);
|
|
Cache::forget('profile:followers:'.$target->id);
|
|
Cache::forget('profile:following:'.$user->profile_id);
|
|
Cache::forget('profile:followers:'.$user->profile_id);
|
|
Cache::forget('api:local:exp:rec:'.$user->profile_id);
|
|
Cache::forget('user:account:id:'.$target->user_id);
|
|
Cache::forget('user:account:id:'.$user->id);
|
|
|
|
$resource = new Fractal\Resource\Item($target, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/relationships
|
|
*
|
|
* @param array|integer $id
|
|
*
|
|
* @return \App\Transformer\Api\RelationshipTransformer
|
|
*/
|
|
public function accountRelationshipsById(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'id' => 'required|array|min:1|max:20',
|
|
'id.*' => 'required|integer|min:1|max:' . PHP_INT_MAX
|
|
]);
|
|
$pid = $request->user()->profile_id ?? $request->user()->profile->id;
|
|
$ids = collect($request->input('id'));
|
|
$filtered = $ids->filter(function($v) use($pid) {
|
|
return $v != $pid;
|
|
});
|
|
$relations = Profile::whereNull('status')->findOrFail($filtered->values());
|
|
$fractal = new Fractal\Resource\Collection($relations, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($fractal)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/search
|
|
*
|
|
*
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountSearch(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'q' => 'required|string|min:1|max:255',
|
|
'limit' => 'nullable|integer|min:1|max:40',
|
|
'resolve' => 'nullable'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
$query = $request->input('q');
|
|
$limit = $request->input('limit') ?? 20;
|
|
$resolve = (bool) $request->input('resolve', false);
|
|
$q = '%' . $query . '%';
|
|
|
|
$profiles = Profile::whereNull('status')
|
|
->where('username', 'like', $q)
|
|
->orWhere('name', 'like', $q)
|
|
->limit($limit)
|
|
->get();
|
|
|
|
$resource = new Fractal\Resource\Collection($profiles, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/blocks
|
|
*
|
|
*
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountBlocks(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'limit' => 'nullable|integer|min:1|max:40',
|
|
'page' => 'nullable|integer|min:1|max:10'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
$limit = $request->input('limit') ?? 40;
|
|
|
|
$blocked = UserFilter::select('filterable_id','filterable_type','filter_type','user_id')
|
|
->whereUserId($user->profile_id)
|
|
->whereFilterableType('App\Profile')
|
|
->whereFilterType('block')
|
|
->simplePaginate($limit)
|
|
->pluck('filterable_id');
|
|
|
|
$profiles = Profile::findOrFail($blocked);
|
|
$resource = new Fractal\Resource\Collection($profiles, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/block
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\RelationshipTransformer
|
|
*/
|
|
public function accountBlockById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$pid = $user->profile_id ?? $user->profile->id;
|
|
|
|
if($id == $pid) {
|
|
abort(400, 'You cannot block yourself');
|
|
}
|
|
|
|
$profile = Profile::findOrFail($id);
|
|
|
|
if($profile->user->is_admin == true) {
|
|
abort(400, 'You cannot block an admin');
|
|
}
|
|
|
|
Follower::whereProfileId($profile->id)->whereFollowingId($pid)->delete();
|
|
Follower::whereProfileId($pid)->whereFollowingId($profile->id)->delete();
|
|
Notification::whereProfileId($pid)->whereActorId($profile->id)->delete();
|
|
|
|
$filter = UserFilter::firstOrCreate([
|
|
'user_id' => $pid,
|
|
'filterable_id' => $profile->id,
|
|
'filterable_type' => 'App\Profile',
|
|
'filter_type' => 'block',
|
|
]);
|
|
|
|
Cache::forget("user:filter:list:$pid");
|
|
Cache::forget("api:local:exp:rec:$pid");
|
|
|
|
$resource = new Fractal\Resource\Item($profile, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/unblock
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\RelationshipTransformer
|
|
*/
|
|
public function accountUnblockById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$pid = $user->profile_id ?? $user->profile->id;
|
|
|
|
if($id == $pid) {
|
|
abort(400, 'You cannot unblock yourself');
|
|
}
|
|
|
|
$profile = Profile::findOrFail($id);
|
|
|
|
UserFilter::whereUserId($pid)
|
|
->whereFilterableId($profile->id)
|
|
->whereFilterableType('App\Profile')
|
|
->whereFilterType('block')
|
|
->delete();
|
|
|
|
Cache::forget("user:filter:list:$pid");
|
|
Cache::forget("api:local:exp:rec:$pid");
|
|
|
|
$resource = new Fractal\Resource\Item($profile, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/custom_emojis
|
|
*
|
|
* Return empty array, we don't support custom emoji
|
|
*
|
|
* @return array
|
|
*/
|
|
public function customEmojis()
|
|
{
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/domain_blocks
|
|
*
|
|
* Return empty array
|
|
*
|
|
* @return array
|
|
*/
|
|
public function accountDomainBlocks(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/endorsements
|
|
*
|
|
* Return empty array
|
|
*
|
|
* @return array
|
|
*/
|
|
public function accountEndorsements(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/favourites
|
|
*
|
|
* Returns collection of liked statuses
|
|
*
|
|
* @return \App\Transformer\Api\StatusTransformer
|
|
*/
|
|
public function accountFavourites(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$limit = $request->input('limit') ?? 20;
|
|
$favourites = Like::whereProfileId($user->profile_id)
|
|
->latest()
|
|
->simplePaginate($limit)
|
|
->pluck('status_id');
|
|
|
|
$statuses = Status::findOrFail($favourites);
|
|
$resource = new Fractal\Resource\Collection($statuses, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/favourite
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\StatusTransformer
|
|
*/
|
|
public function statusFavouriteById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$like = Like::firstOrCreate([
|
|
'profile_id' => $user->profile_id,
|
|
'status_id' => $status->id
|
|
]);
|
|
|
|
if($like->wasRecentlyCreated == true) {
|
|
$status->likes_count = $status->likes()->count();
|
|
$status->save();
|
|
LikePipeline::dispatch($like);
|
|
}
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/unfavourite
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return \App\Transformer\Api\StatusTransformer
|
|
*/
|
|
public function statusUnfavouriteById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$like = Like::whereProfileId($user->profile_id)
|
|
->whereStatusId($status->id)
|
|
->first();
|
|
|
|
if($like) {
|
|
$like->forceDelete();
|
|
$status->likes_count = $status->likes()->count();
|
|
$status->save();
|
|
}
|
|
|
|
StatusService::del($status->id);
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/filters
|
|
*
|
|
* Return empty response since we filter server side
|
|
*
|
|
* @return array
|
|
*/
|
|
public function accountFilters(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/follow_requests
|
|
*
|
|
* Return array of Accounts that have sent follow requests
|
|
*
|
|
* @return \App\Transformer\Api\AccountTransformer
|
|
*/
|
|
public function accountFollowRequests(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$followRequests = FollowRequest::whereFollowingId($user->profile->id)->pluck('follower_id');
|
|
|
|
$profiles = Profile::find($followRequests);
|
|
|
|
$resource = new Fractal\Resource\Collection($profiles, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/follow_requests/{id}/authorize
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return null
|
|
*/
|
|
public function accountFollowRequestAccept(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
// todo
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/follow_requests/{id}/reject
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return null
|
|
*/
|
|
public function accountFollowRequestReject(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
// todo
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/suggestions
|
|
*
|
|
* Return empty array as we don't support suggestions
|
|
*
|
|
* @return null
|
|
*/
|
|
public function accountSuggestions(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
// todo
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/instance
|
|
*
|
|
* Information about the server.
|
|
*
|
|
* @return Instance
|
|
*/
|
|
public function instance(Request $request)
|
|
{
|
|
$res = [
|
|
'approval_required' => false,
|
|
'contact_account' => null,
|
|
'description' => 'Pixelfed - Photo sharing for everyone',
|
|
'email' => config('instance.email'),
|
|
'invites_enabled' => false,
|
|
'rules' => [],
|
|
'short_description' => 'Pixelfed - Photo sharing for everyone',
|
|
'languages' => ['en'],
|
|
'max_toot_chars' => (int) config('pixelfed.max_caption_length'),
|
|
'registrations' => config('pixelfed.open_registration'),
|
|
'stats' => [
|
|
'user_count' => 0,
|
|
'status_count' => 0,
|
|
'domain_count' => 0
|
|
],
|
|
'thumbnail' => config('app.url') . '/img/pixelfed-icon-color.png',
|
|
'title' => config('app.name'),
|
|
'uri' => config('pixelfed.domain.app'),
|
|
'urls' => [],
|
|
'version' => '2.7.2 (compatible; Pixelfed ' . config('pixelfed.version') . ')',
|
|
'environment' => [
|
|
'max_photo_size' => (int) config('pixelfed.max_photo_size'),
|
|
'max_avatar_size' => (int) config('pixelfed.max_avatar_size'),
|
|
'max_caption_length' => (int) config('pixelfed.max_caption_length'),
|
|
'max_bio_length' => (int) config('pixelfed.max_bio_length'),
|
|
'max_album_length' => (int) config('pixelfed.max_album_length'),
|
|
'mobile_apis' => config('pixelfed.oauth_enabled')
|
|
|
|
]
|
|
];
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/lists
|
|
*
|
|
* Return empty array as we don't support lists
|
|
*
|
|
* @return null
|
|
*/
|
|
public function accountLists(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/accounts/{id}/lists
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return null
|
|
*/
|
|
public function accountListsById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/media
|
|
*
|
|
*
|
|
* @return MediaTransformer
|
|
*/
|
|
public function mediaUpload(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'file.*' => function() {
|
|
return [
|
|
'required',
|
|
'mimes:' . config('pixelfed.media_types'),
|
|
'max:' . config('pixelfed.max_photo_size'),
|
|
];
|
|
},
|
|
'filter_name' => 'nullable|string|max:24',
|
|
'filter_class' => 'nullable|alpha_dash|max:24',
|
|
'description' => 'nullable|string|max:420'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
|
|
if($user->last_active_at == null) {
|
|
return [];
|
|
}
|
|
|
|
$limitKey = 'compose:rate-limit:media-upload:' . $user->id;
|
|
$limitTtl = now()->addMinutes(15);
|
|
$limitReached = Cache::remember($limitKey, $limitTtl, function() use($user) {
|
|
$dailyLimit = Media::whereUserId($user->id)->where('created_at', '>', now()->subDays(1))->count();
|
|
|
|
return $dailyLimit >= 250;
|
|
});
|
|
abort_if($limitReached == true, 429);
|
|
|
|
$profile = $user->profile;
|
|
|
|
if(config('pixelfed.enforce_account_limit') == true) {
|
|
$size = Cache::remember($user->storageUsedKey(), now()->addDays(3), function() use($user) {
|
|
return Media::whereUserId($user->id)->sum('size') / 1000;
|
|
});
|
|
$limit = (int) config('pixelfed.max_account_size');
|
|
if ($size >= $limit) {
|
|
abort(403, 'Account size limit reached.');
|
|
}
|
|
}
|
|
|
|
$filterClass = in_array($request->input('filter_class'), Filter::classes()) ? $request->input('filter_class') : null;
|
|
$filterName = in_array($request->input('filter_name'), Filter::names()) ? $request->input('filter_name') : null;
|
|
|
|
$photo = $request->file('file');
|
|
|
|
$mimes = explode(',', config('pixelfed.media_types'));
|
|
if(in_array($photo->getMimeType(), $mimes) == false) {
|
|
abort(403, 'Invalid or unsupported mime type.');
|
|
}
|
|
|
|
$storagePath = MediaPathService::get($user, 2);
|
|
$path = $photo->store($storagePath);
|
|
$hash = \hash_file('sha256', $photo);
|
|
|
|
abort_if(MediaBlocklistService::exists($hash) == true, 451);
|
|
|
|
$media = new Media();
|
|
$media->status_id = null;
|
|
$media->profile_id = $profile->id;
|
|
$media->user_id = $user->id;
|
|
$media->media_path = $path;
|
|
$media->original_sha256 = $hash;
|
|
$media->size = $photo->getSize();
|
|
$media->mime = $photo->getMimeType();
|
|
$media->caption = $request->input('description');
|
|
$media->filter_class = $filterClass;
|
|
$media->filter_name = $filterName;
|
|
$media->save();
|
|
|
|
switch ($media->mime) {
|
|
case 'image/jpeg':
|
|
case 'image/png':
|
|
ImageOptimize::dispatch($media);
|
|
break;
|
|
|
|
case 'video/mp4':
|
|
VideoThumbnail::dispatch($media);
|
|
$preview_url = '/storage/no-preview.png';
|
|
$url = '/storage/no-preview.png';
|
|
break;
|
|
}
|
|
|
|
Cache::forget($limitKey);
|
|
$resource = new Fractal\Resource\Item($media, new MediaTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
$res['preview_url'] = $media->url(). '?cb=1&_v=' . time();
|
|
$res['url'] = $media->url(). '?cb=1&_v=' . time();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* PUT /api/v1/media/{id}
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return MediaTransformer
|
|
*/
|
|
public function mediaUpdate(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'description' => 'nullable|string|max:420'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
|
|
$media = Media::whereUserId($user->id)
|
|
->whereNull('status_id')
|
|
->findOrFail($id);
|
|
|
|
$media->caption = $request->input('description');
|
|
$media->save();
|
|
|
|
$resource = new Fractal\Resource\Item($media, new MediaTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
$res['preview_url'] = url('/storage/no-preview.png');
|
|
$res['url'] = url('/storage/no-preview.png');
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/mutes
|
|
*
|
|
*
|
|
* @return AccountTransformer
|
|
*/
|
|
public function accountMutes(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'limit' => 'nullable|integer|min:1|max:40'
|
|
]);
|
|
|
|
$user = $request->user();
|
|
$limit = $request->input('limit') ?? 40;
|
|
|
|
$mutes = UserFilter::whereUserId($user->profile_id)
|
|
->whereFilterableType('App\Profile')
|
|
->whereFilterType('mute')
|
|
->simplePaginate($limit)
|
|
->pluck('filterable_id');
|
|
|
|
$accounts = Profile::find($mutes);
|
|
|
|
$resource = new Fractal\Resource\Collection($accounts, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/mute
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return RelationshipTransformer
|
|
*/
|
|
public function accountMuteById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$pid = $user->profile_id;
|
|
|
|
$account = Profile::findOrFail($id);
|
|
|
|
$filter = UserFilter::firstOrCreate([
|
|
'user_id' => $pid,
|
|
'filterable_id' => $account->id,
|
|
'filterable_type' => 'App\Profile',
|
|
'filter_type' => 'mute',
|
|
]);
|
|
|
|
Cache::forget("user:filter:list:$pid");
|
|
Cache::forget("feature:discover:posts:$pid");
|
|
Cache::forget("api:local:exp:rec:$pid");
|
|
|
|
$resource = new Fractal\Resource\Item($account, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/accounts/{id}/unmute
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return RelationshipTransformer
|
|
*/
|
|
public function accountUnmuteById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$pid = $user->profile_id;
|
|
|
|
$account = Profile::findOrFail($id);
|
|
|
|
$filter = UserFilter::whereUserId($pid)
|
|
->whereFilterableId($account->id)
|
|
->whereFilterableType('App\Profile')
|
|
->whereFilterType('mute')
|
|
->first();
|
|
|
|
if($filter) {
|
|
$filter->delete();
|
|
Cache::forget("user:filter:list:$pid");
|
|
Cache::forget("feature:discover:posts:$pid");
|
|
Cache::forget("api:local:exp:rec:$pid");
|
|
}
|
|
|
|
$resource = new Fractal\Resource\Item($account, new RelationshipTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/notifications
|
|
*
|
|
*
|
|
* @return NotificationTransformer
|
|
*/
|
|
public function accountNotifications(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'limit' => 'nullable|integer|min:1|max:80',
|
|
'min_id' => 'nullable|integer|min:1|max:'.PHP_INT_MAX,
|
|
'max_id' => 'nullable|integer|min:1|max:'.PHP_INT_MAX,
|
|
'since_id' => 'nullable|integer|min:1|max:'.PHP_INT_MAX,
|
|
]);
|
|
|
|
$pid = $request->user()->profile_id;
|
|
$limit = $request->input('limit', 20);
|
|
$timeago = now()->subMonths(6);
|
|
|
|
$since = $request->input('since_id');
|
|
$min = $request->input('min_id');
|
|
$max = $request->input('max_id');
|
|
|
|
if(!$since && !$min && !$max) {
|
|
$min = 1;
|
|
}
|
|
|
|
$dir = $since ? '>' : ($min ? '>=' : '<');
|
|
$id = $since ?? $min ?? $max;
|
|
|
|
$notifications = Notification::whereProfileId($pid)
|
|
->where('id', $dir, $id)
|
|
->whereDate('created_at', '>', $timeago)
|
|
->orderByDesc('id')
|
|
->limit($limit)
|
|
->get();
|
|
|
|
$minId = $notifications->min('id');
|
|
$maxId = $notifications->max('id');
|
|
|
|
$resource = new Fractal\Resource\Collection(
|
|
$notifications,
|
|
new NotificationTransformer()
|
|
);
|
|
|
|
$res = $this->fractal
|
|
->createData($resource)
|
|
->toArray();
|
|
|
|
$baseUrl = config('app.url') . '/api/v1/notifications?';
|
|
|
|
if($minId == $maxId) {
|
|
$minId = null;
|
|
}
|
|
|
|
if($maxId) {
|
|
$link = '<'.$baseUrl.'max_id='.$maxId.'>; rel="next"';
|
|
}
|
|
|
|
if($minId) {
|
|
$link = '<'.$baseUrl.'min_id='.$minId.'>; rel="prev"';
|
|
}
|
|
|
|
if($maxId && $minId) {
|
|
$link = '<'.$baseUrl.'max_id='.$maxId.'>; rel="next",<'.$baseUrl.'min_id='.$minId.'>; rel="prev"';
|
|
}
|
|
|
|
$res = response()->json($res);
|
|
|
|
if(isset($link)) {
|
|
$res->withHeaders([
|
|
'Link' => $link,
|
|
]);
|
|
}
|
|
|
|
return $res;
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/timelines/home
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function timelineHome(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request,[
|
|
'page' => 'nullable|integer|max:40',
|
|
'min_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'max_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'limit' => 'nullable|integer|max:80'
|
|
]);
|
|
|
|
$page = $request->input('page');
|
|
$min = $request->input('min_id');
|
|
$max = $request->input('max_id');
|
|
$limit = $request->input('limit') ?? 3;
|
|
$user = $request->user();
|
|
|
|
if($user->last_active_at) {
|
|
$key = 'user:last_active_at:id:'.$user->id;
|
|
$ttl = now()->addMinutes(5);
|
|
Cache::remember($key, $ttl, function() use($user) {
|
|
$user->last_active_at = now();
|
|
$user->save();
|
|
return;
|
|
});
|
|
}
|
|
|
|
$pid = $request->user()->profile_id;
|
|
|
|
$following = Cache::remember('profile:following:'.$pid, now()->addMinutes(1440), function() use($pid) {
|
|
$following = Follower::whereProfileId($pid)->pluck('following_id');
|
|
return $following->push($pid)->toArray();
|
|
});
|
|
|
|
if($min || $max) {
|
|
$dir = $min ? '>' : '<';
|
|
$id = $min ?? $max;
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'reply_count',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'comments_disabled',
|
|
'place_id',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereIn('type', ['photo', 'photo:album', 'video', 'video:album'])
|
|
->with('profile', 'hashtags', 'mentions')
|
|
->where('id', $dir, $id)
|
|
->whereIn('profile_id', $following)
|
|
->whereIn('visibility',['public', 'unlisted', 'private'])
|
|
->latest()
|
|
->limit($limit)
|
|
->get();
|
|
} else {
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'reply_count',
|
|
'comments_disabled',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'place_id',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereIn('type', ['photo', 'photo:album', 'video', 'video:album'])
|
|
->with('profile', 'hashtags', 'mentions')
|
|
->whereIn('profile_id', $following)
|
|
->whereIn('visibility',['public', 'unlisted', 'private'])
|
|
->latest()
|
|
->simplePaginate($limit);
|
|
}
|
|
|
|
$fractal = new Fractal\Resource\Collection($timeline, new StatusTransformer());
|
|
$res = $this->fractal->createData($fractal)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/conversations
|
|
*
|
|
* Not implemented
|
|
*
|
|
* @return array
|
|
*/
|
|
public function conversations(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
return response()->json([]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/timelines/public
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function timelinePublic(Request $request)
|
|
{
|
|
$this->validate($request,[
|
|
'page' => 'nullable|integer|max:40',
|
|
'min_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'max_id' => 'nullable|integer|min:0|max:' . PHP_INT_MAX,
|
|
'limit' => 'nullable|integer|max:80'
|
|
]);
|
|
|
|
$page = $request->input('page');
|
|
$min = $request->input('min_id');
|
|
$max = $request->input('max_id');
|
|
$limit = $request->input('limit') ?? 3;
|
|
$user = $request->user();
|
|
|
|
if($user) {
|
|
$key = 'user:last_active_at:id:'.$user->id;
|
|
$ttl = now()->addMinutes(5);
|
|
Cache::remember($key, $ttl, function() use($user) {
|
|
$user->last_active_at = now();
|
|
$user->save();
|
|
return;
|
|
});
|
|
}
|
|
|
|
if($min || $max) {
|
|
$dir = $min ? '>' : '<';
|
|
$id = $min ?? $max;
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'reply_count',
|
|
'comments_disabled',
|
|
'place_id',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereNull('uri')
|
|
->whereIn('type', ['photo', 'photo:album', 'video', 'video:album'])
|
|
->with('profile', 'hashtags', 'mentions')
|
|
->where('id', $dir, $id)
|
|
->whereScope('public')
|
|
->where('created_at', '>', now()->subDays(14))
|
|
->latest()
|
|
->limit($limit)
|
|
->get();
|
|
} else {
|
|
$timeline = Status::select(
|
|
'id',
|
|
'uri',
|
|
'caption',
|
|
'rendered',
|
|
'profile_id',
|
|
'type',
|
|
'in_reply_to_id',
|
|
'reblog_of_id',
|
|
'is_nsfw',
|
|
'scope',
|
|
'local',
|
|
'reply_count',
|
|
'comments_disabled',
|
|
'place_id',
|
|
'likes_count',
|
|
'reblogs_count',
|
|
'created_at',
|
|
'updated_at'
|
|
)->whereNull('uri')
|
|
->whereIn('type', ['photo', 'photo:album', 'video', 'video:album'])
|
|
->with('profile', 'hashtags', 'mentions')
|
|
->whereScope('public')
|
|
->where('created_at', '>', now()->subDays(14))
|
|
->latest()
|
|
->simplePaginate($limit);
|
|
}
|
|
|
|
$fractal = new Fractal\Resource\Collection($timeline, new StatusTransformer());
|
|
$res = $this->fractal->createData($fractal)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/statuses/{id}
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusById(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/statuses/{id}/context
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusContext(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
if($status->comments_disabled) {
|
|
$res = [
|
|
'ancestors' => [],
|
|
'descendants' => []
|
|
];
|
|
} else {
|
|
$ancestors = $status->parent();
|
|
if($ancestors) {
|
|
$ares = new Fractal\Resource\Item($ancestors, new StatusTransformer());
|
|
$ancestors = [
|
|
$this->fractal->createData($ares)->toArray()
|
|
];
|
|
} else {
|
|
$ancestors = [];
|
|
}
|
|
$descendants = Status::whereInReplyToId($id)->latest()->limit(20)->get();
|
|
$dres = new Fractal\Resource\Collection($descendants, new StatusTransformer());
|
|
$descendants = $this->fractal->createData($dres)->toArray();
|
|
$res = [
|
|
'ancestors' => $ancestors,
|
|
'descendants' => $descendants
|
|
];
|
|
}
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/statuses/{id}/card
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusCard(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
// Return empty response since we don't handle support cards
|
|
$res = [];
|
|
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/statuses/{id}/reblogged_by
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return AccountTransformer
|
|
*/
|
|
public function statusRebloggedBy(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'page' => 'nullable|integer|min:1|max:40',
|
|
'limit' => 'nullable|integer|min:1|max:80'
|
|
]);
|
|
|
|
$limit = $request->input('limit') ?? 40;
|
|
$user = $request->user();
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$shared = $status->sharedBy()->latest()->simplePaginate($limit);
|
|
$resource = new Fractal\Resource\Collection($shared, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
$url = $request->url();
|
|
$page = $request->input('page', 1);
|
|
$next = $page < 40 ? $page + 1 : 40;
|
|
$prev = $page > 1 ? $page - 1 : 1;
|
|
$links = '<'.$url.'?page='.$next.'&limit='.$limit.'>; rel="next", <'.$url.'?page='.$prev.'&limit='.$limit.'>; rel="prev"';
|
|
|
|
return response()->json($res, 200, ['Link' => $links]);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/statuses/{id}/favourited_by
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return AccountTransformer
|
|
*/
|
|
public function statusFavouritedBy(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'page' => 'nullable|integer|min:1|max:40',
|
|
'limit' => 'nullable|integer|min:1|max:80'
|
|
]);
|
|
|
|
$limit = $request->input('limit') ?? 40;
|
|
$user = $request->user();
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$liked = $status->likedBy()->latest()->simplePaginate($limit);
|
|
$resource = new Fractal\Resource\Collection($liked, new AccountTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
|
|
$url = $request->url();
|
|
$page = $request->input('page', 1);
|
|
$next = $page < 40 ? $page + 1 : 40;
|
|
$prev = $page > 1 ? $page - 1 : 1;
|
|
$links = '<'.$url.'?page='.$next.'&limit='.$limit.'>; rel="next", <'.$url.'?page='.$prev.'&limit='.$limit.'>; rel="prev"';
|
|
|
|
return response()->json($res, 200, ['Link' => $links]);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusCreate(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'status' => 'nullable|string',
|
|
'in_reply_to_id' => 'nullable|integer',
|
|
'media_ids' => 'array|max:' . config('pixelfed.max_album_length'),
|
|
'media_ids.*' => 'integer|min:1',
|
|
'sensitive' => 'nullable|boolean',
|
|
'visibility' => 'string|in:private,unlisted,public',
|
|
]);
|
|
|
|
if(config('costar.enabled') == true) {
|
|
$blockedKeywords = config('costar.keyword.block');
|
|
if($blockedKeywords !== null && $request->status) {
|
|
$keywords = config('costar.keyword.block');
|
|
foreach($keywords as $kw) {
|
|
if(Str::contains($request->status, $kw) == true) {
|
|
abort(400, 'Invalid object. Contains banned keyword.');
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if(!$request->filled('media_ids') && !$request->filled('in_reply_to_id')) {
|
|
abort(403, 'Empty statuses are not allowed');
|
|
}
|
|
|
|
$ids = $request->input('media_ids');
|
|
$in_reply_to_id = $request->input('in_reply_to_id');
|
|
$user = $request->user();
|
|
$profile = $user->profile;
|
|
|
|
$limitKey = 'compose:rate-limit:store:' . $user->id;
|
|
$limitTtl = now()->addMinutes(15);
|
|
$limitReached = Cache::remember($limitKey, $limitTtl, function() use($user) {
|
|
$dailyLimit = Status::whereProfileId($user->profile_id)
|
|
->whereNull('in_reply_to_id')
|
|
->whereNull('reblog_of_id')
|
|
->where('created_at', '>', now()->subDays(1))
|
|
->count();
|
|
|
|
return $dailyLimit >= 100;
|
|
});
|
|
|
|
abort_if($limitReached == true, 429);
|
|
|
|
$visibility = $profile->is_private ? 'private' : (
|
|
$profile->unlisted == true &&
|
|
$request->input('visibility', 'public') == 'public' ?
|
|
'unlisted' :
|
|
$request->input('visibility', 'public'));
|
|
|
|
if($user->last_active_at == null) {
|
|
return [];
|
|
}
|
|
|
|
if($in_reply_to_id) {
|
|
$parent = Status::findOrFail($in_reply_to_id);
|
|
|
|
$status = new Status;
|
|
$status->caption = strip_tags($request->input('status'));
|
|
$status->scope = $visibility;
|
|
$status->visibility = $visibility;
|
|
$status->profile_id = $user->profile_id;
|
|
$status->is_nsfw = $user->profile->cw == true ? true : $request->input('sensitive', false);
|
|
$status->in_reply_to_id = $parent->id;
|
|
$status->in_reply_to_profile_id = $parent->profile_id;
|
|
$status->save();
|
|
StatusService::del($parent->id);
|
|
} else if($ids) {
|
|
if(Media::whereUserId($user->id)
|
|
->whereNull('status_id')
|
|
->find($ids)
|
|
->count() == 0
|
|
) {
|
|
abort(400, 'Invalid media_ids');
|
|
}
|
|
$status = new Status;
|
|
$status->caption = strip_tags($request->input('status'));
|
|
$status->profile_id = $user->profile_id;
|
|
$status->scope = 'draft';
|
|
$status->is_nsfw = $user->profile->cw == true ? true : $request->input('sensitive', false);
|
|
$status->save();
|
|
|
|
$mimes = [];
|
|
|
|
foreach($ids as $k => $v) {
|
|
if($k + 1 > config('pixelfed.max_album_length')) {
|
|
continue;
|
|
}
|
|
$m = Media::whereUserId($user->id)->whereNull('status_id')->findOrFail($v);
|
|
if($m->profile_id !== $user->profile_id || $m->status_id) {
|
|
abort(403, 'Invalid media id');
|
|
}
|
|
$m->status_id = $status->id;
|
|
$m->save();
|
|
array_push($mimes, $m->mime);
|
|
}
|
|
|
|
if(empty($mimes)) {
|
|
$status->delete();
|
|
abort(400, 'Invalid media ids');
|
|
}
|
|
|
|
$status->scope = $visibility;
|
|
$status->visibility = $visibility;
|
|
$status->type = StatusController::mimeTypeCheck($mimes);
|
|
$status->save();
|
|
}
|
|
|
|
if(!$status) {
|
|
abort(500, 'An error occured.');
|
|
}
|
|
|
|
NewStatusPipeline::dispatch($status);
|
|
Cache::forget('user:account:id:'.$user->id);
|
|
Cache::forget('_api:statuses:recent_9:'.$user->profile_id);
|
|
Cache::forget('profile:status_count:'.$user->profile_id);
|
|
Cache::forget($user->storageUsedKey());
|
|
Cache::forget('profile:embed:' . $status->profile_id);
|
|
Cache::forget($limitKey);
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* DELETE /api/v1/statuses
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return null
|
|
*/
|
|
public function statusDelete(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$status = Status::whereProfileId($request->user()->profile->id)
|
|
->findOrFail($id);
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
|
|
Cache::forget('profile:status_count:'.$status->profile_id);
|
|
StatusDelete::dispatch($status);
|
|
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
$res['text'] = $res['content'];
|
|
unset($res['content']);
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/reblog
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusShare(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
$share = Status::firstOrCreate([
|
|
'profile_id' => $user->profile_id,
|
|
'reblog_of_id' => $status->id,
|
|
'in_reply_to_profile_id' => $status->profile_id,
|
|
'scope' => 'public',
|
|
'visibility' => 'public'
|
|
]);
|
|
|
|
if($share->wasRecentlyCreated == true) {
|
|
$status->reblogs_count = $status->shares()->count();
|
|
$status->save();
|
|
SharePipeline::dispatch($share);
|
|
}
|
|
|
|
StatusService::del($status->id);
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/unreblog
|
|
*
|
|
* @param integer $id
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function statusUnshare(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$user = $request->user();
|
|
$status = Status::findOrFail($id);
|
|
|
|
if($status->profile_id !== $user->profile_id) {
|
|
if($status->scope == 'private') {
|
|
abort_if(!$status->profile->followedBy($user->profile), 403);
|
|
} else {
|
|
abort_if(!in_array($status->scope, ['public','unlisted']), 403);
|
|
}
|
|
}
|
|
|
|
Status::whereProfileId($user->profile_id)
|
|
->whereReblogOfId($status->id)
|
|
->delete();
|
|
$status->reblogs_count = $status->shares()->count();
|
|
$status->save();
|
|
|
|
StatusService::del($status->id);
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/timelines/tag/{hashtag}
|
|
*
|
|
* @param string $hashtag
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function timelineHashtag(Request $request, $hashtag)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
// todo
|
|
$res = [];
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v1/bookmarks
|
|
*
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function bookmarks(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'limit' => 'nullable|integer|min:1|max:40',
|
|
'max_id' => 'nullable|integer|min:0',
|
|
'since_id' => 'nullable|integer|min:0',
|
|
'min_id' => 'nullable|integer|min:0'
|
|
]);
|
|
|
|
$pid = $request->user()->profile_id;
|
|
$limit = $request->input('limit') ?? 20;
|
|
$max_id = $request->input('max_id');
|
|
$since_id = $request->input('since_id');
|
|
$min_id = $request->input('min_id');
|
|
|
|
$dir = $min_id ? '>' : '<';
|
|
$id = $min_id ?? $max_id;
|
|
|
|
if($id) {
|
|
$bookmarks = Bookmark::whereProfileId($pid)
|
|
->where('status_id', $dir, $id)
|
|
->limit($limit)
|
|
->pluck('status_id');
|
|
} else {
|
|
$bookmarks = Bookmark::whereProfileId($pid)
|
|
->latest()
|
|
->limit($limit)
|
|
->pluck('status_id');
|
|
}
|
|
|
|
$res = [];
|
|
foreach($bookmarks as $id) {
|
|
$res[] = \App\Services\StatusService::get($id);
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/bookmark
|
|
*
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function bookmarkStatus(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$status = Status::whereNull('uri')
|
|
->whereScope('public')
|
|
->findOrFail($id);
|
|
|
|
Bookmark::firstOrCreate([
|
|
'status_id' => $status->id,
|
|
'profile_id' => $request->user()->profile_id
|
|
]);
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* POST /api/v1/statuses/{id}/unbookmark
|
|
*
|
|
*
|
|
*
|
|
* @return StatusTransformer
|
|
*/
|
|
public function unbookmarkStatus(Request $request, $id)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$status = Status::whereNull('uri')
|
|
->whereScope('public')
|
|
->findOrFail($id);
|
|
|
|
Bookmark::firstOrCreate([
|
|
'status_id' => $status->id,
|
|
'profile_id' => $request->user()->profile_id
|
|
]);
|
|
$bookmark = Bookmark::whereStatusId($status->id)
|
|
->whereProfileId($request->user()->profile_id)
|
|
->firstOrFail();
|
|
$bookmark->delete();
|
|
|
|
$resource = new Fractal\Resource\Item($status, new StatusTransformer());
|
|
$res = $this->fractal->createData($resource)->toArray();
|
|
return response()->json($res);
|
|
}
|
|
|
|
/**
|
|
* GET /api/v2/search
|
|
*
|
|
*
|
|
* @return array
|
|
*/
|
|
public function searchV2(Request $request)
|
|
{
|
|
abort_if(!$request->user(), 403);
|
|
|
|
$this->validate($request, [
|
|
'q' => 'required|string|min:1|max:80',
|
|
'account_id' => 'nullable|string',
|
|
'max_id' => 'nullable|string',
|
|
'min_id' => 'nullable|string',
|
|
'type' => 'nullable|in:accounts,hashtags,statuses',
|
|
'exclude_unreviewed' => 'nullable',
|
|
'resolve' => 'nullable',
|
|
'limit' => 'nullable|integer|max:40',
|
|
'offset' => 'nullable|integer',
|
|
'following' => 'nullable'
|
|
]);
|
|
|
|
return SearchApiV2Service::query($request);
|
|
}
|
|
}
|