mirror of
https://github.com/pixelfed/pixelfed.git
synced 2024-12-26 23:13:17 +00:00
147 lines
4.7 KiB
PHP
147 lines
4.7 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1\Admin;
|
|
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Validation\Rule;
|
|
use App\Http\Controllers\Api\ApiController;
|
|
use App\Instance;
|
|
use App\Services\InstanceService;
|
|
use App\Http\Resources\MastoApi\Admin\DomainBlockResource;
|
|
|
|
class DomainBlocksController extends ApiController {
|
|
|
|
public function __construct() {
|
|
$this->middleware(['auth:api', 'api.admin', 'scope:admin:read,admin:read:domain_blocks'])->only(['index', 'show']);
|
|
$this->middleware(['auth:api', 'api.admin', 'scope:admin:write,admin:write:domain_blocks'])->only(['create', 'update', 'delete']);
|
|
}
|
|
|
|
public function index(Request $request) {
|
|
$this->validate($request, [
|
|
'limit' => 'sometimes|integer|max:100|min:1',
|
|
]);
|
|
|
|
$limit = $request->input('limit', 100);
|
|
|
|
$res = Instance::moderated()
|
|
->orderBy('id')
|
|
->cursorPaginate($limit)
|
|
->withQueryString();
|
|
|
|
return $this->json(DomainBlockResource::collection($res), [
|
|
'Link' => $this->linksForCollection($res)
|
|
]);
|
|
}
|
|
|
|
public function show(Request $request, $id) {
|
|
$domain_block = Instance::moderated()->find($id);
|
|
|
|
if (!$domain_block) {
|
|
return $this->json([ 'error' => 'Record not found'], [], 404);
|
|
}
|
|
|
|
return $this->json(new DomainBlockResource($domain_block));
|
|
}
|
|
|
|
public function create(Request $request) {
|
|
$this->validate($request, [
|
|
'domain' => 'required|string|min:1|max:120',
|
|
'severity' => [
|
|
'sometimes',
|
|
Rule::in(['noop', 'silence', 'suspend'])
|
|
],
|
|
'reject_media' => 'sometimes|required|boolean',
|
|
'reject_reports' => 'sometimes|required|boolean',
|
|
'private_comment' => 'sometimes|string|min:1|max:1000',
|
|
'public_comment' => 'sometimes|string|min:1|max:1000',
|
|
'obfuscate' => 'sometimes|required|boolean'
|
|
]);
|
|
|
|
$domain = $request->input('domain');
|
|
$severity = $request->input('severity', 'silence');
|
|
$private_comment = $request->input('private_comment');
|
|
|
|
abort_if(!strpos($domain, '.'), 400, 'Invalid domain');
|
|
abort_if(!filter_var($domain, FILTER_VALIDATE_DOMAIN), 400, 'Invalid domain');
|
|
|
|
// This is because Pixelfed can't currently support wildcard domain blocks
|
|
// We have to find something that could plausibly be an instance
|
|
$parts = explode('.', $domain);
|
|
if ($parts[0] == '*') {
|
|
// If we only have two parts, e.g., "*", "example", then we want to fail:
|
|
abort_if(count($parts) <= 2, 400, 'Invalid domain: This API does not support wildcard domain blocks yet');
|
|
|
|
// Otherwise we convert the *.foo.example to foo.example
|
|
$domain = implode('.', array_slice($parts, 1));
|
|
}
|
|
|
|
// Double check we definitely haven't let anything through:
|
|
abort_if(str_contains($domain, '*'), 400, 'Invalid domain');
|
|
|
|
$existing_domain_block = Instance::moderated()->whereDomain($domain)->first();
|
|
|
|
if ($existing_domain_block) {
|
|
return $this->json([
|
|
'error' => 'A domain block already exists for this domain',
|
|
'existing_domain_block' => new DomainBlockResource($existing_domain_block)
|
|
], [], 422);
|
|
}
|
|
|
|
$domain_block = Instance::updateOrCreate(
|
|
[ 'domain' => $domain ],
|
|
[ 'banned' => $severity === 'suspend', 'unlisted' => $severity === 'silence', 'notes' => [$private_comment]]
|
|
);
|
|
|
|
InstanceService::refresh();
|
|
|
|
return $this->json(new DomainBlockResource($domain_block));
|
|
}
|
|
|
|
public function update(Request $request, $id) {
|
|
$this->validate($request, [
|
|
'severity' => [
|
|
'sometimes',
|
|
Rule::in(['noop', 'silence', 'suspend'])
|
|
],
|
|
'reject_media' => 'sometimes|required|boolean',
|
|
'reject_reports' => 'sometimes|required|boolean',
|
|
'private_comment' => 'sometimes|string|min:1|max:1000',
|
|
'public_comment' => 'sometimes|string|min:1|max:1000',
|
|
'obfuscate' => 'sometimes|required|boolean'
|
|
]);
|
|
|
|
$severity = $request->input('severity', 'silence');
|
|
$private_comment = $request->input('private_comment');
|
|
|
|
$domain_block = Instance::moderated()->find($id);
|
|
|
|
if (!$domain_block) {
|
|
return $this->json([ 'error' => 'Record not found'], [], 404);
|
|
}
|
|
|
|
$domain_block->banned = $severity === 'suspend';
|
|
$domain_block->unlisted = $severity === 'silence';
|
|
$domain_block->notes = [$private_comment];
|
|
$domain_block->save();
|
|
|
|
InstanceService::refresh();
|
|
|
|
return $this->json(new DomainBlockResource($domain_block));
|
|
}
|
|
|
|
public function delete(Request $request, $id) {
|
|
$domain_block = Instance::moderated()->find($id);
|
|
|
|
if (!$domain_block) {
|
|
return $this->json([ 'error' => 'Record not found'], [], 404);
|
|
}
|
|
|
|
$domain_block->banned = false;
|
|
$domain_block->unlisted = false;
|
|
$domain_block->save();
|
|
|
|
InstanceService::refresh();
|
|
|
|
return $this->json(null, [], 200);
|
|
}
|
|
}
|