commit
f839ac694c
@ -1,22 +0,0 @@ |
||||
# frozen_string_literal: true |
||||
|
||||
class ActivityPub::FollowsController < Api::BaseController |
||||
include SignatureVerification |
||||
|
||||
def show |
||||
render json: follow_request, |
||||
serializer: ActivityPub::FollowSerializer, |
||||
adapter: ActivityPub::Adapter, |
||||
content_type: 'application/activity+json' |
||||
end |
||||
|
||||
private |
||||
|
||||
def follow_request |
||||
FollowRequest.includes(:account).references(:account).find_by!( |
||||
id: params.require(:id), |
||||
accounts: { domain: nil, username: params.require(:account_username) }, |
||||
target_account: signed_request_account |
||||
) |
||||
end |
||||
end |
@ -1,43 +0,0 @@ |
||||
# frozen_string_literal: true |
||||
|
||||
require 'rails_helper' |
||||
|
||||
describe ActivityPub::FollowsController, type: :controller do |
||||
let(:follow_request) { Fabricate(:follow_request, account: account) } |
||||
|
||||
render_views |
||||
|
||||
context 'with local account' do |
||||
let(:account) { Fabricate(:account, domain: nil) } |
||||
|
||||
it 'returns follow request' do |
||||
signed_request = Request.new(:get, account_follow_url(account, follow_request)) |
||||
signed_request.on_behalf_of(follow_request.target_account) |
||||
request.headers.merge! signed_request.headers |
||||
|
||||
get :show, params: { id: follow_request, account_username: account.username } |
||||
|
||||
expect(body_as_json[:id]).to eq ActivityPub::TagManager.instance.uri_for(follow_request) |
||||
expect(response).to have_http_status :success |
||||
end |
||||
|
||||
it 'returns http 404 without signature' do |
||||
get :show, params: { id: follow_request, account_username: account.username } |
||||
expect(response).to have_http_status 404 |
||||
end |
||||
end |
||||
|
||||
context 'with remote account' do |
||||
let(:account) { Fabricate(:account, domain: Faker::Internet.domain_name) } |
||||
|
||||
it 'returns http 404' do |
||||
signed_request = Request.new(:get, account_follow_url(account, follow_request)) |
||||
signed_request.on_behalf_of(follow_request.target_account) |
||||
request.headers.merge! signed_request.headers |
||||
|
||||
get :show, params: { id: follow_request, account_username: account.username } |
||||
|
||||
expect(response).to have_http_status 404 |
||||
end |
||||
end |
||||
end |
Loading…
Reference in new issue