commit
f839ac694c
@ -1,22 +0,0 @@ |
|||||||
# frozen_string_literal: true |
|
||||||
|
|
||||||
class ActivityPub::FollowsController < Api::BaseController |
|
||||||
include SignatureVerification |
|
||||||
|
|
||||||
def show |
|
||||||
render json: follow_request, |
|
||||||
serializer: ActivityPub::FollowSerializer, |
|
||||||
adapter: ActivityPub::Adapter, |
|
||||||
content_type: 'application/activity+json' |
|
||||||
end |
|
||||||
|
|
||||||
private |
|
||||||
|
|
||||||
def follow_request |
|
||||||
FollowRequest.includes(:account).references(:account).find_by!( |
|
||||||
id: params.require(:id), |
|
||||||
accounts: { domain: nil, username: params.require(:account_username) }, |
|
||||||
target_account: signed_request_account |
|
||||||
) |
|
||||||
end |
|
||||||
end |
|
@ -1,43 +0,0 @@ |
|||||||
# frozen_string_literal: true |
|
||||||
|
|
||||||
require 'rails_helper' |
|
||||||
|
|
||||||
describe ActivityPub::FollowsController, type: :controller do |
|
||||||
let(:follow_request) { Fabricate(:follow_request, account: account) } |
|
||||||
|
|
||||||
render_views |
|
||||||
|
|
||||||
context 'with local account' do |
|
||||||
let(:account) { Fabricate(:account, domain: nil) } |
|
||||||
|
|
||||||
it 'returns follow request' do |
|
||||||
signed_request = Request.new(:get, account_follow_url(account, follow_request)) |
|
||||||
signed_request.on_behalf_of(follow_request.target_account) |
|
||||||
request.headers.merge! signed_request.headers |
|
||||||
|
|
||||||
get :show, params: { id: follow_request, account_username: account.username } |
|
||||||
|
|
||||||
expect(body_as_json[:id]).to eq ActivityPub::TagManager.instance.uri_for(follow_request) |
|
||||||
expect(response).to have_http_status :success |
|
||||||
end |
|
||||||
|
|
||||||
it 'returns http 404 without signature' do |
|
||||||
get :show, params: { id: follow_request, account_username: account.username } |
|
||||||
expect(response).to have_http_status 404 |
|
||||||
end |
|
||||||
end |
|
||||||
|
|
||||||
context 'with remote account' do |
|
||||||
let(:account) { Fabricate(:account, domain: Faker::Internet.domain_name) } |
|
||||||
|
|
||||||
it 'returns http 404' do |
|
||||||
signed_request = Request.new(:get, account_follow_url(account, follow_request)) |
|
||||||
signed_request.on_behalf_of(follow_request.target_account) |
|
||||||
request.headers.merge! signed_request.headers |
|
||||||
|
|
||||||
get :show, params: { id: follow_request, account_username: account.username } |
|
||||||
|
|
||||||
expect(response).to have_http_status 404 |
|
||||||
end |
|
||||||
end |
|
||||||
end |
|
Loading…
Reference in new issue