# frozen_string_literal: true class StreamEntriesController < ApplicationController include Authorization layout 'public' before_action :set_account before_action :set_stream_entry before_action :set_link_headers before_action :check_account_suspension def show respond_to do |format| format.html do @ancestors = @stream_entry.activity.reply? ? cache_collection(@stream_entry.activity.ancestors(current_account), Status) : [] @descendants = cache_collection(@stream_entry.activity.descendants(current_account), Status) end format.atom do render xml: AtomSerializer.render(AtomSerializer.new.entry(@stream_entry, true)) end end end def embed response.headers['X-Frame-Options'] = 'ALLOWALL' return gone if @stream_entry.activity.nil? render layout: 'embedded' end private def set_account @account = Account.find_local!(params[:account_username]) end def set_link_headers response.headers['Link'] = LinkHeader.new([[account_stream_entry_url(@account, @stream_entry, format: 'atom'), [%w(rel alternate), %w(type application/atom+xml)]]]) end def set_stream_entry @stream_entry = @account.stream_entries.where(activity_type: 'Status').find(params[:id]) @type = @stream_entry.activity_type.downcase raise ActiveRecord::RecordNotFound if @stream_entry.activity.nil? authorize @stream_entry.activity, :show? if @stream_entry.hidden? rescue Mastodon::NotPermittedError # Reraise in order to get a 404 raise ActiveRecord::RecordNotFound end def check_account_suspension gone if @account.suspended? end end