81 lines
2.7 KiB
Elixir
81 lines
2.7 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Web.MastodonAPI.MediaController do
|
|
use Pleroma.Web, :controller
|
|
|
|
alias Pleroma.Object
|
|
alias Pleroma.Plugs.OAuthScopesPlug
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.ActivityPub.ActivityPub
|
|
|
|
action_fallback(Pleroma.Web.MastodonAPI.FallbackController)
|
|
plug(Pleroma.Web.ApiSpec.CastAndValidate)
|
|
plug(:put_view, Pleroma.Web.MastodonAPI.StatusView)
|
|
|
|
plug(OAuthScopesPlug, %{scopes: ["read:media"]} when action == :show)
|
|
plug(OAuthScopesPlug, %{scopes: ["write:media"]} when action != :show)
|
|
|
|
defdelegate open_api_operation(action), to: Pleroma.Web.ApiSpec.MediaOperation
|
|
|
|
@doc "POST /api/v1/media"
|
|
def create(%{assigns: %{user: user}, body_params: %{file: file} = data} = conn, _) do
|
|
with {:ok, object} <-
|
|
ActivityPub.upload(
|
|
file,
|
|
actor: User.ap_id(user),
|
|
description: Map.get(data, :description)
|
|
) do
|
|
attachment_data = Map.put(object.data, "id", object.id)
|
|
|
|
render(conn, "attachment.json", %{attachment: attachment_data})
|
|
end
|
|
end
|
|
|
|
def create(_conn, _data), do: {:error, :bad_request}
|
|
|
|
@doc "POST /api/v2/media"
|
|
def create2(%{assigns: %{user: user}, body_params: %{file: file} = data} = conn, _) do
|
|
with {:ok, object} <-
|
|
ActivityPub.upload(
|
|
file,
|
|
actor: User.ap_id(user),
|
|
description: Map.get(data, :description)
|
|
) do
|
|
attachment_data = Map.put(object.data, "id", object.id)
|
|
|
|
conn
|
|
|> put_status(202)
|
|
|> render("attachment.json", %{attachment: attachment_data})
|
|
end
|
|
end
|
|
|
|
def create2(_conn, _data), do: {:error, :bad_request}
|
|
|
|
@doc "PUT /api/v1/media/:id"
|
|
def update(%{assigns: %{user: user}, body_params: %{description: description}} = conn, %{id: id}) do
|
|
with %Object{} = object <- Object.get_by_id(id),
|
|
true <- Object.authorize_mutation(object, user),
|
|
{:ok, %Object{data: data}} <- Object.update_data(object, %{"name" => description}) do
|
|
attachment_data = Map.put(data, "id", object.id)
|
|
|
|
render(conn, "attachment.json", %{attachment: attachment_data})
|
|
end
|
|
end
|
|
|
|
def update(conn, data), do: show(conn, data)
|
|
|
|
# TODO: clarify: is the access to non-owned objects granted intentionally?
|
|
@doc "GET /api/v1/media/:id"
|
|
def show(conn, %{id: id}) do
|
|
with %Object{data: data, id: object_id} <- Object.get_by_id(id) do
|
|
attachment_data = Map.put(data, "id", object_id)
|
|
|
|
render(conn, "attachment.json", %{attachment: attachment_data})
|
|
end
|
|
end
|
|
|
|
def show(_conn, _data), do: {:error, :bad_request}
|
|
end
|