1f6ed4f86a
* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
39 lines
1.4 KiB
Ruby
39 lines
1.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Api::V1::Accounts::CredentialsController < Api::BaseController
|
|
before_action -> { doorkeeper_authorize! :read, :'read:accounts' }, except: [:update]
|
|
before_action -> { doorkeeper_authorize! :write, :'write:accounts' }, only: [:update]
|
|
before_action :require_user!
|
|
|
|
def show
|
|
@account = current_account
|
|
render json: @account, serializer: REST::CredentialAccountSerializer
|
|
end
|
|
|
|
def update
|
|
@account = current_account
|
|
UpdateAccountService.new.call(@account, account_params, raise_error: true)
|
|
UserSettingsDecorator.new(current_user).update(user_settings_params) if user_settings_params
|
|
ActivityPub::UpdateDistributionWorker.perform_async(@account.id)
|
|
render json: @account, serializer: REST::CredentialAccountSerializer
|
|
end
|
|
|
|
private
|
|
|
|
def account_params
|
|
params.permit(:display_name, :note, :avatar, :header, :locked, :bot, fields_attributes: [:name, :value])
|
|
end
|
|
|
|
def user_settings_params
|
|
return nil unless params.key?(:source)
|
|
|
|
source_params = params.require(:source)
|
|
|
|
{
|
|
'setting_default_privacy' => source_params.fetch(:privacy, @account.user.setting_default_privacy),
|
|
'setting_default_sensitive' => source_params.fetch(:sensitive, @account.user.setting_default_sensitive),
|
|
'setting_default_language' => source_params.fetch(:language, @account.user.setting_default_language),
|
|
}
|
|
end
|
|
end
|