18f2c39074
Fixes #1336 This also fixes federating pinned toots when some of them are local-only. Public profiles will not show public toots, whether you are logged in or not (this is consistent with local-only toots that are not pinned).
56 lines
1.7 KiB
Ruby
56 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class ActivityPub::CollectionsController < ActivityPub::BaseController
|
|
include SignatureVerification
|
|
include AccountOwnedConcern
|
|
|
|
before_action :require_signature!, if: :authorized_fetch_mode?
|
|
before_action :set_size
|
|
before_action :set_statuses
|
|
before_action :set_cache_headers
|
|
|
|
def show
|
|
expires_in 3.minutes, public: public_fetch_mode?
|
|
render_with_cache json: collection_presenter, content_type: 'application/activity+json', serializer: ActivityPub::CollectionSerializer, adapter: ActivityPub::Adapter, skip_activities: true
|
|
end
|
|
|
|
private
|
|
|
|
def set_statuses
|
|
@statuses = scope_for_collection
|
|
@statuses = cache_collection(@statuses, Status)
|
|
end
|
|
|
|
def set_size
|
|
case params[:id]
|
|
when 'featured'
|
|
@size = @account.pinned_statuses.not_local_only.count
|
|
else
|
|
not_found
|
|
end
|
|
end
|
|
|
|
def scope_for_collection
|
|
case params[:id]
|
|
when 'featured'
|
|
# Because in public fetch mode we cache the response, there would be no
|
|
# benefit from performing the check below, since a blocked account or domain
|
|
# would likely be served the cache from the reverse proxy anyway
|
|
if authorized_fetch_mode? && !signed_request_account.nil? && (@account.blocking?(signed_request_account) || (!signed_request_account.domain.nil? && @account.domain_blocking?(signed_request_account.domain)))
|
|
Status.none
|
|
else
|
|
@account.pinned_statuses.not_local_only
|
|
end
|
|
end
|
|
end
|
|
|
|
def collection_presenter
|
|
ActivityPub::CollectionPresenter.new(
|
|
id: account_collection_url(@account, params[:id]),
|
|
type: :ordered,
|
|
size: @size,
|
|
items: @statuses
|
|
)
|
|
end
|
|
end
|