misskey/packages/backend/test/api-visibility.ts

process.env.NODE_ENV = 'test';

import * as assert from 'assert';
import * as childProcess from 'child_process';
import { async, signup, request, post, startServer, shutdownServer } from './utils';

describe('API visibility', () => {
	let p: childProcess.ChildProcess;

	before(async () => {
		p = await startServer();
	});

	after(async () => {
		await shutdownServer(p);
	});

	describe('Note visibility', async () => {
		//#region vars
		/** ヒロイン */
		let alice: any;
		/** フォロワー */
		let follower: any;
		/** 非フォロワー */
		let other: any;
		/** 非フォロワーでもリプライやメンションをされた人 */
		let target: any;
		/** specified mentionでmentionを飛ばされる人 */
		let target2: any;

		/** public-post */
		let pub: any;
		/** home-post */
		let home: any;
		/** followers-post */
		let fol: any;
		/** specified-post */
		let spe: any;

		/** public-reply to target's post */
		let pubR: any;
		/** home-reply to target's post */
		let homeR: any;
		/** followers-reply to target's post */
		let folR: any;
		/** specified-reply to target's post */
		let speR: any;

		/** public-mention to target */
		let pubM: any;
		/** home-mention to target */
		let homeM: any;
		/** followers-mention to target */
		let folM: any;
		/** specified-mention to target */
		let speM: any;

		/** reply target post */
		let tgt: any;
		//#endregion

		const show = async (noteId: any, by: any) => {
			return await request('/notes/show', {
				noteId
			}, by);
		};

		before(async () => {
			//#region prepare
			// signup
			alice    = await signup({ username: 'alice' });
			follower = await signup({ username: 'follower' });
			other    = await signup({ username: 'other' });
			target   = await signup({ username: 'target' });
			target2  = await signup({ username: 'target2' });

			// follow alice <= follower
			await request('/following/create', { userId: alice.id }, follower);

			// normal posts
			pub  = await post(alice, { text: 'x', visibility: 'public' });
			home = await post(alice, { text: 'x', visibility: 'home' });
			fol  = await post(alice, { text: 'x', visibility: 'followers' });
			spe  = await post(alice, { text: 'x', visibility: 'specified', visibleUserIds: [target.id] });

			// replies
			tgt = await post(target, { text: 'y', visibility: 'public' });
			pubR  = await post(alice, { text: 'x', replyId: tgt.id, visibility: 'public' });
			homeR = await post(alice, { text: 'x', replyId: tgt.id, visibility: 'home' });
			folR  = await post(alice, { text: 'x', replyId: tgt.id, visibility: 'followers' });
			speR  = await post(alice, { text: 'x', replyId: tgt.id, visibility: 'specified' });

			// mentions
			pubM  = await post(alice, { text: '@target x', replyId: tgt.id, visibility: 'public' });
			homeM = await post(alice, { text: '@target x', replyId: tgt.id, visibility: 'home' });
			folM  = await post(alice, { text: '@target x', replyId: tgt.id, visibility: 'followers' });
			speM  = await post(alice, { text: '@target2 x', replyId: tgt.id, visibility: 'specified' });
			//#endregion
		});

		//#region show post
		// public
		it('[show] public-postを自分が見れる', async(async () => {
			const res = await show(pub.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-postをフォロワーが見れる', async(async () => {
			const res = await show(pub.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-postを非フォロワーが見れる', async(async () => {
			const res = await show(pub.id, other);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-postを未認証が見れる', async(async () => {
			const res = await show(pub.id, null);
			assert.strictEqual(res.body.text, 'x');
		}));

		// home
		it('[show] home-postを自分が見れる', async(async () => {
			const res = await show(home.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-postをフォロワーが見れる', async(async () => {
			const res = await show(home.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-postを非フォロワーが見れる', async(async () => {
			const res = await show(home.id, other);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-postを未認証が見れる', async(async () => {
			const res = await show(home.id, null);
			assert.strictEqual(res.body.text, 'x');
		}));

		// followers
		it('[show] followers-postを自分が見れる', async(async () => {
			const res = await show(fol.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] followers-postをフォロワーが見れる', async(async () => {
			const res = await show(fol.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] followers-postを非フォロワーが見れない', async(async () => {
			const res = await show(fol.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] followers-postを未認証が見れない', async(async () => {
			const res = await show(fol.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));

		// specified
		it('[show] specified-postを自分が見れる', async(async () => {
			const res = await show(spe.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] specified-postを指定ユーザーが見れる', async(async () => {
			const res = await show(spe.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] specified-postをフォロワーが見れない', async(async () => {
			const res = await show(spe.id, follower);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-postを非フォロワーが見れない', async(async () => {
			const res = await show(spe.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-postを未認証が見れない', async(async () => {
			const res = await show(spe.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));
		//#endregion

		//#region show reply
		// public
		it('[show] public-replyを自分が見れる', async(async () => {
			const res = await show(pubR.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-replyをされた人が見れる', async(async () => {
			const res = await show(pubR.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-replyをフォロワーが見れる', async(async () => {
			const res = await show(pubR.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-replyを非フォロワーが見れる', async(async () => {
			const res = await show(pubR.id, other);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] public-replyを未認証が見れる', async(async () => {
			const res = await show(pubR.id, null);
			assert.strictEqual(res.body.text, 'x');
		}));

		// home
		it('[show] home-replyを自分が見れる', async(async () => {
			const res = await show(homeR.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-replyをされた人が見れる', async(async () => {
			const res = await show(homeR.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-replyをフォロワーが見れる', async(async () => {
			const res = await show(homeR.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-replyを非フォロワーが見れる', async(async () => {
			const res = await show(homeR.id, other);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] home-replyを未認証が見れる', async(async () => {
			const res = await show(homeR.id, null);
			assert.strictEqual(res.body.text, 'x');
		}));

		// followers
		it('[show] followers-replyを自分が見れる', async(async () => {
			const res = await show(folR.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] followers-replyを非フォロワーでもリプライされていれば見れる', async(async () => {
			const res = await show(folR.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] followers-replyをフォロワーが見れる', async(async () => {
			const res = await show(folR.id, follower);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] followers-replyを非フォロワーが見れない', async(async () => {
			const res = await show(folR.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] followers-replyを未認証が見れない', async(async () => {
			const res = await show(folR.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));

		// specified
		it('[show] specified-replyを自分が見れる', async(async () => {
			const res = await show(speR.id, alice);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] specified-replyを指定ユーザーが見れる', async(async () => {
			const res = await show(speR.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] specified-replyをされた人が指定されてなくても見れる', async(async () => {
			const res = await show(speR.id, target);
			assert.strictEqual(res.body.text, 'x');
		}));

		it('[show] specified-replyをフォロワーが見れない', async(async () => {
			const res = await show(speR.id, follower);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-replyを非フォロワーが見れない', async(async () => {
			const res = await show(speR.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-replyを未認証が見れない', async(async () => {
			const res = await show(speR.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));
		//#endregion

		//#region show mention
		// public
		it('[show] public-mentionを自分が見れる', async(async () => {
			const res = await show(pubM.id, alice);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] public-mentionをされた人が見れる', async(async () => {
			const res = await show(pubM.id, target);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] public-mentionをフォロワーが見れる', async(async () => {
			const res = await show(pubM.id, follower);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] public-mentionを非フォロワーが見れる', async(async () => {
			const res = await show(pubM.id, other);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] public-mentionを未認証が見れる', async(async () => {
			const res = await show(pubM.id, null);
			assert.strictEqual(res.body.text, '@target x');
		}));

		// home
		it('[show] home-mentionを自分が見れる', async(async () => {
			const res = await show(homeM.id, alice);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] home-mentionをされた人が見れる', async(async () => {
			const res = await show(homeM.id, target);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] home-mentionをフォロワーが見れる', async(async () => {
			const res = await show(homeM.id, follower);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] home-mentionを非フォロワーが見れる', async(async () => {
			const res = await show(homeM.id, other);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] home-mentionを未認証が見れる', async(async () => {
			const res = await show(homeM.id, null);
			assert.strictEqual(res.body.text, '@target x');
		}));

		// followers
		it('[show] followers-mentionを自分が見れる', async(async () => {
			const res = await show(folM.id, alice);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] followers-mentionをメンションされていれば非フォロワーでも見れる', async(async () => {
			const res = await show(folM.id, target);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] followers-mentionをフォロワーが見れる', async(async () => {
			const res = await show(folM.id, follower);
			assert.strictEqual(res.body.text, '@target x');
		}));

		it('[show] followers-mentionを非フォロワーが見れない', async(async () => {
			const res = await show(folM.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] followers-mentionを未認証が見れない', async(async () => {
			const res = await show(folM.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));

		// specified
		it('[show] specified-mentionを自分が見れる', async(async () => {
			const res = await show(speM.id, alice);
			assert.strictEqual(res.body.text, '@target2 x');
		}));

		it('[show] specified-mentionを指定ユーザーが見れる', async(async () => {
			const res = await show(speM.id, target);
			assert.strictEqual(res.body.text, '@target2 x');
		}));

		it('[show] specified-mentionをされた人が指定されてなかったら見れない', async(async () => {
			const res = await show(speM.id, target2);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-mentionをフォロワーが見れない', async(async () => {
			const res = await show(speM.id, follower);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-mentionを非フォロワーが見れない', async(async () => {
			const res = await show(speM.id, other);
			assert.strictEqual(res.body.isHidden, true);
		}));

		it('[show] specified-mentionを未認証が見れない', async(async () => {
			const res = await show(speM.id, null);
			assert.strictEqual(res.body.isHidden, true);
		}));
		//#endregion

		//#region HTL
		it('[HTL] public-post が 自分が見れる', async(async () => {
			const res = await request('/notes/timeline', { limit: 100 }, alice);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == pub.id);
			assert.strictEqual(notes[0].text, 'x');
		}));

		it('[HTL] public-post が 非フォロワーから見れない', async(async () => {
			const res = await request('/notes/timeline', { limit: 100 }, other);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == pub.id);
			assert.strictEqual(notes.length, 0);
		}));

		it('[HTL] followers-post が フォロワーから見れる', async(async () => {
			const res = await request('/notes/timeline', { limit: 100 }, follower);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == fol.id);
			assert.strictEqual(notes[0].text, 'x');
		}));
		//#endregion

		//#region RTL
		it('[replies] followers-reply が フォロワーから見れる', async(async () => {
			const res = await request('/notes/replies', { noteId: tgt.id, limit: 100 }, follower);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == folR.id);
			assert.strictEqual(notes[0].text, 'x');
		}));

		it('[replies] followers-reply が 非フォロワー (リプライ先ではない) から見れない', async(async () => {
			const res = await request('/notes/replies', { noteId: tgt.id, limit: 100 }, other);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == folR.id);
			assert.strictEqual(notes.length, 0);
		}));

		it('[replies] followers-reply が 非フォロワー (リプライ先である) から見れる', async(async () => {
			const res = await request('/notes/replies', { noteId: tgt.id, limit: 100 }, target);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == folR.id);
			assert.strictEqual(notes[0].text, 'x');
		}));
		//#endregion

		//#region MTL
		it('[mentions] followers-reply が 非フォロワー (リプライ先である) から見れる', async(async () => {
			const res = await request('/notes/mentions', { limit: 100 }, target);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == folR.id);
			assert.strictEqual(notes[0].text, 'x');
		}));

		it('[mentions] followers-mention が 非フォロワー (メンション先である) から見れる', async(async () => {
			const res = await request('/notes/mentions', { limit: 100 }, target);
			assert.strictEqual(res.status, 200);
			const notes = res.body.filter((n: any) => n.id == folM.id);
			assert.strictEqual(notes[0].text, '@target x');
		}));
		//#endregion
	});
});