67 lines
1.4 KiB
Ruby
67 lines
1.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class AuthorizeInteractionsController < ApplicationController
|
|
include Authorization
|
|
|
|
layout 'modal'
|
|
|
|
before_action :authenticate_user!
|
|
before_action :set_body_classes
|
|
before_action :set_resource
|
|
|
|
def show
|
|
if @resource.is_a?(Account)
|
|
render :show
|
|
elsif @resource.is_a?(Status)
|
|
redirect_to web_url("statuses/#{@resource.id}")
|
|
else
|
|
render :error
|
|
end
|
|
end
|
|
|
|
def create
|
|
if @resource.is_a?(Account) && FollowService.new.call(current_account, @resource, with_rate_limit: true)
|
|
render :success
|
|
else
|
|
render :error
|
|
end
|
|
rescue ActiveRecord::RecordNotFound, Mastodon::NotPermittedError
|
|
render :error
|
|
end
|
|
|
|
private
|
|
|
|
def set_resource
|
|
@resource = located_resource || render(:error)
|
|
authorize(@resource, :show?) if @resource.is_a?(Status)
|
|
end
|
|
|
|
def located_resource
|
|
if uri_param_is_url?
|
|
ResolveURLService.new.call(uri_param)
|
|
else
|
|
account_from_remote_follow
|
|
end
|
|
end
|
|
|
|
def account_from_remote_follow
|
|
ResolveAccountService.new.call(uri_param)
|
|
end
|
|
|
|
def uri_param_is_url?
|
|
parsed_uri.path && %w(http https).include?(parsed_uri.scheme)
|
|
end
|
|
|
|
def parsed_uri
|
|
Addressable::URI.parse(uri_param).normalize
|
|
end
|
|
|
|
def uri_param
|
|
params[:uri] || params.fetch(:acct, '').gsub(/\Aacct:/, '')
|
|
end
|
|
|
|
def set_body_classes
|
|
@body_classes = 'modal-layout'
|
|
end
|
|
end
|