2016-11-16 02:56:29 +11:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-02-21 08:53:20 +11:00
|
|
|
class ApplicationController < ActionController::Base
|
|
|
|
# Prevent CSRF attacks by raising an exception.
|
|
|
|
# For APIs, you may want to use :null_session instead.
|
|
|
|
protect_from_forgery with: :exception
|
2016-03-26 00:12:24 +11:00
|
|
|
|
2017-04-24 10:44:05 +10:00
|
|
|
force_ssl if: :https_enabled?
|
|
|
|
|
2017-04-08 10:30:50 +10:00
|
|
|
include Localized
|
2017-04-30 08:28:16 +10:00
|
|
|
include UserTrackingConcern
|
2018-05-11 21:20:58 +10:00
|
|
|
include SessionTrackingConcern
|
2019-07-22 06:32:16 +10:00
|
|
|
include CacheConcern
|
2017-04-16 20:51:30 +10:00
|
|
|
|
|
|
|
helper_method :current_account
|
2017-06-26 07:51:32 +10:00
|
|
|
helper_method :current_session
|
2017-09-20 00:36:23 +10:00
|
|
|
helper_method :current_theme
|
2017-04-16 20:51:30 +10:00
|
|
|
helper_method :single_user_mode?
|
2018-03-01 05:04:53 +11:00
|
|
|
helper_method :use_seamless_external_login?
|
2016-08-25 01:56:44 +10:00
|
|
|
|
2016-09-08 10:40:51 +10:00
|
|
|
rescue_from ActionController::RoutingError, with: :not_found
|
|
|
|
rescue_from ActiveRecord::RecordNotFound, with: :not_found
|
2017-01-15 10:30:23 +11:00
|
|
|
rescue_from ActionController::InvalidAuthenticityToken, with: :unprocessable_entity
|
2018-05-26 09:09:30 +10:00
|
|
|
rescue_from ActionController::UnknownFormat, with: :not_acceptable
|
2017-11-12 06:23:33 +11:00
|
|
|
rescue_from Mastodon::NotPermittedError, with: :forbidden
|
2016-09-08 10:40:51 +10:00
|
|
|
|
2016-10-07 00:42:00 +11:00
|
|
|
before_action :store_current_location, except: :raise_not_found, unless: :devise_controller?
|
2018-08-24 07:26:29 +10:00
|
|
|
before_action :check_user_permissions, if: :user_signed_in?
|
2016-10-03 02:11:08 +11:00
|
|
|
|
2016-09-08 10:40:51 +10:00
|
|
|
def raise_not_found
|
2016-09-30 05:28:21 +10:00
|
|
|
raise ActionController::RoutingError, "No route matches #{params[:unmatched_route]}"
|
2016-09-08 10:40:51 +10:00
|
|
|
end
|
|
|
|
|
2016-10-03 02:11:08 +11:00
|
|
|
private
|
|
|
|
|
2017-04-24 10:44:05 +10:00
|
|
|
def https_enabled?
|
2018-01-08 01:19:23 +11:00
|
|
|
Rails.env.production?
|
2017-04-24 10:44:05 +10:00
|
|
|
end
|
|
|
|
|
2019-07-12 04:11:09 +10:00
|
|
|
def authorized_fetch_mode?
|
|
|
|
ENV['AUTHORIZED_FETCH'] == 'true'
|
|
|
|
end
|
|
|
|
|
|
|
|
def public_fetch_mode?
|
|
|
|
!authorized_fetch_mode?
|
|
|
|
end
|
|
|
|
|
2016-10-03 02:11:08 +11:00
|
|
|
def store_current_location
|
2018-02-22 10:51:30 +11:00
|
|
|
store_location_for(:user, request.url) unless request.format == :json
|
2016-10-03 02:11:08 +11:00
|
|
|
end
|
|
|
|
|
2016-11-29 04:45:13 +11:00
|
|
|
def require_admin!
|
2018-04-03 21:07:32 +10:00
|
|
|
forbidden unless current_user&.admin?
|
2016-11-29 04:45:13 +11:00
|
|
|
end
|
|
|
|
|
2017-11-12 06:23:33 +11:00
|
|
|
def require_staff!
|
2018-04-03 21:07:32 +10:00
|
|
|
forbidden unless current_user&.staff?
|
2017-11-12 06:23:33 +11:00
|
|
|
end
|
|
|
|
|
2018-08-24 07:26:29 +10:00
|
|
|
def check_user_permissions
|
|
|
|
forbidden if current_user.disabled? || current_user.account.suspended?
|
2016-12-07 04:03:30 +11:00
|
|
|
end
|
|
|
|
|
2017-08-05 12:24:58 +10:00
|
|
|
def after_sign_out_path_for(_resource_or_scope)
|
|
|
|
new_user_session_path
|
|
|
|
end
|
|
|
|
|
2016-08-19 01:13:41 +10:00
|
|
|
protected
|
|
|
|
|
2018-09-09 12:10:44 +10:00
|
|
|
def truthy_param?(key)
|
|
|
|
ActiveModel::Type::Boolean.new.cast(params[key])
|
|
|
|
end
|
|
|
|
|
2017-05-02 06:24:36 +10:00
|
|
|
def forbidden
|
|
|
|
respond_with_error(403)
|
2016-09-08 10:40:51 +10:00
|
|
|
end
|
|
|
|
|
2017-05-02 06:24:36 +10:00
|
|
|
def not_found
|
|
|
|
respond_with_error(404)
|
2017-01-15 10:30:23 +11:00
|
|
|
end
|
|
|
|
|
2017-05-02 06:24:36 +10:00
|
|
|
def gone
|
|
|
|
respond_with_error(410)
|
2017-04-23 13:21:10 +10:00
|
|
|
end
|
|
|
|
|
2017-01-15 10:30:23 +11:00
|
|
|
def unprocessable_entity
|
2017-05-02 06:24:36 +10:00
|
|
|
respond_with_error(422)
|
2016-10-05 22:26:44 +11:00
|
|
|
end
|
|
|
|
|
2018-05-26 09:09:30 +10:00
|
|
|
def not_acceptable
|
|
|
|
respond_with_error(406)
|
|
|
|
end
|
|
|
|
|
2017-04-16 00:46:27 +10:00
|
|
|
def single_user_mode?
|
2019-07-19 09:44:42 +10:00
|
|
|
@single_user_mode ||= Rails.configuration.x.single_user_mode && Account.where('id > 0').exists?
|
2017-04-16 00:46:27 +10:00
|
|
|
end
|
|
|
|
|
2018-03-01 05:04:53 +11:00
|
|
|
def use_seamless_external_login?
|
|
|
|
Devise.pam_authentication || Devise.ldap_authentication
|
2018-02-02 20:18:55 +11:00
|
|
|
end
|
|
|
|
|
2016-08-19 01:13:41 +10:00
|
|
|
def current_account
|
2019-06-26 04:18:15 +10:00
|
|
|
return @current_account if defined?(@current_account)
|
|
|
|
|
|
|
|
@current_account = current_user&.account
|
2016-08-19 01:13:41 +10:00
|
|
|
end
|
2016-11-30 01:49:39 +11:00
|
|
|
|
2017-06-26 07:51:32 +10:00
|
|
|
def current_session
|
2019-06-26 04:18:15 +10:00
|
|
|
return @current_session if defined?(@current_session)
|
|
|
|
|
|
|
|
@current_session = SessionActivation.find_by(session_id: cookies.signed['_session_id']) if cookies.signed['_session_id'].present?
|
2017-06-26 07:51:32 +10:00
|
|
|
end
|
|
|
|
|
2017-09-20 00:36:23 +10:00
|
|
|
def current_theme
|
2018-08-23 22:17:35 +10:00
|
|
|
return Setting.theme unless Themes.instance.names.include? current_user&.setting_theme
|
2017-09-20 00:36:23 +10:00
|
|
|
current_user.setting_theme
|
|
|
|
end
|
|
|
|
|
2017-04-22 02:11:20 +10:00
|
|
|
def respond_with_error(code)
|
2017-05-02 06:24:36 +10:00
|
|
|
respond_to do |format|
|
|
|
|
format.any { head code }
|
2019-07-22 02:08:02 +10:00
|
|
|
format.html { render "errors/#{code}", layout: 'error', status: code }
|
2017-05-02 06:24:36 +10:00
|
|
|
end
|
2017-04-22 02:11:20 +10:00
|
|
|
end
|
2016-02-21 08:53:20 +11:00
|
|
|
end
|