5d2fc6de32
* Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account
395 lines
12 KiB
Ruby
395 lines
12 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'sidekiq/web'
|
|
require 'sidekiq-scheduler/web'
|
|
|
|
Sidekiq::Web.set :session_secret, Rails.application.secrets[:secret_key_base]
|
|
|
|
Rails.application.routes.draw do
|
|
mount LetterOpenerWeb::Engine, at: 'letter_opener' if Rails.env.development?
|
|
|
|
authenticate :user, lambda { |u| u.admin? } do
|
|
mount Sidekiq::Web, at: 'sidekiq', as: :sidekiq
|
|
mount PgHero::Engine, at: 'pghero', as: :pghero
|
|
end
|
|
|
|
use_doorkeeper do
|
|
controllers authorizations: 'oauth/authorizations',
|
|
authorized_applications: 'oauth/authorized_applications',
|
|
tokens: 'oauth/tokens'
|
|
end
|
|
|
|
get '.well-known/host-meta', to: 'well_known/host_meta#show', as: :host_meta, defaults: { format: 'xml' }
|
|
get '.well-known/webfinger', to: 'well_known/webfinger#show', as: :webfinger
|
|
get '.well-known/change-password', to: redirect('/auth/edit')
|
|
get 'manifest', to: 'manifests#show', defaults: { format: 'json' }
|
|
get 'intent', to: 'intents#show'
|
|
get 'custom.css', to: 'custom_css#show', as: :custom_css
|
|
|
|
devise_scope :user do
|
|
get '/invite/:invite_code', to: 'auth/registrations#new', as: :public_invite
|
|
match '/auth/finish_signup' => 'auth/confirmations#finish_signup', via: [:get, :patch], as: :finish_signup
|
|
end
|
|
|
|
devise_for :users, path: 'auth', controllers: {
|
|
omniauth_callbacks: 'auth/omniauth_callbacks',
|
|
sessions: 'auth/sessions',
|
|
registrations: 'auth/registrations',
|
|
passwords: 'auth/passwords',
|
|
confirmations: 'auth/confirmations',
|
|
}
|
|
|
|
get '/users/:username', to: redirect('/@%{username}'), constraints: lambda { |req| req.format.nil? || req.format.html? }
|
|
get '/authorize_follow', to: redirect { |_, request| "/authorize_interaction?#{request.params.to_query}" }
|
|
|
|
resources :accounts, path: 'users', only: [:show], param: :username do
|
|
resources :stream_entries, path: 'updates', only: [:show] do
|
|
member do
|
|
get :embed
|
|
end
|
|
end
|
|
|
|
get :remote_follow, to: 'remote_follow#new'
|
|
post :remote_follow, to: 'remote_follow#create'
|
|
|
|
resources :statuses, only: [:show] do
|
|
member do
|
|
get :activity
|
|
get :embed
|
|
end
|
|
end
|
|
|
|
resources :followers, only: [:index], controller: :follower_accounts
|
|
resources :following, only: [:index], controller: :following_accounts
|
|
resource :follow, only: [:create], controller: :account_follow
|
|
resource :unfollow, only: [:create], controller: :account_unfollow
|
|
|
|
resource :outbox, only: [:show], module: :activitypub
|
|
resource :inbox, only: [:create], module: :activitypub
|
|
resources :collections, only: [:show], module: :activitypub
|
|
end
|
|
|
|
resource :inbox, only: [:create], module: :activitypub
|
|
|
|
get '/@:username', to: 'accounts#show', as: :short_account
|
|
get '/@:username/with_replies', to: 'accounts#show', as: :short_account_with_replies
|
|
get '/@:username/media', to: 'accounts#show', as: :short_account_media
|
|
get '/@:account_username/:id', to: 'statuses#show', as: :short_account_status
|
|
get '/@:account_username/:id/embed', to: 'statuses#embed', as: :embed_short_account_status
|
|
|
|
get '/interact/:id', to: 'remote_interaction#new', as: :remote_interaction
|
|
post '/interact/:id', to: 'remote_interaction#create'
|
|
|
|
get '/explore', to: 'directories#index', as: :explore
|
|
get '/explore/:id', to: 'directories#show', as: :explore_hashtag
|
|
|
|
namespace :settings do
|
|
resource :profile, only: [:show, :update]
|
|
resource :preferences, only: [:show, :update]
|
|
resource :notifications, only: [:show, :update]
|
|
resource :import, only: [:show, :create]
|
|
|
|
resource :export, only: [:show, :create]
|
|
namespace :exports, constraints: { format: :csv } do
|
|
resources :follows, only: :index, controller: :following_accounts
|
|
resources :blocks, only: :index, controller: :blocked_accounts
|
|
resources :mutes, only: :index, controller: :muted_accounts
|
|
end
|
|
|
|
resource :two_factor_authentication, only: [:show, :create, :destroy]
|
|
namespace :two_factor_authentication do
|
|
resources :recovery_codes, only: [:create]
|
|
resource :confirmation, only: [:new, :create]
|
|
end
|
|
|
|
resource :follower_domains, only: [:show, :update]
|
|
|
|
resources :applications, except: [:edit] do
|
|
member do
|
|
post :regenerate
|
|
end
|
|
end
|
|
|
|
resource :delete, only: [:show, :destroy]
|
|
resource :migration, only: [:show, :update]
|
|
|
|
resources :sessions, only: [:destroy]
|
|
end
|
|
|
|
resources :media, only: [:show] do
|
|
get :player
|
|
end
|
|
|
|
resources :tags, only: [:show]
|
|
resources :emojis, only: [:show]
|
|
resources :invites, only: [:index, :create, :destroy]
|
|
resources :filters, except: [:show]
|
|
|
|
get '/media_proxy/:id/(*any)', to: 'media_proxy#show', as: :media_proxy
|
|
|
|
# Remote follow
|
|
resource :remote_unfollow, only: [:create]
|
|
resource :authorize_interaction, only: [:show, :create]
|
|
resource :share, only: [:show, :create]
|
|
|
|
namespace :admin do
|
|
get '/dashboard', to: 'dashboard#index'
|
|
|
|
resources :subscriptions, only: [:index]
|
|
resources :domain_blocks, only: [:index, :new, :create, :show, :destroy]
|
|
resources :email_domain_blocks, only: [:index, :new, :create, :destroy]
|
|
resources :action_logs, only: [:index]
|
|
resources :warning_presets, except: [:new]
|
|
resource :settings, only: [:edit, :update]
|
|
|
|
resources :invites, only: [:index, :create, :destroy] do
|
|
collection do
|
|
post :deactivate_all
|
|
end
|
|
end
|
|
|
|
resources :relays, only: [:index, :new, :create, :destroy] do
|
|
member do
|
|
post :enable
|
|
post :disable
|
|
end
|
|
end
|
|
|
|
resources :instances, only: [:index] do
|
|
collection do
|
|
post :resubscribe
|
|
end
|
|
end
|
|
|
|
resources :reports, only: [:index, :show] do
|
|
member do
|
|
post :assign_to_self
|
|
post :unassign
|
|
post :reopen
|
|
post :resolve
|
|
end
|
|
|
|
resources :reported_statuses, only: [:create]
|
|
end
|
|
|
|
resources :report_notes, only: [:create, :destroy]
|
|
|
|
resources :accounts, only: [:index, :show] do
|
|
member do
|
|
post :subscribe
|
|
post :unsubscribe
|
|
post :enable
|
|
post :unsilence
|
|
post :unsuspend
|
|
post :redownload
|
|
post :remove_avatar
|
|
post :remove_header
|
|
post :memorialize
|
|
end
|
|
|
|
resource :change_email, only: [:show, :update]
|
|
resource :reset, only: [:create]
|
|
resource :action, only: [:new, :create], controller: 'account_actions'
|
|
resources :statuses, only: [:index, :create, :update, :destroy]
|
|
|
|
resource :confirmation, only: [:create] do
|
|
collection do
|
|
post :resend
|
|
end
|
|
end
|
|
|
|
resource :role do
|
|
member do
|
|
post :promote
|
|
post :demote
|
|
end
|
|
end
|
|
end
|
|
|
|
resources :users, only: [] do
|
|
resource :two_factor_authentication, only: [:destroy]
|
|
end
|
|
|
|
resources :custom_emojis, only: [:index, :new, :create, :update, :destroy] do
|
|
member do
|
|
post :copy
|
|
post :enable
|
|
post :disable
|
|
end
|
|
end
|
|
|
|
resources :account_moderation_notes, only: [:create, :destroy]
|
|
|
|
resources :tags, only: [:index] do
|
|
member do
|
|
post :hide
|
|
post :unhide
|
|
end
|
|
end
|
|
end
|
|
|
|
get '/admin', to: redirect('/admin/dashboard', status: 302)
|
|
|
|
namespace :api do
|
|
# PubSubHubbub outgoing subscriptions
|
|
resources :subscriptions, only: [:show]
|
|
post '/subscriptions/:id', to: 'subscriptions#update'
|
|
|
|
# PubSubHubbub incoming subscriptions
|
|
post '/push', to: 'push#update', as: :push
|
|
|
|
# Salmon
|
|
post '/salmon/:id', to: 'salmon#update', as: :salmon
|
|
|
|
# OEmbed
|
|
get '/oembed', to: 'oembed#show', as: :oembed
|
|
|
|
# JSON / REST API
|
|
namespace :v1 do
|
|
resources :statuses, only: [:create, :show, :destroy] do
|
|
scope module: :statuses do
|
|
resources :reblogged_by, controller: :reblogged_by_accounts, only: :index
|
|
resources :favourited_by, controller: :favourited_by_accounts, only: :index
|
|
resource :reblog, only: :create
|
|
post :unreblog, to: 'reblogs#destroy'
|
|
|
|
resource :favourite, only: :create
|
|
post :unfavourite, to: 'favourites#destroy'
|
|
|
|
resource :mute, only: :create
|
|
post :unmute, to: 'mutes#destroy'
|
|
|
|
resource :pin, only: :create
|
|
post :unpin, to: 'pins#destroy'
|
|
end
|
|
|
|
member do
|
|
get :context
|
|
get :card
|
|
end
|
|
end
|
|
|
|
namespace :timelines do
|
|
resource :direct, only: :show, controller: :direct
|
|
resource :home, only: :show, controller: :home
|
|
resource :public, only: :show, controller: :public
|
|
resources :tag, only: :show
|
|
resources :list, only: :show
|
|
end
|
|
|
|
resources :streaming, only: [:index]
|
|
resources :custom_emojis, only: [:index]
|
|
resources :suggestions, only: [:index, :destroy]
|
|
|
|
resources :conversations, only: [:index, :destroy] do
|
|
member do
|
|
post :read
|
|
end
|
|
end
|
|
|
|
get '/search', to: 'search#index', as: :search
|
|
|
|
resources :follows, only: [:create]
|
|
resources :media, only: [:create, :update]
|
|
resources :blocks, only: [:index]
|
|
resources :mutes, only: [:index]
|
|
resources :favourites, only: [:index]
|
|
resources :reports, only: [:create]
|
|
resources :filters, only: [:index, :create, :show, :update, :destroy]
|
|
resources :endorsements, only: [:index]
|
|
|
|
namespace :apps do
|
|
get :verify_credentials, to: 'credentials#show'
|
|
end
|
|
|
|
resources :apps, only: [:create]
|
|
|
|
resource :instance, only: [:show] do
|
|
resources :peers, only: [:index], controller: 'instances/peers'
|
|
resource :activity, only: [:show], controller: 'instances/activity'
|
|
end
|
|
|
|
resource :domain_blocks, only: [:show, :create, :destroy]
|
|
|
|
resources :follow_requests, only: [:index] do
|
|
member do
|
|
post :authorize
|
|
post :reject
|
|
end
|
|
end
|
|
|
|
resources :notifications, only: [:index, :show] do
|
|
collection do
|
|
post :clear
|
|
post :dismiss # Deprecated
|
|
end
|
|
|
|
member do
|
|
post :dismiss
|
|
end
|
|
end
|
|
|
|
namespace :accounts do
|
|
get :verify_credentials, to: 'credentials#show'
|
|
patch :update_credentials, to: 'credentials#update'
|
|
resource :search, only: :show, controller: :search
|
|
resources :relationships, only: :index
|
|
end
|
|
|
|
resources :accounts, only: [:create, :show] do
|
|
resources :statuses, only: :index, controller: 'accounts/statuses'
|
|
resources :followers, only: :index, controller: 'accounts/follower_accounts'
|
|
resources :following, only: :index, controller: 'accounts/following_accounts'
|
|
resources :lists, only: :index, controller: 'accounts/lists'
|
|
|
|
member do
|
|
post :follow
|
|
post :unfollow
|
|
post :block
|
|
post :unblock
|
|
post :mute
|
|
post :unmute
|
|
end
|
|
|
|
resource :pin, only: :create, controller: 'accounts/pins'
|
|
post :unpin, to: 'accounts/pins#destroy'
|
|
end
|
|
|
|
resources :lists, only: [:index, :create, :show, :update, :destroy] do
|
|
resource :accounts, only: [:show, :create, :destroy], controller: 'lists/accounts'
|
|
end
|
|
|
|
namespace :push do
|
|
resource :subscription, only: [:create, :show, :update, :destroy]
|
|
end
|
|
end
|
|
|
|
namespace :v2 do
|
|
get '/search', to: 'search#index', as: :search
|
|
end
|
|
|
|
namespace :web do
|
|
resource :settings, only: [:update]
|
|
resource :embed, only: [:create]
|
|
resources :push_subscriptions, only: [:create] do
|
|
member do
|
|
put :update
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
get '/web/(*any)', to: 'home#index', as: :web
|
|
|
|
get '/about', to: 'about#show'
|
|
get '/about/more', to: 'about#more'
|
|
get '/terms', to: 'about#terms'
|
|
|
|
root 'home#index'
|
|
|
|
match '*unmatched_route',
|
|
via: :all,
|
|
to: 'application#raise_not_found',
|
|
format: false
|
|
end
|