No OneTemporary
Actions

Size

48 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/lib/pleroma/web/mastodon_api/views/account_view.ex b/lib/pleroma/web/mastodon_api/views/account_view.ex
	index bfcc170d6..29c63eb60 100644
	--- a/lib/pleroma/web/mastodon_api/views/account_view.ex
	+++ b/lib/pleroma/web/mastodon_api/views/account_view.ex
	@@ -1,556 +1,558 @@
	# Pleroma: A lightweight social networking server
	# Copyright © 2017-2023 Pleroma Authors <https://pleroma.social/>
	# SPDX-License-Identifier: AGPL-3.0-only

	defmodule Pleroma.Web.MastodonAPI.AccountView do
	use Pleroma.Web, :view

	alias Pleroma.FollowingRelationship
	alias Pleroma.User
	alias Pleroma.UserNote
	alias Pleroma.UserRelationship
	alias Pleroma.Utils.URIEncoding
	alias Pleroma.Web.CommonAPI.Utils
	alias Pleroma.Web.MastodonAPI.AccountView
	alias Pleroma.Web.MediaProxy

	def render("index.json", %{users: users} = opts) do
	reading_user = opts[:for]

	relationships_opt =
	cond do
	Map.has_key?(opts, :relationships) ->
	opts[:relationships]

	is_nil(reading_user) \|\| !opts[:embed_relationships] ->
	UserRelationship.view_relationships_option(nil, [])

	true ->
	UserRelationship.view_relationships_option(reading_user, users)
	end

	opts =
	opts
	\|> Map.merge(%{relationships: relationships_opt, as: :user})
	\|> Map.delete(:users)

	users
	\|> render_many(AccountView, "show.json", opts)
	\|> Enum.filter(&Enum.any?/1)
	end

	@doc """
	Renders specified user account.
	:skip_visibility_check option skips visibility check and renders any user (local or remote)
	regardless of [:pleroma, :restrict_unauthenticated] setting.
	:for option specifies the requester and can be a User record or nil.
	Only use `user: user, for: user` when `user` is the actual requester of own profile.
	"""
	def render("show.json", %{user: _user, skip_visibility_check: true} = opts) do
	do_render("show.json", opts)
	end

	def render("show.json", %{user: user, for: for_user_or_nil} = opts) do
	if User.visible_for(user, for_user_or_nil) == :visible do
	do_render("show.json", opts)
	else
	%{}
	end
	end

	def render("show.json", _) do
	raise "In order to prevent account accessibility issues, " <>
	":skip_visibility_check or :for option is required."
	end

	def render("mention.json", %{user: user}) do
	%{
	id: to_string(user.id),
	acct: user.nickname,
	username: username_from_nickname(user.nickname),
	url: user.uri \|\| user.ap_id
	}
	end

	def render("relationship.json", %{user: nil, target: _target}) do
	%{}
	end

	def render(
	"relationship.json",
	%{user: %User{} = reading_user, target: %User{} = target} = opts
	) do
	user_relationships = get_in(opts, [:relationships, :user_relationships])
	following_relationships = get_in(opts, [:relationships, :following_relationships])

	follow_state =
	if following_relationships do
	user_to_target_following_relation =
	FollowingRelationship.find(following_relationships, reading_user, target)

	User.get_follow_state(reading_user, target, user_to_target_following_relation)
	else
	User.get_follow_state(reading_user, target)
	end

	followed_by = FollowingRelationship.following?(target, reading_user)
	following = FollowingRelationship.following?(reading_user, target)

	blocking =
	UserRelationship.exists?(
	user_relationships,
	:block,
	reading_user,
	target,
	&User.blocks_user?(&1, &2)
	)

	muting =
	UserRelationship.exists?(
	user_relationships,
	:mute,
	reading_user,
	target,
	&User.mutes?(&1, &2)
	)

	requested =
	cond do
	following -> false
	true -> match?(:follow_pending, follow_state)
	end

	subscribing =
	UserRelationship.exists?(
	user_relationships,
	:inverse_subscription,
	target,
	reading_user,
	&User.subscribed_to?(&2, &1)
	)

	# NOTE: adjust UserRelationship.view_relationships_option/2 on new relation-related flags
	%{
	id: to_string(target.id),
	following: following,
	followed_by: followed_by,
	blocking: blocking,
	blocked_by:
	UserRelationship.exists?(
	user_relationships,
	:block,
	target,
	reading_user,
	&User.blocks_user?(&1, &2)
	),
	+ block_expires_at: nil,
	muting: muting,
	muting_notifications:
	UserRelationship.exists?(
	user_relationships,
	:notification_mute,
	reading_user,
	target,
	&User.muted_notifications?(&1, &2)
	),
	+ mute_expires_at: nil,
	subscribing: subscribing,
	notifying: subscribing,
	requested: requested,
	domain_blocking: User.blocks_domain?(reading_user, target),
	showing_reblogs:
	not UserRelationship.exists?(
	user_relationships,
	:reblog_mute,
	reading_user,
	target,
	&User.muting_reblogs?(&1, &2)
	),
	note:
	UserNote.show(
	reading_user,
	target
	),
	endorsed:
	UserRelationship.exists?(
	user_relationships,
	:endorsement,
	reading_user,
	target,
	&User.endorses?(&1, &2)
	)
	}
	\|> maybe_put_mute_expires_at(target, reading_user, %{mutes: muting})
	\|> maybe_put_block_expires_at(target, reading_user, %{blocks: blocking})
	end

	def render("relationships.json", %{user: user, targets: targets} = opts) do
	relationships_opt =
	cond do
	Map.has_key?(opts, :relationships) ->
	opts[:relationships]

	is_nil(user) ->
	UserRelationship.view_relationships_option(nil, [])

	true ->
	UserRelationship.view_relationships_option(user, targets)
	end

	render_opts = %{as: :target, user: user, relationships: relationships_opt}
	render_many(targets, AccountView, "relationship.json", render_opts)
	end

	def render("familiar_followers.json", %{users: users} = opts) do
	opts =
	opts
	\|> Map.merge(%{as: :user})
	\|> Map.delete(:users)

	users
	\|> render_many(AccountView, "familiar_followers.json", opts)
	end

	def render("familiar_followers.json", %{user: %{id: id, accounts: accounts}} = opts) do
	accounts =
	accounts
	\|> render_many(AccountView, "show.json", opts)
	\|> Enum.filter(&Enum.any?/1)

	%{id: id, accounts: accounts}
	end

	defp do_render("show.json", %{user: user} = opts) do
	self = opts[:for] == user

	user = User.sanitize_html(user, User.html_filter_policy(opts[:for]))
	display_name = user.name \|\| user.nickname

	avatar = User.avatar_url(user) \|> MediaProxy.url()
	avatar_static = User.avatar_url(user) \|> MediaProxy.preview_url(static: true)
	avatar_description = User.image_description(user.avatar)
	header = User.banner_url(user) \|> MediaProxy.url()
	header_static = User.banner_url(user) \|> MediaProxy.preview_url(static: true)
	header_description = User.image_description(user.banner)

	following_count =
	if !user.hide_follows_count or !user.hide_follows or self,
	do: user.following_count,
	else: 0

	followers_count =
	if !user.hide_followers_count or !user.hide_followers or self,
	do: user.follower_count,
	else: 0

	bot = bot?(user)

	emojis =
	Enum.map(user.emoji, fn {shortcode, raw_url} ->
	url =
	raw_url
	\|> encode_emoji_url()
	\|> MediaProxy.url()

	%{
	shortcode: shortcode,
	url: url,
	static_url: url,
	visible_in_picker: false
	}
	end)

	relationship =
	if opts[:embed_relationships] do
	render("relationship.json", %{
	user: opts[:for],
	target: user,
	relationships: opts[:relationships]
	})
	else
	%{}
	end

	favicon =
	if Pleroma.Config.get([:instances_favicons, :enabled]) do
	user
	\|> Map.get(:ap_id, "")
	\|> URI.parse()
	\|> URI.merge("/")
	\|> Pleroma.Instances.Instance.get_or_update_favicon()
	\|> MediaProxy.url()
	else
	nil
	end

	last_status_at =
	user.last_status_at &&
	user.last_status_at \|> NaiveDateTime.to_date() \|> Date.to_iso8601()

	%{
	id: to_string(user.id),
	username: username_from_nickname(user.nickname),
	acct: user.nickname,
	display_name: display_name,
	locked: user.is_locked,
	created_at: Utils.to_masto_date(user.inserted_at),
	followers_count: followers_count,
	following_count: following_count,
	statuses_count: user.note_count,
	note: user.bio,
	url: user.uri \|\| user.ap_id,
	avatar: avatar,
	avatar_static: avatar_static,
	header: header,
	header_static: header_static,
	emojis: emojis,
	fields: user.fields,
	bot: bot,
	source: %{
	note: user.raw_bio \|\| "",
	sensitive: false,
	fields: user.raw_fields,
	pleroma: %{
	discoverable: user.is_discoverable,
	actor_type: user.actor_type
	}
	},
	last_status_at: last_status_at,

	# Pleroma extensions
	# Note: it's insecure to output :email but fully-qualified nickname may serve as safe stub
	fqn: User.full_nickname(user),
	pleroma: %{
	ap_id: user.ap_id,
	also_known_as: user.also_known_as,
	is_confirmed: user.is_confirmed,
	is_suggested: user.is_suggested,
	tags: user.tags,
	hide_followers_count: user.hide_followers_count,
	hide_follows_count: user.hide_follows_count,
	hide_followers: user.hide_followers,
	hide_follows: user.hide_follows,
	hide_favorites: user.hide_favorites,
	relationship: relationship,
	skip_thread_containment: user.skip_thread_containment,
	background_image: image_url(user.background) \|> MediaProxy.url(),
	accepts_chat_messages: user.accepts_chat_messages,
	favicon: favicon,
	avatar_description: avatar_description,
	header_description: header_description
	}
	}
	\|> maybe_put_role(user, opts[:for])
	\|> maybe_put_settings(user, opts[:for], opts)
	\|> maybe_put_notification_settings(user, opts[:for])
	\|> maybe_put_settings_store(user, opts[:for], opts)
	\|> maybe_put_chat_token(user, opts[:for], opts)
	\|> maybe_put_activation_status(user, opts[:for])
	\|> maybe_put_follow_requests_count(user, opts[:for])
	\|> maybe_put_allow_following_move(user, opts[:for])
	\|> maybe_put_unread_conversation_count(user, opts[:for])
	\|> maybe_put_unread_notification_count(user, opts[:for])
	\|> maybe_put_email_address(user, opts[:for])
	\|> maybe_put_mute_expires_at(user, opts[:for], opts, relationship)
	\|> maybe_put_block_expires_at(user, opts[:for], opts, relationship)
	\|> maybe_show_birthday(user, opts[:for])
	end

	defp username_from_nickname(string) when is_binary(string) do
	hd(String.split(string, "@"))
	end

	defp username_from_nickname(_), do: nil

	defp maybe_put_follow_requests_count(
	data,
	%User{id: user_id} = user,
	%User{id: user_id}
	) do
	count =
	user
	\|> User.get_follow_requests_query()
	\|> Pleroma.Repo.aggregate(:count)

	data
	\|> Kernel.put_in([:follow_requests_count], count)
	end

	defp maybe_put_follow_requests_count(data, _, _), do: data

	defp maybe_put_settings(
	data,
	%User{id: user_id} = user,
	%User{id: user_id},
	_opts
	) do
	data
	\|> Kernel.put_in([:source, :privacy], user.default_scope)
	\|> Kernel.put_in([:source, :pleroma, :show_role], user.show_role)
	\|> Kernel.put_in([:source, :pleroma, :no_rich_text], user.no_rich_text)
	\|> Kernel.put_in([:source, :pleroma, :show_birthday], user.show_birthday)
	end

	defp maybe_put_settings(data, _, _, _), do: data

	defp maybe_put_settings_store(data, %User{} = user, %User{}, %{
	with_pleroma_settings: true
	}) do
	data
	\|> Kernel.put_in([:pleroma, :settings_store], user.pleroma_settings_store)
	end

	defp maybe_put_settings_store(data, _, _, _), do: data

	defp maybe_put_chat_token(data, %User{id: id}, %User{id: id}, %{
	with_chat_token: token
	}) do
	data
	\|> Kernel.put_in([:pleroma, :chat_token], token)
	end

	defp maybe_put_chat_token(data, _, _, _), do: data

	defp maybe_put_role(data, %User{show_role: true} = user, _) do
	put_role(data, user)
	end

	defp maybe_put_role(data, %User{id: user_id} = user, %User{id: user_id}) do
	put_role(data, user)
	end

	defp maybe_put_role(data, _, _), do: data

	defp put_role(data, user) do
	data
	\|> Kernel.put_in([:pleroma, :is_admin], user.is_admin)
	\|> Kernel.put_in([:pleroma, :is_moderator], user.is_moderator)
	\|> Kernel.put_in([:pleroma, :privileges], User.privileges(user))
	end

	defp maybe_put_notification_settings(data, %User{id: user_id} = user, %User{id: user_id}) do
	Kernel.put_in(
	data,
	[:pleroma, :notification_settings],
	Map.from_struct(user.notification_settings)
	)
	end

	defp maybe_put_notification_settings(data, _, _), do: data

	defp maybe_put_allow_following_move(data, %User{id: user_id} = user, %User{id: user_id}) do
	Kernel.put_in(data, [:pleroma, :allow_following_move], user.allow_following_move)
	end

	defp maybe_put_allow_following_move(data, _, _), do: data

	defp maybe_put_activation_status(data, user, user_for) do
	if User.privileged?(user_for, :users_manage_activation_state),
	do: Kernel.put_in(data, [:pleroma, :deactivated], !user.is_active),
	else: data
	end

	defp maybe_put_unread_conversation_count(data, %User{id: user_id} = user, %User{id: user_id}) do
	data
	\|> Kernel.put_in(
	[:pleroma, :unread_conversation_count],
	Pleroma.Conversation.Participation.unread_count(user)
	)
	end

	defp maybe_put_unread_conversation_count(data, _, _), do: data

	defp maybe_put_unread_notification_count(data, %User{id: user_id}, %User{id: user_id} = user) do
	Kernel.put_in(
	data,
	[:pleroma, :unread_notifications_count],
	Pleroma.Notification.unread_notifications_count(user)
	)
	end

	defp maybe_put_unread_notification_count(data, _, _), do: data

	defp maybe_put_email_address(data, %User{id: user_id}, %User{id: user_id} = user) do
	Kernel.put_in(
	data,
	[:pleroma, :email],
	user.email
	)
	end

	defp maybe_put_email_address(data, _, _), do: data

	defp maybe_put_mute_expires_at(data, target, user, opts, relationship \\ nil)

	defp maybe_put_mute_expires_at(data, _target, _user, %{mutes: true}, %{
	mute_expires_at: mute_expires_at
	}) do
	Map.put(data, :mute_expires_at, mute_expires_at)
	end

	defp maybe_put_mute_expires_at(data, %User{} = target, user, %{mutes: true}, _relationship) do
	Map.put(
	data,
	:mute_expires_at,
	UserRelationship.get_mute_expire_date(user, target)
	)
	end

	defp maybe_put_mute_expires_at(data, _, _, _, _), do: data

	defp maybe_put_block_expires_at(data, target, user, opts, relationship \\ nil)

	defp maybe_put_block_expires_at(data, _target, _user, %{blocks: true}, %{
	block_expires_at: block_expires_at
	}) do
	Map.put(data, :block_expires_at, block_expires_at)
	end

	defp maybe_put_block_expires_at(
	data,
	%User{} = target,
	%User{} = user,
	%{blocks: true},
	_relationship
	) do
	Map.put(
	data,
	:block_expires_at,
	UserRelationship.get_block_expire_date(user, target)
	)
	end

	defp maybe_put_block_expires_at(data, _, _, _, _), do: data

	defp maybe_show_birthday(data, %User{id: user_id} = user, %User{id: user_id}) do
	data
	\|> Kernel.put_in([:pleroma, :birthday], user.birthday)
	end

	defp maybe_show_birthday(data, %User{show_birthday: true} = user, _) do
	data
	\|> Kernel.put_in([:pleroma, :birthday], user.birthday)
	end

	defp maybe_show_birthday(data, _, _) do
	data
	end

	defp image_url(%{"url" => [%{"href" => href} \| _]}), do: href
	defp image_url(_), do: nil

	defp bot?(user) do
	# Because older and/or Mastodon clients may not recognize a Group actor properly,
	# and currently the group actor can only boost things, we should let these clients
	# think groups are bots.
	# See https://git.pleroma.social/pleroma/pleroma-meta/-/issues/14
	user.actor_type == "Service" \|\| user.actor_type == "Group"
	end

	defp encode_emoji_url(nil), do: nil
	defp encode_emoji_url("http" <> _ = url), do: URIEncoding.encode_url(url)

	defp encode_emoji_url("/" <> _ = path),
	do: URIEncoding.encode_url(path, bypass_parse: true, bypass_decode: true)

	defp encode_emoji_url(path) when is_binary(path),
	do: URIEncoding.encode_url(path, bypass_parse: true, bypass_decode: true)
	end
	diff --git a/test/pleroma/web/mastodon_api/views/account_view_test.exs b/test/pleroma/web/mastodon_api/views/account_view_test.exs
	index 6984442cc..c230cf653 100644
	--- a/test/pleroma/web/mastodon_api/views/account_view_test.exs
	+++ b/test/pleroma/web/mastodon_api/views/account_view_test.exs
	@@ -1,943 +1,941 @@
	# Pleroma: A lightweight social networking server
	# Copyright © 2017-2022 Pleroma Authors <https://pleroma.social/>
	# SPDX-License-Identifier: AGPL-3.0-only

	defmodule Pleroma.Web.MastodonAPI.AccountViewTest do
	use Pleroma.DataCase, async: false

	alias Pleroma.UnstubbedConfigMock, as: ConfigMock
	alias Pleroma.User
	alias Pleroma.UserRelationship
	alias Pleroma.Web.CommonAPI
	alias Pleroma.Web.MastodonAPI.AccountView

	import Mox
	import Pleroma.Factory
	import Tesla.Mock

	setup do
	mock(fn env -> apply(HttpRequestMock, :request, [env]) end)
	:ok
	end

	test "Represent a user account" do
	background_image = %{
	"url" => [%{"href" => "https://example.com/images/asuka_hospital.png"}]
	}

	user =
	insert(:user, %{
	follower_count: 3,
	note_count: 5,
	background: background_image,
	nickname: "shp@shitposter.club",
	name: ":karjalanpiirakka: shp",
	bio:
	"<script src=\"invalid-html\"></script><span>valid html</span>. a<br>b<br/>c<br >d<br />f '&<>\"",
	inserted_at: ~N[2017-08-15 15:47:06.597036],
	emoji: %{"karjalanpiirakka" => "/file.png"},
	raw_bio: "valid html. a\nb\nc\nd\nf '&<>\"",
	also_known_as: ["https://shitposter.zone/users/shp"],
	last_status_at: NaiveDateTime.utc_now()
	})

	expected = %{
	id: to_string(user.id),
	username: "shp",
	acct: user.nickname,
	display_name: user.name,
	locked: false,
	created_at: "2017-08-15T15:47:06.000Z",
	followers_count: 3,
	following_count: 0,
	statuses_count: 5,
	note: "<span>valid html</span>. a<br/>b<br/>c<br/>d<br/>f '&<>"",
	url: user.ap_id,
	avatar: "http://localhost:4001/images/avi.png",
	avatar_static: "http://localhost:4001/images/avi.png",
	header: "http://localhost:4001/images/banner.png",
	header_static: "http://localhost:4001/images/banner.png",
	emojis: [
	%{
	static_url: "/file.png",
	url: "/file.png",
	shortcode: "karjalanpiirakka",
	visible_in_picker: false
	}
	],
	fields: [],
	bot: false,
	source: %{
	note: "valid html. a\nb\nc\nd\nf '&<>\"",
	sensitive: false,
	pleroma: %{
	actor_type: "Person",
	discoverable: true
	},
	fields: []
	},
	fqn: "shp@shitposter.club",
	last_status_at: user.last_status_at \|> NaiveDateTime.to_date() \|> Date.to_iso8601(),
	pleroma: %{
	ap_id: user.ap_id,
	also_known_as: ["https://shitposter.zone/users/shp"],
	background_image: "https://example.com/images/asuka_hospital.png",
	favicon: nil,
	is_confirmed: true,
	tags: [],
	is_admin: false,
	is_moderator: false,
	privileges: [],
	is_suggested: false,
	hide_favorites: true,
	hide_followers: false,
	hide_follows: false,
	hide_followers_count: false,
	hide_follows_count: false,
	relationship: %{},
	skip_thread_containment: false,
	accepts_chat_messages: nil,
	avatar_description: "",
	header_description: ""
	}
	}

	assert expected == AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end

	test "encodes emoji urls in the emojis field" do
	user =
	insert(:user,
	name: ":brackets: :percent:",
	emoji: %{
	"brackets" => "/emoji/hana[pog].png",
	"percent" => "/emoji/hana%20pog.png"
	}
	)

	%{emojis: emojis} =
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})

	emoji_urls = Map.new(emojis, &{&1.shortcode, &1.url})

	assert emoji_urls["brackets"] == "/emoji/hana%5Bpog%5D.png"
	assert emoji_urls["percent"] == "/emoji/hana%2520pog.png"
	end

	describe "roles and privileges" do
	setup do
	clear_config([:instance, :moderator_privileges], [:cofe, :only_moderator])
	clear_config([:instance, :admin_privileges], [:cofe, :only_admin])

	%{
	user: insert(:user),
	moderator: insert(:user, is_moderator: true),
	admin: insert(:user, is_admin: true),
	moderator_admin: insert(:user, is_moderator: true, is_admin: true),
	user_no_show_roles: insert(:user, show_role: false),
	moderator_admin_no_show_roles:
	insert(:user, is_moderator: true, is_admin: true, show_role: false)
	}
	end

	test "shows roles and privileges when show_role: true", %{
	user: user,
	moderator: moderator,
	admin: admin,
	moderator_admin: moderator_admin,
	user_no_show_roles: user_no_show_roles,
	moderator_admin_no_show_roles: moderator_admin_no_show_roles
	} do
	assert %{pleroma: %{is_moderator: false, is_admin: false}} =
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})

	assert [] ==
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})[
	:pleroma
	][:privileges]
	\|> Enum.sort()

	assert %{pleroma: %{is_moderator: true, is_admin: false}} =
	AccountView.render("show.json", %{user: moderator, skip_visibility_check: true})

	assert [:cofe, :only_moderator] ==
	AccountView.render("show.json", %{user: moderator, skip_visibility_check: true})[
	:pleroma
	][:privileges]
	\|> Enum.sort()

	assert %{pleroma: %{is_moderator: false, is_admin: true}} =
	AccountView.render("show.json", %{user: admin, skip_visibility_check: true})

	assert [:cofe, :only_admin] ==
	AccountView.render("show.json", %{user: admin, skip_visibility_check: true})[
	:pleroma
	][:privileges]
	\|> Enum.sort()

	assert %{pleroma: %{is_moderator: true, is_admin: true}} =
	AccountView.render("show.json", %{
	user: moderator_admin,
	skip_visibility_check: true
	})

	assert [:cofe, :only_admin, :only_moderator] ==
	AccountView.render("show.json", %{
	user: moderator_admin,
	skip_visibility_check: true
	})[:pleroma][:privileges]
	\|> Enum.sort()

	refute match?(
	%{pleroma: %{is_moderator: _}},
	AccountView.render("show.json", %{
	user: user_no_show_roles,
	skip_visibility_check: true
	})
	)

	refute match?(
	%{pleroma: %{is_admin: _}},
	AccountView.render("show.json", %{
	user: user_no_show_roles,
	skip_visibility_check: true
	})
	)

	refute match?(
	%{pleroma: %{privileges: _}},
	AccountView.render("show.json", %{
	user: user_no_show_roles,
	skip_visibility_check: true
	})
	)

	refute match?(
	%{pleroma: %{is_moderator: _}},
	AccountView.render("show.json", %{
	user: moderator_admin_no_show_roles,
	skip_visibility_check: true
	})
	)

	refute match?(
	%{pleroma: %{is_admin: _}},
	AccountView.render("show.json", %{
	user: moderator_admin_no_show_roles,
	skip_visibility_check: true
	})
	)

	refute match?(
	%{pleroma: %{privileges: _}},
	AccountView.render("show.json", %{
	user: moderator_admin_no_show_roles,
	skip_visibility_check: true
	})
	)
	end

	test "shows roles and privileges when viewing own account, even when show_role: false", %{
	user_no_show_roles: user_no_show_roles,
	moderator_admin_no_show_roles: moderator_admin_no_show_roles
	} do
	assert %{pleroma: %{is_moderator: false, is_admin: false, privileges: []}} =
	AccountView.render("show.json", %{
	user: user_no_show_roles,
	skip_visibility_check: true,
	for: user_no_show_roles
	})

	assert %{
	pleroma: %{
	is_moderator: true,
	is_admin: true,
	privileges: privileges
	}
	} =
	AccountView.render("show.json", %{
	user: moderator_admin_no_show_roles,
	skip_visibility_check: true,
	for: moderator_admin_no_show_roles
	})

	assert [:cofe, :only_admin, :only_moderator] == privileges \|> Enum.sort()
	end
	end

	describe "favicon" do
	setup do
	[user: insert(:user)]
	end

	test "is parsed when :instance_favicons is enabled", %{user: user} do
	clear_config([:instances_favicons, :enabled], true)

	assert %{
	pleroma: %{
	favicon:
	"https://shitposter.club/plugins/Qvitter/img/gnusocial-favicons/favicon-16x16.png"
	}
	} = AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end

	test "is nil when :instances_favicons is disabled", %{user: user} do
	assert %{pleroma: %{favicon: nil}} =
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end
	end

	test "Represent the user account for the account owner" do
	user = insert(:user)

	notification_settings = %{
	block_from_strangers: false,
	hide_notification_contents: false
	}

	privacy = user.default_scope

	assert %{
	pleroma: %{notification_settings: ^notification_settings, allow_following_move: true},
	source: %{privacy: ^privacy}
	} = AccountView.render("show.json", %{user: user, for: user})
	end

	test "Represent a Service(bot) account" do
	user =
	insert(:user, %{
	follower_count: 3,
	note_count: 5,
	actor_type: "Service",
	nickname: "shp@shitposter.club",
	inserted_at: ~N[2017-08-15 15:47:06.597036]
	})

	expected = %{
	id: to_string(user.id),
	username: "shp",
	acct: user.nickname,
	display_name: user.name,
	locked: false,
	created_at: "2017-08-15T15:47:06.000Z",
	followers_count: 3,
	following_count: 0,
	statuses_count: 5,
	note: user.bio,
	url: user.ap_id,
	avatar: "http://localhost:4001/images/avi.png",
	avatar_static: "http://localhost:4001/images/avi.png",
	header: "http://localhost:4001/images/banner.png",
	header_static: "http://localhost:4001/images/banner.png",
	emojis: [],
	fields: [],
	bot: true,
	source: %{
	note: user.bio,
	sensitive: false,
	pleroma: %{
	actor_type: "Service",
	discoverable: true
	},
	fields: []
	},
	fqn: "shp@shitposter.club",
	last_status_at: nil,
	pleroma: %{
	ap_id: user.ap_id,
	also_known_as: [],
	background_image: nil,
	favicon: nil,
	is_confirmed: true,
	tags: [],
	is_admin: false,
	is_moderator: false,
	privileges: [],
	is_suggested: false,
	hide_favorites: true,
	hide_followers: false,
	hide_follows: false,
	hide_followers_count: false,
	hide_follows_count: false,
	relationship: %{},
	skip_thread_containment: false,
	accepts_chat_messages: nil,
	avatar_description: "",
	header_description: ""
	}
	}

	assert expected == AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end

	test "Represent a Funkwhale channel" do
	{:ok, user} =
	User.get_or_fetch_by_ap_id(
	"https://channels.tests.funkwhale.audio/federation/actors/compositions"
	)

	assert represented =
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})

	assert represented.acct == "compositions@channels.tests.funkwhale.audio"
	assert represented.url == "https://channels.tests.funkwhale.audio/channels/compositions"
	end

	test "Represent a deactivated user for a privileged user" do
	clear_config([:instance, :moderator_privileges], [:users_manage_activation_state])

	admin = insert(:user, is_moderator: true)
	deactivated_user = insert(:user, is_active: false)
	represented = AccountView.render("show.json", %{user: deactivated_user, for: admin})
	assert represented[:pleroma][:deactivated] == true
	end

	test "Represent a smaller mention" do
	user = insert(:user)

	expected = %{
	id: to_string(user.id),
	acct: user.nickname,
	username: user.nickname,
	url: user.ap_id
	}

	assert expected == AccountView.render("mention.json", %{user: user})
	end

	test "demands :for or :skip_visibility_check option for account rendering" do
	clear_config([:restrict_unauthenticated, :profiles, :local], false)

	user = insert(:user)
	user_id = user.id

	assert %{id: ^user_id} = AccountView.render("show.json", %{user: user, for: nil})
	assert %{id: ^user_id} = AccountView.render("show.json", %{user: user, for: user})

	assert %{id: ^user_id} =
	AccountView.render("show.json", %{user: user, skip_visibility_check: true})

	assert_raise RuntimeError, ~r/:skip_visibility_check or :for option is required/, fn ->
	AccountView.render("show.json", %{user: user})
	end
	end

	describe "relationship" do
	defp test_relationship_rendering(user, other_user, expected_result) do
	opts = %{user: user, target: other_user, relationships: nil}
	assert expected_result == AccountView.render("relationship.json", opts)

	relationships_opt = UserRelationship.view_relationships_option(user, [other_user])
	opts = Map.put(opts, :relationships, relationships_opt)
	assert expected_result == AccountView.render("relationship.json", opts)

	assert [expected_result] ==
	AccountView.render("relationships.json", %{user: user, targets: [other_user]})
	end

	@blank_response %{
	following: false,
	followed_by: false,
	blocking: false,
	block_expires_at: nil,
	blocked_by: false,
	muting: false,
	mute_expires_at: nil,
	muting_notifications: false,
	subscribing: false,
	notifying: false,
	requested: false,
	domain_blocking: false,
	showing_reblogs: true,
	endorsed: false,
	note: ""
	}

	test "represent a relationship for the following and followed user" do
	user = insert(:user)
	other_user = insert(:user)

	{:ok, user, other_user} = User.follow(user, other_user)
	{:ok, other_user, user} = User.follow(other_user, user)
	{:ok, _subscription} = User.subscribe(user, other_user)
	{:ok, _user_relationships} = User.mute(user, other_user, %{notifications: true})
	{:ok, _reblog_mute} = CommonAPI.hide_reblogs(other_user, user)

	expected =
	Map.merge(
	@blank_response,
	%{
	following: true,
	followed_by: true,
	muting: true,
	muting_notifications: true,
	subscribing: true,
	notifying: true,
	showing_reblogs: false,
	id: to_string(other_user.id)
	}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "relationship does not indicate following if a FollowingRelationship is missing" do
	user = insert(:user)
	other_user = insert(:user, local: false)

	# Create a follow relationship with the real Follow Activity and Accept it
	assert {:ok, _, _, _} = CommonAPI.follow(other_user, user)
	assert {:ok, _} = CommonAPI.accept_follow_request(user, other_user)

	assert %{data: %{"state" => "accept"}} =
	Pleroma.Web.ActivityPub.Utils.fetch_latest_follow(user, other_user)

	# Fetch the relationship and forcibly delete it to simulate
	# a Follow Accept that did not complete processing
	%{following_relationships: [relationship]} =
	Pleroma.UserRelationship.view_relationships_option(user, [other_user])

	assert {:ok, _} = Pleroma.Repo.delete(relationship)

	assert %{following_relationships: [], user_relationships: []} ==
	Pleroma.UserRelationship.view_relationships_option(user, [other_user])

	expected =
	Map.merge(
	@blank_response,
	%{
	following: false,
	followed_by: false,
	muting: false,
	muting_notifications: false,
	subscribing: false,
	notifying: false,
	showing_reblogs: true,
	id: to_string(other_user.id)
	}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "represent a relationship for the blocking and blocked user" do
	user = insert(:user)
	other_user = insert(:user)

	{:ok, user, other_user} = User.follow(user, other_user)
	{:ok, _subscription} = User.subscribe(user, other_user)
	{:ok, _user_relationship} = User.block(user, other_user)
	{:ok, _user_relationship} = User.block(other_user, user)

	expected =
	Map.merge(
	@blank_response,
	%{following: false, blocking: true, blocked_by: true, id: to_string(other_user.id)}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "represent a relationship for the blocking and blocked user with expiry" do
	user = insert(:user)
	other_user = insert(:user)
	date = DateTime.utc_now() \|> DateTime.add(24 * 60 * 60) \|> DateTime.truncate(:second)

	{:ok, user, other_user} = User.follow(user, other_user)
	{:ok, _subscription} = User.subscribe(user, other_user)
	{:ok, _user_relationship} = User.block(user, other_user, %{duration: 24 * 60 * 60})
	{:ok, _user_relationship} = User.block(other_user, user)

	expected =
	Map.merge(
	@blank_response,
	%{
	following: false,
	blocking: true,
	block_expires_at: date,
	blocked_by: true,
	id: to_string(other_user.id)
	}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "represent a relationship for the muting user with expiry" do
	user = insert(:user)
	other_user = insert(:user)
	date = DateTime.utc_now() \|> DateTime.add(24 * 60 * 60) \|> DateTime.truncate(:second)

	{:ok, _user_relationship} =
	User.mute(user, other_user, %{notifications: true, duration: 24 * 60 * 60})

	expected =
	Map.merge(
	@blank_response,
	%{
	muting: true,
	mute_expires_at: date,
	muting_notifications: true,
	id: to_string(other_user.id)
	}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "represent a relationship for the user blocking a domain" do
	user = insert(:user)
	other_user = insert(:user, ap_id: "https://bad.site/users/other_user")

	{:ok, user} = User.block_domain(user, "bad.site")

	expected =
	Map.merge(
	@blank_response,
	%{domain_blocking: true, blocking: false, id: to_string(other_user.id)}
	)

	test_relationship_rendering(user, other_user, expected)
	end

	test "represent a relationship for the user with a pending follow request" do
	user = insert(:user)
	other_user = insert(:user, is_locked: true)

	{:ok, other_user, user, _} = CommonAPI.follow(other_user, user)
	user = User.get_cached_by_id(user.id)
	other_user = User.get_cached_by_id(other_user.id)

	expected =
	Map.merge(
	@blank_response,
	%{requested: true, following: false, id: to_string(other_user.id)}
	)

	test_relationship_rendering(user, other_user, expected)
	end
	end

	test "returns the settings store if the requesting user is the represented user and it's requested specifically" do
	user = insert(:user, pleroma_settings_store: %{fe: "test"})

	result =
	AccountView.render("show.json", %{user: user, for: user, with_pleroma_settings: true})

	assert result.pleroma.settings_store == %{:fe => "test"}

	result = AccountView.render("show.json", %{user: user, for: nil, with_pleroma_settings: true})
	assert result.pleroma[:settings_store] == nil

	result = AccountView.render("show.json", %{user: user, for: user})
	assert result.pleroma[:settings_store] == nil
	end

	test "doesn't sanitize display names" do
	user = insert(:user, name: "<marquee> username </marquee>")
	result = AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	assert result.display_name == "<marquee> username </marquee>"
	end

	test "never display nil user follow counts" do
	user = insert(:user, following_count: 0, follower_count: 0)
	result = AccountView.render("show.json", %{user: user, skip_visibility_check: true})

	assert result.following_count == 0
	assert result.followers_count == 0
	end

	describe "hiding follows/following" do
	test "shows when follows/followers stats are hidden and sets follow/follower count to 0" do
	user =
	insert(:user, %{
	hide_followers: true,
	hide_followers_count: true,
	hide_follows: true,
	hide_follows_count: true
	})

	other_user = insert(:user)
	{:ok, user, other_user, _activity} = CommonAPI.follow(other_user, user)
	{:ok, _other_user, user, _activity} = CommonAPI.follow(user, other_user)

	assert %{
	followers_count: 0,
	following_count: 0,
	pleroma: %{hide_follows_count: true, hide_followers_count: true}
	} = AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end

	test "shows when follows/followers are hidden" do
	user = insert(:user, hide_followers: true, hide_follows: true)
	other_user = insert(:user)
	{:ok, other_user, user, _activity} = CommonAPI.follow(other_user, user)
	{:ok, user, _other_user, _activity} = CommonAPI.follow(user, other_user)

	assert %{
	followers_count: 1,
	following_count: 1,
	pleroma: %{hide_follows: true, hide_followers: true}
	} = AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	end

	test "shows actual follower/following count to the account owner" do
	user = insert(:user, hide_followers: true, hide_follows: true)
	other_user = insert(:user)
	{:ok, other_user, user, _activity} = CommonAPI.follow(other_user, user)

	assert User.following?(user, other_user)
	assert Pleroma.FollowingRelationship.follower_count(other_user) == 1
	{:ok, user, _other_user, _activity} = CommonAPI.follow(user, other_user)

	assert %{
	followers_count: 1,
	following_count: 1
	} = AccountView.render("show.json", %{user: user, for: user})
	end

	test "shows unread_conversation_count only to the account owner" do
	user = insert(:user)
	other_user = insert(:user)

	{:ok, _activity} =
	CommonAPI.post(other_user, %{
	status: "Hey @#{user.nickname}.",
	visibility: "direct"
	})

	user = User.get_cached_by_ap_id(user.ap_id)

	assert AccountView.render("show.json", %{user: user, for: other_user})[:pleroma][
	:unread_conversation_count
	] == nil

	assert AccountView.render("show.json", %{user: user, for: user})[:pleroma][
	:unread_conversation_count
	] == 1
	end

	test "shows unread_count only to the account owner" do
	user = insert(:user)
	insert_list(7, :notification, user: user, activity: insert(:note_activity))
	other_user = insert(:user)

	user = User.get_cached_by_ap_id(user.ap_id)

	assert AccountView.render(
	"show.json",
	%{user: user, for: other_user}
	)[:pleroma][:unread_notifications_count] == nil

	assert AccountView.render(
	"show.json",
	%{user: user, for: user}
	)[:pleroma][:unread_notifications_count] == 7
	end

	test "shows email only to the account owner" do
	user = insert(:user)
	other_user = insert(:user)

	user = User.get_cached_by_ap_id(user.ap_id)

	assert AccountView.render(
	"show.json",
	%{user: user, for: other_user}
	)[:pleroma][:email] == nil

	assert AccountView.render(
	"show.json",
	%{user: user, for: user}
	)[:pleroma][:email] == user.email
	end
	end

	describe "hiding birthday" do
	test "doesn't show birthday if hidden" do
	user =
	insert(:user, %{
	birthday: "2001-02-12",
	show_birthday: false
	})

	other_user = insert(:user)

	user = User.get_cached_by_ap_id(user.ap_id)

	assert AccountView.render(
	"show.json",
	%{user: user, for: other_user}
	)[:birthday] == nil
	end

	test "shows hidden birthday to the account owner" do
	user =
	insert(:user, %{
	birthday: "2001-02-12",
	show_birthday: false
	})

	user = User.get_cached_by_ap_id(user.ap_id)

	assert AccountView.render(
	"show.json",
	%{user: user, for: user}
	)[:birthday] == nil
	end
	end

	describe "follow requests counter" do
	test "shows zero when no follow requests are pending" do
	user = insert(:user)

	assert %{follow_requests_count: 0} =
	AccountView.render("show.json", %{user: user, for: user})

	other_user = insert(:user)
	{:ok, _other_user, user, _activity} = CommonAPI.follow(user, other_user)

	assert %{follow_requests_count: 0} =
	AccountView.render("show.json", %{user: user, for: user})
	end

	test "shows non-zero when follow requests are pending" do
	user = insert(:user, is_locked: true)

	assert %{locked: true} = AccountView.render("show.json", %{user: user, for: user})

	other_user = insert(:user)
	{:ok, user, _other_user, _activity} = CommonAPI.follow(user, other_user)

	assert %{locked: true, follow_requests_count: 1} =
	AccountView.render("show.json", %{user: user, for: user})
	end

	test "decreases when accepting a follow request" do
	user = insert(:user, is_locked: true)

	assert %{locked: true} = AccountView.render("show.json", %{user: user, for: user})

	other_user = insert(:user)
	{:ok, user, other_user, _activity} = CommonAPI.follow(user, other_user)

	assert %{locked: true, follow_requests_count: 1} =
	AccountView.render("show.json", %{user: user, for: user})

	{:ok, _other_user} = CommonAPI.accept_follow_request(other_user, user)

	assert %{locked: true, follow_requests_count: 0} =
	AccountView.render("show.json", %{user: user, for: user})
	end

	test "decreases when rejecting a follow request" do
	user = insert(:user, is_locked: true)

	assert %{locked: true} = AccountView.render("show.json", %{user: user, for: user})

	other_user = insert(:user)
	{:ok, user, other_user, _activity} = CommonAPI.follow(user, other_user)

	assert %{locked: true, follow_requests_count: 1} =
	AccountView.render("show.json", %{user: user, for: user})

	{:ok, _other_user} = CommonAPI.reject_follow_request(other_user, user)

	assert %{locked: true, follow_requests_count: 0} =
	AccountView.render("show.json", %{user: user, for: user})
	end

	test "shows non-zero when historical unapproved requests are present" do
	user = insert(:user, is_locked: true)

	assert %{locked: true} = AccountView.render("show.json", %{user: user, for: user})

	other_user = insert(:user)
	{:ok, user, _other_user, _activity} = CommonAPI.follow(user, other_user)

	{:ok, user} = User.update_and_set_cache(user, %{is_locked: false})

	assert %{locked: false, follow_requests_count: 1} =
	AccountView.render("show.json", %{user: user, for: user})
	end
	end

	test "uses mediaproxy urls when it's enabled (regardless of media preview proxy state)" do
	clear_config([:media_proxy, :enabled], true)
	clear_config([:media_preview_proxy, :enabled])

	ConfigMock
	\|> stub_with(Pleroma.Test.StaticConfig)

	user =
	insert(:user,
	avatar: %{"url" => [%{"href" => "https://evil.website/avatar.png"}]},
	banner: %{"url" => [%{"href" => "https://evil.website/banner.png"}]},
	emoji: %{"joker_smile" => "https://evil.website/society.png"}
	)

	Enum.each([true, false], fn media_preview_enabled ->
	clear_config([:media_preview_proxy, :enabled], media_preview_enabled)

	AccountView.render("show.json", %{user: user, skip_visibility_check: true})
	\|> Enum.all?(fn
	{key, url} when key in [:avatar, :avatar_static, :header, :header_static] ->
	String.starts_with?(url, Pleroma.Web.Endpoint.url())

	{:emojis, emojis} ->
	Enum.all?(emojis, fn %{url: url, static_url: static_url} ->
	String.starts_with?(url, Pleroma.Web.Endpoint.url()) &&
	String.starts_with?(static_url, Pleroma.Web.Endpoint.url())
	end)

	_ ->
	true
	end)
	\|> assert()
	end)
	end

	test "renders mute expiration date" do
	user = insert(:user)
	other_user = insert(:user)

	{:ok, _user_relationships} =
	User.mute(user, other_user, %{notifications: true, duration: 24 * 60 * 60})

	%{
	pleroma: %{
	relationship: %{
	mute_expires_at: mute_expires_at
	}
	- },
	- mute_expires_at: mute_expires_at
	+ }
	} = AccountView.render("show.json", %{user: other_user, for: user, embed_relationships: true})

	assert DateTime.diff(
	mute_expires_at,
	DateTime.utc_now() \|> DateTime.add(24 * 60 * 60)
	) in -3..3
	end

	test "renders block expiration date" do
	user = insert(:user)
	other_user = insert(:user)

	{:ok, _user_relationships} =
	User.block(user, other_user, %{duration: 24 * 60 * 60})

	%{
	pleroma: %{
	relationship: %{
	block_expires_at: block_expires_at
	}
	- },
	- block_expires_at: block_expires_at
	+ }
	} = AccountView.render("show.json", %{user: other_user, for: user, embed_relationships: true})

	assert DateTime.diff(
	block_expires_at,
	DateTime.utc_now() \|> DateTime.add(24 * 60 * 60)
	) in -3..3
	end
	end

File Metadata

Mime Type: text/x-diff
Expires: Sun, Aug 30, 12:00 AM (1 d, 18 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 1737628
Default Alt Text: (48 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions