# Pleroma: A lightweight social networking server # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/> # SPDX-License-Identifier: AGPL-3.0-only defmodule Pleroma.Web.MastoFEController do use Pleroma.Web, :controller alias Pleroma.Plugs.OAuthScopesPlug alias Pleroma.User plug(OAuthScopesPlug, %{scopes: ["write:accounts"]} when action == :put_settings) # Note: :index action handles attempt of unauthenticated access to private instance with redirect plug( OAuthScopesPlug, %{scopes: ["read"], fallback: :proceed_unauthenticated, skip_instance_privacy_check: true} when action == :index ) plug(Pleroma.Plugs.EnsurePublicOrAuthenticatedPlug when action != :index) @doc "GET /web/*path" def index(%{assigns: %{user: user}} = conn, _params) do token = get_session(conn, :oauth_token) if user && token do conn |> put_layout(false) |> render("index.html", token: token, user: user, custom_emojis: Pleroma.Emoji.get_all()) else conn |> put_session(:return_to, conn.request_path) |> redirect(to: "/web/login") end end @doc "GET /web/manifest.json" def manifest(conn, _params) do conn |> render("manifest.json") end @doc "PUT /api/web/settings" def put_settings(%{assigns: %{user: user}} = conn, %{"data" => settings} = _params) do with {:ok, _} <- User.mastodon_settings_update(user, settings) do json(conn, %{}) else e -> conn |> put_status(:internal_server_error) |> json(%{error: inspect(e)}) end end end