# Pleroma: A lightweight social networking server # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/> # SPDX-License-Identifier: AGPL-3.0-only defmodule Pleroma.Web.MastoFEController do use Pleroma.Web, :controller alias Pleroma.Plugs.EnsurePublicOrAuthenticatedPlug alias Pleroma.Plugs.OAuthScopesPlug alias Pleroma.User plug(OAuthScopesPlug, %{scopes: ["write:accounts"]} when action == :put_settings) # Note: :index action handles attempt of unauthenticated access to private instance with redirect plug(:skip_plug, EnsurePublicOrAuthenticatedPlug when action == :index) plug( OAuthScopesPlug, %{scopes: ["read"], fallback: :proceed_unauthenticated} when action == :index ) plug( :skip_plug, [OAuthScopesPlug, EnsurePublicOrAuthenticatedPlug] when action == :manifest ) @doc "GET /web/*path" def index(%{assigns: %{user: user, token: token}} = conn, _params) when not is_nil(user) and not is_nil(token) do conn |> put_layout(false) |> render("index.html", token: token.token, user: user, custom_emojis: Pleroma.Emoji.get_all() ) end def index(conn, _params) do conn |> put_session(:return_to, conn.request_path) |> redirect(to: "/web/login") end @doc "GET /web/manifest.json" def manifest(conn, _params) do conn |> render("manifest.json") end @doc "PUT /api/web/settings" def put_settings(%{assigns: %{user: user}} = conn, %{"data" => settings} = _params) do with {:ok, _} <- User.mastodon_settings_update(user, settings) do json(conn, %{}) else e -> conn |> put_status(:internal_server_error) |> json(%{error: inspect(e)}) end end end