diff options
Diffstat (limited to 'test/web')
23 files changed, 1713 insertions, 536 deletions
| diff --git a/test/web/activity_pub/activity_pub_controller_test.exs b/test/web/activity_pub/activity_pub_controller_test.exs index 8dd8e7e0a..30adfda36 100644 --- a/test/web/activity_pub/activity_pub_controller_test.exs +++ b/test/web/activity_pub/activity_pub_controller_test.exs @@ -50,7 +50,7 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do          |> put_req_header("accept", "application/json")          |> get("/users/#{user.nickname}") -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert json_response(conn, 200) == UserView.render("user.json", %{user: user})      end @@ -65,7 +65,7 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do          |> put_req_header("accept", "application/activity+json")          |> get("/users/#{user.nickname}") -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert json_response(conn, 200) == UserView.render("user.json", %{user: user})      end @@ -83,7 +83,7 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do          )          |> get("/users/#{user.nickname}") -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert json_response(conn, 200) == UserView.render("user.json", %{user: user})      end @@ -253,6 +253,36 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do        assert Activity.get_by_ap_id(data["id"])      end +    test "it accepts messages from actors that are followed by the user", %{conn: conn} do +      recipient = insert(:user) +      actor = insert(:user, %{ap_id: "http://mastodon.example.org/users/actor"}) + +      {:ok, recipient} = User.follow(recipient, actor) + +      data = +        File.read!("test/fixtures/mastodon-post-activity.json") +        |> Poison.decode!() + +      object = +        data["object"] +        |> Map.put("attributedTo", actor.ap_id) + +      data = +        data +        |> Map.put("actor", actor.ap_id) +        |> Map.put("object", object) + +      conn = +        conn +        |> assign(:valid_signature, true) +        |> put_req_header("content-type", "application/activity+json") +        |> post("/users/#{recipient.nickname}/inbox", data) + +      assert "ok" == json_response(conn, 200) +      :timer.sleep(500) +      assert Activity.get_by_ap_id(data["id"]) +    end +      test "it rejects reads from other users", %{conn: conn} do        user = insert(:user)        otheruser = insert(:user) @@ -542,7 +572,7 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubControllerTest do        user = insert(:user)        Enum.each(1..15, fn _ -> -        user = User.get_by_id(user.id) +        user = User.get_cached_by_id(user.id)          other_user = insert(:user)          User.follow(user, other_user)        end) diff --git a/test/web/activity_pub/activity_pub_test.exs b/test/web/activity_pub/activity_pub_test.exs index c3911500e..15276ba7b 100644 --- a/test/web/activity_pub/activity_pub_test.exs +++ b/test/web/activity_pub/activity_pub_test.exs @@ -84,17 +84,21 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        {:ok, status_two} = CommonAPI.post(user, %{"status" => ". #essais"})        {:ok, status_three} = CommonAPI.post(user, %{"status" => ". #test #reject"}) -      fetch_one = ActivityPub.fetch_activities([], %{"tag" => "test"}) -      fetch_two = ActivityPub.fetch_activities([], %{"tag" => ["test", "essais"]}) +      fetch_one = ActivityPub.fetch_activities([], %{"type" => "Create", "tag" => "test"}) + +      fetch_two = +        ActivityPub.fetch_activities([], %{"type" => "Create", "tag" => ["test", "essais"]})        fetch_three =          ActivityPub.fetch_activities([], %{ +          "type" => "Create",            "tag" => ["test", "essais"],            "tag_reject" => ["reject"]          })        fetch_four =          ActivityPub.fetch_activities([], %{ +          "type" => "Create",            "tag" => ["test"],            "tag_all" => ["test", "reject"]          }) @@ -226,8 +230,10 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        }        {:ok, %Activity{} = activity} = ActivityPub.insert(data) -      assert is_binary(activity.data["object"]["id"]) -      assert %Object{} = Object.get_by_ap_id(activity.data["object"]["id"]) +      object = Object.normalize(activity.data["object"]) + +      assert is_binary(object.data["id"]) +      assert %Object{} = Object.get_by_ap_id(activity.data["object"])      end    end @@ -240,7 +246,11 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do            to: ["user1", "user1", "user2"],            actor: user,            context: "", -          object: %{} +          object: %{ +            "to" => ["user1", "user1", "user2"], +            "type" => "Note", +            "content" => "testing" +          }          })        assert activity.data["to"] == ["user1", "user2"] @@ -252,18 +262,30 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        user = insert(:user)        {:ok, _} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "1", "visibility" => "public"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "1", +          "visibility" => "public" +        })        {:ok, _} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "2", "visibility" => "unlisted"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "2", +          "visibility" => "unlisted" +        })        {:ok, _} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "2", "visibility" => "private"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "2", +          "visibility" => "private" +        })        {:ok, _} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "3", "visibility" => "direct"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "3", +          "visibility" => "direct" +        }) -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.note_count == 2      end @@ -278,25 +300,21 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        # public        {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, "visibility", "public"))        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 1        assert object.data["repliesCount"] == 1        # unlisted        {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, "visibility", "unlisted"))        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 2        assert object.data["repliesCount"] == 2        # private        {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, "visibility", "private"))        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 2        assert object.data["repliesCount"] == 2        # direct        {:ok, _} = CommonAPI.post(user2, Map.put(reply_data, "visibility", "direct"))        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 2        assert object.data["repliesCount"] == 2      end    end @@ -375,6 +393,51 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do      assert Enum.member?(activities, activity_one)    end +  test "doesn't return transitive interactions concerning blocked users" do +    blocker = insert(:user) +    blockee = insert(:user) +    friend = insert(:user) + +    {:ok, blocker} = User.block(blocker, blockee) + +    {:ok, activity_one} = CommonAPI.post(friend, %{"status" => "hey!"}) + +    {:ok, activity_two} = CommonAPI.post(friend, %{"status" => "hey! @#{blockee.nickname}"}) + +    {:ok, activity_three} = CommonAPI.post(blockee, %{"status" => "hey! @#{friend.nickname}"}) + +    {:ok, activity_four} = CommonAPI.post(blockee, %{"status" => "hey! @#{blocker.nickname}"}) + +    activities = ActivityPub.fetch_activities([], %{"blocking_user" => blocker}) + +    assert Enum.member?(activities, activity_one) +    refute Enum.member?(activities, activity_two) +    refute Enum.member?(activities, activity_three) +    refute Enum.member?(activities, activity_four) +  end + +  test "doesn't return announce activities concerning blocked users" do +    blocker = insert(:user) +    blockee = insert(:user) +    friend = insert(:user) + +    {:ok, blocker} = User.block(blocker, blockee) + +    {:ok, activity_one} = CommonAPI.post(friend, %{"status" => "hey!"}) + +    {:ok, activity_two} = CommonAPI.post(blockee, %{"status" => "hey! @#{friend.nickname}"}) + +    {:ok, activity_three, _} = CommonAPI.repeat(activity_two.id, friend) + +    activities = +      ActivityPub.fetch_activities([], %{"blocking_user" => blocker}) +      |> Enum.map(fn act -> act.id end) + +    assert Enum.member?(activities, activity_one.id) +    refute Enum.member?(activities, activity_two.id) +    refute Enum.member?(activities, activity_three.id) +  end +    test "doesn't return muted activities" do      activity_one = insert(:note_activity)      activity_two = insert(:note_activity) @@ -669,40 +732,13 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do      end    end -  describe "fetching an object" do -    test "it fetches an object" do -      {:ok, object} = -        ActivityPub.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367") - -      assert activity = Activity.get_create_by_object_ap_id(object.data["id"]) -      assert activity.data["id"] - -      {:ok, object_again} = -        ActivityPub.fetch_object_from_id("http://mastodon.example.org/@admin/99541947525187367") - -      assert [attachment] = object.data["attachment"] -      assert is_list(attachment["url"]) - -      assert object == object_again -    end - -    test "it works with objects only available via Ostatus" do -      {:ok, object} = ActivityPub.fetch_object_from_id("https://shitposter.club/notice/2827873") -      assert activity = Activity.get_create_by_object_ap_id(object.data["id"]) -      assert activity.data["id"] - -      {:ok, object_again} = -        ActivityPub.fetch_object_from_id("https://shitposter.club/notice/2827873") - -      assert object == object_again -    end - -    test "it correctly stitches up conversations between ostatus and ap" do -      last = "https://mstdn.io/users/mayuutann/statuses/99568293732299394" -      {:ok, object} = ActivityPub.fetch_object_from_id(last) +  describe "fetch the latest Follow" do +    test "fetches the latest Follow activity" do +      %Activity{data: %{"type" => "Follow"}} = activity = insert(:follow_activity) +      follower = Repo.get_by(User, ap_id: activity.data["actor"]) +      followed = Repo.get_by(User, ap_id: activity.data["object"]) -      object = Object.get_by_ap_id(object.data["inReplyTo"]) -      assert object +      assert activity == Utils.fetch_latest_follow(follower, followed)      end    end @@ -782,23 +818,35 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        user = insert(:user, info: %{note_count: 10})        {:ok, a1} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "yeah", "visibility" => "public"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "yeah", +          "visibility" => "public" +        })        {:ok, a2} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "yeah", "visibility" => "unlisted"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "yeah", +          "visibility" => "unlisted" +        })        {:ok, a3} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "yeah", "visibility" => "private"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "yeah", +          "visibility" => "private" +        })        {:ok, a4} = -        CommonAPI.post(User.get_by_id(user.id), %{"status" => "yeah", "visibility" => "direct"}) +        CommonAPI.post(User.get_cached_by_id(user.id), %{ +          "status" => "yeah", +          "visibility" => "direct" +        }) -      {:ok, _} = a1.data["object"]["id"] |> Object.get_by_ap_id() |> ActivityPub.delete() -      {:ok, _} = a2.data["object"]["id"] |> Object.get_by_ap_id() |> ActivityPub.delete() -      {:ok, _} = a3.data["object"]["id"] |> Object.get_by_ap_id() |> ActivityPub.delete() -      {:ok, _} = a4.data["object"]["id"] |> Object.get_by_ap_id() |> ActivityPub.delete() +      {:ok, _} = Object.normalize(a1) |> ActivityPub.delete() +      {:ok, _} = Object.normalize(a2) |> ActivityPub.delete() +      {:ok, _} = Object.normalize(a3) |> ActivityPub.delete() +      {:ok, _} = Object.normalize(a4) |> ActivityPub.delete() -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.note_count == 10      end @@ -838,22 +886,18 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        _ = CommonAPI.delete(direct_reply.id, user2)        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 2        assert object.data["repliesCount"] == 2        _ = CommonAPI.delete(private_reply.id, user2)        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 2        assert object.data["repliesCount"] == 2        _ = CommonAPI.delete(public_reply.id, user2)        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 1        assert object.data["repliesCount"] == 1        _ = CommonAPI.delete(unlisted_reply.id, user2)        assert %{data: data, object: object} = Activity.get_by_ap_id_with_object(ap_id) -      assert data["object"]["repliesCount"] == 0        assert object.data["repliesCount"] == 0      end    end @@ -895,7 +939,10 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do        activities = ActivityPub.fetch_activities([user1.ap_id | user1.following])        private_activity_1 = Activity.get_by_ap_id_with_object(private_activity_1.data["id"]) -      assert [public_activity, private_activity_1, private_activity_3] == activities + +      assert [public_activity, private_activity_1, private_activity_3] == +               activities +        assert length(activities) == 3        activities = ActivityPub.contain_timeline(activities, user1) @@ -905,15 +952,6 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do      end    end -  test "it can fetch plume articles" do -    {:ok, object} = -      ActivityPub.fetch_object_from_id( -        "https://baptiste.gelez.xyz/~/PlumeDevelopment/this-month-in-plume-june-2018/" -      ) - -    assert object -  end -    describe "update" do      test "it creates an update activity with the new user data" do        user = insert(:user) @@ -935,15 +973,6 @@ defmodule Pleroma.Web.ActivityPub.ActivityPubTest do      end    end -  test "it can fetch peertube videos" do -    {:ok, object} = -      ActivityPub.fetch_object_from_id( -        "https://peertube.moe/videos/watch/df5f464b-be8d-46fb-ad81-2d4c2d1630e3" -      ) - -    assert object -  end -    test "returned pinned statuses" do      Pleroma.Config.put([:instance, :max_pinned_statuses], 3)      user = insert(:user) diff --git a/test/web/activity_pub/transmogrifier_test.exs b/test/web/activity_pub/transmogrifier_test.exs index 47cffe257..c24b50f8c 100644 --- a/test/web/activity_pub/transmogrifier_test.exs +++ b/test/web/activity_pub/transmogrifier_test.exs @@ -6,6 +6,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do    use Pleroma.DataCase    alias Pleroma.Activity    alias Pleroma.Object +  alias Pleroma.Object.Fetcher    alias Pleroma.Repo    alias Pleroma.User    alias Pleroma.Web.ActivityPub.ActivityPub @@ -50,16 +51,14 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do          |> Map.put("object", object)        {:ok, returned_activity} = Transmogrifier.handle_incoming(data) +      returned_object = Object.normalize(returned_activity.data["object"])        assert activity =                 Activity.get_create_by_object_ap_id(                   "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"                 ) -      assert returned_activity.data["object"]["inReplyToAtomUri"] == -               "https://shitposter.club/notice/2827873" - -      assert returned_activity.data["object"]["inReplyToStatusId"] == activity.id +      assert returned_object.data["inReplyToAtomUri"] == "https://shitposter.club/notice/2827873"      end      test "it works for incoming notices" do @@ -82,7 +81,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["actor"] == "http://mastodon.example.org/users/admin" -      object = data["object"] +      object = Object.normalize(data["object"]).data        assert object["id"] == "http://mastodon.example.org/users/admin/statuses/99512778738411822"        assert object["to"] == ["https://www.w3.org/ns/activitystreams#Public"] @@ -100,7 +99,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert object["sensitive"] == true -      user = User.get_by_ap_id(object["actor"]) +      user = User.get_cached_by_ap_id(object["actor"])        assert user.info.note_count == 1      end @@ -109,7 +108,9 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data = File.read!("test/fixtures/mastodon-post-activity-hashtag.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) -      assert Enum.at(data["object"]["tag"], 2) == "moo" +      object = Object.normalize(data["object"]) + +      assert Enum.at(object.data["tag"], 2) == "moo"      end      test "it works for incoming notices with contentMap" do @@ -117,8 +118,9 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do          File.read!("test/fixtures/mastodon-post-activity-contentmap.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      object = Object.normalize(data["object"]) -      assert data["object"]["content"] == +      assert object.data["content"] ==                 "<p><span class=\"h-card\"><a href=\"http://localtesting.pleroma.lol/users/lain\" class=\"u-url mention\">@<span>lain</span></a></span></p>"      end @@ -126,8 +128,9 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data = File.read!("test/fixtures/kroeg-post-activity.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      object = Object.normalize(data["object"]) -      assert data["object"]["content"] == +      assert object.data["content"] ==                 "<p>henlo from my Psion netBook</p><p>message sent from my Psion netBook</p>"      end @@ -143,24 +146,27 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data = File.read!("test/fixtures/kroeg-array-less-emoji.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      object = Object.normalize(data["object"]) -      assert data["object"]["emoji"] == %{ +      assert object.data["emoji"] == %{                 "icon_e_smile" => "https://puckipedia.com/forum/images/smilies/icon_e_smile.png"               }        data = File.read!("test/fixtures/kroeg-array-less-hashtag.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      object = Object.normalize(data["object"]) -      assert "test" in data["object"]["tag"] +      assert "test" in object.data["tag"]      end      test "it works for incoming notices with url not being a string (prismo)" do        data = File.read!("test/fixtures/prismo-url-map.json") |> Poison.decode!()        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      object = Object.normalize(data["object"]) -      assert data["object"]["url"] == "https://prismo.news/posts/83" +      assert object.data["url"] == "https://prismo.news/posts/83"      end      test "it cleans up incoming notices which are not really DMs" do @@ -182,15 +188,15 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data = Map.put(data, "object", object) -      {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) +      {:ok, %Activity{data: data, local: false} = activity} = Transmogrifier.handle_incoming(data)        assert data["to"] == []        assert data["cc"] == to -      object = data["object"] +      object_data = Object.normalize(activity).data -      assert object["to"] == [] -      assert object["cc"] == to +      assert object_data["to"] == [] +      assert object_data["cc"] == to      end      test "it works for incoming follow requests" do @@ -206,7 +212,27 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["actor"] == "http://mastodon.example.org/users/admin"        assert data["type"] == "Follow"        assert data["id"] == "http://mastodon.example.org/users/admin#follows/2" -      assert User.following?(User.get_by_ap_id(data["actor"]), user) +      assert User.following?(User.get_cached_by_ap_id(data["actor"]), user) +    end + +    test "it rejects incoming follow requests from blocked users when deny_follow_blocked is enabled" do +      Pleroma.Config.put([:user, :deny_follow_blocked], true) + +      user = insert(:user) +      {:ok, target} = User.get_or_fetch("http://mastodon.example.org/users/admin") + +      {:ok, user} = User.block(user, target) + +      data = +        File.read!("test/fixtures/mastodon-follow-activity.json") +        |> Poison.decode!() +        |> Map.put("object", user.ap_id) + +      {:ok, %Activity{data: %{"id" => id}}} = Transmogrifier.handle_incoming(data) + +      %Activity{} = activity = Activity.get_by_ap_id(id) + +      assert activity.data["state"] == "reject"      end      test "it works for incoming follow requests from hubzilla" do @@ -223,7 +249,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["actor"] == "https://hubzilla.example.org/channel/kaniini"        assert data["type"] == "Follow"        assert data["id"] == "https://hubzilla.example.org/channel/kaniini#follows/2" -      assert User.following?(User.get_by_ap_id(data["actor"]), user) +      assert User.following?(User.get_cached_by_ap_id(data["actor"]), user)      end      test "it works for incoming likes" do @@ -233,14 +259,14 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data =          File.read!("test/fixtures/mastodon-like.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", activity.data["object"])        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data)        assert data["actor"] == "http://mastodon.example.org/users/admin"        assert data["type"] == "Like"        assert data["id"] == "http://mastodon.example.org/users/admin#likes/2" -      assert data["object"] == activity.data["object"]["id"] +      assert data["object"] == activity.data["object"]      end      test "it returns an error for incoming unlikes wihout a like activity" do @@ -250,7 +276,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data =          File.read!("test/fixtures/mastodon-undo-like.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", activity.data["object"])        assert Transmogrifier.handle_incoming(data) == :error      end @@ -262,7 +288,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        like_data =          File.read!("test/fixtures/mastodon-like.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", activity.data["object"])        {:ok, %Activity{data: like_data, local: false}} = Transmogrifier.handle_incoming(like_data) @@ -304,7 +330,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data =          File.read!("test/fixtures/mastodon-announce.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", activity.data["object"])        {:ok, %Activity{data: data, local: false}} = Transmogrifier.handle_incoming(data) @@ -314,7 +340,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["id"] ==                 "http://mastodon.example.org/users/admin/statuses/99542391527669785/activity" -      assert data["object"] == activity.data["object"]["id"] +      assert data["object"] == activity.data["object"]        assert Activity.get_create_by_object_ap_id(data["object"]).id == activity.id      end @@ -326,7 +352,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        data =          File.read!("test/fixtures/mastodon-announce.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", Object.normalize(activity).data["id"])          |> Map.put("to", ["http://mastodon.example.org/users/admin/followers"])          |> Map.put("cc", []) @@ -452,7 +478,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        object =          data["object"] -        |> Map.put("id", activity.data["object"]["id"]) +        |> Map.put("id", activity.data["object"])        data =          data @@ -473,7 +499,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        object =          data["object"] -        |> Map.put("id", activity.data["object"]["id"]) +        |> Map.put("id", activity.data["object"])        data =          data @@ -491,7 +517,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        announce_data =          File.read!("test/fixtures/mastodon-announce.json")          |> Poison.decode!() -        |> Map.put("object", activity.data["object"]["id"]) +        |> Map.put("object", activity.data["object"])        {:ok, %Activity{data: announce_data, local: false}} =          Transmogrifier.handle_incoming(announce_data) @@ -506,7 +532,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["type"] == "Undo"        assert data["object"]["type"] == "Announce" -      assert data["object"]["object"] == activity.data["object"]["id"] +      assert data["object"]["object"] == activity.data["object"]        assert data["object"]["id"] ==                 "http://mastodon.example.org/users/admin/statuses/99542391527669785/activity" @@ -534,7 +560,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["object"]["object"] == user.ap_id        assert data["actor"] == "http://mastodon.example.org/users/admin" -      refute User.following?(User.get_by_ap_id(data["actor"]), user) +      refute User.following?(User.get_cached_by_ap_id(data["actor"]), user)      end      test "it works for incoming blocks" do @@ -551,7 +577,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["object"] == user.ap_id        assert data["actor"] == "http://mastodon.example.org/users/admin" -      blocker = User.get_by_ap_id(data["actor"]) +      blocker = User.get_cached_by_ap_id(data["actor"])        assert User.blocks?(blocker, user)      end @@ -578,8 +604,8 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["object"] == blocked.ap_id        assert data["actor"] == blocker.ap_id -      blocker = User.get_by_ap_id(data["actor"]) -      blocked = User.get_by_ap_id(data["object"]) +      blocker = User.get_cached_by_ap_id(data["actor"]) +      blocked = User.get_cached_by_ap_id(data["object"])        assert User.blocks?(blocker, blocked) @@ -608,7 +634,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert data["object"]["object"] == user.ap_id        assert data["actor"] == "http://mastodon.example.org/users/admin" -      blocker = User.get_by_ap_id(data["actor"]) +      blocker = User.get_cached_by_ap_id(data["actor"])        refute User.blocks?(blocker, user)      end @@ -639,7 +665,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert activity.data["object"] == follow_activity.data["id"] -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, followed) == true      end @@ -661,7 +687,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        {:ok, activity} = Transmogrifier.handle_incoming(accept_data)        assert activity.data["object"] == follow_activity.data["id"] -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, followed) == true      end @@ -681,7 +707,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        {:ok, activity} = Transmogrifier.handle_incoming(accept_data)        assert activity.data["object"] == follow_activity.data["id"] -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, followed) == true      end @@ -700,7 +726,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        :error = Transmogrifier.handle_incoming(accept_data) -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        refute User.following?(follower, followed) == true      end @@ -719,7 +745,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        :error = Transmogrifier.handle_incoming(accept_data) -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        refute User.following?(follower, followed) == true      end @@ -744,7 +770,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        {:ok, activity} = Transmogrifier.handle_incoming(reject_data)        refute activity.local -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, followed) == false      end @@ -766,7 +792,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        {:ok, %Activity{data: _}} = Transmogrifier.handle_incoming(reject_data) -      follower = User.get_by_id(follower.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, followed) == false      end @@ -785,7 +811,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do      test "it remaps video URLs as attachments if necessary" do        {:ok, object} = -        ActivityPub.fetch_object_from_id( +        Fetcher.fetch_object_from_id(            "https://peertube.moe/videos/watch/df5f464b-be8d-46fb-ad81-2d4c2d1630e3"          ) @@ -940,7 +966,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do      test "it strips internal fields" do        user = insert(:user) -      {:ok, activity} = CommonAPI.post(user, %{"status" => "#2hu :moominmamma:"}) +      {:ok, activity} = CommonAPI.post(user, %{"status" => "#2hu :firefox:"})        {:ok, modified} = Transmogrifier.prepare_outgoing(activity.data) @@ -1020,7 +1046,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        {:ok, unrelated_activity} = CommonAPI.post(user_two, %{"status" => "test"})        assert "http://localhost:4001/users/rye@niu.moe/followers" in activity.recipients -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.note_count == 1        {:ok, user} = Transmogrifier.upgrade_user_from_ap_id("https://niu.moe/users/rye") @@ -1028,7 +1054,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        assert user.info.note_count == 1        assert user.follower_address == "https://niu.moe/users/rye/followers" -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.note_count == 1        activity = Activity.get_by_id(activity.id) @@ -1057,7 +1083,7 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        unrelated_activity = Activity.get_by_id(unrelated_activity.id)        refute user.follower_address in unrelated_activity.recipients -      user_two = User.get_by_id(user_two.id) +      user_two = User.get_cached_by_id(user_two.id)        assert user.follower_address in user_two.following        refute "..." in user_two.following      end @@ -1090,10 +1116,6 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do    end    describe "actor origin containment" do -    test "it rejects objects with a bogus origin" do -      {:error, _} = ActivityPub.fetch_object_from_id("https://info.pleroma.site/activity.json") -    end -      test "it rejects activities which reference objects with bogus origins" do        data = %{          "@context" => "https://www.w3.org/ns/activitystreams", @@ -1107,10 +1129,6 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        :error = Transmogrifier.handle_incoming(data)      end -    test "it rejects objects when attributedTo is wrong (variant 1)" do -      {:error, _} = ActivityPub.fetch_object_from_id("https://info.pleroma.site/activity2.json") -    end -      test "it rejects activities which reference objects that have an incorrect attribution (variant 1)" do        data = %{          "@context" => "https://www.w3.org/ns/activitystreams", @@ -1124,10 +1142,6 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do        :error = Transmogrifier.handle_incoming(data)      end -    test "it rejects objects when attributedTo is wrong (variant 2)" do -      {:error, _} = ActivityPub.fetch_object_from_id("https://info.pleroma.site/activity3.json") -    end -      test "it rejects activities which reference objects that have an incorrect attribution (variant 2)" do        data = %{          "@context" => "https://www.w3.org/ns/activitystreams", @@ -1142,62 +1156,6 @@ defmodule Pleroma.Web.ActivityPub.TransmogrifierTest do      end    end -  describe "general origin containment" do -    test "contain_origin_from_id() catches obvious spoofing attempts" do -      data = %{ -        "id" => "http://example.com/~alyssa/activities/1234.json" -      } - -      :error = -        Transmogrifier.contain_origin_from_id( -          "http://example.org/~alyssa/activities/1234.json", -          data -        ) -    end - -    test "contain_origin_from_id() allows alternate IDs within the same origin domain" do -      data = %{ -        "id" => "http://example.com/~alyssa/activities/1234.json" -      } - -      :ok = -        Transmogrifier.contain_origin_from_id( -          "http://example.com/~alyssa/activities/1234", -          data -        ) -    end - -    test "contain_origin_from_id() allows matching IDs" do -      data = %{ -        "id" => "http://example.com/~alyssa/activities/1234.json" -      } - -      :ok = -        Transmogrifier.contain_origin_from_id( -          "http://example.com/~alyssa/activities/1234.json", -          data -        ) -    end - -    test "users cannot be collided through fake direction spoofing attempts" do -      insert(:user, %{ -        nickname: "rye@niu.moe", -        local: false, -        ap_id: "https://niu.moe/users/rye", -        follower_address: User.ap_followers(%User{nickname: "rye@niu.moe"}) -      }) - -      {:error, _} = User.get_or_fetch_by_ap_id("https://n1u.moe/users/rye") -    end - -    test "all objects with fake directions are rejected by the object fetcher" do -      {:error, _} = -        ActivityPub.fetch_and_contain_remote_object_from_id( -          "https://info.pleroma.site/activity4.json" -        ) -    end -  end -    describe "reserialization" do      test "successfully reserializes a message with inReplyTo == nil" do        user = insert(:user) diff --git a/test/web/activity_pub/utils_test.exs b/test/web/activity_pub/utils_test.exs index 758214e68..c57fae437 100644 --- a/test/web/activity_pub/utils_test.exs +++ b/test/web/activity_pub/utils_test.exs @@ -1,7 +1,6 @@  defmodule Pleroma.Web.ActivityPub.UtilsTest do    use Pleroma.DataCase    alias Pleroma.Activity -  alias Pleroma.Repo    alias Pleroma.User    alias Pleroma.Web.ActivityPub.ActivityPub    alias Pleroma.Web.ActivityPub.Utils @@ -12,8 +11,8 @@ defmodule Pleroma.Web.ActivityPub.UtilsTest do    describe "fetch the latest Follow" do      test "fetches the latest Follow activity" do        %Activity{data: %{"type" => "Follow"}} = activity = insert(:follow_activity) -      follower = Repo.get_by(User, ap_id: activity.data["actor"]) -      followed = Repo.get_by(User, ap_id: activity.data["object"]) +      follower = User.get_cached_by_ap_id(activity.data["actor"]) +      followed = User.get_cached_by_ap_id(activity.data["object"])        assert activity == Utils.fetch_latest_follow(follower, followed)      end diff --git a/test/web/admin_api/admin_api_controller_test.exs b/test/web/admin_api/admin_api_controller_test.exs index ca6bd0e97..b89c42327 100644 --- a/test/web/admin_api/admin_api_controller_test.exs +++ b/test/web/admin_api/admin_api_controller_test.exs @@ -6,6 +6,7 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do    use Pleroma.Web.ConnCase    alias Pleroma.User +  alias Pleroma.UserInviteToken    import Pleroma.Factory    describe "/api/pleroma/admin/user" do @@ -88,8 +89,8 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do          "followed" => user.nickname        }) -      user = User.get_by_id(user.id) -      follower = User.get_by_id(follower.id) +      user = User.get_cached_by_id(user.id) +      follower = User.get_cached_by_id(follower.id)        assert User.following?(follower, user)      end @@ -111,8 +112,8 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do          "followed" => user.nickname        }) -      user = User.get_by_id(user.id) -      follower = User.get_by_id(follower.id) +      user = User.get_cached_by_id(user.id) +      follower = User.get_cached_by_id(follower.id)        refute User.following?(follower, user)      end @@ -144,13 +145,13 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do        user2: user2      } do        assert json_response(conn, :no_content) -      assert User.get_by_id(user1.id).tags == ["x", "foo", "bar"] -      assert User.get_by_id(user2.id).tags == ["y", "foo", "bar"] +      assert User.get_cached_by_id(user1.id).tags == ["x", "foo", "bar"] +      assert User.get_cached_by_id(user2.id).tags == ["y", "foo", "bar"]      end      test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do        assert json_response(conn, :no_content) -      assert User.get_by_id(user3.id).tags == ["unchanged"] +      assert User.get_cached_by_id(user3.id).tags == ["unchanged"]      end    end @@ -180,13 +181,13 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do        user2: user2      } do        assert json_response(conn, :no_content) -      assert User.get_by_id(user1.id).tags == [] -      assert User.get_by_id(user2.id).tags == ["y"] +      assert User.get_cached_by_id(user1.id).tags == [] +      assert User.get_cached_by_id(user2.id).tags == ["y"]      end      test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do        assert json_response(conn, :no_content) -      assert User.get_by_id(user3.id).tags == ["unchanged"] +      assert User.get_cached_by_id(user3.id).tags == ["unchanged"]      end    end @@ -256,7 +257,7 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do          conn          |> put("/api/pleroma/admin/activation_status/#{user.nickname}", %{status: false}) -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.deactivated == true        assert json_response(conn, :no_content)      end @@ -268,7 +269,7 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do          conn          |> put("/api/pleroma/admin/activation_status/#{user.nickname}", %{status: true}) -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        assert user.info.deactivated == false        assert json_response(conn, :no_content)      end @@ -316,13 +317,21 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do        assert token_record        refute token_record.used -      Swoosh.TestAssertions.assert_email_sent( -        Pleroma.UserEmail.user_invitation_email( +      notify_email = Pleroma.Config.get([:instance, :notify_email]) +      instance_name = Pleroma.Config.get([:instance, :name]) + +      email = +        Pleroma.Emails.UserEmail.user_invitation_email(            user,            token_record,            recipient_email,            recipient_name          ) + +      Swoosh.TestAssertions.assert_email_sent( +        from: {instance_name, notify_email}, +        to: {recipient_name, recipient_email}, +        html_body: email.html_body        )      end @@ -640,4 +649,136 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do                 "tags" => []               }    end + +  describe "GET /api/pleroma/admin/invite_token" do +    test "without options" do +      admin = insert(:user, info: %{is_admin: true}) + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invite_token") + +      token = json_response(conn, 200) +      invite = UserInviteToken.find_by_token!(token) +      refute invite.used +      refute invite.expires_at +      refute invite.max_use +      assert invite.invite_type == "one_time" +    end + +    test "with expires_at" do +      admin = insert(:user, info: %{is_admin: true}) + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invite_token", %{ +          "invite" => %{"expires_at" => Date.to_string(Date.utc_today())} +        }) + +      token = json_response(conn, 200) +      invite = UserInviteToken.find_by_token!(token) + +      refute invite.used +      assert invite.expires_at == Date.utc_today() +      refute invite.max_use +      assert invite.invite_type == "date_limited" +    end + +    test "with max_use" do +      admin = insert(:user, info: %{is_admin: true}) + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invite_token", %{ +          "invite" => %{"max_use" => 150} +        }) + +      token = json_response(conn, 200) +      invite = UserInviteToken.find_by_token!(token) +      refute invite.used +      refute invite.expires_at +      assert invite.max_use == 150 +      assert invite.invite_type == "reusable" +    end + +    test "with max use and expires_at" do +      admin = insert(:user, info: %{is_admin: true}) + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invite_token", %{ +          "invite" => %{"max_use" => 150, "expires_at" => Date.to_string(Date.utc_today())} +        }) + +      token = json_response(conn, 200) +      invite = UserInviteToken.find_by_token!(token) +      refute invite.used +      assert invite.expires_at == Date.utc_today() +      assert invite.max_use == 150 +      assert invite.invite_type == "reusable_date_limited" +    end +  end + +  describe "GET /api/pleroma/admin/invites" do +    test "no invites" do +      admin = insert(:user, info: %{is_admin: true}) + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invites") + +      assert json_response(conn, 200) == %{"invites" => []} +    end + +    test "with invite" do +      admin = insert(:user, info: %{is_admin: true}) +      {:ok, invite} = UserInviteToken.create_invite() + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> get("/api/pleroma/admin/invites") + +      assert json_response(conn, 200) == %{ +               "invites" => [ +                 %{ +                   "expires_at" => nil, +                   "id" => invite.id, +                   "invite_type" => "one_time", +                   "max_use" => nil, +                   "token" => invite.token, +                   "used" => false, +                   "uses" => 0 +                 } +               ] +             } +    end +  end + +  describe "POST /api/pleroma/admin/revoke_invite" do +    test "with token" do +      admin = insert(:user, info: %{is_admin: true}) +      {:ok, invite} = UserInviteToken.create_invite() + +      conn = +        build_conn() +        |> assign(:user, admin) +        |> post("/api/pleroma/admin/revoke_invite", %{"token" => invite.token}) + +      assert json_response(conn, 200) == %{ +               "expires_at" => nil, +               "id" => invite.id, +               "invite_type" => "one_time", +               "max_use" => nil, +               "token" => invite.token, +               "used" => true, +               "uses" => 0 +             } +    end +  end  end diff --git a/test/web/auth/authenticator_test.exs b/test/web/auth/authenticator_test.exs new file mode 100644 index 000000000..fea5c8209 --- /dev/null +++ b/test/web/auth/authenticator_test.exs @@ -0,0 +1,42 @@ +# Pleroma: A lightweight social networking server +# Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/> +# SPDX-License-Identifier: AGPL-3.0-only + +defmodule Pleroma.Web.Auth.AuthenticatorTest do +  use Pleroma.Web.ConnCase + +  alias Pleroma.Web.Auth.Authenticator +  import Pleroma.Factory + +  describe "fetch_user/1" do +    test "returns user by name" do +      user = insert(:user) +      assert Authenticator.fetch_user(user.nickname) == user +    end + +    test "returns user by email" do +      user = insert(:user) +      assert Authenticator.fetch_user(user.email) == user +    end + +    test "returns nil" do +      assert Authenticator.fetch_user("email") == nil +    end +  end + +  describe "fetch_credentials/1" do +    test "returns name and password from authorization params" do +      params = %{"authorization" => %{"name" => "test", "password" => "test-pass"}} +      assert Authenticator.fetch_credentials(params) == {:ok, {"test", "test-pass"}} +    end + +    test "returns name and password with grant_type 'password'" do +      params = %{"grant_type" => "password", "username" => "test", "password" => "test-pass"} +      assert Authenticator.fetch_credentials(params) == {:ok, {"test", "test-pass"}} +    end + +    test "returns error" do +      assert Authenticator.fetch_credentials(%{}) == {:error, :invalid_credentials} +    end +  end +end diff --git a/test/web/common_api/common_api_test.exs b/test/web/common_api/common_api_test.exs index 34aa5bf18..a5b07c446 100644 --- a/test/web/common_api/common_api_test.exs +++ b/test/web/common_api/common_api_test.exs @@ -5,6 +5,7 @@  defmodule Pleroma.Web.CommonAPITest do    use Pleroma.DataCase    alias Pleroma.Activity +  alias Pleroma.Object    alias Pleroma.User    alias Pleroma.Web.CommonAPI @@ -32,24 +33,26 @@ defmodule Pleroma.Web.CommonAPITest do      user = insert(:user)      {:ok, activity} = CommonAPI.post(user, %{"status" => "#2hu #2HU"}) -    assert activity.data["object"]["tag"] == ["2hu"] +    object = Object.normalize(activity.data["object"]) + +    assert object.data["tag"] == ["2hu"]    end    test "it adds emoji in the object" do      user = insert(:user) -    {:ok, activity} = CommonAPI.post(user, %{"status" => ":moominmamma:"}) +    {:ok, activity} = CommonAPI.post(user, %{"status" => ":firefox:"}) -    assert activity.data["object"]["emoji"]["moominmamma"] +    assert Object.normalize(activity).data["emoji"]["firefox"]    end    test "it adds emoji when updating profiles" do -    user = insert(:user, %{name: ":karjalanpiirakka:"}) +    user = insert(:user, %{name: ":firefox:"})      CommonAPI.update(user)      user = User.get_cached_by_ap_id(user.ap_id) -    [karjalanpiirakka] = user.info.source_data["tag"] +    [firefox] = user.info.source_data["tag"] -    assert karjalanpiirakka["name"] == ":karjalanpiirakka:" +    assert firefox["name"] == ":firefox:"    end    describe "posting" do @@ -64,8 +67,9 @@ defmodule Pleroma.Web.CommonAPITest do            "content_type" => "text/html"          }) -      content = activity.data["object"]["content"] -      assert content == "<p><b>2hu</b></p>alert('xss')" +      object = Object.normalize(activity.data["object"]) + +      assert object.data["content"] == "<p><b>2hu</b></p>alert('xss')"      end      test "it filters out obviously bad tags when accepting a post as Markdown" do @@ -79,8 +83,9 @@ defmodule Pleroma.Web.CommonAPITest do            "content_type" => "text/markdown"          }) -      content = activity.data["object"]["content"] -      assert content == "<p><b>2hu</b></p>alert('xss')" +      object = Object.normalize(activity.data["object"]) + +      assert object.data["content"] == "<p><b>2hu</b></p>alert('xss')"      end    end diff --git a/test/web/common_api/common_api_utils_test.exs b/test/web/common_api/common_api_utils_test.exs index f0c59d5c3..ab4c62b35 100644 --- a/test/web/common_api/common_api_utils_test.exs +++ b/test/web/common_api/common_api_utils_test.exs @@ -37,21 +37,21 @@ defmodule Pleroma.Web.CommonAPI.UtilsTest do    end    test "parses emoji from name and bio" do -    {:ok, user} = UserBuilder.insert(%{name: ":karjalanpiirakka:", bio: ":perkele:"}) +    {:ok, user} = UserBuilder.insert(%{name: ":blank:", bio: ":firefox:"})      expected = [        %{          "type" => "Emoji", -        "icon" => %{"type" => "Image", "url" => "#{Endpoint.url()}/finmoji/128px/perkele-128.png"}, -        "name" => ":perkele:" +        "icon" => %{"type" => "Image", "url" => "#{Endpoint.url()}/emoji/Firefox.gif"}, +        "name" => ":firefox:"        },        %{          "type" => "Emoji",          "icon" => %{            "type" => "Image", -          "url" => "#{Endpoint.url()}/finmoji/128px/karjalanpiirakka-128.png" +          "url" => "#{Endpoint.url()}/emoji/blank.png"          }, -        "name" => ":karjalanpiirakka:" +        "name" => ":blank:"        }      ] @@ -119,6 +119,31 @@ defmodule Pleroma.Web.CommonAPI.UtilsTest do        assert output == expected      end +    test "works for bare text/bbcode" do +      text = "[b]hello world[/b]" +      expected = "<strong>hello world</strong>" + +      {output, [], []} = Utils.format_input(text, "text/bbcode") + +      assert output == expected + +      text = "[b]hello world![/b]\n\nsecond paragraph!" +      expected = "<strong>hello world!</strong><br>\n<br>\nsecond paragraph!" + +      {output, [], []} = Utils.format_input(text, "text/bbcode") + +      assert output == expected + +      text = "[b]hello world![/b]\n\n<strong>second paragraph!</strong>" + +      expected = +        "<strong>hello world!</strong><br>\n<br>\n<strong>second paragraph!</strong>" + +      {output, [], []} = Utils.format_input(text, "text/bbcode") + +      assert output == expected +    end +      test "works for text/markdown with mentions" do        {:ok, user} =          UserBuilder.insert(%{nickname: "user__test", ap_id: "http://foo.com/user__test"}) diff --git a/test/web/mastodon_api/account_view_test.exs b/test/web/mastodon_api/account_view_test.exs index 6dc60afe9..a24f2a050 100644 --- a/test/web/mastodon_api/account_view_test.exs +++ b/test/web/mastodon_api/account_view_test.exs @@ -56,14 +56,17 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do        bot: false,        source: %{          note: "", -        privacy: "public", -        sensitive: false +        sensitive: false, +        pleroma: %{}        },        pleroma: %{          confirmation_pending: false,          tags: [],          is_admin: false,          is_moderator: false, +        hide_favorites: true, +        hide_followers: false, +        hide_follows: false,          relationship: %{}        }      } @@ -71,6 +74,24 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do      assert expected == AccountView.render("account.json", %{user: user})    end +  test "Represent the user account for the account owner" do +    user = insert(:user) + +    notification_settings = %{ +      "remote" => true, +      "local" => true, +      "followers" => true, +      "follows" => true +    } + +    privacy = user.info.default_scope + +    assert %{ +             pleroma: %{notification_settings: ^notification_settings}, +             source: %{privacy: ^privacy} +           } = AccountView.render("account.json", %{user: user, for: user}) +  end +    test "Represent a Service(bot) account" do      user =        insert(:user, %{ @@ -100,14 +121,17 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do        bot: true,        source: %{          note: "", -        privacy: "public", -        sensitive: false +        sensitive: false, +        pleroma: %{}        },        pleroma: %{          confirmation_pending: false,          tags: [],          is_admin: false,          is_moderator: false, +        hide_favorites: true, +        hide_followers: false, +        hide_follows: false,          relationship: %{}        }      } @@ -142,6 +166,7 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do        blocking: true,        muting: false,        muting_notifications: false, +      subscribing: false,        requested: false,        domain_blocking: false,        showing_reblogs: true, @@ -154,15 +179,15 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do    test "represent an embedded relationship" do      user =        insert(:user, %{ -        info: %{note_count: 5, follower_count: 3, source_data: %{"type" => "Service"}}, +        info: %{note_count: 5, follower_count: 0, source_data: %{"type" => "Service"}},          nickname: "shp@shitposter.club",          inserted_at: ~N[2017-08-15 15:47:06.597036]        })      other_user = insert(:user) -      {:ok, other_user} = User.follow(other_user, user)      {:ok, other_user} = User.block(other_user, user) +    {:ok, _} = User.follow(insert(:user), user)      expected = %{        id: to_string(user.id), @@ -171,7 +196,7 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do        display_name: user.name,        locked: false,        created_at: "2017-08-15T15:47:06.000Z", -      followers_count: 3, +      followers_count: 1,        following_count: 0,        statuses_count: 5,        note: user.bio, @@ -185,19 +210,23 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do        bot: true,        source: %{          note: "", -        privacy: "public", -        sensitive: false +        sensitive: false, +        pleroma: %{}        },        pleroma: %{          confirmation_pending: false,          tags: [],          is_admin: false,          is_moderator: false, +        hide_favorites: true, +        hide_followers: false, +        hide_follows: false,          relationship: %{            id: to_string(user.id),            following: false,            followed_by: false,            blocking: true, +          subscribing: false,            muting: false,            muting_notifications: false,            requested: false, diff --git a/test/web/mastodon_api/mastodon_api_controller_test.exs b/test/web/mastodon_api/mastodon_api_controller_test.exs index cf77dff78..0eed9b5d7 100644 --- a/test/web/mastodon_api/mastodon_api_controller_test.exs +++ b/test/web/mastodon_api/mastodon_api_controller_test.exs @@ -401,7 +401,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      activity = Activity.get_by_id(id)      assert activity.data["context"] == replied_to.data["context"] -    assert activity.data["object"]["inReplyToStatusId"] == replied_to.id +    assert Activity.get_in_reply_to_activity(activity).id == replied_to.id    end    test "posting a status with an invalid in_reply_to_id", %{conn: conn} do @@ -504,7 +504,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do    describe "deleting a status" do      test "when you created it", %{conn: conn} do        activity = insert(:note_activity) -      author = User.get_by_ap_id(activity.data["actor"]) +      author = User.get_cached_by_ap_id(activity.data["actor"])        conn =          conn @@ -1003,6 +1003,58 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert [%{"id" => ^reblog_notification_id}] = json_response(conn_res, 200)      end + +    test "destroy multiple", %{conn: conn} do +      user = insert(:user) +      other_user = insert(:user) + +      {:ok, activity1} = CommonAPI.post(other_user, %{"status" => "hi @#{user.nickname}"}) +      {:ok, activity2} = CommonAPI.post(other_user, %{"status" => "hi @#{user.nickname}"}) +      {:ok, activity3} = CommonAPI.post(user, %{"status" => "hi @#{other_user.nickname}"}) +      {:ok, activity4} = CommonAPI.post(user, %{"status" => "hi @#{other_user.nickname}"}) + +      notification1_id = Repo.get_by(Notification, activity_id: activity1.id).id |> to_string() +      notification2_id = Repo.get_by(Notification, activity_id: activity2.id).id |> to_string() +      notification3_id = Repo.get_by(Notification, activity_id: activity3.id).id |> to_string() +      notification4_id = Repo.get_by(Notification, activity_id: activity4.id).id |> to_string() + +      conn = +        conn +        |> assign(:user, user) + +      conn_res = +        conn +        |> get("/api/v1/notifications") + +      result = json_response(conn_res, 200) +      assert [%{"id" => ^notification2_id}, %{"id" => ^notification1_id}] = result + +      conn2 = +        conn +        |> assign(:user, other_user) + +      conn_res = +        conn2 +        |> get("/api/v1/notifications") + +      result = json_response(conn_res, 200) +      assert [%{"id" => ^notification4_id}, %{"id" => ^notification3_id}] = result + +      conn_destroy = +        conn +        |> delete("/api/v1/notifications/destroy_multiple", %{ +          "ids" => [notification1_id, notification2_id] +        }) + +      assert json_response(conn_destroy, 200) == %{} + +      conn_res = +        conn2 +        |> get("/api/v1/notifications") + +      result = json_response(conn_res, 200) +      assert [%{"id" => ^notification4_id}, %{"id" => ^notification3_id}] = result +    end    end    describe "reblogging" do @@ -1015,8 +1067,47 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do          |> assign(:user, user)          |> post("/api/v1/statuses/#{activity.id}/reblog") -      assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} = -               json_response(conn, 200) +      assert %{ +               "reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}, +               "reblogged" => true +             } = json_response(conn, 200) + +      assert to_string(activity.id) == id +    end + +    test "reblogged status for another user", %{conn: conn} do +      activity = insert(:note_activity) +      user1 = insert(:user) +      user2 = insert(:user) +      user3 = insert(:user) +      CommonAPI.favorite(activity.id, user2) +      {:ok, _bookmark} = Pleroma.Bookmark.create(user2.id, activity.id) +      {:ok, reblog_activity1, _object} = CommonAPI.repeat(activity.id, user1) +      {:ok, _, _object} = CommonAPI.repeat(activity.id, user2) + +      conn_res = +        conn +        |> assign(:user, user3) +        |> get("/api/v1/statuses/#{reblog_activity1.id}") + +      assert %{ +               "reblog" => %{"id" => id, "reblogged" => false, "reblogs_count" => 2}, +               "reblogged" => false, +               "favourited" => false, +               "bookmarked" => false +             } = json_response(conn_res, 200) + +      conn_res = +        conn +        |> assign(:user, user2) +        |> get("/api/v1/statuses/#{reblog_activity1.id}") + +      assert %{ +               "reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 2}, +               "reblogged" => true, +               "favourited" => true, +               "bookmarked" => true +             } = json_response(conn_res, 200)        assert to_string(activity.id) == id      end @@ -1135,7 +1226,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      test "unimplemented pinned statuses feature", %{conn: conn} do        note = insert(:note_activity) -      user = User.get_by_ap_id(note.data["actor"]) +      user = User.get_cached_by_ap_id(note.data["actor"])        conn =          conn @@ -1146,7 +1237,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      test "gets an users media", %{conn: conn} do        note = insert(:note_activity) -      user = User.get_by_ap_id(note.data["actor"]) +      user = User.get_cached_by_ap_id(note.data["actor"])        file = %Plug.Upload{          content_type: "image/jpg", @@ -1221,8 +1312,8 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false @@ -1241,8 +1332,8 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false @@ -1254,8 +1345,8 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert relationship = json_response(conn, 200)        assert to_string(other_user.id) == relationship["id"] -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == true      end @@ -1278,7 +1369,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        conn =          build_conn() @@ -1288,8 +1379,8 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert relationship = json_response(conn, 200)        assert to_string(other_user.id) == relationship["id"] -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false      end @@ -1480,7 +1571,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert id2 == follower2.id      assert [link_header] = get_resp_header(res_conn, "link") -    assert link_header =~ ~r/since_id=#{follower2.id}/ +    assert link_header =~ ~r/min_id=#{follower2.id}/      assert link_header =~ ~r/max_id=#{follower2.id}/    end @@ -1559,7 +1650,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert id2 == following2.id      assert [link_header] = get_resp_header(res_conn, "link") -    assert link_header =~ ~r/since_id=#{following2.id}/ +    assert link_header =~ ~r/min_id=#{following2.id}/      assert link_header =~ ~r/max_id=#{following2.id}/    end @@ -1574,7 +1665,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert %{"id" => _id, "following" => true} = json_response(conn, 200) -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      conn =        build_conn() @@ -1583,7 +1674,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert %{"id" => _id, "following" => false} = json_response(conn, 200) -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      conn =        build_conn() @@ -1594,6 +1685,78 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert id == to_string(other_user.id)    end +  test "following without reblogs" do +    follower = insert(:user) +    followed = insert(:user) +    other_user = insert(:user) + +    conn = +      build_conn() +      |> assign(:user, follower) +      |> post("/api/v1/accounts/#{followed.id}/follow?reblogs=false") + +    assert %{"showing_reblogs" => false} = json_response(conn, 200) + +    {:ok, activity} = CommonAPI.post(other_user, %{"status" => "hey"}) +    {:ok, reblog, _} = CommonAPI.repeat(activity.id, followed) + +    conn = +      build_conn() +      |> assign(:user, User.get_cached_by_id(follower.id)) +      |> get("/api/v1/timelines/home") + +    assert [] == json_response(conn, 200) + +    conn = +      build_conn() +      |> assign(:user, follower) +      |> post("/api/v1/accounts/#{followed.id}/follow?reblogs=true") + +    assert %{"showing_reblogs" => true} = json_response(conn, 200) + +    conn = +      build_conn() +      |> assign(:user, User.get_cached_by_id(follower.id)) +      |> get("/api/v1/timelines/home") + +    expected_activity_id = reblog.id +    assert [%{"id" => ^expected_activity_id}] = json_response(conn, 200) +  end + +  test "following / unfollowing errors" do +    user = insert(:user) + +    conn = +      build_conn() +      |> assign(:user, user) + +    # self follow +    conn_res = post(conn, "/api/v1/accounts/#{user.id}/follow") +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) + +    # self unfollow +    user = User.get_cached_by_id(user.id) +    conn_res = post(conn, "/api/v1/accounts/#{user.id}/unfollow") +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) + +    # self follow via uri +    user = User.get_cached_by_id(user.id) +    conn_res = post(conn, "/api/v1/follows", %{"uri" => user.nickname}) +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) + +    # follow non existing user +    conn_res = post(conn, "/api/v1/accounts/doesntexist/follow") +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) + +    # follow non existing user via uri +    conn_res = post(conn, "/api/v1/follows", %{"uri" => "doesntexist"}) +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) + +    # unfollow non existing user +    conn_res = post(conn, "/api/v1/accounts/doesntexist/unfollow") +    assert %{"error" => "Record not found"} = json_response(conn_res, 404) +  end +    test "muting / unmuting a user", %{conn: conn} do      user = insert(:user)      other_user = insert(:user) @@ -1605,7 +1768,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert %{"id" => _id, "muting" => true} = json_response(conn, 200) -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      conn =        build_conn() @@ -1615,6 +1778,25 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert %{"id" => _id, "muting" => false} = json_response(conn, 200)    end +  test "subscribing / unsubscribing to a user", %{conn: conn} do +    user = insert(:user) +    subscription_target = insert(:user) + +    conn = +      conn +      |> assign(:user, user) +      |> post("/api/v1/pleroma/accounts/#{subscription_target.id}/subscribe") + +    assert %{"id" => _id, "subscribing" => true} = json_response(conn, 200) + +    conn = +      build_conn() +      |> assign(:user, user) +      |> post("/api/v1/pleroma/accounts/#{subscription_target.id}/unsubscribe") + +    assert %{"id" => _id, "subscribing" => false} = json_response(conn, 200) +  end +    test "getting a list of mutes", %{conn: conn} do      user = insert(:user)      other_user = insert(:user) @@ -1641,7 +1823,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert %{"id" => _id, "blocking" => true} = json_response(conn, 200) -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      conn =        build_conn() @@ -1800,7 +1982,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      capture_log(fn ->        conn =          conn -        |> get("/api/v1/search", %{"q" => activity.data["object"]["id"]}) +        |> get("/api/v1/search", %{"q" => Object.normalize(activity).data["id"]})        assert results = json_response(conn, 200) @@ -1865,6 +2047,199 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      assert [] = json_response(third_conn, 200)    end +  describe "getting favorites timeline of specified user" do +    setup do +      [current_user, user] = insert_pair(:user, %{info: %{hide_favorites: false}}) +      [current_user: current_user, user: user] +    end + +    test "returns list of statuses favorited by specified user", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      [activity | _] = insert_pair(:note_activity) +      CommonAPI.favorite(activity.id, user) + +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      [like] = response + +      assert length(response) == 1 +      assert like["id"] == activity.id +    end + +    test "returns favorites for specified user_id when user is not logged in", %{ +      conn: conn, +      user: user +    } do +      activity = insert(:note_activity) +      CommonAPI.favorite(activity.id, user) + +      response = +        conn +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      assert length(response) == 1 +    end + +    test "returns favorited DM only when user is logged in and he is one of recipients", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      {:ok, direct} = +        CommonAPI.post(current_user, %{ +          "status" => "Hi @#{user.nickname}!", +          "visibility" => "direct" +        }) + +      CommonAPI.favorite(direct.id, user) + +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      assert length(response) == 1 + +      anonymous_response = +        conn +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      assert length(anonymous_response) == 0 +    end + +    test "does not return others' favorited DM when user is not one of recipients", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      user_two = insert(:user) + +      {:ok, direct} = +        CommonAPI.post(user_two, %{ +          "status" => "Hi @#{user.nickname}!", +          "visibility" => "direct" +        }) + +      CommonAPI.favorite(direct.id, user) + +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      assert length(response) == 0 +    end + +    test "paginates favorites using since_id and max_id", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      activities = insert_list(10, :note_activity) + +      Enum.each(activities, fn activity -> +        CommonAPI.favorite(activity.id, user) +      end) + +      third_activity = Enum.at(activities, 2) +      seventh_activity = Enum.at(activities, 6) + +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites", %{ +          since_id: third_activity.id, +          max_id: seventh_activity.id +        }) +        |> json_response(:ok) + +      assert length(response) == 3 +      refute third_activity in response +      refute seventh_activity in response +    end + +    test "limits favorites using limit parameter", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      7 +      |> insert_list(:note_activity) +      |> Enum.each(fn activity -> +        CommonAPI.favorite(activity.id, user) +      end) + +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites", %{limit: "3"}) +        |> json_response(:ok) + +      assert length(response) == 3 +    end + +    test "returns empty response when user does not have any favorited statuses", %{ +      conn: conn, +      current_user: current_user, +      user: user +    } do +      response = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") +        |> json_response(:ok) + +      assert Enum.empty?(response) +    end + +    test "returns 404 error when specified user is not exist", %{conn: conn} do +      conn = get(conn, "/api/v1/pleroma/accounts/test/favourites") + +      assert json_response(conn, 404) == %{"error" => "Record not found"} +    end + +    test "returns 403 error when user has hidden own favorites", %{ +      conn: conn, +      current_user: current_user +    } do +      user = insert(:user, %{info: %{hide_favorites: true}}) +      activity = insert(:note_activity) +      CommonAPI.favorite(activity.id, user) + +      conn = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") + +      assert json_response(conn, 403) == %{"error" => "Can't get favorites"} +    end + +    test "hides favorites for new users by default", %{conn: conn, current_user: current_user} do +      user = insert(:user) +      activity = insert(:note_activity) +      CommonAPI.favorite(activity.id, user) + +      conn = +        conn +        |> assign(:user, current_user) +        |> get("/api/v1/pleroma/accounts/#{user.id}/favourites") + +      assert user.info.hide_favorites +      assert json_response(conn, 403) == %{"error" => "Can't get favorites"} +    end +  end +    describe "updating credentials" do      test "updates the user's bio", %{conn: conn} do        user = insert(:user) @@ -1898,6 +2273,78 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert user["locked"] == true      end +    test "updates the user's default scope", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{default_scope: "cofe"}) + +      assert user = json_response(conn, 200) +      assert user["source"]["privacy"] == "cofe" +    end + +    test "updates the user's hide_followers status", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{hide_followers: "true"}) + +      assert user = json_response(conn, 200) +      assert user["pleroma"]["hide_followers"] == true +    end + +    test "updates the user's hide_follows status", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{hide_follows: "true"}) + +      assert user = json_response(conn, 200) +      assert user["pleroma"]["hide_follows"] == true +    end + +    test "updates the user's hide_favorites status", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{hide_favorites: "true"}) + +      assert user = json_response(conn, 200) +      assert user["pleroma"]["hide_favorites"] == true +    end + +    test "updates the user's show_role status", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{show_role: "false"}) + +      assert user = json_response(conn, 200) +      assert user["source"]["pleroma"]["show_role"] == false +    end + +    test "updates the user's no_rich_text status", %{conn: conn} do +      user = insert(:user) + +      conn = +        conn +        |> assign(:user, user) +        |> patch("/api/v1/accounts/update_credentials", %{no_rich_text: "true"}) + +      assert user = json_response(conn, 200) +      assert user["source"]["pleroma"]["no_rich_text"] == true +    end +      test "updates the user's name", %{conn: conn} do        user = insert(:user) @@ -1969,13 +2416,14 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      conn = get(conn, "/api/v1/instance")      assert result = json_response(conn, 200) +    email = Pleroma.Config.get([:instance, :email])      # Note: not checking for "max_toot_chars" since it's optional      assert %{               "uri" => _,               "title" => _,               "description" => _,               "version" => _, -             "email" => _, +             "email" => from_config_email,               "urls" => %{                 "streaming_api" => _               }, @@ -1984,6 +2432,8 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do               "languages" => _,               "registrations" => _             } = result + +    assert email == from_config_email    end    test "get instance stats", %{conn: conn} do @@ -1998,7 +2448,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do      {:ok, _} = TwitterAPI.create_status(user, %{"status" => "cofe"})      # Stats should count users with missing or nil `info.deactivated` value -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      info_change = Changeset.change(user.info, %{deactivated: nil})      {:ok, _user} = @@ -2370,7 +2820,7 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert [link_header] = get_resp_header(conn, "link")        assert link_header =~ ~r/media_only=true/ -      assert link_header =~ ~r/since_id=#{notification2.id}/ +      assert link_header =~ ~r/min_id=#{notification2.id}/        assert link_header =~ ~r/max_id=#{notification1.id}/      end    end @@ -2693,4 +3143,49 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIControllerTest do        assert %{"error" => "Record not found"} = json_response(res_conn, 404)      end    end + +  test "Repeated posts that are replies incorrectly have in_reply_to_id null", %{conn: conn} do +    user1 = insert(:user) +    user2 = insert(:user) +    user3 = insert(:user) + +    {:ok, replied_to} = TwitterAPI.create_status(user1, %{"status" => "cofe"}) + +    # Reply to status from another user +    conn1 = +      conn +      |> assign(:user, user2) +      |> post("/api/v1/statuses", %{"status" => "xD", "in_reply_to_id" => replied_to.id}) + +    assert %{"content" => "xD", "id" => id} = json_response(conn1, 200) + +    activity = Activity.get_by_id_with_object(id) + +    assert Object.normalize(activity).data["inReplyTo"] == Object.normalize(replied_to).data["id"] +    assert Activity.get_in_reply_to_activity(activity).id == replied_to.id + +    # Reblog from the third user +    conn2 = +      conn +      |> assign(:user, user3) +      |> post("/api/v1/statuses/#{activity.id}/reblog") + +    assert %{"reblog" => %{"id" => id, "reblogged" => true, "reblogs_count" => 1}} = +             json_response(conn2, 200) + +    assert to_string(activity.id) == id + +    # Getting third user status +    conn3 = +      conn +      |> assign(:user, user3) +      |> get("api/v1/timelines/home") + +    [reblogged_activity] = json_response(conn3, 200) + +    assert reblogged_activity["reblog"]["in_reply_to_id"] == replied_to.id + +    replied_to_user = User.get_by_ap_id(replied_to.data["actor"]) +    assert reblogged_activity["reblog"]["in_reply_to_account_id"] == replied_to_user.id +  end  end diff --git a/test/web/mastodon_api/notification_view_test.exs b/test/web/mastodon_api/notification_view_test.exs index f2c1eb76c..977ea1e87 100644 --- a/test/web/mastodon_api/notification_view_test.exs +++ b/test/web/mastodon_api/notification_view_test.exs @@ -21,7 +21,7 @@ defmodule Pleroma.Web.MastodonAPI.NotificationViewTest do      mentioned_user = insert(:user)      {:ok, activity} = CommonAPI.post(user, %{"status" => "hey @#{mentioned_user.nickname}"})      {:ok, [notification]} = Notification.create_notifications(activity) -    user = User.get_by_id(user.id) +    user = User.get_cached_by_id(user.id)      expected = %{        id: to_string(notification.id), diff --git a/test/web/mastodon_api/status_view_test.exs b/test/web/mastodon_api/status_view_test.exs index 8db92ac16..5fddc6c58 100644 --- a/test/web/mastodon_api/status_view_test.exs +++ b/test/web/mastodon_api/status_view_test.exs @@ -6,8 +6,10 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do    use Pleroma.DataCase    alias Pleroma.Activity +  alias Pleroma.Bookmark +  alias Pleroma.Object +  alias Pleroma.Repo    alias Pleroma.User -  alias Pleroma.Web.ActivityPub.ActivityPub    alias Pleroma.Web.CommonAPI    alias Pleroma.Web.CommonAPI.Utils    alias Pleroma.Web.MastodonAPI.AccountView @@ -53,14 +55,14 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do    test "a note with null content" do      note = insert(:note_activity) +    note_object = Object.normalize(note.data["object"])      data = -      note.data -      |> put_in(["object", "content"], nil) +      note_object.data +      |> Map.put("content", nil) -    note = -      note -      |> Map.put(:data, data) +    Object.change(note_object, %{data: data}) +    |> Object.update_and_set_cache()      User.get_cached_by_ap_id(note.data["actor"]) @@ -101,7 +103,7 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do        muted: false,        pinned: false,        sensitive: false, -      spoiler_text: note.data["object"]["summary"], +      spoiler_text: HtmlSanitizeEx.basic_html(note.data["object"]["summary"]),        visibility: "public",        media_attachments: [],        mentions: [], @@ -126,7 +128,10 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do        ],        pleroma: %{          local: true, -        conversation_id: convo_id +        conversation_id: convo_id, +        in_reply_to_account_acct: nil, +        content: %{"text/plain" => HtmlSanitizeEx.strip_tags(note.data["object"]["content"])}, +        spoiler_text: %{"text/plain" => HtmlSanitizeEx.strip_tags(note.data["object"]["summary"])}        }      } @@ -149,6 +154,25 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do      assert status.muted == true    end +  test "tells if the status is bookmarked" do +    user = insert(:user) + +    {:ok, activity} = CommonAPI.post(user, %{"status" => "Cute girls doing cute things"}) +    status = StatusView.render("status.json", %{activity: activity}) + +    assert status.bookmarked == false + +    status = StatusView.render("status.json", %{activity: activity, for: user}) + +    assert status.bookmarked == false + +    {:ok, _bookmark} = Bookmark.create(user.id, activity.id) + +    status = StatusView.render("status.json", %{activity: activity, for: user}) + +    assert status.bookmarked == true +  end +    test "a reply" do      note = insert(:note_activity)      user = insert(:user) @@ -175,7 +199,7 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do      status = StatusView.render("status.json", %{activity: activity}) -    actor = User.get_by_ap_id(activity.actor) +    actor = User.get_cached_by_ap_id(activity.actor)      assert status.mentions ==               Enum.map([user, actor], fn u -> AccountView.render("mention.json", %{user: u}) end) @@ -228,7 +252,7 @@ defmodule Pleroma.Web.MastodonAPI.StatusViewTest do      user = insert(:user)      {:ok, object} = -      ActivityPub.fetch_object_from_id( +      Pleroma.Object.Fetcher.fetch_object_from_id(          "https://peertube.moe/videos/watch/df5f464b-be8d-46fb-ad81-2d4c2d1630e3"        ) diff --git a/test/web/metadata/rel_me_test.exs b/test/web/metadata/rel_me_test.exs new file mode 100644 index 000000000..f66bf7834 --- /dev/null +++ b/test/web/metadata/rel_me_test.exs @@ -0,0 +1,18 @@ +defmodule Pleroma.Web.Metadata.Providers.RelMeTest do +  use Pleroma.DataCase +  import Pleroma.Factory +  alias Pleroma.Web.Metadata.Providers.RelMe + +  test "it renders all links with rel='me' from user bio" do +    bio = +      ~s(<a href="https://some-link.com">https://some-link.com</a> <a rel="me" href="https://another-link.com">https://another-link.com</a> +    <link href="http://some.com"> <link rel="me" href="http://some3.com>") + +    user = insert(:user, %{bio: bio}) + +    assert RelMe.build_tags(%{user: user}) == [ +             {:link, [rel: "me", href: "http://some3.com>"], []}, +             {:link, [rel: "me", href: "https://another-link.com"], []} +           ] +  end +end diff --git a/test/web/oauth/oauth_controller_test.exs b/test/web/oauth/oauth_controller_test.exs index ac7843f9b..6e96537ec 100644 --- a/test/web/oauth/oauth_controller_test.exs +++ b/test/web/oauth/oauth_controller_test.exs @@ -68,10 +68,12 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do            "/oauth/prepare_request",            %{              "provider" => "twitter", -            "scope" => "read follow", -            "client_id" => app.client_id, -            "redirect_uri" => app.redirect_uris, -            "state" => "a_state" +            "authorization" => %{ +              "scope" => "read follow", +              "client_id" => app.client_id, +              "redirect_uri" => app.redirect_uris, +              "state" => "a_state" +            }            }          ) @@ -104,7 +106,7 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do        }        with_mock Pleroma.Web.Auth.Authenticator, -        get_registration: fn _, _ -> {:ok, registration} end do +        get_registration: fn _ -> {:ok, registration} end do          conn =            get(              conn, @@ -134,7 +136,7 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do        }        with_mock Pleroma.Web.Auth.Authenticator, -        get_registration: fn _, _ -> {:ok, registration} end do +        get_registration: fn _ -> {:ok, registration} end do          conn =            get(              conn, @@ -193,12 +195,14 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do            conn,            "/oauth/registration_details",            %{ -            "scopes" => app.scopes, -            "client_id" => app.client_id, -            "redirect_uri" => app.redirect_uris, -            "state" => "a_state", -            "nickname" => nil, -            "email" => "john@doe.com" +            "authorization" => %{ +              "scopes" => app.scopes, +              "client_id" => app.client_id, +              "redirect_uri" => app.redirect_uris, +              "state" => "a_state", +              "nickname" => nil, +              "email" => "john@doe.com" +            }            }          ) @@ -221,12 +225,14 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do            "/oauth/register",            %{              "op" => "register", -            "scopes" => app.scopes, -            "client_id" => app.client_id, -            "redirect_uri" => app.redirect_uris, -            "state" => "a_state", -            "nickname" => "availablenick", -            "email" => "available@email.com" +            "authorization" => %{ +              "scopes" => app.scopes, +              "client_id" => app.client_id, +              "redirect_uri" => app.redirect_uris, +              "state" => "a_state", +              "nickname" => "availablenick", +              "email" => "available@email.com" +            }            }          ) @@ -244,17 +250,23 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do        params = %{          "op" => "register", -        "scopes" => app.scopes, -        "client_id" => app.client_id, -        "redirect_uri" => app.redirect_uris, -        "state" => "a_state", -        "nickname" => "availablenickname", -        "email" => "available@email.com" +        "authorization" => %{ +          "scopes" => app.scopes, +          "client_id" => app.client_id, +          "redirect_uri" => app.redirect_uris, +          "state" => "a_state", +          "nickname" => "availablenickname", +          "email" => "available@email.com" +        }        }        for {bad_param, bad_param_value} <-              [{"nickname", another_user.nickname}, {"email", another_user.email}] do -        bad_params = Map.put(params, bad_param, bad_param_value) +        bad_registration_attrs = %{ +          "authorization" => Map.put(params["authorization"], bad_param, bad_param_value) +        } + +        bad_params = Map.merge(params, bad_registration_attrs)          conn =            conn @@ -281,12 +293,14 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do            "/oauth/register",            %{              "op" => "connect", -            "scopes" => app.scopes, -            "client_id" => app.client_id, -            "redirect_uri" => app.redirect_uris, -            "state" => "a_state", -            "auth_name" => user.nickname, -            "password" => "testpassword" +            "authorization" => %{ +              "scopes" => app.scopes, +              "client_id" => app.client_id, +              "redirect_uri" => app.redirect_uris, +              "state" => "a_state", +              "name" => user.nickname, +              "password" => "testpassword" +            }            }          ) @@ -304,12 +318,14 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do        params = %{          "op" => "connect", -        "scopes" => app.scopes, -        "client_id" => app.client_id, -        "redirect_uri" => app.redirect_uris, -        "state" => "a_state", -        "auth_name" => user.nickname, -        "password" => "wrong password" +        "authorization" => %{ +          "scopes" => app.scopes, +          "client_id" => app.client_id, +          "redirect_uri" => app.redirect_uris, +          "state" => "a_state", +          "name" => user.nickname, +          "password" => "wrong password" +        }        }        conn = @@ -349,6 +365,27 @@ defmodule Pleroma.Web.OAuth.OAuthControllerTest do        assert html_response(conn, 200) =~ ~s(type="submit")      end +    test "properly handles internal calls with `authorization`-wrapped params", %{ +      app: app, +      conn: conn +    } do +      conn = +        get( +          conn, +          "/oauth/authorize", +          %{ +            "authorization" => %{ +              "response_type" => "code", +              "client_id" => app.client_id, +              "redirect_uri" => app.redirect_uris, +              "scope" => "read" +            } +          } +        ) + +      assert html_response(conn, 200) =~ ~s(type="submit") +    end +      test "renders authentication page if user is already authenticated but `force_login` is tru-ish",           %{app: app, conn: conn} do        token = insert(:oauth_token, app_id: app.id) diff --git a/test/web/ostatus/ostatus_controller_test.exs b/test/web/ostatus/ostatus_controller_test.exs index 2950f11c0..7441e5fce 100644 --- a/test/web/ostatus/ostatus_controller_test.exs +++ b/test/web/ostatus/ostatus_controller_test.exs @@ -6,7 +6,6 @@ defmodule Pleroma.Web.OStatus.OStatusControllerTest do    use Pleroma.Web.ConnCase    import Pleroma.Factory    alias Pleroma.Object -  alias Pleroma.Repo    alias Pleroma.User    alias Pleroma.Web.CommonAPI    alias Pleroma.Web.OStatus.ActivityRepresenter @@ -41,7 +40,8 @@ defmodule Pleroma.Web.OStatus.OStatusControllerTest do        assert response(conn, 200)        # Set a wrong magic-key for a user so it has to refetch -      salmon_user = User.get_by_ap_id("http://gs.example.org:4040/index.php/user/1") +      salmon_user = User.get_cached_by_ap_id("http://gs.example.org:4040/index.php/user/1") +        # Wrong key        info_cng =          User.Info.remote_user_creation(salmon_user.info, %{ @@ -52,7 +52,7 @@ defmodule Pleroma.Web.OStatus.OStatusControllerTest do        salmon_user        |> Ecto.Changeset.change()        |> Ecto.Changeset.put_embed(:info, info_cng) -      |> Repo.update() +      |> User.update_and_set_cache()        conn =          build_conn() @@ -86,7 +86,7 @@ defmodule Pleroma.Web.OStatus.OStatusControllerTest do    test "gets an object", %{conn: conn} do      note_activity = insert(:note_activity) -    user = User.get_by_ap_id(note_activity.data["actor"]) +    user = User.get_cached_by_ap_id(note_activity.data["actor"])      [_, uuid] = hd(Regex.scan(~r/.+\/([\w-]+)$/, note_activity.data["object"]["id"]))      url = "/objects/#{uuid}" diff --git a/test/web/ostatus/ostatus_test.exs b/test/web/ostatus/ostatus_test.exs index 9fd100f63..2916caf8d 100644 --- a/test/web/ostatus/ostatus_test.exs +++ b/test/web/ostatus/ostatus_test.exs @@ -28,34 +28,35 @@ defmodule Pleroma.Web.OStatusTest do    test "handle incoming note - GS, Salmon" do      incoming = File.read!("test/fixtures/incoming_note_activity.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"]) -    user = User.get_by_ap_id(activity.data["actor"]) +    user = User.get_cached_by_ap_id(activity.data["actor"])      assert user.info.note_count == 1      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" +    assert object.data["type"] == "Note" -    assert activity.data["object"]["id"] == -             "tag:gs.example.org:4040,2017-04-23:noticeId=29:objectType=note" +    assert object.data["id"] == "tag:gs.example.org:4040,2017-04-23:noticeId=29:objectType=note"      assert activity.data["published"] == "2017-04-23T14:51:03+00:00" -    assert activity.data["object"]["published"] == "2017-04-23T14:51:03+00:00" +    assert object.data["published"] == "2017-04-23T14:51:03+00:00"      assert activity.data["context"] ==               "tag:gs.example.org:4040,2017-04-23:objectType=thread:nonce=f09e22f58abd5c7b"      assert "http://pleroma.example.org:4000/users/lain3" in activity.data["to"] -    assert activity.data["object"]["emoji"] == %{"marko" => "marko.png", "reimu" => "reimu.png"} +    assert object.data["emoji"] == %{"marko" => "marko.png", "reimu" => "reimu.png"}      assert activity.local == false    end    test "handle incoming notes - GS, subscription" do      incoming = File.read!("test/fixtures/ostatus_incoming_post.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" -    assert activity.data["object"]["actor"] == "https://social.heldscal.la/user/23211" -    assert activity.data["object"]["content"] == "Will it blend?" +    assert object.data["type"] == "Note" +    assert object.data["actor"] == "https://social.heldscal.la/user/23211" +    assert object.data["content"] == "Will it blend?"      user = User.get_cached_by_ap_id(activity.data["actor"])      assert User.ap_followers(user) in activity.data["to"]      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"] @@ -64,20 +65,22 @@ defmodule Pleroma.Web.OStatusTest do    test "handle incoming notes with attachments - GS, subscription" do      incoming = File.read!("test/fixtures/incoming_websub_gnusocial_attachments.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" -    assert activity.data["object"]["actor"] == "https://social.heldscal.la/user/23211" -    assert activity.data["object"]["attachment"] |> length == 2 -    assert activity.data["object"]["external_url"] == "https://social.heldscal.la/notice/2020923" +    assert object.data["type"] == "Note" +    assert object.data["actor"] == "https://social.heldscal.la/user/23211" +    assert object.data["attachment"] |> length == 2 +    assert object.data["external_url"] == "https://social.heldscal.la/notice/2020923"      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]    end    test "handle incoming notes with tags" do      incoming = File.read!("test/fixtures/ostatus_incoming_post_tag.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"]) -    assert activity.data["object"]["tag"] == ["nsfw"] +    assert object.data["tag"] == ["nsfw"]      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]    end @@ -92,10 +95,11 @@ defmodule Pleroma.Web.OStatusTest do      incoming = File.read!("test/fixtures/incoming_reply_mastodon.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" -    assert activity.data["object"]["actor"] == "https://mastodon.social/users/lambadalambda" +    assert object.data["type"] == "Note" +    assert object.data["actor"] == "https://mastodon.social/users/lambadalambda"      assert activity.data["context"] == "2hu"      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]    end @@ -103,42 +107,47 @@ defmodule Pleroma.Web.OStatusTest do    test "handle incoming notes - Mastodon, with CW" do      incoming = File.read!("test/fixtures/mastodon-note-cw.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" -    assert activity.data["object"]["actor"] == "https://mastodon.social/users/lambadalambda" -    assert activity.data["object"]["summary"] == "technologic" +    assert object.data["type"] == "Note" +    assert object.data["actor"] == "https://mastodon.social/users/lambadalambda" +    assert object.data["summary"] == "technologic"      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]    end    test "handle incoming unlisted messages, put public into cc" do      incoming = File.read!("test/fixtures/mastodon-note-unlisted.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"]) +      refute "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["cc"] -    refute "https://www.w3.org/ns/activitystreams#Public" in activity.data["object"]["to"] -    assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["object"]["cc"] +    refute "https://www.w3.org/ns/activitystreams#Public" in object.data["to"] +    assert "https://www.w3.org/ns/activitystreams#Public" in object.data["cc"]    end    test "handle incoming retweets - Mastodon, with CW" do      incoming = File.read!("test/fixtures/cw_retweet.xml")      {:ok, [[_activity, retweeted_activity]]} = OStatus.handle_incoming(incoming) +    retweeted_object = Object.normalize(retweeted_activity.data["object"]) -    assert retweeted_activity.data["object"]["summary"] == "Hey." +    assert retweeted_object.data["summary"] == "Hey."    end    test "handle incoming notes - GS, subscription, reply" do      incoming = File.read!("test/fixtures/ostatus_incoming_reply.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" -    assert activity.data["object"]["actor"] == "https://social.heldscal.la/user/23211" +    assert object.data["type"] == "Note" +    assert object.data["actor"] == "https://social.heldscal.la/user/23211" -    assert activity.data["object"]["content"] == +    assert object.data["content"] ==               "@<a href=\"https://gs.archae.me/user/4687\" class=\"h-card u-url p-nickname mention\" title=\"shpbot\">shpbot</a> why not indeed." -    assert activity.data["object"]["inReplyTo"] == +    assert object.data["inReplyTo"] ==               "tag:gs.archae.me,2017-04-30:noticeId=778260:objectType=note"      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"] @@ -150,17 +159,18 @@ defmodule Pleroma.Web.OStatusTest do      assert activity.data["type"] == "Announce"      assert activity.data["actor"] == "https://social.heldscal.la/user/23211" -    assert activity.data["object"] == retweeted_activity.data["object"]["id"] +    assert activity.data["object"] == retweeted_activity.data["object"]      assert "https://pleroma.soykaf.com/users/lain" in activity.data["to"]      refute activity.local      retweeted_activity = Activity.get_by_id(retweeted_activity.id) +    retweeted_object = Object.normalize(retweeted_activity.data["object"])      assert retweeted_activity.data["type"] == "Create"      assert retweeted_activity.data["actor"] == "https://pleroma.soykaf.com/users/lain"      refute retweeted_activity.local -    assert retweeted_activity.data["object"]["announcement_count"] == 1 -    assert String.contains?(retweeted_activity.data["object"]["content"], "mastodon") -    refute String.contains?(retweeted_activity.data["object"]["content"], "Test account") +    assert retweeted_object.data["announcement_count"] == 1 +    assert String.contains?(retweeted_object.data["content"], "mastodon") +    refute String.contains?(retweeted_object.data["content"], "Test account")    end    test "handle incoming retweets - GS, subscription - local message" do @@ -192,10 +202,11 @@ defmodule Pleroma.Web.OStatusTest do    test "handle incoming retweets - Mastodon, salmon" do      incoming = File.read!("test/fixtures/share.xml")      {:ok, [[activity, retweeted_activity]]} = OStatus.handle_incoming(incoming) +    retweeted_object = Object.normalize(retweeted_activity.data["object"])      assert activity.data["type"] == "Announce"      assert activity.data["actor"] == "https://mastodon.social/users/lambadalambda" -    assert activity.data["object"] == retweeted_activity.data["object"]["id"] +    assert activity.data["object"] == retweeted_activity.data["object"]      assert activity.data["id"] ==               "tag:mastodon.social,2017-05-03:objectId=4934452:objectType=Status" @@ -204,7 +215,7 @@ defmodule Pleroma.Web.OStatusTest do      assert retweeted_activity.data["type"] == "Create"      assert retweeted_activity.data["actor"] == "https://pleroma.soykaf.com/users/lain"      refute retweeted_activity.local -    refute String.contains?(retweeted_activity.data["object"]["content"], "Test account") +    refute String.contains?(retweeted_object.data["content"], "Test account")    end    test "handle incoming favorites - GS, websub" do @@ -214,7 +225,7 @@ defmodule Pleroma.Web.OStatusTest do        assert activity.data["type"] == "Like"        assert activity.data["actor"] == "https://social.heldscal.la/user/23211" -      assert activity.data["object"] == favorited_activity.data["object"]["id"] +      assert activity.data["object"] == favorited_activity.data["object"]        assert activity.data["id"] ==                 "tag:social.heldscal.la,2017-05-05:fave:23211:comment:2061643:2017-05-05T09:12:50+00:00" @@ -223,7 +234,7 @@ defmodule Pleroma.Web.OStatusTest do        assert favorited_activity.data["type"] == "Create"        assert favorited_activity.data["actor"] == "https://shitposter.club/user/1" -      assert favorited_activity.data["object"]["id"] == +      assert favorited_activity.data["object"] ==                 "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"        refute favorited_activity.local @@ -258,17 +269,17 @@ defmodule Pleroma.Web.OStatusTest do    test "handle incoming replies" do      incoming = File.read!("test/fixtures/incoming_note_activity_answer.xml")      {:ok, [activity]} = OStatus.handle_incoming(incoming) +    object = Object.normalize(activity.data["object"])      assert activity.data["type"] == "Create" -    assert activity.data["object"]["type"] == "Note" +    assert object.data["type"] == "Note" -    assert activity.data["object"]["inReplyTo"] == +    assert object.data["inReplyTo"] ==               "http://pleroma.example.org:4000/objects/55bce8fc-b423-46b1-af71-3759ab4670bc"      assert "http://pleroma.example.org:4000/users/lain5" in activity.data["to"] -    assert activity.data["object"]["id"] == -             "tag:gs.example.org:4040,2017-04-25:noticeId=55:objectType=note" +    assert object.data["id"] == "tag:gs.example.org:4040,2017-04-25:noticeId=55:objectType=note"      assert "https://www.w3.org/ns/activitystreams#Public" in activity.data["to"]    end @@ -285,8 +296,8 @@ defmodule Pleroma.Web.OStatusTest do      assert activity.data["object"] == "https://pawoo.net/users/pekorino"      refute activity.local -    follower = User.get_by_ap_id(activity.data["actor"]) -    followed = User.get_by_ap_id(activity.data["object"]) +    follower = User.get_cached_by_ap_id(activity.data["actor"]) +    followed = User.get_cached_by_ap_id(activity.data["object"])      assert User.following?(follower, followed)    end @@ -309,8 +320,8 @@ defmodule Pleroma.Web.OStatusTest do      assert activity.data["object"]["object"] == "https://pawoo.net/users/pekorino"      refute activity.local -    follower = User.get_by_ap_id(activity.data["actor"]) -    followed = User.get_by_ap_id(activity.data["object"]["object"]) +    follower = User.get_cached_by_ap_id(activity.data["actor"]) +    followed = User.get_cached_by_ap_id(activity.data["object"]["object"])      refute User.following?(follower, followed)    end @@ -344,7 +355,7 @@ defmodule Pleroma.Web.OStatusTest do        {:ok, user} = OStatus.find_or_make_user(uri) -      user = Pleroma.User.get_by_id(user.id) +      user = Pleroma.User.get_cached_by_id(user.id)        assert user.name == "Constance Variable"        assert user.nickname == "lambadalambda@social.heldscal.la"        assert user.local == false @@ -495,7 +506,7 @@ defmodule Pleroma.Web.OStatusTest do          assert activity.data["actor"] == "https://shitposter.club/user/1" -        assert activity.data["object"]["id"] == +        assert activity.data["object"] ==                   "tag:shitposter.club,2017-05-05:noticeId=2827873:objectType=comment"        end)      end @@ -504,7 +515,7 @@ defmodule Pleroma.Web.OStatusTest do        url = "https://social.sakamoto.gq/objects/0ccc1a2c-66b0-4305-b23a-7f7f2b040056"        {:ok, [activity]} = OStatus.fetch_activity_from_url(url)        assert activity.data["actor"] == "https://social.sakamoto.gq/users/eal" -      assert activity.data["object"]["id"] == url +      assert activity.data["object"] == url      end    end diff --git a/test/web/push/impl_test.exs b/test/web/push/impl_test.exs index 6bac2c9f6..1e948086a 100644 --- a/test/web/push/impl_test.exs +++ b/test/web/push/impl_test.exs @@ -5,6 +5,8 @@  defmodule Pleroma.Web.Push.ImplTest do    use Pleroma.DataCase +  alias Pleroma.Object +  alias Pleroma.Web.CommonAPI    alias Pleroma.Web.Push.Impl    alias Pleroma.Web.Push.Subscription @@ -52,16 +54,12 @@ defmodule Pleroma.Web.Push.ImplTest do        data: %{alerts: %{"follow" => true, "mention" => false}}      ) +    {:ok, activity} = CommonAPI.post(user, %{"status" => "<Lorem ipsum dolor sit amet."}) +      notif =        insert(:notification,          user: user, -        activity: %Pleroma.Activity{ -          data: %{ -            "type" => "Create", -            "actor" => user.ap_id, -            "object" => %{"content" => "<Lorem ipsum dolor sit amet."} -          } -        } +        activity: activity        )      assert Impl.perform(notif) == [:ok, :ok] @@ -100,48 +98,65 @@ defmodule Pleroma.Web.Push.ImplTest do    end    test "renders body for create activity" do +    user = insert(:user, nickname: "Bob") + +    {:ok, activity} = +      CommonAPI.post(user, %{ +        "status" => +          "<span>Lorem ipsum dolor sit amet</span>, consectetur :firefox: adipiscing elit. Fusce sagittis finibus turpis." +      }) + +    object = Object.normalize(activity) +      assert Impl.format_body(               %{ -               activity: %{ -                 data: %{ -                   "type" => "Create", -                   "object" => %{ -                     "content" => -                       "<span>Lorem ipsum dolor sit amet</span>, consectetur :bear: adipiscing elit. Fusce sagittis finibus turpis." -                   } -                 } -               } +               activity: activity               }, -             %{nickname: "Bob"} +             user, +             object             ) ==               "@Bob: Lorem ipsum dolor sit amet, consectetur  adipiscing elit. Fusce sagittis fini..."    end    test "renders body for follow activity" do -    assert Impl.format_body(%{activity: %{data: %{"type" => "Follow"}}}, %{nickname: "Bob"}) == +    user = insert(:user, nickname: "Bob") +    other_user = insert(:user) +    {:ok, _, _, activity} = CommonAPI.follow(user, other_user) +    object = Object.normalize(activity) + +    assert Impl.format_body(%{activity: activity}, user, object) ==               "@Bob has followed you"    end    test "renders body for announce activity" do      user = insert(:user) -    note = -      insert(:note, %{ -        data: %{ -          "content" => -            "<span>Lorem ipsum dolor sit amet</span>, consectetur :bear: adipiscing elit. Fusce sagittis finibus turpis." -        } +    {:ok, activity} = +      CommonAPI.post(user, %{ +        "status" => +          "<span>Lorem ipsum dolor sit amet</span>, consectetur :firefox: adipiscing elit. Fusce sagittis finibus turpis."        }) -    note_activity = insert(:note_activity, %{note: note}) -    announce_activity = insert(:announce_activity, %{user: user, note_activity: note_activity}) +    {:ok, announce_activity, _} = CommonAPI.repeat(activity.id, user) +    object = Object.normalize(activity) -    assert Impl.format_body(%{activity: announce_activity}, user) == +    assert Impl.format_body(%{activity: announce_activity}, user, object) ==               "@#{user.nickname} repeated: Lorem ipsum dolor sit amet, consectetur  adipiscing elit. Fusce sagittis fini..."    end    test "renders body for like activity" do -    assert Impl.format_body(%{activity: %{data: %{"type" => "Like"}}}, %{nickname: "Bob"}) == +    user = insert(:user, nickname: "Bob") + +    {:ok, activity} = +      CommonAPI.post(user, %{ +        "status" => +          "<span>Lorem ipsum dolor sit amet</span>, consectetur :firefox: adipiscing elit. Fusce sagittis finibus turpis." +      }) + +    {:ok, activity, _} = CommonAPI.favorite(activity.id, user) +    object = Object.normalize(activity) + +    assert Impl.format_body(%{activity: activity}, user, object) ==               "@Bob has favorited your post"    end  end diff --git a/test/web/salmon/salmon_test.exs b/test/web/salmon/salmon_test.exs index 35503259b..7532578ca 100644 --- a/test/web/salmon/salmon_test.exs +++ b/test/web/salmon/salmon_test.exs @@ -99,7 +99,7 @@ defmodule Pleroma.Web.Salmon.SalmonTest do      }      {:ok, activity} = Repo.insert(%Activity{data: activity_data, recipients: activity_data["to"]}) -    user = User.get_by_ap_id(activity.data["actor"]) +    user = User.get_cached_by_ap_id(activity.data["actor"])      {:ok, user} = Pleroma.Web.WebFinger.ensure_keys_present(user)      poster = fn url, _data, _headers -> diff --git a/test/web/twitter_api/twitter_api_controller_test.exs b/test/web/twitter_api/twitter_api_controller_test.exs index 72b7ea85e..43ad71a16 100644 --- a/test/web/twitter_api/twitter_api_controller_test.exs +++ b/test/web/twitter_api/twitter_api_controller_test.exs @@ -22,8 +22,9 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do    alias Pleroma.Web.TwitterAPI.TwitterAPI    alias Pleroma.Web.TwitterAPI.UserView -  import Pleroma.Factory    import Mock +  import Pleroma.Factory +  import Swoosh.TestAssertions    @banner "data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7" @@ -269,7 +270,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do      test "returns one status", %{conn: conn} do        user = insert(:user)        {:ok, activity} = CommonAPI.post(user, %{"status" => "Hey!"}) -      actor = Repo.get_by!(User, ap_id: activity.data["actor"]) +      actor = User.get_cached_by_ap_id(activity.data["actor"])        conn =          conn @@ -719,7 +720,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/friendships/create.json", %{user_id: followed.id}) -      current_user = User.get_by_id(current_user.id) +      current_user = User.get_cached_by_id(current_user.id)        assert User.ap_followers(followed) in current_user.following        assert json_response(conn, 200) == @@ -734,8 +735,8 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/friendships/create.json", %{user_id: followed.id}) -      current_user = User.get_by_id(current_user.id) -      followed = User.get_by_id(followed.id) +      current_user = User.get_cached_by_id(current_user.id) +      followed = User.get_cached_by_id(followed.id)        refute User.ap_followers(followed) in current_user.following @@ -764,7 +765,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/friendships/destroy.json", %{user_id: followed.id}) -      current_user = User.get_by_id(current_user.id) +      current_user = User.get_cached_by_id(current_user.id)        assert current_user.following == [current_user.ap_id]        assert json_response(conn, 200) == @@ -788,7 +789,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/blocks/create.json", %{user_id: blocked.id}) -      current_user = User.get_by_id(current_user.id) +      current_user = User.get_cached_by_id(current_user.id)        assert User.blocks?(current_user, blocked)        assert json_response(conn, 200) == @@ -815,7 +816,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/blocks/destroy.json", %{user_id: blocked.id}) -      current_user = User.get_by_id(current_user.id) +      current_user = User.get_cached_by_id(current_user.id)        assert current_user.info.blocks == []        assert json_response(conn, 200) == @@ -846,7 +847,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> with_credentials(current_user.nickname, "test")          |> post("/api/qvitter/update_avatar.json", %{img: avatar_image}) -      current_user = User.get_by_id(current_user.id) +      current_user = User.get_cached_by_id(current_user.id)        assert is_map(current_user.avatar)        assert json_response(conn, 200) == @@ -955,7 +956,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> post(request_path)        activity = Activity.get_by_id(note_activity.id) -      activity_user = User.get_by_ap_id(note_activity.data["actor"]) +      activity_user = User.get_cached_by_ap_id(note_activity.data["actor"])        assert json_response(response, 200) ==                 ActivityView.render("activity.json", %{ @@ -993,7 +994,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          |> post(request_path)        activity = Activity.get_by_id(note_activity.id) -      activity_user = User.get_by_ap_id(note_activity.data["actor"]) +      activity_user = User.get_cached_by_ap_id(note_activity.data["actor"])        assert json_response(response, 200) ==                 ActivityView.render("activity.json", %{ @@ -1021,7 +1022,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do        user = json_response(conn, 200) -      fetched_user = User.get_by_nickname("lain") +      fetched_user = User.get_cached_by_nickname("lain")        assert user == UserView.render("show.json", %{user: fetched_user})      end @@ -1063,8 +1064,14 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do      test "it sends an email to user", %{user: user} do        token_record = Repo.get_by(Pleroma.PasswordResetToken, user_id: user.id) -      Swoosh.TestAssertions.assert_email_sent( -        Pleroma.UserEmail.password_reset_email(user, token_record.token) +      email = Pleroma.Emails.UserEmail.password_reset_email(user, token_record.token) +      notify_email = Pleroma.Config.get([:instance, :notify_email]) +      instance_name = Pleroma.Config.get([:instance, :name]) + +      assert_email_sent( +        from: {instance_name, notify_email}, +        to: {user.name, user.email}, +        html_body: email.html_body        )      end    end @@ -1109,7 +1116,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do      test "it confirms the user account", %{conn: conn, user: user} do        get(conn, "/api/account/confirm_email/#{user.id}/#{user.info.confirmation_token}") -      user = User.get_by_id(user.id) +      user = User.get_cached_by_id(user.id)        refute user.info.confirmation_pending        refute user.info.confirmation_token @@ -1163,7 +1170,15 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do        |> assign(:user, user)        |> post("/api/account/resend_confirmation_email?email=#{user.email}") -      Swoosh.TestAssertions.assert_email_sent(Pleroma.UserEmail.account_confirmation_email(user)) +      email = Pleroma.Emails.UserEmail.account_confirmation_email(user) +      notify_email = Pleroma.Config.get([:instance, :notify_email]) +      instance_name = Pleroma.Config.get([:instance, :name]) + +      assert_email_sent( +        from: {instance_name, notify_email}, +        to: {user.name, user.email}, +        html_body: email.html_body +      )      end    end @@ -1727,7 +1742,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do          })        assert json_response(conn, 200) == %{"status" => "success"} -      fetched_user = User.get_by_id(current_user.id) +      fetched_user = User.get_cached_by_id(current_user.id)        assert Pbkdf2.checkpw("newpass", fetched_user.password_hash) == true      end    end @@ -1768,8 +1783,8 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false @@ -1808,8 +1823,8 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false @@ -1831,8 +1846,8 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do        {:ok, _activity} = ActivityPub.follow(other_user, user) -      user = User.get_by_id(user.id) -      other_user = User.get_by_id(other_user.id) +      user = User.get_cached_by_id(user.id) +      other_user = User.get_cached_by_id(other_user.id)        assert User.following?(other_user, user) == false @@ -1901,7 +1916,7 @@ defmodule Pleroma.Web.TwitterAPI.ControllerTest do    describe "POST /api/media/metadata/create" do      setup do        object = insert(:note) -      user = User.get_by_ap_id(object.data["actor"]) +      user = User.get_cached_by_ap_id(object.data["actor"])        %{object: object, user: user}      end diff --git a/test/web/twitter_api/twitter_api_test.exs b/test/web/twitter_api/twitter_api_test.exs index 6c00244de..d601c8f1f 100644 --- a/test/web/twitter_api/twitter_api_test.exs +++ b/test/web/twitter_api/twitter_api_test.exs @@ -16,6 +16,11 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do    import Pleroma.Factory +  setup_all do +    Tesla.Mock.mock_global(fn env -> apply(HttpRequestMock, :request, [env]) end) +    :ok +  end +    test "create a status" do      user = insert(:user)      mentioned_user = insert(:user, %{nickname: "shp", ap_id: "shp"}) @@ -36,18 +41,19 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      input = %{        "status" => -        "Hello again, @shp.<script></script>\nThis is on another :moominmamma: line. #2hu #epic #phantasmagoric", +        "Hello again, @shp.<script></script>\nThis is on another :firefox: line. #2hu #epic #phantasmagoric",        "media_ids" => [object.id]      }      {:ok, activity = %Activity{}} = TwitterAPI.create_status(user, input) +    object = Object.normalize(activity.data["object"])      expected_text = -      "Hello again, <span class='h-card'><a data-user='#{mentioned_user.id}' class='u-url mention' href='shp'>@<span>shp</span></a></span>.<script></script><br>This is on another :moominmamma: line. <a class='hashtag' data-tag='2hu' href='http://localhost:4001/tag/2hu' rel='tag'>#2hu</a> <a class='hashtag' data-tag='epic' href='http://localhost:4001/tag/epic' rel='tag'>#epic</a> <a class='hashtag' data-tag='phantasmagoric' href='http://localhost:4001/tag/phantasmagoric' rel='tag'>#phantasmagoric</a><br><a href=\"http://example.org/image.jpg\" class='attachment'>image.jpg</a>" +      "Hello again, <span class='h-card'><a data-user='#{mentioned_user.id}' class='u-url mention' href='shp'>@<span>shp</span></a></span>.<script></script><br>This is on another :firefox: line. <a class='hashtag' data-tag='2hu' href='http://localhost:4001/tag/2hu' rel='tag'>#2hu</a> <a class='hashtag' data-tag='epic' href='http://localhost:4001/tag/epic' rel='tag'>#epic</a> <a class='hashtag' data-tag='phantasmagoric' href='http://localhost:4001/tag/phantasmagoric' rel='tag'>#phantasmagoric</a><br><a href=\"http://example.org/image.jpg\" class='attachment'>image.jpg</a>" -    assert get_in(activity.data, ["object", "content"]) == expected_text -    assert get_in(activity.data, ["object", "type"]) == "Note" -    assert get_in(activity.data, ["object", "actor"]) == user.ap_id +    assert get_in(object.data, ["content"]) == expected_text +    assert get_in(object.data, ["type"]) == "Note" +    assert get_in(object.data, ["actor"]) == user.ap_id      assert get_in(activity.data, ["actor"]) == user.ap_id      assert Enum.member?(get_in(activity.data, ["cc"]), User.ap_followers(user)) @@ -59,21 +65,20 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      assert Enum.member?(get_in(activity.data, ["to"]), "shp")      assert activity.local == true -    assert %{"moominmamma" => "http://localhost:4001/finmoji/128px/moominmamma-128.png"} = -             activity.data["object"]["emoji"] +    assert %{"firefox" => "http://localhost:4001/emoji/Firefox.gif"} = object.data["emoji"]      # hashtags -    assert activity.data["object"]["tag"] == ["2hu", "epic", "phantasmagoric"] +    assert object.data["tag"] == ["2hu", "epic", "phantasmagoric"]      # Add a context      assert is_binary(get_in(activity.data, ["context"])) -    assert is_binary(get_in(activity.data, ["object", "context"])) +    assert is_binary(get_in(object.data, ["context"])) -    assert is_list(activity.data["object"]["attachment"]) +    assert is_list(object.data["attachment"]) -    assert activity.data["object"] == Object.get_by_ap_id(activity.data["object"]["id"]).data +    assert activity.data["object"] == object.data["id"] -    user = User.get_by_ap_id(user.ap_id) +    user = User.get_cached_by_ap_id(user.ap_id)      assert user.info.note_count == 1    end @@ -86,6 +91,7 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      }      {:ok, activity = %Activity{}} = TwitterAPI.create_status(user, input) +    object = Object.normalize(activity.data["object"])      input = %{        "status" => "Here's your (you).", @@ -93,14 +99,14 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      }      {:ok, reply = %Activity{}} = TwitterAPI.create_status(user, input) +    reply_object = Object.normalize(reply.data["object"])      assert get_in(reply.data, ["context"]) == get_in(activity.data, ["context"]) -    assert get_in(reply.data, ["object", "context"]) == -             get_in(activity.data, ["object", "context"]) +    assert get_in(reply_object.data, ["context"]) == get_in(object.data, ["context"]) -    assert get_in(reply.data, ["object", "inReplyTo"]) == get_in(activity.data, ["object", "id"]) -    assert get_in(reply.data, ["object", "inReplyToStatusId"]) == activity.id +    assert get_in(reply_object.data, ["inReplyTo"]) == get_in(activity.data, ["object"]) +    assert Activity.get_in_reply_to_activity(reply).id == activity.id    end    test "Follow another user using user_id" do @@ -123,7 +129,7 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      assert User.ap_followers(followed) in user.following -    followed = User.get_by_ap_id(followed.ap_id) +    followed = User.get_cached_by_ap_id(followed.ap_id)      assert followed.info.follower_count == 1      {:error, msg} = TwitterAPI.follow(user, %{"screen_name" => followed.nickname}) @@ -275,7 +281,7 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      {:ok, user} = TwitterAPI.register_user(data) -    fetched_user = User.get_by_nickname("lain") +    fetched_user = User.get_cached_by_nickname("lain")      assert UserView.render("show.json", %{user: user}) ==               UserView.render("show.json", %{user: fetched_user}) @@ -293,13 +299,12 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      {:ok, user} = TwitterAPI.register_user(data) -    fetched_user = User.get_by_nickname("lain") +    fetched_user = User.get_cached_by_nickname("lain")      assert UserView.render("show.json", %{user: user}) ==               UserView.render("show.json", %{user: fetched_user})    end -  @moduletag skip: "needs 'account_activation_required: true' in config"    test "it sends confirmation email if :account_activation_required is specified in instance config" do      setting = Pleroma.Config.get([:instance, :account_activation_required]) @@ -321,7 +326,16 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      assert user.info.confirmation_pending -    Swoosh.TestAssertions.assert_email_sent(Pleroma.UserEmail.account_confirmation_email(user)) +    email = Pleroma.Emails.UserEmail.account_confirmation_email(user) + +    notify_email = Pleroma.Config.get([:instance, :notify_email]) +    instance_name = Pleroma.Config.get([:instance, :name]) + +    Swoosh.TestAssertions.assert_email_sent( +      from: {instance_name, notify_email}, +      to: {user.name, user.email}, +      html_body: email.html_body +    )    end    test "it registers a new user and parses mentions in the bio" do @@ -353,68 +367,313 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      assert user2.bio == expected_text    end -  @moduletag skip: "needs 'registrations_open: false' in config" -  test "it registers a new user via invite token and returns the user." do -    {:ok, token} = UserInviteToken.create_token() +  describe "register with one time token" do +    setup do +      setting = Pleroma.Config.get([:instance, :registrations_open]) -    data = %{ -      "nickname" => "vinny", -      "email" => "pasta@pizza.vs", -      "fullname" => "Vinny Vinesauce", -      "bio" => "streamer", -      "password" => "hiptofbees", -      "confirm" => "hiptofbees", -      "token" => token.token -    } +      if setting do +        Pleroma.Config.put([:instance, :registrations_open], false) +        on_exit(fn -> Pleroma.Config.put([:instance, :registrations_open], setting) end) +      end -    {:ok, user} = TwitterAPI.register_user(data) +      :ok +    end -    fetched_user = User.get_by_nickname("vinny") -    token = Repo.get_by(UserInviteToken, token: token.token) +    test "returns user on success" do +      {:ok, invite} = UserInviteToken.create_invite() -    assert token.used == true +      data = %{ +        "nickname" => "vinny", +        "email" => "pasta@pizza.vs", +        "fullname" => "Vinny Vinesauce", +        "bio" => "streamer", +        "password" => "hiptofbees", +        "confirm" => "hiptofbees", +        "token" => invite.token +      } -    assert UserView.render("show.json", %{user: user}) == -             UserView.render("show.json", %{user: fetched_user}) +      {:ok, user} = TwitterAPI.register_user(data) + +      fetched_user = User.get_cached_by_nickname("vinny") +      invite = Repo.get_by(UserInviteToken, token: invite.token) + +      assert invite.used == true + +      assert UserView.render("show.json", %{user: user}) == +               UserView.render("show.json", %{user: fetched_user}) +    end + +    test "returns error on invalid token" do +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => "DudeLetMeInImAFairy" +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Invalid token" +      refute User.get_cached_by_nickname("GrimReaper") +    end + +    test "returns error on expired token" do +      {:ok, invite} = UserInviteToken.create_invite() +      UserInviteToken.update_invite!(invite, used: true) + +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => invite.token +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("GrimReaper") +    end    end -  @moduletag skip: "needs 'registrations_open: false' in config" -  test "it returns an error if invalid token submitted" do -    data = %{ -      "nickname" => "GrimReaper", -      "email" => "death@reapers.afterlife", -      "fullname" => "Reaper Grim", -      "bio" => "Your time has come", -      "password" => "scythe", -      "confirm" => "scythe", -      "token" => "DudeLetMeInImAFairy" -    } +  describe "registers with date limited token" do +    setup do +      setting = Pleroma.Config.get([:instance, :registrations_open]) + +      if setting do +        Pleroma.Config.put([:instance, :registrations_open], false) +        on_exit(fn -> Pleroma.Config.put([:instance, :registrations_open], setting) end) +      end + +      data = %{ +        "nickname" => "vinny", +        "email" => "pasta@pizza.vs", +        "fullname" => "Vinny Vinesauce", +        "bio" => "streamer", +        "password" => "hiptofbees", +        "confirm" => "hiptofbees" +      } + +      check_fn = fn invite -> +        data = Map.put(data, "token", invite.token) +        {:ok, user} = TwitterAPI.register_user(data) +        fetched_user = User.get_cached_by_nickname("vinny") + +        assert UserView.render("show.json", %{user: user}) == +                 UserView.render("show.json", %{user: fetched_user}) +      end + +      {:ok, data: data, check_fn: check_fn} +    end + +    test "returns user on success", %{check_fn: check_fn} do +      {:ok, invite} = UserInviteToken.create_invite(%{expires_at: Date.utc_today()}) + +      check_fn.(invite) + +      invite = Repo.get_by(UserInviteToken, token: invite.token) + +      refute invite.used +    end + +    test "returns user on token which expired tomorrow", %{check_fn: check_fn} do +      {:ok, invite} = UserInviteToken.create_invite(%{expires_at: Date.add(Date.utc_today(), 1)}) + +      check_fn.(invite) + +      invite = Repo.get_by(UserInviteToken, token: invite.token) + +      refute invite.used +    end + +    test "returns an error on overdue date", %{data: data} do +      {:ok, invite} = UserInviteToken.create_invite(%{expires_at: Date.add(Date.utc_today(), -1)}) + +      data = Map.put(data, "token", invite.token) + +      {:error, msg} = TwitterAPI.register_user(data) -    {:error, msg} = TwitterAPI.register_user(data) +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("vinny") +      invite = Repo.get_by(UserInviteToken, token: invite.token) -    assert msg == "Invalid token" -    refute User.get_by_nickname("GrimReaper") +      refute invite.used +    end    end -  @moduletag skip: "needs 'registrations_open: false' in config" -  test "it returns an error if expired token submitted" do -    {:ok, token} = UserInviteToken.create_token() -    UserInviteToken.mark_as_used(token.token) +  describe "registers with reusable token" do +    setup do +      setting = Pleroma.Config.get([:instance, :registrations_open]) -    data = %{ -      "nickname" => "GrimReaper", -      "email" => "death@reapers.afterlife", -      "fullname" => "Reaper Grim", -      "bio" => "Your time has come", -      "password" => "scythe", -      "confirm" => "scythe", -      "token" => token.token -    } +      if setting do +        Pleroma.Config.put([:instance, :registrations_open], false) +        on_exit(fn -> Pleroma.Config.put([:instance, :registrations_open], setting) end) +      end + +      :ok +    end + +    test "returns user on success, after him registration fails" do +      {:ok, invite} = UserInviteToken.create_invite(%{max_use: 100}) + +      UserInviteToken.update_invite!(invite, uses: 99) + +      data = %{ +        "nickname" => "vinny", +        "email" => "pasta@pizza.vs", +        "fullname" => "Vinny Vinesauce", +        "bio" => "streamer", +        "password" => "hiptofbees", +        "confirm" => "hiptofbees", +        "token" => invite.token +      } + +      {:ok, user} = TwitterAPI.register_user(data) +      fetched_user = User.get_cached_by_nickname("vinny") +      invite = Repo.get_by(UserInviteToken, token: invite.token) + +      assert invite.used == true -    {:error, msg} = TwitterAPI.register_user(data) +      assert UserView.render("show.json", %{user: user}) == +               UserView.render("show.json", %{user: fetched_user}) + +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => invite.token +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("GrimReaper") +    end +  end + +  describe "registers with reusable date limited token" do +    setup do +      setting = Pleroma.Config.get([:instance, :registrations_open]) + +      if setting do +        Pleroma.Config.put([:instance, :registrations_open], false) +        on_exit(fn -> Pleroma.Config.put([:instance, :registrations_open], setting) end) +      end + +      :ok +    end -    assert msg == "Expired token" -    refute User.get_by_nickname("GrimReaper") +    test "returns user on success" do +      {:ok, invite} = UserInviteToken.create_invite(%{expires_at: Date.utc_today(), max_use: 100}) + +      data = %{ +        "nickname" => "vinny", +        "email" => "pasta@pizza.vs", +        "fullname" => "Vinny Vinesauce", +        "bio" => "streamer", +        "password" => "hiptofbees", +        "confirm" => "hiptofbees", +        "token" => invite.token +      } + +      {:ok, user} = TwitterAPI.register_user(data) +      fetched_user = User.get_cached_by_nickname("vinny") +      invite = Repo.get_by(UserInviteToken, token: invite.token) + +      refute invite.used + +      assert UserView.render("show.json", %{user: user}) == +               UserView.render("show.json", %{user: fetched_user}) +    end + +    test "error after max uses" do +      {:ok, invite} = UserInviteToken.create_invite(%{expires_at: Date.utc_today(), max_use: 100}) + +      UserInviteToken.update_invite!(invite, uses: 99) + +      data = %{ +        "nickname" => "vinny", +        "email" => "pasta@pizza.vs", +        "fullname" => "Vinny Vinesauce", +        "bio" => "streamer", +        "password" => "hiptofbees", +        "confirm" => "hiptofbees", +        "token" => invite.token +      } + +      {:ok, user} = TwitterAPI.register_user(data) +      fetched_user = User.get_cached_by_nickname("vinny") +      invite = Repo.get_by(UserInviteToken, token: invite.token) +      assert invite.used == true + +      assert UserView.render("show.json", %{user: user}) == +               UserView.render("show.json", %{user: fetched_user}) + +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => invite.token +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("GrimReaper") +    end + +    test "returns error on overdue date" do +      {:ok, invite} = +        UserInviteToken.create_invite(%{expires_at: Date.add(Date.utc_today(), -1), max_use: 100}) + +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => invite.token +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("GrimReaper") +    end + +    test "returns error on with overdue date and after max" do +      {:ok, invite} = +        UserInviteToken.create_invite(%{expires_at: Date.add(Date.utc_today(), -1), max_use: 100}) + +      UserInviteToken.update_invite!(invite, uses: 100) + +      data = %{ +        "nickname" => "GrimReaper", +        "email" => "death@reapers.afterlife", +        "fullname" => "Reaper Grim", +        "bio" => "Your time has come", +        "password" => "scythe", +        "confirm" => "scythe", +        "token" => invite.token +      } + +      {:error, msg} = TwitterAPI.register_user(data) + +      assert msg == "Expired token" +      refute User.get_cached_by_nickname("GrimReaper") +    end    end    test "it returns the error on registration problems" do @@ -429,7 +688,7 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do      {:error, error_object} = TwitterAPI.register_user(data)      assert is_binary(error_object[:error]) -    refute User.get_by_nickname("lain") +    refute User.get_cached_by_nickname("lain")    end    test "it assigns an integer conversation_id" do @@ -450,7 +709,7 @@ defmodule Pleroma.Web.TwitterAPI.TwitterAPITest do        id = "https://mastodon.social/users/lambadalambda"        user = insert(:user)        {:ok, represented} = TwitterAPI.get_external_profile(user, id) -      remote = User.get_by_ap_id(id) +      remote = User.get_cached_by_ap_id(id)        assert represented["id"] == UserView.render("show.json", %{user: remote, for: user})["id"] diff --git a/test/web/twitter_api/util_controller_test.exs b/test/web/twitter_api/util_controller_test.exs index 410f20f87..56474447b 100644 --- a/test/web/twitter_api/util_controller_test.exs +++ b/test/web/twitter_api/util_controller_test.exs @@ -3,6 +3,7 @@ defmodule Pleroma.Web.TwitterAPI.UtilControllerTest do    alias Pleroma.Notification    alias Pleroma.Repo +  alias Pleroma.User    alias Pleroma.Web.CommonAPI    import Pleroma.Factory @@ -25,6 +26,21 @@ defmodule Pleroma.Web.TwitterAPI.UtilControllerTest do        assert response == "job started"      end +    test "it imports new-style mastodon follow lists", %{conn: conn} do +      user1 = insert(:user) +      user2 = insert(:user) + +      response = +        conn +        |> assign(:user, user1) +        |> post("/api/pleroma/follow_import", %{ +          "list" => "Account address,Show boosts\n#{user2.ap_id},true" +        }) +        |> json_response(:ok) + +      assert response == "job started" +    end +      test "requires 'follow' permission", %{conn: conn} do        token1 = insert(:oauth_token, scopes: ["read", "write"])        token2 = insert(:oauth_token, scopes: ["follow"]) @@ -79,6 +95,26 @@ defmodule Pleroma.Web.TwitterAPI.UtilControllerTest do      end    end +  describe "PUT /api/pleroma/notification_settings" do +    test "it updates notification settings", %{conn: conn} do +      user = insert(:user) + +      conn +      |> assign(:user, user) +      |> put("/api/pleroma/notification_settings", %{ +        "remote" => false, +        "followers" => false, +        "bar" => 1 +      }) +      |> json_response(:ok) + +      user = Repo.get(User, user.id) + +      assert %{"remote" => false, "local" => true, "followers" => false, "follows" => true} == +               user.info.notification_settings +    end +  end +    describe "GET /api/statusnet/config.json" do      test "returns the state of safe_dm_mentions flag", %{conn: conn} do        option = Pleroma.Config.get([:instance, :safe_dm_mentions]) @@ -172,22 +208,19 @@ defmodule Pleroma.Web.TwitterAPI.UtilControllerTest do    describe "/api/pleroma/emoji" do      test "returns json with custom emoji with tags", %{conn: conn} do -      [emoji | _body] = +      emoji =          conn          |> get("/api/pleroma/emoji")          |> json_response(200) -      [key] = Map.keys(emoji) - -      %{ -        ^key => %{ -          "image_url" => url, -          "tags" => tags -        } -      } = emoji - -      assert is_binary(url) -      assert is_list(tags) +      assert Enum.all?(emoji, fn +               {_key, +                %{ +                  "image_url" => url, +                  "tags" => tags +                }} -> +                 is_binary(url) and is_list(tags) +             end)      end    end @@ -212,4 +245,10 @@ defmodule Pleroma.Web.TwitterAPI.UtilControllerTest do        assert html_response(response, 200) =~ "Log in to follow"      end    end + +  test "GET /api/pleroma/healthcheck", %{conn: conn} do +    conn = get(conn, "/api/pleroma/healthcheck") + +    assert conn.status in [200, 503] +  end  end diff --git a/test/web/twitter_api/views/activity_view_test.exs b/test/web/twitter_api/views/activity_view_test.exs index ee9a0c834..85815ba7e 100644 --- a/test/web/twitter_api/views/activity_view_test.exs +++ b/test/web/twitter_api/views/activity_view_test.exs @@ -6,6 +6,7 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do    use Pleroma.DataCase    alias Pleroma.Activity +  alias Pleroma.Object    alias Pleroma.Repo    alias Pleroma.User    alias Pleroma.Web.ActivityPub.ActivityPub @@ -90,16 +91,16 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do    test "a create activity with a summary containing emoji" do      {:ok, activity} =        CommonAPI.post(insert(:user), %{ -        "spoiler_text" => ":woollysocks: meow", +        "spoiler_text" => ":firefox: meow",          "status" => "."        })      result = ActivityView.render("activity.json", activity: activity) -    expected = ":woollysocks: meow" +    expected = ":firefox: meow"      expected_html = -      "<img height=\"32px\" width=\"32px\" alt=\"woollysocks\" title=\"woollysocks\" src=\"http://localhost:4001/finmoji/128px/woollysocks-128.png\" /> meow" +      "<img height=\"32px\" width=\"32px\" alt=\"firefox\" title=\"firefox\" src=\"http://localhost:4001/emoji/Firefox.gif\" /> meow"      assert result["summary"] == expected      assert result["summary_html"] == expected_html @@ -125,10 +126,11 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do      other_user = insert(:user, %{nickname: "shp"})      {:ok, activity} = CommonAPI.post(user, %{"status" => "Hey @shp!", "visibility" => "direct"}) +    object = Object.normalize(activity.data["object"])      result = ActivityView.render("activity.json", activity: activity) -    convo_id = Utils.context_to_conversation_id(activity.data["object"]["context"]) +    convo_id = Utils.context_to_conversation_id(object.data["context"])      expected = %{        "activity_type" => "post", @@ -136,8 +138,8 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do        "attentions" => [          UserView.render("show.json", %{user: other_user})        ], -      "created_at" => activity.data["object"]["published"] |> Utils.date_to_asctime(), -      "external_url" => activity.data["object"]["id"], +      "created_at" => object.data["published"] |> Utils.date_to_asctime(), +      "external_url" => object.data["id"],        "fave_num" => 0,        "favorited" => false,        "id" => activity.id, @@ -161,7 +163,7 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do          }\">@<span>shp</span></a></span>!",        "tags" => [],        "text" => "Hey @shp!", -      "uri" => activity.data["object"]["id"], +      "uri" => object.data["id"],        "user" => UserView.render("show.json", %{user: user}),        "visibility" => "direct",        "card" => nil, @@ -175,8 +177,9 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do      user = insert(:user)      other_user = insert(:user, %{nickname: "shp"})      {:ok, activity} = CommonAPI.post(user, %{"status" => "Hey @shp!"}) +    object = Object.normalize(activity.data["object"]) -    convo_id = Utils.context_to_conversation_id(activity.data["object"]["context"]) +    convo_id = Utils.context_to_conversation_id(object.data["context"])      mocks = [        { @@ -277,9 +280,9 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do      other_user = insert(:user, %{nickname: "shp"})      {:ok, activity} = CommonAPI.post(user, %{"status" => "Hey @shp!"}) -    {:ok, announce, _object} = CommonAPI.repeat(activity.id, other_user) +    {:ok, announce, object} = CommonAPI.repeat(activity.id, other_user) -    convo_id = Utils.context_to_conversation_id(activity.data["object"]["context"]) +    convo_id = Utils.context_to_conversation_id(object.data["context"])      activity = Activity.get_by_id(activity.id) @@ -357,7 +360,7 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do    test "a peertube video" do      {:ok, object} = -      ActivityPub.fetch_object_from_id( +      Pleroma.Object.Fetcher.fetch_object_from_id(          "https://peertube.moe/videos/watch/df5f464b-be8d-46fb-ad81-2d4c2d1630e3"        ) @@ -368,4 +371,14 @@ defmodule Pleroma.Web.TwitterAPI.ActivityViewTest do      assert length(result["attachments"]) == 1      assert result["summary"] == "Friday Night"    end + +  test "special characters are not escaped in text field for status created" do +    text = "<3 is on the way" + +    {:ok, activity} = CommonAPI.post(insert(:user), %{"status" => text}) + +    result = ActivityView.render("activity.json", activity: activity) + +    assert result["text"] == text +  end  end diff --git a/test/web/twitter_api/views/user_view_test.exs b/test/web/twitter_api/views/user_view_test.exs index 0feaf4b64..c99dbddeb 100644 --- a/test/web/twitter_api/views/user_view_test.exs +++ b/test/web/twitter_api/views/user_view_test.exs @@ -89,29 +89,34 @@ defmodule Pleroma.Web.TwitterAPI.UserViewTest do        "following" => false,        "follows_you" => false,        "statusnet_blocking" => false, -      "rights" => %{ -        "delete_others_notice" => false, -        "admin" => false -      },        "statusnet_profile_url" => user.ap_id,        "cover_photo" => banner,        "background_image" => nil,        "is_local" => true,        "locked" => false, -      "default_scope" => "public", -      "no_rich_text" => false,        "hide_follows" => false,        "hide_followers" => false,        "fields" => [],        "pleroma" => %{          "confirmation_pending" => false,          "tags" => [] -      } +      }, +      "rights" => %{"admin" => false, "delete_others_notice" => false}, +      "role" => "member"      }      assert represented == UserView.render("show.json", %{user: user})    end +  test "User exposes settings for themselves and only for themselves", %{user: user} do +    as_user = UserView.render("show.json", %{user: user, for: user}) +    assert as_user["default_scope"] == user.info.default_scope +    assert as_user["no_rich_text"] == user.info.no_rich_text +    as_stranger = UserView.render("show.json", %{user: user}) +    refute as_stranger["default_scope"] +    refute as_stranger["no_rich_text"] +  end +    test "A user for a given other follower", %{user: user} do      follower = insert(:user, %{following: [User.ap_followers(user)]})      {:ok, user} = User.update_follower_count(user) @@ -137,24 +142,20 @@ defmodule Pleroma.Web.TwitterAPI.UserViewTest do        "following" => true,        "follows_you" => false,        "statusnet_blocking" => false, -      "rights" => %{ -        "delete_others_notice" => false, -        "admin" => false -      },        "statusnet_profile_url" => user.ap_id,        "cover_photo" => banner,        "background_image" => nil,        "is_local" => true,        "locked" => false, -      "default_scope" => "public", -      "no_rich_text" => false,        "hide_follows" => false,        "hide_followers" => false,        "fields" => [],        "pleroma" => %{          "confirmation_pending" => false,          "tags" => [] -      } +      }, +      "rights" => %{"admin" => false, "delete_others_notice" => false}, +      "role" => "member"      }      assert represented == UserView.render("show.json", %{user: user, for: follower}) @@ -186,24 +187,20 @@ defmodule Pleroma.Web.TwitterAPI.UserViewTest do        "following" => false,        "follows_you" => true,        "statusnet_blocking" => false, -      "rights" => %{ -        "delete_others_notice" => false, -        "admin" => false -      },        "statusnet_profile_url" => follower.ap_id,        "cover_photo" => banner,        "background_image" => nil,        "is_local" => true,        "locked" => false, -      "default_scope" => "public", -      "no_rich_text" => false,        "hide_follows" => false,        "hide_followers" => false,        "fields" => [],        "pleroma" => %{          "confirmation_pending" => false,          "tags" => [] -      } +      }, +      "rights" => %{"admin" => false, "delete_others_notice" => false}, +      "role" => "member"      }      assert represented == UserView.render("show.json", %{user: follower, for: user}) @@ -272,27 +269,23 @@ defmodule Pleroma.Web.TwitterAPI.UserViewTest do        "following" => false,        "follows_you" => false,        "statusnet_blocking" => true, -      "rights" => %{ -        "delete_others_notice" => false, -        "admin" => false -      },        "statusnet_profile_url" => user.ap_id,        "cover_photo" => banner,        "background_image" => nil,        "is_local" => true,        "locked" => false, -      "default_scope" => "public", -      "no_rich_text" => false,        "hide_follows" => false,        "hide_followers" => false,        "fields" => [],        "pleroma" => %{          "confirmation_pending" => false,          "tags" => [] -      } +      }, +      "rights" => %{"admin" => false, "delete_others_notice" => false}, +      "role" => "member"      } -    blocker = User.get_by_id(blocker.id) +    blocker = User.get_cached_by_id(blocker.id)      assert represented == UserView.render("show.json", %{user: user, for: blocker})    end | 
