X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fmiddlewares%2Fvalidators%2Ffollows.ts;h=023dba5b53963c7efc17400f1a1000ed8b5ce738;hb=0e6cd1c00f71554fe7375a96db693a6983951ba6;hp=16abdd096c948a44777de807988134c41543726a;hpb=421ff4618da64f0849353383f690a014024c40da;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/validators/follows.ts b/server/middlewares/validators/follows.ts index 16abdd096..023dba5b5 100644 --- a/server/middlewares/validators/follows.ts +++ b/server/middlewares/validators/follows.ts @@ -1,12 +1,13 @@ -import * as express from 'express' +import express from 'express' import { body, param, query } from 'express-validator' +import { isProdInstance } from '@server/helpers/core-utils' import { isEachUniqueHandleValid, isFollowStateValid, isRemoteHandleValid } from '@server/helpers/custom-validators/follows' import { loadActorUrlOrGetFromWebfinger } from '@server/lib/activitypub/actors' import { getRemoteNameAndHost } from '@server/lib/activitypub/follow' import { getServerActor } from '@server/models/application/application' import { MActorFollowActorsDefault } from '@server/types/models' +import { ServerFollowCreate } from '@shared/models' import { HttpStatusCode } from '../../../shared/models/http/http-error-codes' -import { isTestInstance } from '../../helpers/core-utils' import { isActorTypeValid, isValidActorHandle } from '../../helpers/custom-validators/activitypub/actor' import { isEachUniqueHostValid, isHostValid } from '../../helpers/custom-validators/servers' import { logger } from '../../helpers/logger' @@ -14,7 +15,6 @@ import { WEBSERVER } from '../../initializers/constants' import { ActorModel } from '../../models/actor/actor' import { ActorFollowModel } from '../../models/actor/actor-follow' import { areValidationErrors } from './shared' -import { ServerFollowCreate } from '@shared/models' const listFollowsValidator = [ query('state') @@ -42,7 +42,7 @@ const followValidator = [ (req: express.Request, res: express.Response, next: express.NextFunction) => { // Force https if the administrator wants to follow remote actors - if (isTestInstance() === false && WEBSERVER.SCHEME === 'http') { + if (isProdInstance() && WEBSERVER.SCHEME === 'http') { return res .status(HttpStatusCode.INTERNAL_SERVER_ERROR_500) .json({ @@ -81,7 +81,11 @@ const removeFollowingValidator = [ const serverActor = await getServerActor() const { name, host } = getRemoteNameAndHost(req.params.hostOrHandle) - const follow = await ActorFollowModel.loadByActorAndTargetNameAndHostForAPI(serverActor.id, name, host) + const follow = await ActorFollowModel.loadByActorAndTargetNameAndHostForAPI({ + actorId: serverActor.id, + targetName: name, + targetHost: host + }) if (!follow) { return res.fail({ @@ -126,13 +130,26 @@ const getFollowerValidator = [ } ] -const acceptOrRejectFollowerValidator = [ +const acceptFollowerValidator = [ + (req: express.Request, res: express.Response, next: express.NextFunction) => { + logger.debug('Checking accept follower parameters', { parameters: req.params }) + + const follow = res.locals.follow + if (follow.state !== 'pending' && follow.state !== 'rejected') { + return res.fail({ message: 'Follow is not in pending/rejected state.' }) + } + + return next() + } +] + +const rejectFollowerValidator = [ (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking accept/reject follower parameters', { parameters: req.params }) + logger.debug('Checking reject follower parameters', { parameters: req.params }) const follow = res.locals.follow - if (follow.state !== 'pending') { - return res.fail({ message: 'Follow is not in pending state.' }) + if (follow.state !== 'pending' && follow.state !== 'accepted') { + return res.fail({ message: 'Follow is not in pending/accepted state.' }) } return next() @@ -145,6 +162,7 @@ export { followValidator, removeFollowingValidator, getFollowerValidator, - acceptOrRejectFollowerValidator, + acceptFollowerValidator, + rejectFollowerValidator, listFollowsValidator }