mastodon/app/controllers/application_controller.rb

229 lines
7.0 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2016-02-20 21:53:20 +00:00
class ApplicationController < ActionController::Base
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
protect_from_forgery with: :exception
force_ssl if: :https_enabled?
include Localized
include UserTrackingConcern
include SessionTrackingConcern
helper_method :current_account
helper_method :current_session
2017-12-04 07:26:40 +00:00
helper_method :current_flavour
2017-12-01 03:29:47 +00:00
helper_method :current_skin
helper_method :single_user_mode?
2018-02-28 18:04:53 +00:00
helper_method :use_seamless_external_login?
2016-09-08 00:40:51 +00:00
rescue_from ActionController::RoutingError, with: :not_found
rescue_from ActiveRecord::RecordNotFound, with: :not_found
rescue_from ActionController::InvalidAuthenticityToken, with: :unprocessable_entity
rescue_from ActionController::UnknownFormat, with: :not_acceptable
rescue_from Mastodon::NotPermittedError, with: :forbidden
2016-09-08 00:40:51 +00:00
before_action :store_current_location, except: :raise_not_found, unless: :devise_controller?
before_action :check_user_permissions, if: :user_signed_in?
2016-09-08 00:40:51 +00:00
def raise_not_found
2016-09-29 19:28:21 +00:00
raise ActionController::RoutingError, "No route matches #{params[:unmatched_route]}"
2016-09-08 00:40:51 +00:00
end
private
def https_enabled?
2018-01-07 14:19:23 +00:00
Rails.env.production?
end
def store_current_location
store_location_for(:user, request.url) unless request.format == :json
end
def require_admin!
forbidden unless current_user&.admin?
end
def require_staff!
forbidden unless current_user&.staff?
end
def check_user_permissions
forbidden if current_user.disabled? || current_user.account.suspended?
2016-12-06 17:03:30 +00:00
end
def after_sign_out_path_for(_resource_or_scope)
new_user_session_path
end
2017-12-01 03:29:47 +00:00
def pack(data, pack_name, skin = 'default')
2017-11-21 06:13:37 +00:00
return nil unless pack?(data, pack_name)
pack_data = {
common: pack_name == 'common' ? nil : resolve_pack(data['name'] ? Themes.instance.flavour(current_flavour) : Themes.instance.core, 'common', skin),
2017-12-04 07:26:40 +00:00
flavour: data['name'],
2017-11-21 06:13:37 +00:00
pack: pack_name,
preload: nil,
2017-12-01 03:29:47 +00:00
skin: nil,
2017-12-08 03:07:47 +00:00
supported_locales: data['locales'],
2017-11-21 06:13:37 +00:00
}
if data['pack'][pack_name].is_a?(Hash)
pack_data[:common] = nil if data['pack'][pack_name]['use_common'] == false
pack_data[:pack] = nil unless data['pack'][pack_name]['filename']
if data['pack'][pack_name]['preload']
pack_data[:preload] = [data['pack'][pack_name]['preload']] if data['pack'][pack_name]['preload'].is_a?(String)
pack_data[:preload] = data['pack'][pack_name]['preload'] if data['pack'][pack_name]['preload'].is_a?(Array)
end
2017-12-01 03:29:47 +00:00
if skin != 'default' && data['skin'][skin]
pack_data[:skin] = skin if data['skin'][skin].include?(pack_name)
else # default skin
pack_data[:skin] = 'default' if data['pack'][pack_name]['stylesheet']
end
2017-11-21 06:13:37 +00:00
end
pack_data
end
def pack?(data, pack_name)
if data['pack'].is_a?(Hash) && data['pack'].key?(pack_name)
return true if data['pack'][pack_name].is_a?(String) || data['pack'][pack_name].is_a?(Hash)
end
false
end
2017-12-01 03:29:47 +00:00
def nil_pack(data, pack_name, skin = 'default')
2017-11-21 06:13:37 +00:00
{
2017-12-04 07:26:40 +00:00
common: pack_name == 'common' ? nil : resolve_pack(data['name'] ? Themes.instance.flavour(current_flavour) : Themes.instance.core, 'common', skin),
flavour: data['name'],
2017-11-21 06:13:37 +00:00
pack: nil,
preload: nil,
2017-12-01 03:29:47 +00:00
skin: nil,
2017-12-08 03:07:47 +00:00
supported_locales: data['locales'],
2017-11-21 06:13:37 +00:00
}
end
2017-12-01 03:29:47 +00:00
def resolve_pack(data, pack_name, skin = 'default')
result = pack(data, pack_name, skin)
2017-11-21 06:13:37 +00:00
unless result
if data['name'] && data.key?('fallback')
if data['fallback'].nil?
2017-12-01 03:29:47 +00:00
return nil_pack(data, pack_name, skin)
2017-12-04 07:26:40 +00:00
elsif data['fallback'].is_a?(String) && Themes.instance.flavour(data['fallback'])
return resolve_pack(Themes.instance.flavour(data['fallback']), pack_name)
2017-11-21 06:13:37 +00:00
elsif data['fallback'].is_a?(Array)
data['fallback'].each do |fallback|
return resolve_pack(Themes.instance.flavour(fallback), pack_name) if Themes.instance.flavour(fallback)
2017-11-21 06:13:37 +00:00
end
end
2017-12-01 03:29:47 +00:00
return nil_pack(data, pack_name, skin)
2017-11-21 06:13:37 +00:00
end
return data.key?('name') && data['name'] != Setting.default_settings['flavour'] ? resolve_pack(Themes.instance.flavour(Setting.default_settings['flavour']), pack_name) : nil_pack(data, pack_name, skin)
2017-11-21 06:13:37 +00:00
end
result
end
def use_pack(pack_name)
@core = resolve_pack(Themes.instance.core, pack_name)
2017-12-04 07:26:40 +00:00
@theme = resolve_pack(Themes.instance.flavour(current_flavour), pack_name, current_skin)
2017-11-21 06:13:37 +00:00
end
2016-08-18 15:13:41 +00:00
protected
def forbidden
respond_with_error(403)
2016-09-08 00:40:51 +00:00
end
def not_found
respond_with_error(404)
end
def gone
respond_with_error(410)
end
def unprocessable_entity
respond_with_error(422)
end
def not_acceptable
respond_with_error(406)
end
def single_user_mode?
@single_user_mode ||= Rails.configuration.x.single_user_mode && Account.exists?
end
2018-02-28 18:04:53 +00:00
def use_seamless_external_login?
Devise.pam_authentication || Devise.ldap_authentication
end
2016-08-18 15:13:41 +00:00
def current_account
@current_account ||= current_user.try(:account)
2016-08-18 15:13:41 +00:00
end
2016-11-29 14:49:39 +00:00
def current_session
@current_session ||= SessionActivation.find_by(session_id: cookies.signed['_session_id'])
end
2017-12-04 07:26:40 +00:00
def current_flavour
return Setting.flavour unless Themes.instance.flavours.include? current_user&.setting_flavour
2017-12-04 07:26:40 +00:00
current_user.setting_flavour
2017-12-01 03:29:47 +00:00
end
def current_skin
return Setting.skin unless Themes.instance.skins_for(current_flavour).include? current_user&.setting_skin
2017-12-01 03:29:47 +00:00
current_user.setting_skin
end
2016-11-29 14:49:39 +00:00
def cache_collection(raw, klass)
2016-11-30 14:57:56 +00:00
return raw unless klass.respond_to?(:with_includes)
raw = raw.cache_ids.to_a if raw.is_a?(ActiveRecord::Relation)
cached_keys_with_value = Rails.cache.read_multi(*raw).transform_keys(&:id)
uncached_ids = raw.map(&:id) - cached_keys_with_value.keys
2016-11-29 14:49:39 +00:00
klass.reload_stale_associations!(cached_keys_with_value.values) if klass.respond_to?(:reload_stale_associations!)
2016-11-29 14:49:39 +00:00
unless uncached_ids.empty?
uncached = klass.where(id: uncached_ids).with_includes.map { |item| [item.id, item] }.to_h
2017-11-17 01:06:26 +00:00
uncached.each_value do |item|
Rails.cache.write(item, item)
2016-11-29 14:49:39 +00:00
end
end
raw.map { |item| cached_keys_with_value[item.id] || uncached[item.id] }.compact
2016-11-29 14:49:39 +00:00
end
def respond_with_error(code)
respond_to do |format|
format.any { head code }
format.html do
set_locale
use_pack 'error'
render "errors/#{code}", layout: 'error', status: code
end
end
end
def render_cached_json(cache_key, **options)
options[:expires_in] ||= 3.minutes
2018-01-07 05:53:27 +00:00
cache_public = options.key?(:public) ? options.delete(:public) : true
content_type = options.delete(:content_type) || 'application/json'
data = Rails.cache.fetch(cache_key, { raw: true }.merge(options)) do
yield.to_json
end
2018-01-07 05:53:27 +00:00
expires_in options[:expires_in], public: cache_public
render json: data, content_type: content_type
end
def set_cache_headers
response.headers['Vary'] = 'Accept'
end
def skip_session!
request.session_options[:skip] = true
end
2016-02-20 21:53:20 +00:00
end