* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
		
			
				
	
	
		
			32 lines
		
	
	
		
			732 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			32 lines
		
	
	
		
			732 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
# frozen_string_literal: true
 | 
						|
 | 
						|
class Api::V1::FollowsController < Api::BaseController
 | 
						|
  before_action -> { doorkeeper_authorize! :follow, :'write:follows' }
 | 
						|
  before_action :require_user!
 | 
						|
 | 
						|
  respond_to :json
 | 
						|
 | 
						|
  def create
 | 
						|
    raise ActiveRecord::RecordNotFound if follow_params[:uri].blank?
 | 
						|
 | 
						|
    @account = FollowService.new.call(current_user.account, target_uri).try(:target_account)
 | 
						|
 | 
						|
    if @account.nil?
 | 
						|
      username, domain = target_uri.split('@')
 | 
						|
      @account         = Account.find_remote!(username, domain)
 | 
						|
    end
 | 
						|
 | 
						|
    render json: @account, serializer: REST::AccountSerializer
 | 
						|
  end
 | 
						|
 | 
						|
  private
 | 
						|
 | 
						|
  def target_uri
 | 
						|
    follow_params[:uri].strip.gsub(/\A@/, '')
 | 
						|
  end
 | 
						|
 | 
						|
  def follow_params
 | 
						|
    params.permit(:uri)
 | 
						|
  end
 | 
						|
end
 |