2016-11-15 09:56:29 -06:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-02-20 15:53:20 -06:00
|
|
|
class ApplicationController < ActionController::Base
|
|
|
|
# Prevent CSRF attacks by raising an exception.
|
|
|
|
# For APIs, you may want to use :null_session instead.
|
|
|
|
protect_from_forgery with: :exception
|
2016-03-25 08:12:24 -05:00
|
|
|
|
2017-04-23 19:44:05 -05:00
|
|
|
force_ssl if: :https_enabled?
|
|
|
|
|
2017-04-07 19:30:50 -05:00
|
|
|
include Localized
|
2017-04-29 17:28:16 -05:00
|
|
|
include UserTrackingConcern
|
2017-04-16 05:51:30 -05:00
|
|
|
|
|
|
|
helper_method :current_account
|
2017-06-25 16:51:32 -05:00
|
|
|
helper_method :current_session
|
2017-12-04 01:26:40 -06:00
|
|
|
helper_method :current_flavour
|
2017-11-30 21:29:47 -06:00
|
|
|
helper_method :current_skin
|
2017-04-16 05:51:30 -05:00
|
|
|
helper_method :single_user_mode?
|
2018-02-28 12:04:53 -06:00
|
|
|
helper_method :use_seamless_external_login?
|
2016-08-24 10:56:44 -05:00
|
|
|
|
2016-09-07 19:40:51 -05:00
|
|
|
rescue_from ActionController::RoutingError, with: :not_found
|
|
|
|
rescue_from ActiveRecord::RecordNotFound, with: :not_found
|
2017-01-14 17:30:23 -06:00
|
|
|
rescue_from ActionController::InvalidAuthenticityToken, with: :unprocessable_entity
|
2017-11-11 13:23:33 -06:00
|
|
|
rescue_from Mastodon::NotPermittedError, with: :forbidden
|
2016-09-07 19:40:51 -05:00
|
|
|
|
2016-10-06 08:42:00 -05:00
|
|
|
before_action :store_current_location, except: :raise_not_found, unless: :devise_controller?
|
2016-12-06 11:03:30 -06:00
|
|
|
before_action :check_suspension, if: :user_signed_in?
|
2016-10-02 10:11:08 -05:00
|
|
|
|
2016-09-07 19:40:51 -05:00
|
|
|
def raise_not_found
|
2016-09-29 14:28:21 -05:00
|
|
|
raise ActionController::RoutingError, "No route matches #{params[:unmatched_route]}"
|
2016-09-07 19:40:51 -05:00
|
|
|
end
|
|
|
|
|
2016-10-02 10:11:08 -05:00
|
|
|
private
|
|
|
|
|
2017-04-23 19:44:05 -05:00
|
|
|
def https_enabled?
|
2018-01-07 08:19:23 -06:00
|
|
|
Rails.env.production?
|
2017-04-23 19:44:05 -05:00
|
|
|
end
|
|
|
|
|
2016-10-02 10:11:08 -05:00
|
|
|
def store_current_location
|
2018-02-21 17:51:30 -06:00
|
|
|
store_location_for(:user, request.url) unless request.format == :json
|
2016-10-02 10:11:08 -05:00
|
|
|
end
|
|
|
|
|
2016-11-28 11:45:13 -06:00
|
|
|
def require_admin!
|
2018-04-03 06:07:32 -05:00
|
|
|
forbidden unless current_user&.admin?
|
2016-11-28 11:45:13 -06:00
|
|
|
end
|
|
|
|
|
2017-11-11 13:23:33 -06:00
|
|
|
def require_staff!
|
2018-04-03 06:07:32 -05:00
|
|
|
forbidden unless current_user&.staff?
|
2017-11-11 13:23:33 -06:00
|
|
|
end
|
|
|
|
|
2016-12-06 11:03:30 -06:00
|
|
|
def check_suspension
|
2017-05-24 09:39:09 -05:00
|
|
|
forbidden if current_user.account.suspended?
|
2016-12-06 11:03:30 -06:00
|
|
|
end
|
|
|
|
|
2017-08-04 21:24:58 -05:00
|
|
|
def after_sign_out_path_for(_resource_or_scope)
|
|
|
|
new_user_session_path
|
|
|
|
end
|
|
|
|
|
2017-11-30 21:29:47 -06:00
|
|
|
def pack(data, pack_name, skin = 'default')
|
2017-11-21 00:13:37 -06:00
|
|
|
return nil unless pack?(data, pack_name)
|
|
|
|
pack_data = {
|
2017-12-06 17:34:19 -06:00
|
|
|
common: pack_name == 'common' ? nil : resolve_pack(data['name'] ? Themes.instance.flavour(current_flavour) : Themes.instance.core, 'common', skin),
|
2017-12-04 01:26:40 -06:00
|
|
|
flavour: data['name'],
|
2017-11-21 00:13:37 -06:00
|
|
|
pack: pack_name,
|
|
|
|
preload: nil,
|
2017-11-30 21:29:47 -06:00
|
|
|
skin: nil,
|
2017-12-07 21:07:47 -06:00
|
|
|
supported_locales: data['locales'],
|
2017-11-21 00:13:37 -06:00
|
|
|
}
|
|
|
|
if data['pack'][pack_name].is_a?(Hash)
|
|
|
|
pack_data[:common] = nil if data['pack'][pack_name]['use_common'] == false
|
|
|
|
pack_data[:pack] = nil unless data['pack'][pack_name]['filename']
|
|
|
|
if data['pack'][pack_name]['preload']
|
|
|
|
pack_data[:preload] = [data['pack'][pack_name]['preload']] if data['pack'][pack_name]['preload'].is_a?(String)
|
|
|
|
pack_data[:preload] = data['pack'][pack_name]['preload'] if data['pack'][pack_name]['preload'].is_a?(Array)
|
|
|
|
end
|
2017-11-30 21:29:47 -06:00
|
|
|
if skin != 'default' && data['skin'][skin]
|
|
|
|
pack_data[:skin] = skin if data['skin'][skin].include?(pack_name)
|
|
|
|
else # default skin
|
|
|
|
pack_data[:skin] = 'default' if data['pack'][pack_name]['stylesheet']
|
|
|
|
end
|
2017-11-21 00:13:37 -06:00
|
|
|
end
|
|
|
|
pack_data
|
|
|
|
end
|
|
|
|
|
|
|
|
def pack?(data, pack_name)
|
|
|
|
if data['pack'].is_a?(Hash) && data['pack'].key?(pack_name)
|
|
|
|
return true if data['pack'][pack_name].is_a?(String) || data['pack'][pack_name].is_a?(Hash)
|
|
|
|
end
|
|
|
|
false
|
|
|
|
end
|
|
|
|
|
2017-11-30 21:29:47 -06:00
|
|
|
def nil_pack(data, pack_name, skin = 'default')
|
2017-11-21 00:13:37 -06:00
|
|
|
{
|
2017-12-04 01:26:40 -06:00
|
|
|
common: pack_name == 'common' ? nil : resolve_pack(data['name'] ? Themes.instance.flavour(current_flavour) : Themes.instance.core, 'common', skin),
|
|
|
|
flavour: data['name'],
|
2017-11-21 00:13:37 -06:00
|
|
|
pack: nil,
|
|
|
|
preload: nil,
|
2017-11-30 21:29:47 -06:00
|
|
|
skin: nil,
|
2017-12-07 21:07:47 -06:00
|
|
|
supported_locales: data['locales'],
|
2017-11-21 00:13:37 -06:00
|
|
|
}
|
|
|
|
end
|
|
|
|
|
2017-11-30 21:29:47 -06:00
|
|
|
def resolve_pack(data, pack_name, skin = 'default')
|
|
|
|
result = pack(data, pack_name, skin)
|
2017-11-21 00:13:37 -06:00
|
|
|
unless result
|
|
|
|
if data['name'] && data.key?('fallback')
|
|
|
|
if data['fallback'].nil?
|
2017-11-30 21:29:47 -06:00
|
|
|
return nil_pack(data, pack_name, skin)
|
2017-12-04 01:26:40 -06:00
|
|
|
elsif data['fallback'].is_a?(String) && Themes.instance.flavour(data['fallback'])
|
2017-12-07 16:49:54 -06:00
|
|
|
return resolve_pack(Themes.instance.flavour(data['fallback']), pack_name)
|
2017-11-21 00:13:37 -06:00
|
|
|
elsif data['fallback'].is_a?(Array)
|
|
|
|
data['fallback'].each do |fallback|
|
2017-12-07 16:49:54 -06:00
|
|
|
return resolve_pack(Themes.instance.flavour(fallback), pack_name) if Themes.instance.flavour(fallback)
|
2017-11-21 00:13:37 -06:00
|
|
|
end
|
|
|
|
end
|
2017-11-30 21:29:47 -06:00
|
|
|
return nil_pack(data, pack_name, skin)
|
2017-11-21 00:13:37 -06:00
|
|
|
end
|
2017-12-07 16:49:54 -06:00
|
|
|
return data.key?('name') && data['name'] != Setting.default_settings['flavour'] ? resolve_pack(Themes.instance.flavour(Setting.default_settings['flavour']), pack_name) : nil_pack(data, pack_name, skin)
|
2017-11-21 00:13:37 -06:00
|
|
|
end
|
|
|
|
result
|
|
|
|
end
|
|
|
|
|
|
|
|
def use_pack(pack_name)
|
|
|
|
@core = resolve_pack(Themes.instance.core, pack_name)
|
2017-12-04 01:26:40 -06:00
|
|
|
@theme = resolve_pack(Themes.instance.flavour(current_flavour), pack_name, current_skin)
|
2017-11-21 00:13:37 -06:00
|
|
|
end
|
|
|
|
|
2016-08-18 10:13:41 -05:00
|
|
|
protected
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def forbidden
|
|
|
|
respond_with_error(403)
|
2016-09-07 19:40:51 -05:00
|
|
|
end
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def not_found
|
|
|
|
respond_with_error(404)
|
2017-01-14 17:30:23 -06:00
|
|
|
end
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def gone
|
|
|
|
respond_with_error(410)
|
2017-04-22 22:21:10 -05:00
|
|
|
end
|
|
|
|
|
2017-01-14 17:30:23 -06:00
|
|
|
def unprocessable_entity
|
2017-05-01 15:24:36 -05:00
|
|
|
respond_with_error(422)
|
2016-10-05 06:26:44 -05:00
|
|
|
end
|
|
|
|
|
2017-04-15 09:46:27 -05:00
|
|
|
def single_user_mode?
|
2017-05-22 08:02:30 -05:00
|
|
|
@single_user_mode ||= Rails.configuration.x.single_user_mode && Account.exists?
|
2017-04-15 09:46:27 -05:00
|
|
|
end
|
|
|
|
|
2018-02-28 12:04:53 -06:00
|
|
|
def use_seamless_external_login?
|
|
|
|
Devise.pam_authentication || Devise.ldap_authentication
|
2018-02-02 03:18:55 -06:00
|
|
|
end
|
|
|
|
|
2016-08-18 10:13:41 -05:00
|
|
|
def current_account
|
2016-11-23 02:20:34 -06:00
|
|
|
@current_account ||= current_user.try(:account)
|
2016-08-18 10:13:41 -05:00
|
|
|
end
|
2016-11-29 08:49:39 -06:00
|
|
|
|
2017-06-25 16:51:32 -05:00
|
|
|
def current_session
|
2017-07-07 16:25:15 -05:00
|
|
|
@current_session ||= SessionActivation.find_by(session_id: cookies.signed['_session_id'])
|
2017-06-25 16:51:32 -05:00
|
|
|
end
|
|
|
|
|
2017-12-04 01:26:40 -06:00
|
|
|
def current_flavour
|
|
|
|
return Setting.default_settings['flavour'] unless Themes.instance.flavours.include? current_user&.setting_flavour
|
|
|
|
current_user.setting_flavour
|
2017-11-30 21:29:47 -06:00
|
|
|
end
|
|
|
|
|
|
|
|
def current_skin
|
2017-12-04 01:26:40 -06:00
|
|
|
return 'default' unless Themes.instance.skins_for(current_flavour).include? current_user&.setting_skin
|
2017-11-30 21:29:47 -06:00
|
|
|
current_user.setting_skin
|
|
|
|
end
|
|
|
|
|
2016-11-29 08:49:39 -06:00
|
|
|
def cache_collection(raw, klass)
|
2016-11-30 08:57:56 -06:00
|
|
|
return raw unless klass.respond_to?(:with_includes)
|
|
|
|
|
2016-12-03 11:21:26 -06:00
|
|
|
raw = raw.cache_ids.to_a if raw.is_a?(ActiveRecord::Relation)
|
2016-11-29 08:49:39 -06:00
|
|
|
uncached_ids = []
|
|
|
|
cached_keys_with_value = Rails.cache.read_multi(*raw.map(&:cache_key))
|
|
|
|
|
|
|
|
raw.each do |item|
|
|
|
|
uncached_ids << item.id unless cached_keys_with_value.key?(item.cache_key)
|
|
|
|
end
|
|
|
|
|
2016-12-03 11:21:26 -06:00
|
|
|
klass.reload_stale_associations!(cached_keys_with_value.values) if klass.respond_to?(:reload_stale_associations!)
|
|
|
|
|
2016-11-29 08:49:39 -06:00
|
|
|
unless uncached_ids.empty?
|
|
|
|
uncached = klass.where(id: uncached_ids).with_includes.map { |item| [item.id, item] }.to_h
|
|
|
|
|
2017-11-16 19:06:26 -06:00
|
|
|
uncached.each_value do |item|
|
2016-11-29 08:49:39 -06:00
|
|
|
Rails.cache.write(item.cache_key, item)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
raw.map { |item| cached_keys_with_value[item.cache_key] || uncached[item.id] }.compact
|
|
|
|
end
|
2017-04-21 11:11:20 -05:00
|
|
|
|
|
|
|
def respond_with_error(code)
|
2017-05-01 15:24:36 -05:00
|
|
|
respond_to do |format|
|
|
|
|
format.any { head code }
|
|
|
|
format.html do
|
|
|
|
set_locale
|
2018-01-07 13:30:17 -06:00
|
|
|
use_pack 'error'
|
2017-05-01 15:24:36 -05:00
|
|
|
render "errors/#{code}", layout: 'error', status: code
|
|
|
|
end
|
|
|
|
end
|
2017-04-21 11:11:20 -05:00
|
|
|
end
|
2017-12-29 12:52:04 -06:00
|
|
|
|
|
|
|
def render_cached_json(cache_key, **options)
|
2018-01-03 18:21:38 -06:00
|
|
|
options[:expires_in] ||= 3.minutes
|
|
|
|
cache_key = cache_key.join(':') if cache_key.is_a?(Enumerable)
|
2018-01-06 23:53:27 -06:00
|
|
|
cache_public = options.key?(:public) ? options.delete(:public) : true
|
2018-01-03 18:21:38 -06:00
|
|
|
content_type = options.delete(:content_type) || 'application/json'
|
|
|
|
|
2017-12-29 12:52:04 -06:00
|
|
|
data = Rails.cache.fetch(cache_key, { raw: true }.merge(options)) do
|
|
|
|
yield.to_json
|
|
|
|
end
|
|
|
|
|
2018-01-06 23:53:27 -06:00
|
|
|
expires_in options[:expires_in], public: cache_public
|
2018-01-03 18:21:38 -06:00
|
|
|
render json: data, content_type: content_type
|
|
|
|
end
|
|
|
|
|
|
|
|
def set_cache_headers
|
|
|
|
response.headers['Vary'] = 'Accept'
|
|
|
|
end
|
|
|
|
|
|
|
|
def skip_session!
|
|
|
|
request.session_options[:skip] = true
|
2017-12-29 12:52:04 -06:00
|
|
|
end
|
2016-02-20 15:53:20 -06:00
|
|
|
end
|