add: implement 9 new scopes, 21 new api endpoints

crates/app/src/routes/api/v1/communities/posts.rs

@@ -1,5 +1,5 @@
 use axum::{
-    extract::Path,
+    extract::{Path, Query},
     http::{HeaderMap, HeaderValue},
     response::IntoResponse,
     Extension, Json,
@@ -14,11 +14,14 @@ use tetratto_core::model::{
     ApiReturn, Error,
 };
 use crate::{
-    get_user_from_token,
+    check_user_blocked_or_private, get_user_from_token,
     image::{save_webp_buffer, JsonMultipart},
-    routes::api::v1::{
-        CreatePost, CreateRepost, UpdatePostContent, UpdatePostContext, UpdatePostIsOpen,
-        VoteInPoll,
+    routes::{
+        api::v1::{
+            CreatePost, CreateRepost, UpdatePostContent, UpdatePostContext, UpdatePostIsOpen,
+            VoteInPoll,
+        },
+        pages::{PaginatedQuery, SearchedQuery},
     },
     State,
 };
@@ -409,3 +412,550 @@ pub async fn update_is_open_request(
         Err(e) => Json(e.into()),
     }
 }
+
+/// Get posts by the given user.
+pub async fn posts_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let other_user = match data.get_user_by_id(id).await {
+        Ok(ua) => ua,
+        Err(e) => return Json(e.into()),
+    };
+
+    check_user_blocked_or_private!(Some(&user), other_user, data, @api);
+    match data
+        .get_posts_by_user(id, 12, props.page, &Some(user.clone()))
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get posts in the given community.
+pub async fn community_posts_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_posts_by_community(id, 12, props.page).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get replies by the given user.
+pub async fn replies_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let other_user = match data.get_user_by_id(id).await {
+        Ok(ua) => ua,
+        Err(e) => return Json(e.into()),
+    };
+
+    check_user_blocked_or_private!(Some(&user), other_user, data, @api);
+    match data
+        .get_replies_by_user(id, 12, props.page, &Some(user.clone()))
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get posts (with media) by the given user.
+pub async fn posts_with_media_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let other_user = match data.get_user_by_id(id).await {
+        Ok(ua) => ua,
+        Err(e) => return Json(e.into()),
+    };
+
+    check_user_blocked_or_private!(Some(&user), other_user, data, @api);
+    match data
+        .get_media_posts_by_user(id, 12, props.page, &Some(user.clone()))
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get posts (searched) by the given user.
+pub async fn posts_searched_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<SearchedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let other_user = match data.get_user_by_id(id).await {
+        Ok(ua) => ua,
+        Err(e) => return Json(e.into()),
+    };
+
+    check_user_blocked_or_private!(Some(&user), other_user, data, @api);
+    match data
+        .get_posts_by_user_searched(id, 12, props.page, &props.text, &Some(&user))
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (searched).
+pub async fn all_posts_searched_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<SearchedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    if !user.permissions.check(FinePermission::SUPPORTER) {
+        return Json(Error::RequiresSupporter.into());
+    }
+
+    match data.get_posts_searched(12, props.page, &props.text).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (from user communities).
+pub async fn from_communities_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_popular_posts(12, props.page, 604_800_000).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (from stack).
+pub async fn from_stack_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let stack = match data.get_stack_by_id(id).await {
+        Ok(s) => s,
+        Err(e) => return Json(e.into()),
+    };
+
+    if stack.owner != user.id && !user.permissions.check(FinePermission::MANAGE_STACKS) {
+        return Json(Error::NotAllowed.into());
+    }
+
+    match data
+        .get_posts_from_stack(id, 12, props.page, stack.sort)
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (by likes).
+pub async fn popular_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_popular_posts(12, props.page, 604_800_000).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (from any community).
+pub async fn all_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_latest_posts(12, props.page).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get all posts (from following).
+pub async fn following_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data
+        .get_posts_from_user_following(user.id, 12, props.page)
+        .await
+    {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get a single post.
+pub async fn get_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    if get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts).is_none() {
+        return Json(Error::NotAllowed.into());
+    }
+
+    match data.get_post_by_id(id).await {
+        Ok(p) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: Some(p),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get replies for the given post.
+pub async fn post_replies_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_replies_by_post(id, 12, props.page).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get reposts for the given post.
+pub async fn reposts_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_reposts_by_quoting(id, 12, props.page).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}
+
+/// Get quotes for the given post.
+pub async fn quotes_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadPosts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_quoting_posts_by_quoting(id, 12, props.page).await {
+        Ok(posts) => {
+            let ignore_users = crate::ignore_users_gen!(user!, #data);
+            Json(ApiReturn {
+                ok: true,
+                message: "Success".to_string(),
+                payload: match data
+                    .fill_posts_with_community(posts, user.id, &ignore_users, &Some(user.clone()))
+                    .await
+                {
+                    Ok(l) => data.posts_owner_filter(
+                        &data.posts_muted_phrase_filter(&l, Some(&user.settings.muted)),
+                    ),
+                    Err(e) => return Json(e.into()),
+                },
+            })
+        }
+        Err(e) => Json(e.into()),
+    }
+}