add: audit log, reports

add: theme preference setting

crates/app/src/routes/api/v1/auth/ipbans.rs

@@ -37,7 +37,7 @@ pub async fn create_request(
 /// Delete the given IP ban.
 pub async fn delete_request(
     jar: CookieJar,
-    Path(id): Path<usize>,
+    Path(ip): Path<String>,
     Extension(data): Extension<State>,
 ) -> impl IntoResponse {
     let data = &(data.read().await).0;
@@ -50,7 +50,7 @@ pub async fn delete_request(
         return Json(Error::NotAllowed.into());
     }
 
-    match data.delete_ipban(id, user).await {
+    match data.delete_ipban(&ip, user).await {
         Ok(_) => Json(ApiReturn {
             ok: true,
             message: "IP ban deleted".to_string(),

crates/app/src/routes/api/v1/auth/profile.rs

@@ -1,7 +1,9 @@
 use crate::{
     State, get_user_from_token,
     model::{ApiReturn, Error},
-    routes::api::v1::{DeleteUser, UpdateUserIsVerified, UpdateUserPassword, UpdateUserUsername},
+    routes::api::v1::{
+        DeleteUser, UpdateUserIsVerified, UpdateUserPassword, UpdateUserRole, UpdateUserUsername,
+    },
 };
 use axum::{
     Extension, Json,
@@ -171,6 +173,29 @@ pub async fn update_user_is_verified_request(
     }
 }
 
+/// Update the role of the given user.
+pub async fn update_user_role_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+    Json(req): Json<UpdateUserRole>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.update_user_role(id, req.role, user).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "User updated".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
 /// Delete the given user.
 pub async fn delete_user_request(
     jar: CookieJar,

crates/app/src/routes/api/v1/mod.rs

@@ -2,6 +2,7 @@ pub mod auth;
 pub mod communities;
 pub mod notifications;
 pub mod reactions;
+pub mod reports;
 pub mod util;
 
 use axum::{
@@ -15,6 +16,7 @@ use tetratto_core::model::{
         PostContext,
     },
     communities_permissions::CommunityPermission,
+    permissions::FinePermission,
     reactions::AssetType,
 };
 
@@ -121,6 +123,10 @@ pub fn routes() -> Router {
             "/auth/profile/{id}/settings",
             post(auth::profile::update_user_settings_request),
         )
+        .route(
+            "/auth/profile/{id}/role",
+            post(auth::profile::update_user_role_request),
+        )
         .route(
             "/auth/profile/{id}",
             delete(auth::profile::delete_user_request),
@@ -175,6 +181,9 @@ pub fn routes() -> Router {
         // ipbans
         .route("/bans/{ip}", post(auth::ipbans::create_request))
         .route("/bans/id/{id}", delete(auth::ipbans::delete_request))
+        // reports
+        .route("/reports", post(reports::create_request))
+        .route("/reports/{id}", delete(reports::delete_request))
 }
 
 #[derive(Deserialize)]
@@ -238,6 +247,13 @@ pub struct CreateReaction {
     pub is_like: bool,
 }
 
+#[derive(Deserialize)]
+pub struct CreateReport {
+    pub content: String,
+    pub asset: String,
+    pub asset_type: AssetType,
+}
+
 #[derive(Deserialize)]
 pub struct UpdateUserPassword {
     pub from: String,
@@ -264,6 +280,11 @@ pub struct UpdateMembershipRole {
     pub role: CommunityPermission,
 }
 
+#[derive(Deserialize)]
+pub struct UpdateUserRole {
+    pub role: FinePermission,
+}
+
 #[derive(Deserialize)]
 pub struct DeleteUser {
     pub password: String,

crates/app/src/routes/api/v1/notifications.rs

@@ -1,11 +1,9 @@
+use super::UpdateNotificationRead;
+use crate::{State, get_user_from_token};
 use axum::{Extension, Json, extract::Path, response::IntoResponse};
 use axum_extra::extract::CookieJar;
 use tetratto_core::model::{ApiReturn, Error};
 
-use crate::{State, get_user_from_token};
-
-use super::UpdateNotificationRead;
-
 pub async fn delete_request(
     jar: CookieJar,
     Extension(data): Extension<State>,

crates/app/src/routes/api/v1/reactions.rs

@@ -1,9 +1,8 @@
+use crate::{State, get_user_from_token, routes::api::v1::CreateReaction};
 use axum::{Extension, Json, extract::Path, response::IntoResponse};
 use axum_extra::extract::CookieJar;
 use tetratto_core::model::{ApiReturn, Error, reactions::Reaction};
 
-use crate::{State, get_user_from_token, routes::api::v1::CreateReaction};
-
 pub async fn get_request(
     jar: CookieJar,
     Extension(data): Extension<State>,

crates/app/src/routes/api/v1/reports.rs

@@ -0,0 +1,55 @@
+use super::CreateReport;
+use crate::{State, get_user_from_token};
+use axum::{Extension, Json, extract::Path, response::IntoResponse};
+use axum_extra::extract::CookieJar;
+use tetratto_core::model::{ApiReturn, Error, moderation::Report};
+
+pub async fn create_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Json(req): Json<CreateReport>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let asset_id = match req.asset.parse::<usize>() {
+        Ok(n) => n,
+        Err(e) => return Json(Error::MiscError(e.to_string()).into()),
+    };
+
+    match data
+        .create_report(Report::new(user.id, req.content, asset_id, req.asset_type))
+        .await
+    {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Report created".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn delete_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.delete_report(id, user).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Report deleted".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}