mirror of
https://github.com/superseriousbusiness/gotosocial.git
synced 2025-10-31 12:02:26 -05:00
5e2bf0bdca* [chore] Remove years from all license headers Years or year ranges aren't required in license headers. Many projects have removed them in recent years and it avoids a bit of yearly toil. In many cases our copyright claim was also a bit dodgy since we added the 2021-2023 header to files created after 2021 but you can't claim copyright into the past that way. * [chore] Add license header check This ensures a license header is always added to any new file. This avoids maintainers/reviewers needing to remember to check for and ask for it in case a contribution doesn't include it. * [chore] Add missing license headers * [chore] Further updates to license header * Use the more common // indentend comment format * Remove the hack we had for the linter now that we use the // format * Add SPDX license identifier
496 lines
16 KiB
Go
496 lines
16 KiB
Go
// GoToSocial
|
|
// Copyright (C) GoToSocial Authors admin@gotosocial.org
|
|
// SPDX-License-Identifier: AGPL-3.0-or-later
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package accounts_test
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"io/ioutil"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/suite"
|
|
"github.com/superseriousbusiness/gotosocial/internal/api/client/accounts"
|
|
apimodel "github.com/superseriousbusiness/gotosocial/internal/api/model"
|
|
"github.com/superseriousbusiness/gotosocial/testrig"
|
|
)
|
|
|
|
type AccountUpdateTestSuite struct {
|
|
AccountStandardTestSuite
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandler() {
|
|
// set up the request
|
|
// we're updating the note and profile fields of zork
|
|
newBio := "this is my new bio read it and weep"
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"note": newBio,
|
|
"fields_attributes[0][name]": "pronouns",
|
|
"fields_attributes[0][value]": "they/them",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal("<p>this is my new bio read it and weep</p>", apimodelAccount.Note)
|
|
suite.Equal("they/them", apimodelAccount.Fields[0].Value)
|
|
suite.Equal(newBio, apimodelAccount.Source.Note)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerUnlockLock() {
|
|
// set up the first request
|
|
requestBody1, w1, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"locked": "false",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes1 := requestBody1.Bytes()
|
|
recorder1 := httptest.NewRecorder()
|
|
ctx1 := suite.newContext(recorder1, http.MethodPatch, bodyBytes1, accounts.UpdateCredentialsPath, w1.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx1)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder1.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result1 := recorder1.Result()
|
|
defer result1.Body.Close()
|
|
|
|
// check the response
|
|
b1, err := ioutil.ReadAll(result1.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount1 := &apimodel.Account{}
|
|
err = json.Unmarshal(b1, apimodelAccount1)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.False(apimodelAccount1.Locked)
|
|
|
|
// set up the first request
|
|
requestBody2, w2, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"locked": "true",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes2 := requestBody2.Bytes()
|
|
recorder2 := httptest.NewRecorder()
|
|
ctx2 := suite.newContext(recorder2, http.MethodPatch, bodyBytes2, accounts.UpdateCredentialsPath, w2.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx2)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder1.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result2 := recorder2.Result()
|
|
defer result2.Body.Close()
|
|
|
|
// check the response
|
|
b2, err := ioutil.ReadAll(result2.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount2 := &apimodel.Account{}
|
|
err = json.Unmarshal(b2, apimodelAccount2)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.True(apimodelAccount2.Locked)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerGetAccountFirst() {
|
|
// get the account first to make sure it's in the database cache -- when the account is updated via
|
|
// the PATCH handler, it should invalidate the cache and not return the old version
|
|
_, err := suite.db.GetAccountByID(context.Background(), suite.testAccounts["local_account_1"].ID)
|
|
suite.NoError(err)
|
|
|
|
// set up the request
|
|
// we're updating the note of zork
|
|
newBio := "this is my new bio read it and weep"
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"note": newBio,
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal("<p>this is my new bio read it and weep</p>", apimodelAccount.Note)
|
|
suite.Equal(newBio, apimodelAccount.Source.Note)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerTwoFields() {
|
|
// set up the request
|
|
// we're updating the note of zork, and setting locked to true
|
|
newBio := "this is my new bio read it and weep :rainbow:"
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"note": newBio,
|
|
"locked": "true",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal("<p>this is my new bio read it and weep :rainbow:</p>", apimodelAccount.Note)
|
|
suite.Equal(newBio, apimodelAccount.Source.Note)
|
|
suite.True(apimodelAccount.Locked)
|
|
suite.NotEmpty(apimodelAccount.Emojis)
|
|
suite.Equal(apimodelAccount.Emojis[0].Shortcode, "rainbow")
|
|
|
|
// check the account in the database
|
|
dbZork, err := suite.db.GetAccountByID(context.Background(), apimodelAccount.ID)
|
|
suite.NoError(err)
|
|
suite.Equal(newBio, dbZork.NoteRaw)
|
|
suite.Equal("<p>this is my new bio read it and weep :rainbow:</p>", dbZork.Note)
|
|
suite.True(*dbZork.Locked)
|
|
suite.NotEmpty(dbZork.EmojiIDs)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerDiscoverable() {
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"discoverable": "false",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.False(apimodelAccount.Discoverable)
|
|
|
|
// check the account in the database
|
|
dbZork, err := suite.db.GetAccountByID(context.Background(), apimodelAccount.ID)
|
|
suite.NoError(err)
|
|
suite.False(*dbZork.Discoverable)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerWithMedia() {
|
|
// set up the request
|
|
// we're updating the header image, the display name, and the locked status of zork
|
|
// we're removing the note/bio
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"header", "../../../../testrig/media/test-jpeg.jpg",
|
|
map[string]string{
|
|
"display_name": "updated zork display name!!!",
|
|
"note": "",
|
|
"locked": "true",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal("updated zork display name!!!", apimodelAccount.DisplayName)
|
|
suite.True(apimodelAccount.Locked)
|
|
suite.Empty(apimodelAccount.Note)
|
|
suite.Empty(apimodelAccount.Source.Note)
|
|
|
|
// header values...
|
|
// should be set
|
|
suite.NotEmpty(apimodelAccount.Header)
|
|
suite.NotEmpty(apimodelAccount.HeaderStatic)
|
|
|
|
// should be different from the values set before
|
|
suite.NotEqual("http://localhost:8080/fileserver/01F8MH1H7YV1Z7D2C8K2730QBF/header/original/01PFPMWK2FF0D9WMHEJHR07C3Q.jpg", apimodelAccount.Header)
|
|
suite.NotEqual("http://localhost:8080/fileserver/01F8MH1H7YV1Z7D2C8K2730QBF/header/small/01PFPMWK2FF0D9WMHEJHR07C3Q.jpg", apimodelAccount.HeaderStatic)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerEmptyForm() {
|
|
// set up the request
|
|
bodyBytes := []byte{}
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, "")
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusBadRequest, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
suite.Equal(`{"error":"Bad Request: empty form submitted"}`, string(b))
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerUpdateSource() {
|
|
// set up the request
|
|
// we're updating the language of zork
|
|
newLanguage := "de"
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"source[privacy]": string(apimodel.VisibilityPrivate),
|
|
"source[language]": "de",
|
|
"source[sensitive]": "true",
|
|
"locked": "true",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal(newLanguage, apimodelAccount.Source.Language)
|
|
suite.EqualValues(apimodel.VisibilityPrivate, apimodelAccount.Source.Privacy)
|
|
suite.True(apimodelAccount.Source.Sensitive)
|
|
suite.True(apimodelAccount.Locked)
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerUpdateStatusContentTypeOK() {
|
|
// set up the request
|
|
// we're updating the language of zork
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"source[status_content_type]": "text/markdown",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
// 1. we should have OK because our request was valid
|
|
suite.Equal(http.StatusOK, recorder.Code)
|
|
|
|
// 2. we should have no error message in the result body
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
// unmarshal the returned account
|
|
apimodelAccount := &apimodel.Account{}
|
|
err = json.Unmarshal(b, apimodelAccount)
|
|
suite.NoError(err)
|
|
|
|
// check the returned api model account
|
|
// fields should be updated
|
|
suite.Equal("text/markdown", apimodelAccount.Source.StatusContentType)
|
|
|
|
dbAccount, err := suite.db.GetAccountByID(context.Background(), suite.testAccounts["local_account_1"].ID)
|
|
if err != nil {
|
|
suite.FailNow(err.Error())
|
|
}
|
|
suite.Equal(dbAccount.StatusContentType, "text/markdown")
|
|
}
|
|
|
|
func (suite *AccountUpdateTestSuite) TestAccountUpdateCredentialsPATCHHandlerUpdateStatusContentTypeBad() {
|
|
// set up the request
|
|
// we're updating the language of zork
|
|
requestBody, w, err := testrig.CreateMultipartFormData(
|
|
"", "",
|
|
map[string]string{
|
|
"source[status_content_type]": "peepeepoopoo",
|
|
})
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
bodyBytes := requestBody.Bytes()
|
|
recorder := httptest.NewRecorder()
|
|
ctx := suite.newContext(recorder, http.MethodPatch, bodyBytes, accounts.UpdateCredentialsPath, w.FormDataContentType())
|
|
|
|
// call the handler
|
|
suite.accountsModule.AccountUpdateCredentialsPATCHHandler(ctx)
|
|
|
|
suite.Equal(http.StatusBadRequest, recorder.Code)
|
|
|
|
result := recorder.Result()
|
|
defer result.Body.Close()
|
|
|
|
// check the response
|
|
b, err := ioutil.ReadAll(result.Body)
|
|
suite.NoError(err)
|
|
|
|
suite.Equal(`{"error":"Bad Request: status content type 'peepeepoopoo' was not recognized, valid options are 'text/plain', 'text/markdown'"}`, string(b))
|
|
}
|
|
|
|
func TestAccountUpdateTestSuite(t *testing.T) {
|
|
suite.Run(t, new(AccountUpdateTestSuite))
|
|
}
|