gtsocial-umbx

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README | LICENSE

reportcreate.go (3446B)


      1 // GoToSocial
      2 // Copyright (C) GoToSocial Authors admin@gotosocial.org
      3 // SPDX-License-Identifier: AGPL-3.0-or-later
      4 //
      5 // This program is free software: you can redistribute it and/or modify
      6 // it under the terms of the GNU Affero General Public License as published by
      7 // the Free Software Foundation, either version 3 of the License, or
      8 // (at your option) any later version.
      9 //
     10 // This program is distributed in the hope that it will be useful,
     11 // but WITHOUT ANY WARRANTY; without even the implied warranty of
     12 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     13 // GNU Affero General Public License for more details.
     14 //
     15 // You should have received a copy of the GNU Affero General Public License
     16 // along with this program.  If not, see <http://www.gnu.org/licenses/>.
     17 
     18 package reports
     19 
     20 import (
     21 	"errors"
     22 	"fmt"
     23 	"net/http"
     24 
     25 	"github.com/gin-gonic/gin"
     26 	apimodel "github.com/superseriousbusiness/gotosocial/internal/api/model"
     27 	apiutil "github.com/superseriousbusiness/gotosocial/internal/api/util"
     28 	"github.com/superseriousbusiness/gotosocial/internal/gtserror"
     29 	"github.com/superseriousbusiness/gotosocial/internal/oauth"
     30 	"github.com/superseriousbusiness/gotosocial/internal/regexes"
     31 )
     32 
     33 // ReportPOSTHandler swagger:operation POST /api/v1/reports reportCreate
     34 //
     35 // Create a new user report with the given parameters.
     36 //
     37 //	---
     38 //	tags:
     39 //	- reports
     40 //
     41 //	consumes:
     42 //	- application/json
     43 //	- application/xml
     44 //	- application/x-www-form-urlencoded
     45 //
     46 //	produces:
     47 //	- application/json
     48 //
     49 //	security:
     50 //	- OAuth2 Bearer:
     51 //		- write:reports
     52 //
     53 //	responses:
     54 //		'200':
     55 //			description: The created report.
     56 //			schema:
     57 //				"$ref": "#/definitions/report"
     58 //		'400':
     59 //			description: bad request
     60 //		'401':
     61 //			description: unauthorized
     62 //		'404':
     63 //			description: not found
     64 //		'406':
     65 //			description: not acceptable
     66 //		'500':
     67 //			description: internal server error
     68 func (m *Module) ReportPOSTHandler(c *gin.Context) {
     69 	authed, err := oauth.Authed(c, true, true, true, true)
     70 	if err != nil {
     71 		apiutil.ErrorHandler(c, gtserror.NewErrorUnauthorized(err, err.Error()), m.processor.InstanceGetV1)
     72 		return
     73 	}
     74 
     75 	if _, err := apiutil.NegotiateAccept(c, apiutil.JSONAcceptHeaders...); err != nil {
     76 		apiutil.ErrorHandler(c, gtserror.NewErrorNotAcceptable(err, err.Error()), m.processor.InstanceGetV1)
     77 		return
     78 	}
     79 
     80 	form := &apimodel.ReportCreateRequest{}
     81 	if err := c.ShouldBind(form); err != nil {
     82 		apiutil.ErrorHandler(c, gtserror.NewErrorBadRequest(err, err.Error()), m.processor.InstanceGetV1)
     83 		return
     84 	}
     85 
     86 	if form.AccountID == "" {
     87 		err = errors.New("account_id must be set")
     88 		apiutil.ErrorHandler(c, gtserror.NewErrorBadRequest(err, err.Error()), m.processor.InstanceGetV1)
     89 		return
     90 	}
     91 
     92 	if !regexes.ULID.MatchString(form.AccountID) {
     93 		err = errors.New("account_id was not valid")
     94 		apiutil.ErrorHandler(c, gtserror.NewErrorBadRequest(err, err.Error()), m.processor.InstanceGetV1)
     95 		return
     96 	}
     97 
     98 	if length := len([]rune(form.Comment)); length > 1000 {
     99 		err = fmt.Errorf("comment length must be no more than 1000 chars, provided comment was %d chars", length)
    100 		apiutil.ErrorHandler(c, gtserror.NewErrorBadRequest(err, err.Error()), m.processor.InstanceGetV1)
    101 		return
    102 	}
    103 
    104 	apiReport, errWithCode := m.processor.Report().Create(c.Request.Context(), authed.Account, form)
    105 	if errWithCode != nil {
    106 		apiutil.ErrorHandler(c, errWithCode, m.processor.InstanceGetV1)
    107 		return
    108 	}
    109 
    110 	c.JSON(http.StatusOK, apiReport)
    111 }