Friendica/friendica-github
1
0
Fork 0
mirror of https://github.com/friendica/friendica synced 2024-12-22 19:20:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #14379 from annando/issue-14368

Browse source 
Issue 14368: Fix access to the global timeline
This commit is contained in:
Tobias Diekershoff 2024-08-20 06:58:31 +02:00 committed by GitHub
commit 355273b13c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 22 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

37
src/Module/Api/Mastodon/Timelines/PublicTimeline.php
View file

@ -58,12 +58,6 @@ class PublicTimeline extends BaseApi
*/
protected function rawContent(array $request = [])
{
if ($this->config->get('system', 'block_public') || $this->config->get('system', 'community_page_style') == Community::DISABLED_VISITOR) {
$this->checkAllowedScope(BaseApi::SCOPE_READ);
}
$uid = self::getCurrentUserID();
$request = $this->getRequest([
'max_id' => null, // Return results older than id
'since_id' => null, // Return results newer than id
@ -77,10 +71,16 @@ class PublicTimeline extends BaseApi
'friendica_order' => TimelineOrderByTypes::ID, // Sort order options (defaults to ID)
], $request);
if (!$this->localAllowed() && !$this->globalAllowed()) {
if ($this->config->get('system', 'community_page_style') == Community::DISABLED) {
$this->jsonExit([]);
}
if ($this->authRequired($request)) {
$this->checkAllowedScope(BaseApi::SCOPE_READ);
}
$uid = self::getCurrentUserID();
$condition = [
'gravity' => [Item::GRAVITY_PARENT, Item::GRAVITY_COMMENT], 'private' => Item::PUBLIC,
'network' => Protocol::FEDERATED, 'author-blocked' => false, 'author-hidden' => false
@ -89,13 +89,13 @@ class PublicTimeline extends BaseApi
$condition = $this->addPagingConditions($request, $condition);
$params = $this->buildOrderAndLimitParams($request);
if ($request['local'] && $this->localAllowed()) {
if ($request['local']) {
$condition = DBA::mergeConditions($condition, ['origin' => true]);
} else {
$condition = DBA::mergeConditions($condition, ['uid' => 0]);
}
if ($request['remote'] && $this->globalAllowed()) {
if ($request['remote']) {
$condition = DBA::mergeConditions($condition, ["NOT `uri-id` IN (SELECT `uri-id` FROM `post-user` WHERE `origin` AND `post-user`.`uri-id` = `post-timeline-view`.`uri-id`)"]);
}
@ -139,13 +139,20 @@ class PublicTimeline extends BaseApi
$this->jsonExit($statuses);
}
private function localAllowed(): bool
private function authRequired(array $request): bool
{
return in_array($this->config->get('system', 'community_page_style'), [Community::LOCAL, Community::LOCAL_AND_GLOBAL, Community::DISABLED_VISITOR]);
}
if ($this->config->get('system', 'block_public') || $this->config->get('system', 'community_page_style') == Community::DISABLED_VISITOR) {
return true;
}
private function globalAllowed(): bool
{
return in_array($this->config->get('system', 'community_page_style'), [Community::GLOBAL, Community::LOCAL_AND_GLOBAL, Community::DISABLED_VISITOR]);
if ($request['local'] && $this->config->get('system', 'community_page_style') == Community::GLOBAL) {
return true;
}
if ($request['remote'] && $this->config->get('system', 'community_page_style') == Community::LOCAL) {
return true;
}
return false;
}
}