app/controllers/api/activitypub/notes_controller.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

# frozen_string_literal: true

class Api::Activitypub::NotesController < ApiController
  before_action :set_status

  respond_to :activitystreams2

  def show
    headers['Access-Control-Allow-Origin'] = '*'

    forbidden unless @status.permitted?
  end

  private

  def set_status
    @status = Status.find(params[:id])
  end
end