app/controllers/authorize_follow_controller.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

# frozen_string_literal: true

class AuthorizeFollowController < ApplicationController
  layout 'public'

  before_action :authenticate_user!

  def new
    uri = Addressable::URI.parse(acct_param)

    if uri.path && %w(http https).include?(uri.scheme)
      set_account_from_url
    else
      set_account_from_acct
    end

    render :error if @account.nil?
  end

  def create
    @account = FollowService.new.call(current_account, acct_param).try(:target_account)

    if @account.nil?
      render :error
    else
      redirect_to web_url("accounts/#{@account.id}")
    end
  rescue ActiveRecord::RecordNotFound, Mastodon::NotPermittedError
    render :error
  end

  private

  def set_account_from_url
    @account = FetchRemoteAccountService.new.call(acct_param)
  end

  def set_account_from_acct
    @account = FollowRemoteAccountService.new.call(acct_param)
  end

  def acct_param
    params[:acct].gsub(/\Aacct:/, '')
  end
end