diff options
Diffstat (limited to 'internal/api/client/accounts/profile.go')
| -rw-r--r-- | internal/api/client/accounts/profile.go | 123 |
1 files changed, 123 insertions, 0 deletions
diff --git a/internal/api/client/accounts/profile.go b/internal/api/client/accounts/profile.go new file mode 100644 index 000000000..8ff59a23b --- /dev/null +++ b/internal/api/client/accounts/profile.go @@ -0,0 +1,123 @@ +// GoToSocial +// Copyright (C) GoToSocial Authors admin@gotosocial.org +// SPDX-License-Identifier: AGPL-3.0-or-later +// +// This program is free software: you can redistribute it and/or modify +// it under the terms of the GNU Affero General Public License as published by +// the Free Software Foundation, either version 3 of the License, or +// (at your option) any later version. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU Affero General Public License for more details. +// +// You should have received a copy of the GNU Affero General Public License +// along with this program. If not, see <http://www.gnu.org/licenses/>. + +package accounts + +import ( + "context" + "net/http" + + "github.com/gin-gonic/gin" + apimodel "github.com/superseriousbusiness/gotosocial/internal/api/model" + apiutil "github.com/superseriousbusiness/gotosocial/internal/api/util" + "github.com/superseriousbusiness/gotosocial/internal/gtserror" + "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" + "github.com/superseriousbusiness/gotosocial/internal/oauth" +) + +// AccountAvatarDELETEHandler swagger:operation DELETE /api/v1/profile/avatar accountAvatarDelete +// +// Delete the authenticated account's avatar. +// If the account doesn't have an avatar, the call succeeds anyway. +// +// --- +// tags: +// - accounts +// +// produces: +// - application/json +// +// security: +// - OAuth2 Bearer: +// - admin +// +// responses: +// '200': +// description: The updated account, including profile source information. +// schema: +// "$ref": "#/definitions/account" +// '400': +// description: bad request +// '401': +// description: unauthorized +// '403': +// description: forbidden +// '406': +// description: not acceptable +// '500': +// description: internal server error +func (m *Module) AccountAvatarDELETEHandler(c *gin.Context) { + m.accountDeleteProfileAttachment(c, m.processor.Media().DeleteAvatar) +} + +// AccountHeaderDELETEHandler swagger:operation DELETE /api/v1/profile/header accountHeaderDelete +// +// Delete the authenticated account's header. +// If the account doesn't have a header, the call succeeds anyway. +// +// --- +// tags: +// - accounts +// +// produces: +// - application/json +// +// security: +// - OAuth2 Bearer: +// - admin +// +// responses: +// '200': +// description: The updated account, including profile source information. +// schema: +// "$ref": "#/definitions/account" +// '400': +// description: bad request +// '401': +// description: unauthorized +// '403': +// description: forbidden +// '406': +// description: not acceptable +// '500': +// description: internal server error +func (m *Module) AccountHeaderDELETEHandler(c *gin.Context) { + m.accountDeleteProfileAttachment(c, m.processor.Media().DeleteHeader) +} + +// accountDeleteProfileAttachment checks that an authenticated account is present and allowed to alter itself, +// runs an attachment deletion processor method, and returns the updated account. +func (m *Module) accountDeleteProfileAttachment(c *gin.Context, processDelete func(context.Context, *gtsmodel.Account) (*apimodel.Account, gtserror.WithCode)) { + authed, err := oauth.Authed(c, true, true, true, true) + if err != nil { + apiutil.ErrorHandler(c, gtserror.NewErrorUnauthorized(err, err.Error()), m.processor.InstanceGetV1) + return + } + + if _, err := apiutil.NegotiateAccept(c, apiutil.JSONAcceptHeaders...); err != nil { + apiutil.ErrorHandler(c, gtserror.NewErrorNotAcceptable(err, err.Error()), m.processor.InstanceGetV1) + return + } + + acctSensitive, errWithCode := processDelete(c, authed.Account) + if errWithCode != nil { + apiutil.ErrorHandler(c, errWithCode, m.processor.InstanceGetV1) + return + } + + apiutil.JSON(c, http.StatusOK, acctSensitive) +} |