heartles/egirlskey
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

Allow securing public api

Browse source
This commit is contained in:
jaina heartles 2024-02-23 12:04:47 -08:00
parent d1e8653449
commit acec9de658
374 changed files with 412 additions and 353 deletions
Download patch file Download diff file Expand all files Collapse all files

3
packages/backend/src/config.ts
View file

@ -91,6 +91,7 @@ type Source = {
signToActivityPubGet?: boolean;
checkActivityPubGetSignature?: boolean;
secureApiMode?: boolean;
perChannelMaxNoteCacheCount?: number;
perUserNotificationsMaxCount?: number;
@ -151,6 +152,7 @@ export type Config = {
customMOTD: string[] | undefined;
signToActivityPubGet: boolean | undefined;
checkActivityPubGetSignature: boolean | undefined;
secureApiMode: boolean | undefined;
version: string;
host: string;
@ -267,6 +269,7 @@ export function loadConfig(): Config {
customMOTD: config.customMOTD,
signToActivityPubGet: config.signToActivityPubGet,
checkActivityPubGetSignature: config.checkActivityPubGetSignature,
secureApiMode: config.secureApiMode,
mediaProxy: externalMediaProxy ?? internalMediaProxy,
externalMediaProxyEnabled: externalMediaProxy !== null && externalMediaProxy !== internalMediaProxy,
videoThumbnailGenerator: config.videoThumbnailGenerator ?

10
packages/backend/src/server/api/ApiCallService.ts
View file

@ -24,6 +24,7 @@ import { AuthenticateService, AuthenticationError } from './AuthenticateService.
import type { FastifyRequest, FastifyReply } from 'fastify';
import type { OnApplicationShutdown } from '@nestjs/common';
import type { IEndpointMeta, IEndpoint } from './endpoints.js';
import type { Config } from '@/config.js';
const accessDenied = {
message: 'Access denied.',
@ -38,6 +39,9 @@ export class ApiCallService implements OnApplicationShutdown {
private userIpHistoriesClearIntervalId: NodeJS.Timeout;
constructor(
@Inject(DI.config)
private config: Config,
@Inject(DI.userIpsRepository)
private userIpsRepository: UserIpsRepository,
@ -268,7 +272,9 @@ export class ApiCallService implements OnApplicationShutdown {
}
}
if (ep.meta.requireCredential || ep.meta.requireModerator || ep.meta.requireAdmin) {
const requireCredential = (ep.meta.requireCredential === 'always' ||
(ep.meta.requireCredential === 'conditional' && this.config.secureApiMode));
if (requireCredential || ep.meta.requireModerator || ep.meta.requireAdmin) {
if (user == null) {
throw new ApiError({
message: 'Credential required.',
@ -331,7 +337,7 @@ export class ApiCallService implements OnApplicationShutdown {
}
if (token && ((ep.meta.kind && !token.permission.some(p => p === ep.meta.kind))
|| (!ep.meta.kind && (ep.meta.requireCredential || ep.meta.requireModerator || ep.meta.requireAdmin)))) {
|| (!ep.meta.kind && (requireCredential || ep.meta.requireModerator || ep.meta.requireAdmin)))) {
throw new ApiError({
message: 'Your app does not have the necessary permissions to use this endpoint.',
code: 'PERMISSION_DENIED',

6
packages/backend/src/server/api/endpoint-base.ts
View file

@ -28,16 +28,16 @@ type File = {
// TODO: paramsの型をT['params']のスキーマ定義から推論する
type Executor<T extends IEndpointMeta, Ps extends Schema> =
(params: SchemaType<Ps>, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, cleanup?: () => any, ip?: string | null, headers?: Record<string, string> | null) =>
(params: SchemaType<Ps>, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, cleanup?: () => any, ip?: string | null, headers?: Record<string, string> | null) =>
Promise<T['res'] extends undefined ? Response : SchemaType<NonNullable<T['res']>>>;
export abstract class Endpoint<T extends IEndpointMeta, Ps extends Schema> {
public exec: (params: any, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => Promise<any>;
public exec: (params: any, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => Promise<any>;
constructor(meta: T, paramDef: Ps, cb: Executor<T, Ps>) {
const validate = ajv.compile(paramDef);
this.exec = (params: any, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => {
this.exec = (params: any, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => {
let cleanup: undefined | (() => void) = undefined;
if (meta.requireFile) {

6
packages/backend/src/server/api/endpoints.ts
View file

@ -770,7 +770,7 @@ interface IEndpointMetaBase {
* このエンドポイントにリクエストするのにユーザー情報が必須か否か
* 省略した場合は false として解釈されます。
*/
readonly requireCredential?: boolean;
readonly requireCredential?: 'always' | 'conditional' | 'never';
/**
* isModeratorなロールを必要とするか
@ -851,13 +851,13 @@ interface IEndpointMetaBase {
}
export type IEndpointMeta = (Omit<IEndpointMetaBase, 'requireCrential' | 'requireModerator' | 'requireAdmin'> & {
requireCredential?: false,
requireCredential?: 'conditional',
requireAdmin?: false,
requireModerator?: false,
}) | (Omit<IEndpointMetaBase, 'secure'> & {
secure: true,
}) | (Omit<IEndpointMetaBase, 'requireCredential' | 'kind'> & {
requireCredential: true,
requireCredential: 'always',
kind: (typeof permissions)[number],
}) | (Omit<IEndpointMetaBase, 'requireModerator' | 'kind'> & {
requireModerator: true,

2
packages/backend/src/server/api/endpoints/admin/abuse-user-reports.ts
View file

@ -13,7 +13,7 @@ import { AbuseUserReportEntityService } from '@/core/entities/AbuseUserReportEnt
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:abuse-user-reports',

2
packages/backend/src/server/api/endpoints/admin/accounts/create.ts
View file

@ -15,6 +15,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'never',
res: {
type: 'object',
optional: false, nullable: false,

2
packages/backend/src/server/api/endpoints/admin/accounts/delete.ts
View file

@ -14,7 +14,7 @@ import { UserEntityService } from '@/core/entities/UserEntityService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:account',
} as const;

2
packages/backend/src/server/api/endpoints/admin/accounts/find-by-email.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '@/server/api/error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'read:admin:account',

2
packages/backend/src/server/api/endpoints/admin/ad/create.ts
View file

@ -13,7 +13,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:ad',
res: {

2
packages/backend/src/server/api/endpoints/admin/ad/delete.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:ad',

2
packages/backend/src/server/api/endpoints/admin/ad/list.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:ad',
res: {

2
packages/backend/src/server/api/endpoints/admin/ad/update.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:ad',

2
packages/backend/src/server/api/endpoints/admin/announcements/create.ts
View file

@ -10,7 +10,7 @@ import { AnnouncementService } from '@/core/AnnouncementService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:announcements',

2
packages/backend/src/server/api/endpoints/admin/announcements/delete.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:announcements',

2
packages/backend/src/server/api/endpoints/admin/announcements/list.ts
View file

@ -14,7 +14,7 @@ import { IdService } from '@/core/IdService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:announcements',

2
packages/backend/src/server/api/endpoints/admin/announcements/update.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:announcements',

2
packages/backend/src/server/api/endpoints/admin/approve-user.ts
View file

@ -8,7 +8,7 @@ import { EmailService } from '@/core/EmailService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:approve-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/avatar-decorations/create.ts
View file

@ -10,7 +10,7 @@ import { AvatarDecorationService } from '@/core/AvatarDecorationService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',
} as const;

2
packages/backend/src/server/api/endpoints/admin/avatar-decorations/delete.ts
View file

@ -12,7 +12,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',
errors: {

2
packages/backend/src/server/api/endpoints/admin/avatar-decorations/list.ts
View file

@ -15,7 +15,7 @@ import { AvatarDecorationService } from '@/core/AvatarDecorationService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'read:admin:avatar-decorations',

2
packages/backend/src/server/api/endpoints/admin/avatar-decorations/update.ts
View file

@ -12,7 +12,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',

2
packages/backend/src/server/api/endpoints/admin/delete-account.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:delete-account',

2
packages/backend/src/server/api/endpoints/admin/delete-all-files-of-a-user.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:delete-all-files-of-a-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/drive/clean-remote-files.ts
View file

@ -10,7 +10,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:drive',
} as const;

2
packages/backend/src/server/api/endpoints/admin/drive/cleanup.ts
View file

@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:drive',
} as const;

2
packages/backend/src/server/api/endpoints/admin/drive/files.ts
View file

@ -13,7 +13,7 @@ import { DriveFileEntityService } from '@/core/entities/DriveFileEntityService.j
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:drive',

2
packages/backend/src/server/api/endpoints/admin/drive/show-file.ts
View file

@ -14,7 +14,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:drive',

2
packages/backend/src/server/api/endpoints/admin/emoji/add-aliases-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/add.ts
View file

@ -14,7 +14,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/emoji/copy.ts
View file

@ -17,7 +17,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/emoji/delete-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/delete.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/emoji/import-zip.ts
View file

@ -9,7 +9,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
secure: true,
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/list-remote.ts
View file

@ -15,7 +15,7 @@ import { sqlLikeEscape } from '@/misc/sql-like-escape.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'read:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/emoji/list.ts
View file

@ -15,7 +15,7 @@ import { EmojiEntityService } from '@/core/entities/EmojiEntityService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'read:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/emoji/remove-aliases-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/set-aliases-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/set-category-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/set-license-bulk.ts
View file

@ -10,7 +10,7 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

2
packages/backend/src/server/api/endpoints/admin/emoji/update.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/federation/delete-all-files.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:federation',
} as const;

2
packages/backend/src/server/api/endpoints/admin/federation/refresh-remote-instance-metadata.ts
View file

@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:federation',
} as const;

2
packages/backend/src/server/api/endpoints/admin/federation/remove-all-following.ts
View file

@ -12,7 +12,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:federation',
} as const;

2
packages/backend/src/server/api/endpoints/admin/federation/update-instance.ts
View file

@ -14,7 +14,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:federation',
} as const;

2
packages/backend/src/server/api/endpoints/admin/get-index-stats.ts
View file

@ -9,7 +9,7 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'read:admin:index-stats',

2
packages/backend/src/server/api/endpoints/admin/get-table-stats.ts
View file

@ -9,7 +9,7 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'read:admin:table-stats',

2
packages/backend/src/server/api/endpoints/admin/get-user-ips.ts
View file

@ -12,7 +12,7 @@ import { IdService } from '@/core/IdService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:user-ips',
res: {

2
packages/backend/src/server/api/endpoints/admin/invite/create.ts
View file

@ -16,7 +16,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:invite-codes',

2
packages/backend/src/server/api/endpoints/admin/invite/list.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:invite-codes',

2
packages/backend/src/server/api/endpoints/admin/meta.ts
View file

@ -13,7 +13,7 @@ import { DEFAULT_POLICIES } from '@/core/RoleService.js';
export const meta = {
tags: ['meta'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'read:admin:meta',

2
packages/backend/src/server/api/endpoints/admin/nsfw-user.ts
View file

@ -6,7 +6,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:nsfw-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/promo/create.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:promo',

2
packages/backend/src/server/api/endpoints/admin/queue/clear.ts
View file

@ -11,7 +11,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:queue',
} as const;

2
packages/backend/src/server/api/endpoints/admin/queue/deliver-delayed.ts
View file

@ -11,7 +11,7 @@ import type { DeliverQueue } from '@/core/QueueModule.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:queue',

2
packages/backend/src/server/api/endpoints/admin/queue/inbox-delayed.ts
View file

@ -11,7 +11,7 @@ import type { InboxQueue } from '@/core/QueueModule.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:queue',

2
packages/backend/src/server/api/endpoints/admin/queue/promote.ts
View file

@ -11,7 +11,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:queue',
} as const;

2
packages/backend/src/server/api/endpoints/admin/queue/stats.ts
View file

@ -10,7 +10,7 @@ import type { DbQueue, DeliverQueue, EndedPollNotificationQueue, InboxQueue, Obj
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:emoji',

2
packages/backend/src/server/api/endpoints/admin/relays/add.ts
View file

@ -12,7 +12,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:relays',

2
packages/backend/src/server/api/endpoints/admin/relays/list.ts
View file

@ -10,7 +10,7 @@ import { RelayService } from '@/core/RelayService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:relays',

2
packages/backend/src/server/api/endpoints/admin/relays/remove.ts
View file

@ -10,7 +10,7 @@ import { RelayService } from '@/core/RelayService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:relays',
} as const;

2
packages/backend/src/server/api/endpoints/admin/reset-password.ts
View file

@ -15,7 +15,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:reset-password',

2
packages/backend/src/server/api/endpoints/admin/resolve-abuse-user-report.ts
View file

@ -15,7 +15,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:resolve-abuse-user-report',
} as const;

2
packages/backend/src/server/api/endpoints/admin/roles/assign.ts
View file

@ -13,7 +13,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/create.ts
View file

@ -11,7 +11,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/delete.ts
View file

@ -13,7 +13,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/list.ts
View file

@ -12,7 +12,7 @@ import { RoleEntityService } from '@/core/entities/RoleEntityService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/show.ts
View file

@ -13,7 +13,7 @@ import { RoleEntityService } from '@/core/entities/RoleEntityService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/unassign.ts
View file

@ -13,7 +13,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/update-default-policies.ts
View file

@ -11,7 +11,7 @@ import { MetaService } from '@/core/MetaService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:roles',
} as const;

2
packages/backend/src/server/api/endpoints/admin/roles/update.ts
View file

@ -14,7 +14,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/roles/users.ts
View file

@ -16,7 +16,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin', 'role', 'users'],
requireCredential: false,
requireCredential: 'never',
requireAdmin: true,
kind: 'read:admin:roles',

2
packages/backend/src/server/api/endpoints/admin/send-email.ts
View file

@ -10,7 +10,7 @@ import { EmailService } from '@/core/EmailService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:send-email',
} as const;

2
packages/backend/src/server/api/endpoints/admin/server-info.ts
View file

@ -12,7 +12,7 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:server-info',

2
packages/backend/src/server/api/endpoints/admin/show-moderation-logs.ts
View file

@ -13,7 +13,7 @@ import { ModerationLogEntityService } from '@/core/entities/ModerationLogEntityS
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'read:admin:show-moderation-log',

2
packages/backend/src/server/api/endpoints/admin/show-user.ts
View file

@ -14,7 +14,7 @@ import { IdService } from '@/core/IdService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:show-user',

2
packages/backend/src/server/api/endpoints/admin/show-users.ts
View file

@ -14,7 +14,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'read:admin:show-users',

2
packages/backend/src/server/api/endpoints/admin/silence-user.ts
View file

@ -7,7 +7,7 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:silence-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/suspend-user.ts
View file

@ -19,7 +19,7 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:suspend-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/unnsfw-user.ts
View file

@ -6,7 +6,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:unnsfw-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/unset-user-avatar.ts
View file

@ -12,7 +12,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:unset-user-avatar',
} as const;

2
packages/backend/src/server/api/endpoints/admin/unset-user-banner.ts
View file

@ -12,7 +12,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:unset-user-banner',
} as const;

2
packages/backend/src/server/api/endpoints/admin/unsilence-user.ts
View file

@ -6,7 +6,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:unsilence-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/unsuspend-user.ts
View file

@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:unsuspend-user',
} as const;

2
packages/backend/src/server/api/endpoints/admin/update-meta.ts
View file

@ -12,7 +12,7 @@ import { MetaService } from '@/core/MetaService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireAdmin: true,
kind: 'write:admin:meta',
} as const;

2
packages/backend/src/server/api/endpoints/admin/update-user-note.ts
View file

@ -12,7 +12,7 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: true,
requireCredential: 'always',
requireModerator: true,
kind: 'write:admin:user-note',
} as const;

2
packages/backend/src/server/api/endpoints/announcements.ts
View file

@ -14,7 +14,7 @@ import type { AnnouncementReadsRepository, AnnouncementsRepository } from '@/mod
export const meta = {
tags: ['meta'],
requireCredential: false,
requireCredential: 'never',
res: {
type: 'array',

2
packages/backend/src/server/api/endpoints/antennas/create.ts
View file

@ -16,7 +16,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: true,
requireCredential: 'always',
prohibitMoved: true,

2
packages/backend/src/server/api/endpoints/antennas/delete.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: true,
requireCredential: 'always',
kind: 'write:account',

2
packages/backend/src/server/api/endpoints/antennas/list.ts
View file

@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['antennas', 'account'],
requireCredential: true,
requireCredential: 'always',
kind: 'read:account',

2
packages/backend/src/server/api/endpoints/antennas/notes.ts
View file

@ -19,7 +19,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas', 'account', 'notes'],
requireCredential: true,
requireCredential: 'always',
kind: 'read:account',

2
packages/backend/src/server/api/endpoints/antennas/show.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas', 'account'],
requireCredential: true,
requireCredential: 'always',
kind: 'read:account',

2
packages/backend/src/server/api/endpoints/antennas/update.ts
View file

@ -14,7 +14,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: true,
requireCredential: 'always',
prohibitMoved: true,

2
packages/backend/src/server/api/endpoints/ap/get.ts
View file

@ -11,7 +11,7 @@ import { ApResolverService } from '@/core/activitypub/ApResolverService.js';
export const meta = {
tags: ['federation'],
requireCredential: true,
requireCredential: 'always',
kind: 'read:federation',
limit: {

2
packages/backend/src/server/api/endpoints/ap/show.ts
View file

@ -24,7 +24,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['federation'],
requireCredential: true,
requireCredential: 'always',
kind: 'read:account',
limit: {

2
packages/backend/src/server/api/endpoints/app/create.ts
View file

@ -15,7 +15,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['app'],
requireCredential: false,
requireCredential: 'never',
res: {
type: 'object',

2
packages/backend/src/server/api/endpoints/app/show.ts
View file

@ -13,6 +13,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['app'],
requireCredential: 'never',
errors: {
noSuchApp: {
message: 'No such app.',

2
packages/backend/src/server/api/endpoints/auth/accept.ts
View file

@ -15,7 +15,7 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: true,
requireCredential: 'always',
secure: true,

2
packages/backend/src/server/api/endpoints/auth/session/generate.ts
View file

@ -15,7 +15,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: false,
requireCredential: 'never',
res: {
type: 'object',

2
packages/backend/src/server/api/endpoints/auth/session/show.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: false,
requireCredential: 'never',
errors: {
noSuchSession: {

2
packages/backend/src/server/api/endpoints/auth/session/userkey.ts
View file

@ -13,7 +13,7 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: false,
requireCredential: 'never',
res: {
type: 'object',

Some files were not shown because too many files have changed in this diff Show more