Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-05 07:10:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: send 308 when activitypub request for remote post comes in, #12831

Browse Source
This commit is contained in:
Julian Lam
2024-09-30 11:09:46 -04:00
parent c5e10c1a41
commit 7f1f485952
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/controllers/activitypub/actors.js
View File

@@ -57,12 +57,21 @@ Actors.userBySlug = async function (req, res) {
Actors.note = async function (req, res) {
// technically a note isn't an actor, but it is here purely for organizational purposes.
// but also, wouldn't it be wild if you could follow a note? lol.
const allowed = utils.isNumber(req.params.pid) && await privileges.posts.can('topics:read', req.params.pid, activitypub._constants.uid);
const allowed = await privileges.posts.can('topics:read', req.params.pid, activitypub._constants.uid);
if (!allowed) {
return res.sendStatus(404);
}
// Handle requests for remote content
if (!utils.isNumber(req.params.pid)) {
return res.set('Location', req.params.pid).sendStatus(308);
}
const post = (await posts.getPostSummaryByPids([req.params.pid], req.uid, {
stripTags: false,
extraFields: ['edited'],
})).pop();
if (!allowed || !post) {
if (!post) {
return res.sendStatus(404);
}