Mastodon/app/controllers/collection_items_controller.rb
2026-05-29 09:37:42 +00:00

38 lines
1.1 KiB
Ruby

# frozen_string_literal: true
class CollectionItemsController < ApplicationController
include SignatureAuthentication
include Authorization
include AccountOwnedConcern
vary_by -> { public_fetch_mode? ? 'Accept, Accept-Language, Cookie' : 'Accept, Accept-Language, Cookie, Signature' }
before_action :require_account_signature!, if: -> { authorized_fetch_mode? }
before_action :set_collection_item
skip_around_action :set_locale
skip_before_action :require_functional!, unless: :limited_federation_mode?
def show
respond_to do |format|
format.json do
expires_in(3.minutes, public: public_fetch_mode?)
render json: @collection_item,
serializer: ActivityPub::FeaturedItemSerializer,
adapter: ActivityPub::Adapter,
content_type: 'application/activity+json'
end
end
end
private
def set_collection_item
@collection_item = @account.curated_collection_items.find(params[:id])
authorize @collection_item.collection, :show?
rescue ActiveRecord::RecordNotFound, Mastodon::NotPermittedError
not_found
end
end