mirror of
https://github.com/philomena-dev/philomena.git
synced 2024-11-23 20:18:00 +01:00
af9e779c59
* First (not-yet-working) attempt at self-renaming * Actually working renames * last_renamed_at * Prevent renaming while banned * Move username changing from controller to model * Username change logging * Rate limiting for username changes * username -> name and format * add UBQ * modify interval Co-authored-by: Joey <joeyponi@gmail.com>
513 lines
20 KiB
Elixir
513 lines
20 KiB
Elixir
defmodule PhilomenaWeb.Router do
|
|
use PhilomenaWeb, :router
|
|
use Pow.Phoenix.Router
|
|
use Pow.Extension.Phoenix.Router, otp_app: :philomena
|
|
|
|
pipeline :browser do
|
|
plug :accepts, ["html"]
|
|
plug :fetch_session
|
|
plug :fetch_flash
|
|
plug :protect_from_forgery
|
|
plug :put_secure_browser_headers
|
|
plug PhilomenaWeb.ContentSecurityPolicyPlug
|
|
plug PhilomenaWeb.CurrentFilterPlug
|
|
plug PhilomenaWeb.ImageFilterPlug
|
|
plug PhilomenaWeb.PaginationPlug
|
|
plug PhilomenaWeb.EnsureUserEnabledPlug
|
|
plug PhilomenaWeb.CurrentBanPlug
|
|
plug PhilomenaWeb.NotificationCountPlug
|
|
plug PhilomenaWeb.SiteNoticePlug
|
|
plug PhilomenaWeb.ForumListPlug
|
|
plug PhilomenaWeb.FilterSelectPlug
|
|
plug PhilomenaWeb.ChannelPlug
|
|
plug PhilomenaWeb.AdminCountersPlug
|
|
end
|
|
|
|
pipeline :api do
|
|
plug PhilomenaWeb.ApiTokenPlug
|
|
plug PhilomenaWeb.EnsureUserEnabledPlug
|
|
plug PhilomenaWeb.CurrentFilterPlug
|
|
plug PhilomenaWeb.FilterIdPlug
|
|
plug PhilomenaWeb.ImageFilterPlug
|
|
plug PhilomenaWeb.PaginationPlug
|
|
end
|
|
|
|
pipeline :accepts_rss do
|
|
plug :accepts, ["rss"]
|
|
end
|
|
|
|
pipeline :accepts_json do
|
|
plug :accepts, ["json"]
|
|
end
|
|
|
|
pipeline :ensure_totp do
|
|
plug PhilomenaWeb.TotpPlug
|
|
end
|
|
|
|
pipeline :ensure_tor_authorized do
|
|
plug PhilomenaWeb.TorPlug
|
|
end
|
|
|
|
pipeline :ensure_not_banned do
|
|
plug PhilomenaWeb.FilterBannedUsersPlug
|
|
end
|
|
|
|
pipeline :ensure_password_not_compromised do
|
|
plug PhilomenaWeb.CompromisedPasswordCheckPlug
|
|
end
|
|
|
|
pipeline :protected do
|
|
plug Pow.Plug.RequireAuthenticated,
|
|
error_handler: Pow.Phoenix.PlugErrorHandler
|
|
end
|
|
|
|
scope "/" do
|
|
pipe_through [
|
|
:browser,
|
|
:ensure_totp,
|
|
:ensure_not_banned,
|
|
:ensure_tor_authorized,
|
|
:ensure_password_not_compromised
|
|
]
|
|
|
|
pow_registration_routes()
|
|
end
|
|
|
|
scope "/" do
|
|
pipe_through [:browser, :ensure_totp]
|
|
|
|
pow_session_routes()
|
|
end
|
|
|
|
scope "/" do
|
|
pipe_through [:browser, :ensure_totp, :ensure_tor_authorized]
|
|
|
|
pow_extension_routes()
|
|
end
|
|
|
|
scope "/", PhilomenaWeb do
|
|
pipe_through [:browser, :protected]
|
|
|
|
# Additional routes for TOTP
|
|
scope "/registrations", Registration, as: :registration do
|
|
resources "/totp", TotpController, only: [:edit, :update], singleton: true
|
|
resources "/name", NameController, only: [:edit, :update], singleton: true
|
|
end
|
|
|
|
scope "/sessions", Session, as: :session do
|
|
resources "/totp", TotpController, only: [:new, :create], singleton: true
|
|
end
|
|
end
|
|
|
|
scope "/api/v1/rss", PhilomenaWeb.Api.Rss, as: :api_rss do
|
|
pipe_through [:accepts_rss, :api, :protected]
|
|
resources "/watched", WatchedController, only: [:index]
|
|
end
|
|
|
|
scope "/api/v1/json", PhilomenaWeb.Api.Json, as: :api_json do
|
|
pipe_through [:accepts_json, :api, :ensure_tor_authorized]
|
|
|
|
scope "/images", Image, as: :image do
|
|
resources "/featured", FeaturedController, only: [:show], singleton: true
|
|
end
|
|
|
|
resources "/images", ImageController, only: [:show, :create]
|
|
|
|
scope "/search", Search, as: :search do
|
|
resources "/reverse", ReverseController, only: [:create]
|
|
resources "/images", ImageController, only: [:index]
|
|
resources "/tags", TagController, only: [:index]
|
|
resources "/posts", PostController, only: [:index]
|
|
resources "/comments", CommentController, only: [:index]
|
|
resources "/galleries", GalleryController, only: [:index]
|
|
end
|
|
|
|
# Convenience alias
|
|
get "/search", Search.ImageController, :index
|
|
|
|
resources "/oembed", OembedController, only: [:index]
|
|
resources "/tags", TagController, only: [:show]
|
|
resources "/comments", CommentController, only: [:show]
|
|
resources "/posts", PostController, only: [:show]
|
|
resources "/profiles", ProfileController, only: [:show]
|
|
|
|
scope "/filters", Filter, as: :filter do
|
|
resources "/user", UserFilterController, only: [:index]
|
|
resources "/system", SystemFilterController, only: [:index]
|
|
end
|
|
|
|
resources "/filters", FilterController, only: [:show]
|
|
|
|
resources "/forums", ForumController, only: [:show, :index] do
|
|
resources "/topics", Forum.TopicController, only: [:show, :index] do
|
|
resources "/posts", Forum.Topic.PostController, only: [:show, :index]
|
|
end
|
|
end
|
|
end
|
|
|
|
scope "/", PhilomenaWeb do
|
|
pipe_through [:browser, :ensure_totp, :protected]
|
|
|
|
scope "/notifications", Notification, as: :notification do
|
|
resources "/unread", UnreadController, only: [:index]
|
|
end
|
|
|
|
resources "/notifications", NotificationController, only: [:index, :delete]
|
|
|
|
resources "/conversations", ConversationController, only: [:index, :show, :new, :create] do
|
|
resources "/reports", Conversation.ReportController, only: [:new, :create]
|
|
resources "/messages", Conversation.MessageController, only: [:create]
|
|
resources "/read", Conversation.ReadController, only: [:create, :delete], singleton: true
|
|
resources "/hide", Conversation.HideController, only: [:create, :delete], singleton: true
|
|
end
|
|
|
|
resources "/images", ImageController, only: [] do
|
|
resources "/vote", Image.VoteController, only: [:create, :delete], singleton: true
|
|
resources "/fave", Image.FaveController, only: [:create, :delete], singleton: true
|
|
resources "/hide", Image.HideController, only: [:create, :delete], singleton: true
|
|
|
|
resources "/subscription", Image.SubscriptionController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/read", Image.ReadController, only: [:create], singleton: true
|
|
|
|
resources "/comments", Image.CommentController, only: [:edit, :update] do
|
|
resources "/hide", Image.Comment.HideController, only: [:create, :delete], singleton: true
|
|
resources "/delete", Image.Comment.DeleteController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/delete", Image.DeleteController,
|
|
only: [:create, :delete, :update],
|
|
singleton: true
|
|
|
|
resources "/tamper", Image.TamperController, only: [:create], singleton: true
|
|
resources "/hash", Image.HashController, only: [:delete], singleton: true
|
|
resources "/source_history", Image.SourceHistoryController, only: [:delete], singleton: true
|
|
resources "/repair", Image.RepairController, only: [:create], singleton: true
|
|
resources "/feature", Image.FeatureController, only: [:create], singleton: true
|
|
resources "/file", Image.FileController, only: [:update], singleton: true
|
|
resources "/scratchpad", Image.ScratchpadController, only: [:edit, :update], singleton: true
|
|
resources "/uploader", Image.UploaderController, only: [:update], singleton: true
|
|
resources "/anonymous", Image.AnonymousController, only: [:create, :delete], singleton: true
|
|
|
|
resources "/comment_lock", Image.CommentLockController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/description_lock", Image.DescriptionLockController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/tag_lock", Image.TagLockController, only: [:create, :delete], singleton: true
|
|
end
|
|
|
|
resources "/forums", ForumController, only: [] do
|
|
resources "/topics", TopicController, only: [:new, :create] do
|
|
resources "/subscription", Topic.SubscriptionController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/read", Topic.ReadController, only: [:create], singleton: true
|
|
resources "/move", Topic.MoveController, only: [:create], singleton: true
|
|
resources "/stick", Topic.StickController, only: [:create, :delete], singleton: true
|
|
resources "/lock", Topic.LockController, only: [:create, :delete], singleton: true
|
|
resources "/hide", Topic.HideController, only: [:create, :delete], singleton: true
|
|
|
|
resources "/posts", Topic.PostController, only: [:edit, :update] do
|
|
resources "/hide", Topic.Post.HideController, only: [:create, :delete], singleton: true
|
|
resources "/delete", Topic.Post.DeleteController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/poll", Topic.PollController, only: [:edit, :update], singleton: true do
|
|
resources "/votes", Topic.Poll.VoteController, only: [:index, :create, :delete]
|
|
end
|
|
end
|
|
|
|
resources "/subscription", Forum.SubscriptionController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/read", Forum.ReadController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/profiles", ProfileController, only: [] do
|
|
resources "/commission", Profile.CommissionController,
|
|
only: [:new, :create, :edit, :update, :delete],
|
|
singleton: true do
|
|
resources "/items", Profile.Commission.ItemController,
|
|
only: [:new, :create, :edit, :update, :delete]
|
|
|
|
resources "/reports", Profile.Commission.ReportController, only: [:new, :create]
|
|
end
|
|
|
|
resources "/description", Profile.DescriptionController,
|
|
only: [:edit, :update],
|
|
singleton: true
|
|
|
|
resources "/scratchpad", Profile.ScratchpadController,
|
|
only: [:edit, :update],
|
|
singleton: true
|
|
|
|
resources "/user_links", Profile.UserLinkController
|
|
resources "/awards", Profile.AwardController, except: [:index, :show]
|
|
|
|
resources "/details", Profile.DetailController, only: [:index]
|
|
resources "/ip_history", Profile.IpHistoryController, only: [:index]
|
|
resources "/fp_history", Profile.FpHistoryController, only: [:index]
|
|
resources "/aliases", Profile.AliasController, only: [:index]
|
|
end
|
|
|
|
scope "/filters", Filter, as: :filter do
|
|
resources "/spoiler_type", SpoilerTypeController, only: [:update], singleton: true
|
|
resources "/hide", HideController, only: [:create, :delete], singleton: true
|
|
resources "/spoiler", SpoilerController, only: [:create, :delete], singleton: true
|
|
end
|
|
|
|
resources "/tags", TagController, only: [] do
|
|
resources "/watch", Tag.WatchController, only: [:create, :delete], singleton: true
|
|
resources "/details", Tag.DetailController, only: [:index]
|
|
end
|
|
|
|
resources "/avatar", AvatarController, only: [:edit, :update, :delete], singleton: true
|
|
|
|
resources "/reports", ReportController, only: [:index]
|
|
|
|
resources "/galleries", GalleryController, only: [:new, :create, :edit, :update, :delete] do
|
|
resources "/images", Gallery.ImageController, only: [:create, :delete], singleton: true
|
|
resources "/order", Gallery.OrderController, only: [:update], singleton: true
|
|
resources "/read", Gallery.ReadController, only: [:create], singleton: true
|
|
|
|
resources "/subscription", Gallery.SubscriptionController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
end
|
|
|
|
resources "/channels", ChannelController, only: [] do
|
|
resources "/read", Channel.ReadController, only: [:create], singleton: true
|
|
|
|
resources "/subscription", Channel.SubscriptionController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
end
|
|
|
|
resources "/dnp", DnpEntryController, only: [:new, :create, :edit, :update]
|
|
|
|
resources "/ip_profiles", IpProfileController, only: [:show] do
|
|
resources "/tag_changes", IpProfile.TagChangeController, only: [:index]
|
|
resources "/source_changes", IpProfile.SourceChangeController, only: [:index]
|
|
end
|
|
|
|
resources "/fingerprint_profiles", FingerprintProfileController, only: [:show] do
|
|
resources "/tag_changes", FingerprintProfile.TagChangeController, only: [:index]
|
|
resources "/source_changes", FingerprintProfile.SourceChangeController, only: [:index]
|
|
end
|
|
|
|
scope "/admin", Admin, as: :admin do
|
|
resources "/reports", ReportController, only: [:index, :show] do
|
|
resources "/claim", Report.ClaimController, only: [:create, :delete], singleton: true
|
|
resources "/close", Report.CloseController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/user_links", UserLinkController, only: [:index] do
|
|
resources "/verification", UserLink.VerificationController,
|
|
only: [:create],
|
|
singleton: true
|
|
|
|
resources "/contact", UserLink.ContactController, only: [:create], singleton: true
|
|
resources "/reject", UserLink.RejectController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/dnp_entries", DnpEntryController, only: [:index] do
|
|
resources "/transition", DnpEntry.TransitionController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/user_bans", UserBanController,
|
|
only: [:index, :new, :create, :edit, :update, :delete]
|
|
|
|
resources "/subnet_bans", SubnetBanController,
|
|
only: [:index, :new, :create, :edit, :update, :delete]
|
|
|
|
resources "/fingerprint_bans", FingerprintBanController,
|
|
only: [:index, :new, :create, :edit, :update, :delete]
|
|
|
|
resources "/site_notices", SiteNoticeController, except: [:show]
|
|
|
|
resources "/adverts", AdvertController, except: [:show] do
|
|
resources "/image", Advert.ImageController, only: [:edit, :update], singleton: true
|
|
end
|
|
|
|
resources "/forums", ForumController, except: [:show, :delete]
|
|
|
|
resources "/badges", BadgeController, except: [:show, :delete] do
|
|
resources "/users", Badge.UserController, only: [:index]
|
|
resources "/image", Badge.ImageController, only: [:edit, :update], singleton: true
|
|
end
|
|
|
|
resources "/mod_notes", ModNoteController, except: [:show]
|
|
|
|
resources "/users", UserController, only: [:index, :edit, :update] do
|
|
resources "/avatar", User.AvatarController, only: [:delete], singleton: true
|
|
|
|
resources "/activation", User.ActivationController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
|
|
resources "/api_key", User.ApiKeyController, only: [:delete], singleton: true
|
|
resources "/downvotes", User.DownvoteController, only: [:delete], singleton: true
|
|
resources "/votes", User.VoteController, only: [:delete], singleton: true
|
|
resources "/wipe", User.WipeController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/batch/tags", Batch.TagController, only: [:update], singleton: true
|
|
|
|
scope "/donations", Donation, as: :donation do
|
|
resources "/user", UserController, only: [:show]
|
|
end
|
|
|
|
resources "/donations", DonationController, only: [:index, :create]
|
|
end
|
|
|
|
resources "/duplicate_reports", DuplicateReportController, only: [] do
|
|
resources "/accept", DuplicateReport.AcceptController, only: [:create], singleton: true
|
|
|
|
resources "/accept_reverse", DuplicateReport.AcceptReverseController,
|
|
only: [:create],
|
|
singleton: true
|
|
|
|
resources "/reject", DuplicateReport.RejectController, only: [:create], singleton: true
|
|
|
|
resources "/claim", DuplicateReport.ClaimController,
|
|
only: [:create, :delete],
|
|
singleton: true
|
|
end
|
|
|
|
resources "/tags", TagController, only: [:edit, :update, :delete] do
|
|
resources "/image", Tag.ImageController, only: [:edit, :update, :delete], singleton: true
|
|
resources "/alias", Tag.AliasController, only: [:edit, :update, :delete], singleton: true
|
|
resources "/reindex", Tag.ReindexController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/tag_changes/revert", TagChange.RevertController,
|
|
as: :tag_change_revert,
|
|
only: [:create],
|
|
singleton: true
|
|
|
|
resources "/pages", PageController, only: [:index, :new, :create, :edit, :update]
|
|
resources "/channels", ChannelController, only: [:new, :create, :edit, :update, :delete]
|
|
end
|
|
|
|
scope "/", PhilomenaWeb do
|
|
pipe_through [:browser, :ensure_totp, :ensure_tor_authorized]
|
|
|
|
get "/", ActivityController, :index
|
|
|
|
resources "/activity", ActivityController, only: [:index]
|
|
|
|
scope "/images", Image, as: :image do
|
|
resources "/scrape", ScrapeController, only: [:create]
|
|
resources "/random", RandomController, only: [:index]
|
|
end
|
|
|
|
resources "/images", ImageController, only: [:index, :show, :new, :create] do
|
|
resources "/related", Image.RelatedController, only: [:index]
|
|
|
|
resources "/comments", Image.CommentController, only: [:index, :show, :create] do
|
|
resources "/reports", Image.Comment.ReportController, only: [:new, :create]
|
|
resources "/history", Image.Comment.HistoryController, only: [:index]
|
|
end
|
|
|
|
resources "/tags", Image.TagController, only: [:update], singleton: true
|
|
resources "/sources", Image.SourceController, only: [:update], singleton: true
|
|
resources "/tag_changes", Image.TagChangeController, only: [:index]
|
|
resources "/source_changes", Image.SourceChangeController, only: [:index]
|
|
resources "/description", Image.DescriptionController, only: [:update], singleton: true
|
|
resources "/navigate", Image.NavigateController, only: [:index]
|
|
resources "/reports", Image.ReportController, only: [:new, :create]
|
|
resources "/reporting", Image.ReportingController, only: [:show], singleton: true
|
|
resources "/favorites", Image.FavoriteController, only: [:index]
|
|
end
|
|
|
|
scope "/tags", Tag, as: :tag do
|
|
resources "/autocomplete", AutocompleteController, only: [:show], singleton: true
|
|
resources "/fetch", FetchController, only: [:index]
|
|
end
|
|
|
|
resources "/tags", TagController, only: [:index, :show] do
|
|
resources "/tag_changes", Tag.TagChangeController, only: [:index]
|
|
end
|
|
|
|
scope "/search", Search, as: :search do
|
|
resources "/reverse", ReverseController, only: [:index, :create]
|
|
end
|
|
|
|
resources "/search", SearchController, only: [:index]
|
|
|
|
resources "/forums", ForumController, only: [:index, :show] do
|
|
resources "/topics", TopicController, only: [:show] do
|
|
resources "/posts", Topic.PostController, only: [:create] do
|
|
resources "/reports", Topic.Post.ReportController, only: [:new, :create]
|
|
resources "/history", Topic.Post.HistoryController, only: [:index]
|
|
end
|
|
end
|
|
end
|
|
|
|
resources "/comments", CommentController, only: [:index]
|
|
|
|
scope "/filters", Filter, as: :filter do
|
|
resources "/current", CurrentController, only: [:update], singleton: true
|
|
end
|
|
|
|
resources "/filters", FilterController do
|
|
resources "/public", Filter.PublicController, only: [:create], singleton: true
|
|
end
|
|
|
|
resources "/profiles", ProfileController, only: [:show] do
|
|
resources "/reports", Profile.ReportController, only: [:new, :create]
|
|
resources "/commission", Profile.CommissionController, only: [:show], singleton: true
|
|
resources "/tag_changes", Profile.TagChangeController, only: [:index]
|
|
resources "/source_changes", Profile.SourceChangeController, only: [:index]
|
|
end
|
|
|
|
resources "/captchas", CaptchaController, only: [:create]
|
|
|
|
scope "/posts", Post, as: :post do
|
|
resources "/preview", PreviewController, only: [:create]
|
|
end
|
|
|
|
resources "/posts", PostController, only: [:index]
|
|
resources "/commissions", CommissionController, only: [:index]
|
|
|
|
resources "/galleries", GalleryController, only: [:index, :show] do
|
|
resources "/reports", Gallery.ReportController, only: [:new, :create]
|
|
end
|
|
|
|
resources "/adverts", AdvertController, only: [:show]
|
|
|
|
resources "/pages", PageController, only: [:show] do
|
|
resources "/history", Page.HistoryController, only: [:index]
|
|
end
|
|
|
|
scope "/channels", Channel, as: :channel do
|
|
resources "/nsfw", NsfwController, only: [:create, :delete], singleton: true
|
|
end
|
|
|
|
resources "/dnp", DnpEntryController, only: [:index, :show]
|
|
resources "/staff", StaffController, only: [:index]
|
|
resources "/stats", StatController, only: [:index]
|
|
resources "/channels", ChannelController, only: [:index, :show]
|
|
resources "/settings", SettingController, only: [:edit, :update], singleton: true
|
|
resources "/duplicate_reports", DuplicateReportController, only: [:index, :show, :create]
|
|
|
|
get "/:id", ImageController, :show
|
|
# get "/:forum_id", ForumController, :show # impossible to do without constraints
|
|
get "/:forum_id/:id", TopicController, :show
|
|
get "/:forum_id/:id/:page", TopicController, :show
|
|
get "/:forum_id/:id/post/:post_id", TopicController, :show
|
|
end
|
|
|
|
# Other scopes may use custom stacks.
|
|
# scope "/api", PhilomenaWeb do
|
|
# pipe_through :api
|
|
# end
|
|
end
|