瀏覽代碼

Fix webfinger response not returning 410 when account is suspended (#11869)

master^2
Eugen Rochko 4 年之前
committed by GitHub
父節點
當前提交
b671b91211
沒有發現已知的金鑰在資料庫的簽署中 GPG 金鑰 ID: 4AEE18F83AFDEB23
共有 1 個檔案被更改,包括 20 行新增4 行删除
  1. +20
    -4
      app/controllers/well_known/webfinger_controller.rb

+ 20
- 4
app/controllers/well_known/webfinger_controller.rb 查看文件

@@ -5,18 +5,22 @@ module WellKnown
include RoutingHelper

before_action { response.headers['Vary'] = 'Accept' }
before_action :set_account
before_action :check_account_suspension

def show
@account = Account.find_local!(username_from_resource)
rescue_from ActiveRecord::RecordNotFound, ActionController::ParameterMissing, with: :not_found

def show
expires_in 3.days, public: true
render json: @account, serializer: WebfingerSerializer, content_type: 'application/jrd+json'
rescue ActiveRecord::RecordNotFound, ActionController::ParameterMissing
head 404
end

private

def set_account
@account = Account.find_local!(username_from_resource)
end

def username_from_resource
resource_user = resource_param
username, domain = resource_user.split('@')
@@ -28,5 +32,17 @@ module WellKnown
def resource_param
params.require(:resource)
end

def check_account_suspension
expires_in(3.minutes, public: true) && gone if @account.suspended?
end

def not_found
head 404
end

def gone
head 410
end
end
end

Loading…
取消
儲存