summaryrefslogtreecommitdiffstats
path: root/app/controllers/api
diff options
context:
space:
mode:
authorThibG <thib@sitedethib.com>2020-08-19 19:02:06 +0200
committerGitHub <noreply@github.com>2020-08-19 19:02:06 +0200
commitf6a82cb2cd7d82bc571866de0dcf90f7fdc29ca2 (patch)
treedc5a986193bcef4f705b9d41a2db93470e97b38f /app/controllers/api
parent62a45ae26e475f0c5b70feaf566e72b024ad0b22 (diff)
Fix not being able to unbookmark toots when blocked by their author (#14604)
* Fix not being able to unbookmark toots when blocked by their author * Add tests
Diffstat (limited to 'app/controllers/api')
-rw-r--r--app/controllers/api/v1/statuses/bookmarks_controller.rb14
1 files changed, 12 insertions, 2 deletions
diff --git a/app/controllers/api/v1/statuses/bookmarks_controller.rb b/app/controllers/api/v1/statuses/bookmarks_controller.rb
index 3954af3c9bf..19963c002ad 100644
--- a/app/controllers/api/v1/statuses/bookmarks_controller.rb
+++ b/app/controllers/api/v1/statuses/bookmarks_controller.rb
@@ -5,7 +5,7 @@ class Api::V1::Statuses::BookmarksController < Api::BaseController
before_action -> { doorkeeper_authorize! :write, :'write:bookmarks' }
before_action :require_user!
- before_action :set_status
+ before_action :set_status, only: [:create]
def create
current_account.bookmarks.find_or_create_by!(account: current_account, status: @status)
@@ -13,10 +13,20 @@ class Api::V1::Statuses::BookmarksController < Api::BaseController
end
def destroy
- bookmark = current_account.bookmarks.find_by(status: @status)
+ bookmark = current_account.bookmarks.find_by(status_id: params[:status_id])
+
+ if bookmark
+ @status = bookmark.status
+ else
+ @status = Status.find(params[:status_id])
+ authorize @status, :show?
+ end
+
bookmark&.destroy!
render json: @status, serializer: REST::StatusSerializer, relationships: StatusRelationshipsPresenter.new([@status], current_account.id, bookmarks_map: { @status.id => false })
+ rescue Mastodon::NotPermittedError
+ not_found
end
private