- Blocks are per persona and never federate (a Block activity would tell
the other server who blocked whom): the blocked account is removed as a
follower, with a Reject{Follow} if it is remote, unfollowed, cleared from
home and notifications, and refused with Reject if it follows again.
- Mutes (optionally timed, optionally sparing notifications) and per-
persona domain blocks keep authors out of home timelines, notifications
and every status list the API returns; the boosts of a hidden author's
posts are hidden too.
- Bookmarks and pins (at most five, public or unlisted, own posts) with
their Mastodon endpoints and flags; pinned posts are the actor's
`featured` collection at /trophies, and `featuredTags` points at
/tattoos.
- Reports: /api/v1/reports stores the report and, when forwarding to a
remote account, sends Flag from the instance actor, so the reporting
persona is never named to the other server. An inbound Flag about a local
persona or its posts becomes a report; moderators list and resolve them
under /clientapi/moderator/reports.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012CzABvBkbcFqoHdmi8b9WB
48 lines
1.4 KiB
C#
48 lines
1.4 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
using MongoDB.Entities;
|
|
|
|
using PrivaPub.ClientModels;
|
|
using PrivaPub.Extensions;
|
|
using PrivaPub.Models.Social;
|
|
|
|
namespace PrivaPub.Controllers.ClientToServer
|
|
{
|
|
[ApiController,
|
|
Route("clientapi/moderator"),
|
|
Authorize(Policy = Policies.IsModerator)]
|
|
public class ModeratorController : ControllerBase
|
|
{
|
|
[HttpGet, Route("/clientapi/moderator/reports")]
|
|
public async Task<IActionResult> Reports([FromQuery] bool resolved, CancellationToken token) =>
|
|
Ok((await DB.Default.Find<Report>().Match(r => r.IsResolved == resolved).Sort(r => r.ID, Order.Descending).Limit(100).ExecuteAsync(token))
|
|
.Select(r => new
|
|
{
|
|
r.ID,
|
|
Reporter = r.ReporterAvatarId != default ? "local" : r.ReporterActorURI,
|
|
r.TargetAccountId,
|
|
r.TargetActorURI,
|
|
r.PostIds,
|
|
r.ObjectURIs,
|
|
r.Category,
|
|
r.Comment,
|
|
r.Forwarded,
|
|
r.IsResolved,
|
|
r.CreatedAt,
|
|
r.ResolvedAt
|
|
}));
|
|
|
|
[HttpPost, Route("/clientapi/moderator/reports/{id}/resolve")]
|
|
public async Task<IActionResult> Resolve(string id, CancellationToken token)
|
|
{
|
|
var result = await DB.Default.Update<Report>().MatchID(id)
|
|
.Modify(r => r.IsResolved, true)
|
|
.Modify(r => r.ResolvedAt, DateTime.UtcNow)
|
|
.Modify(r => r.ResolvedBy, User.GetUserId())
|
|
.ExecuteAsync(token);
|
|
return result.MatchedCount == 0 ? NotFound() : Ok();
|
|
}
|
|
}
|
|
}
|