AdminApiController.php 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use Illuminate\Http\Request;
  4. use App\Http\Controllers\Controller;
  5. use App\Jobs\StatusPipeline\StatusDelete;
  6. use Auth, Cache, DB;
  7. use Carbon\Carbon;
  8. use App\{
  9. AccountInterstitial,
  10. Instance,
  11. Like,
  12. Notification,
  13. Media,
  14. Profile,
  15. Report,
  16. Status,
  17. User
  18. };
  19. use App\Models\Conversation;
  20. use App\Models\RemoteReport;
  21. use App\Services\AccountService;
  22. use App\Services\AdminStatsService;
  23. use App\Services\ConfigCacheService;
  24. use App\Services\InstanceService;
  25. use App\Services\ModLogService;
  26. use App\Services\SnowflakeService;
  27. use App\Services\StatusService;
  28. use App\Services\PublicTimelineService;
  29. use App\Services\NetworkTimelineService;
  30. use App\Services\NotificationService;
  31. use App\Http\Resources\AdminInstance;
  32. use App\Http\Resources\AdminUser;
  33. use App\Jobs\DeletePipeline\DeleteAccountPipeline;
  34. use App\Jobs\DeletePipeline\DeleteRemoteProfilePipeline;
  35. use App\Jobs\DeletePipeline\DeleteRemoteStatusPipeline;
  36. class AdminApiController extends Controller
  37. {
  38. public function supported(Request $request)
  39. {
  40. abort_if(!$request->user() || !$request->user()->token(), 404);
  41. abort_unless($request->user()->is_admin == 1, 404);
  42. abort_unless($request->user()->tokenCan('admin:read'), 404);
  43. return response()->json(['supported' => true]);
  44. }
  45. public function getStats(Request $request)
  46. {
  47. abort_if(!$request->user() || !$request->user()->token(), 404);
  48. abort_unless($request->user()->is_admin == 1, 404);
  49. abort_unless($request->user()->tokenCan('admin:read'), 404);
  50. $res = AdminStatsService::summary();
  51. $res['autospam_count'] = AccountInterstitial::whereType('post.autospam')
  52. ->whereNull('appeal_handled_at')
  53. ->count();
  54. return $res;
  55. }
  56. public function autospam(Request $request)
  57. {
  58. abort_if(!$request->user() || !$request->user()->token(), 404);
  59. abort_unless($request->user()->is_admin == 1, 404);
  60. abort_unless($request->user()->tokenCan('admin:read'), 404);
  61. $appeals = AccountInterstitial::whereType('post.autospam')
  62. ->whereNull('appeal_handled_at')
  63. ->latest()
  64. ->simplePaginate(6)
  65. ->map(function($report) {
  66. $r = [
  67. 'id' => $report->id,
  68. 'type' => $report->type,
  69. 'item_id' => $report->item_id,
  70. 'item_type' => $report->item_type,
  71. 'created_at' => $report->created_at
  72. ];
  73. if($report->item_type === 'App\\Status') {
  74. $status = StatusService::get($report->item_id, false);
  75. if(!$status) {
  76. return;
  77. }
  78. $r['status'] = $status;
  79. if($status['in_reply_to_id']) {
  80. $r['parent'] = StatusService::get($status['in_reply_to_id'], false);
  81. }
  82. }
  83. return $r;
  84. });
  85. return $appeals;
  86. }
  87. public function autospamHandle(Request $request)
  88. {
  89. abort_if(!$request->user() || !$request->user()->token(), 404);
  90. abort_unless($request->user()->is_admin == 1, 404);
  91. abort_unless($request->user()->tokenCan('admin:write'), 404);
  92. $this->validate($request, [
  93. 'action' => 'required|in:dismiss,approve,dismiss-all,approve-all,delete-post,delete-account',
  94. 'id' => 'required'
  95. ]);
  96. $action = $request->input('action');
  97. $id = $request->input('id');
  98. $appeal = AccountInterstitial::whereType('post.autospam')
  99. ->whereNull('appeal_handled_at')
  100. ->findOrFail($id);
  101. $now = now();
  102. $res = ['status' => 'success'];
  103. $meta = json_decode($appeal->meta);
  104. $user = $appeal->user;
  105. $profile = $user->profile;
  106. if($action == 'dismiss') {
  107. $appeal->is_spam = true;
  108. $appeal->appeal_handled_at = $now;
  109. $appeal->save();
  110. Cache::forget('pf:bouncer_v0:exemption_by_pid:' . $profile->id);
  111. Cache::forget('pf:bouncer_v0:recent_by_pid:' . $profile->id);
  112. Cache::forget('admin-dash:reports:spam-count');
  113. return $res;
  114. }
  115. if($action == 'delete-post') {
  116. $appeal->appeal_handled_at = now();
  117. $appeal->is_spam = true;
  118. $appeal->save();
  119. ModLogService::boot()
  120. ->objectUid($profile->id)
  121. ->objectId($appeal->status->id)
  122. ->objectType('App\Status::class')
  123. ->user($request->user())
  124. ->action('admin.status.delete')
  125. ->accessLevel('admin')
  126. ->save();
  127. PublicTimelineService::deleteByProfileId($profile->id);
  128. StatusDelete::dispatch($appeal->status)->onQueue('high');
  129. Cache::forget('admin-dash:reports:spam-count');
  130. return $res;
  131. }
  132. if($action == 'delete-account') {
  133. abort_if($user->is_admin, 400, 'Cannot delete an admin account.');
  134. $appeal->appeal_handled_at = now();
  135. $appeal->is_spam = true;
  136. $appeal->save();
  137. ModLogService::boot()
  138. ->objectUid($profile->id)
  139. ->objectId($profile->id)
  140. ->objectType('App\User::class')
  141. ->user($request->user())
  142. ->action('admin.user.delete')
  143. ->accessLevel('admin')
  144. ->save();
  145. PublicTimelineService::deleteByProfileId($profile->id);
  146. DeleteAccountPipeline::dispatch($appeal->user)->onQueue('high');
  147. Cache::forget('admin-dash:reports:spam-count');
  148. return $res;
  149. }
  150. if($action == 'dismiss-all') {
  151. AccountInterstitial::whereType('post.autospam')
  152. ->whereItemType('App\Status')
  153. ->whereNull('appeal_handled_at')
  154. ->whereUserId($appeal->user_id)
  155. ->update(['appeal_handled_at' => $now, 'is_spam' => true]);
  156. Cache::forget('pf:bouncer_v0:exemption_by_pid:' . $appeal->user->profile_id);
  157. Cache::forget('pf:bouncer_v0:recent_by_pid:' . $appeal->user->profile_id);
  158. Cache::forget('admin-dash:reports:spam-count');
  159. return $res;
  160. }
  161. if($action == 'approve') {
  162. $status = $appeal->status;
  163. $status->is_nsfw = $meta->is_nsfw;
  164. $status->scope = 'public';
  165. $status->visibility = 'public';
  166. $status->save();
  167. $appeal->is_spam = false;
  168. $appeal->appeal_handled_at = now();
  169. $appeal->save();
  170. StatusService::del($status->id);
  171. Notification::whereAction('autospam.warning')
  172. ->whereProfileId($appeal->user->profile_id)
  173. ->get()
  174. ->each(function($n) use($appeal) {
  175. NotificationService::del($appeal->user->profile_id, $n->id);
  176. $n->forceDelete();
  177. });
  178. Cache::forget('pf:bouncer_v0:exemption_by_pid:' . $appeal->user->profile_id);
  179. Cache::forget('pf:bouncer_v0:recent_by_pid:' . $appeal->user->profile_id);
  180. Cache::forget('admin-dash:reports:spam-count');
  181. return $res;
  182. }
  183. if($action == 'approve-all') {
  184. AccountInterstitial::whereType('post.autospam')
  185. ->whereItemType('App\Status')
  186. ->whereNull('appeal_handled_at')
  187. ->whereUserId($appeal->user_id)
  188. ->get()
  189. ->each(function($report) use($meta) {
  190. $report->is_spam = false;
  191. $report->appeal_handled_at = now();
  192. $report->save();
  193. $status = Status::find($report->item_id);
  194. if($status) {
  195. $status->is_nsfw = $meta->is_nsfw;
  196. $status->scope = 'public';
  197. $status->visibility = 'public';
  198. $status->save();
  199. StatusService::del($status->id, true);
  200. }
  201. Notification::whereAction('autospam.warning')
  202. ->whereProfileId($report->user->profile_id)
  203. ->get()
  204. ->each(function($n) use($report) {
  205. NotificationService::del($report->user->profile_id, $n->id);
  206. $n->forceDelete();
  207. });
  208. });
  209. Cache::forget('pf:bouncer_v0:exemption_by_pid:' . $appeal->user->profile_id);
  210. Cache::forget('pf:bouncer_v0:recent_by_pid:' . $appeal->user->profile_id);
  211. Cache::forget('admin-dash:reports:spam-count');
  212. return $res;
  213. }
  214. return $res;
  215. }
  216. public function modReports(Request $request)
  217. {
  218. abort_if(!$request->user() || !$request->user()->token(), 404);
  219. abort_unless($request->user()->is_admin == 1, 404);
  220. abort_unless($request->user()->tokenCan('admin:read'), 404);
  221. $reports = Report::whereNull('admin_seen')
  222. ->orderBy('created_at','desc')
  223. ->paginate(6)
  224. ->map(function($report) {
  225. $r = [
  226. 'id' => $report->id,
  227. 'type' => $report->type,
  228. 'message' => $report->message,
  229. 'object_id' => $report->object_id,
  230. 'object_type' => $report->object_type,
  231. 'created_at' => $report->created_at
  232. ];
  233. if($report->profile_id) {
  234. $r['reported_by_account'] = AccountService::get($report->profile_id, true);
  235. }
  236. if($report->object_type === 'App\\Status') {
  237. $status = StatusService::get($report->object_id, false);
  238. if(!$status) {
  239. return;
  240. }
  241. $r['status'] = $status;
  242. if(isset($status['in_reply_to_id'])) {
  243. $r['parent'] = StatusService::get($status['in_reply_to_id'], false);
  244. }
  245. }
  246. if($report->object_type === 'App\\Profile') {
  247. $acct = AccountService::get($report->object_id, false);
  248. if($acct) {
  249. $r['account'] = $acct;
  250. }
  251. }
  252. return $r;
  253. })
  254. ->filter()
  255. ->values();
  256. return $reports;
  257. }
  258. public function modReportHandle(Request $request)
  259. {
  260. abort_if(!$request->user() || !$request->user()->token(), 404);
  261. abort_unless($request->user()->is_admin == 1, 404);
  262. abort_unless($request->user()->tokenCan('admin:write'), 404);
  263. $this->validate($request, [
  264. 'action' => 'required|string',
  265. 'id' => 'required'
  266. ]);
  267. $action = $request->input('action');
  268. $id = $request->input('id');
  269. $actions = [
  270. 'ignore',
  271. 'cw',
  272. 'unlist'
  273. ];
  274. if (!in_array($action, $actions)) {
  275. return abort(403);
  276. }
  277. $report = Report::findOrFail($id);
  278. $item = $report->reported();
  279. $report->admin_seen = now();
  280. switch ($action) {
  281. case 'ignore':
  282. $report->not_interested = true;
  283. break;
  284. case 'cw':
  285. Cache::forget('status:thumb:'.$item->id);
  286. $item->is_nsfw = true;
  287. $item->save();
  288. $report->nsfw = true;
  289. StatusService::del($item->id, true);
  290. break;
  291. case 'unlist':
  292. $item->visibility = 'unlisted';
  293. $item->save();
  294. StatusService::del($item->id, true);
  295. break;
  296. default:
  297. $report->admin_seen = null;
  298. break;
  299. }
  300. $report->save();
  301. Cache::forget('admin-dash:reports:list-cache');
  302. Cache::forget('admin:dashboard:home:data:v0:15min');
  303. return ['success' => true];
  304. }
  305. public function getConfiguration(Request $request)
  306. {
  307. abort_if(!$request->user() || !$request->user()->token(), 404);
  308. abort_unless($request->user()->is_admin == 1, 404);
  309. abort_unless($request->user()->tokenCan('admin:read'), 404);
  310. abort_unless(config('instance.enable_cc'), 400);
  311. return collect([
  312. [
  313. 'name' => 'ActivityPub Federation',
  314. 'description' => 'Enable activitypub federation support, compatible with Pixelfed, Mastodon and other platforms.',
  315. 'key' => 'federation.activitypub.enabled'
  316. ],
  317. [
  318. 'name' => 'Open Registration',
  319. 'description' => 'Allow new account registrations.',
  320. 'key' => 'pixelfed.open_registration'
  321. ],
  322. [
  323. 'name' => 'Stories',
  324. 'description' => 'Enable the ephemeral Stories feature.',
  325. 'key' => 'instance.stories.enabled'
  326. ],
  327. [
  328. 'name' => 'Require Email Verification',
  329. 'description' => 'Require new accounts to verify their email address.',
  330. 'key' => 'pixelfed.enforce_email_verification'
  331. ],
  332. [
  333. 'name' => 'AutoSpam Detection',
  334. 'description' => 'Detect and remove spam from public timelines.',
  335. 'key' => 'pixelfed.bouncer.enabled'
  336. ],
  337. ])
  338. ->map(function($s) {
  339. $s['state'] = (bool) config_cache($s['key']);
  340. return $s;
  341. });
  342. }
  343. public function updateConfiguration(Request $request)
  344. {
  345. abort_if(!$request->user() || !$request->user()->token(), 404);
  346. abort_unless($request->user()->is_admin == 1, 404);
  347. abort_unless($request->user()->tokenCan('admin:write'), 404);
  348. abort_unless(config('instance.enable_cc'), 400);
  349. $this->validate($request, [
  350. 'key' => 'required',
  351. 'value' => 'required'
  352. ]);
  353. $allowedKeys = [
  354. 'federation.activitypub.enabled',
  355. 'pixelfed.open_registration',
  356. 'instance.stories.enabled',
  357. 'pixelfed.enforce_email_verification',
  358. 'pixelfed.bouncer.enabled',
  359. ];
  360. $key = $request->input('key');
  361. $value = (bool) filter_var($request->input('value'), FILTER_VALIDATE_BOOLEAN);
  362. abort_if(!in_array($key, $allowedKeys), 400, 'Invalid cache key.');
  363. ConfigCacheService::put($key, $value);
  364. return collect([
  365. [
  366. 'name' => 'ActivityPub Federation',
  367. 'description' => 'Enable activitypub federation support, compatible with Pixelfed, Mastodon and other platforms.',
  368. 'key' => 'federation.activitypub.enabled'
  369. ],
  370. [
  371. 'name' => 'Open Registration',
  372. 'description' => 'Allow new account registrations.',
  373. 'key' => 'pixelfed.open_registration'
  374. ],
  375. [
  376. 'name' => 'Stories',
  377. 'description' => 'Enable the ephemeral Stories feature.',
  378. 'key' => 'instance.stories.enabled'
  379. ],
  380. [
  381. 'name' => 'Require Email Verification',
  382. 'description' => 'Require new accounts to verify their email address.',
  383. 'key' => 'pixelfed.enforce_email_verification'
  384. ],
  385. [
  386. 'name' => 'AutoSpam Detection',
  387. 'description' => 'Detect and remove spam from public timelines.',
  388. 'key' => 'pixelfed.bouncer.enabled'
  389. ],
  390. ])
  391. ->map(function($s) {
  392. $s['state'] = (bool) config_cache($s['key']);
  393. return $s;
  394. });
  395. }
  396. public function getUsers(Request $request)
  397. {
  398. abort_if(!$request->user() || !$request->user()->token(), 404);
  399. abort_unless($request->user()->is_admin == 1, 404);
  400. abort_unless($request->user()->tokenCan('admin:read'), 404);
  401. $this->validate($request, [
  402. 'sort' => 'sometimes|in:asc,desc',
  403. ]);
  404. $q = $request->input('q');
  405. $sort = $request->input('sort', 'desc') === 'asc' ? 'asc' : 'desc';
  406. $res = User::whereNull('status')
  407. ->when($q, function($query, $q) {
  408. return $query->where('username', 'like', '%' . $q . '%');
  409. })
  410. ->orderBy('id', $sort)
  411. ->cursorPaginate(10);
  412. return AdminUser::collection($res);
  413. }
  414. public function getUser(Request $request)
  415. {
  416. abort_if(!$request->user() || !$request->user()->token(), 404);
  417. abort_unless($request->user()->is_admin == 1, 404);
  418. abort_unless($request->user()->tokenCan('admin:read'), 404);
  419. $id = $request->input('user_id');
  420. $key = 'pf-admin-api:getUser:byId:' . $id;
  421. if($request->has('refresh')) {
  422. Cache::forget($key);
  423. }
  424. return Cache::remember($key, 86400, function() use($id) {
  425. $user = User::findOrFail($id);
  426. $profile = $user->profile;
  427. $account = AccountService::get($user->profile_id, true);
  428. $res = (new AdminUser($user))->additional(['meta' => [
  429. 'cached_at' => str_replace('+00:00', 'Z', now()->format(DATE_RFC3339_EXTENDED)),
  430. 'account' => $account,
  431. 'dms_sent' => Conversation::whereFromId($profile->id)->count(),
  432. 'report_count' => Report::where('object_id', $profile->id)->orWhere('reported_profile_id', $profile->id)->count(),
  433. 'remote_report_count' => RemoteReport::whereAccountId($profile->id)->count(),
  434. 'moderation' => [
  435. 'unlisted' => (bool) $profile->unlisted,
  436. 'cw' => (bool) $profile->cw,
  437. 'no_autolink' => (bool) $profile->no_autolink
  438. ]
  439. ]]);
  440. return $res;
  441. });
  442. }
  443. public function userAdminAction(Request $request)
  444. {
  445. abort_if(!$request->user() || !$request->user()->token(), 404);
  446. abort_unless($request->user()->is_admin == 1, 404);
  447. abort_unless($request->user()->tokenCan('admin:write'), 404);
  448. $this->validate($request, [
  449. 'id' => 'required',
  450. 'action' => 'required|in:unlisted,cw,no_autolink,refresh_stats,verify_email,delete',
  451. 'value' => 'sometimes'
  452. ]);
  453. $id = $request->input('id');
  454. $user = User::findOrFail($id);
  455. $profile = Profile::findOrFail($user->profile_id);
  456. $action = $request->input('action');
  457. abort_if($user->is_admin == true && $action !== 'refresh_stats', 400, 'Cannot moderate admin accounts');
  458. if($action === 'delete') {
  459. if(config('pixelfed.account_deletion') == false) {
  460. abort(404);
  461. }
  462. abort_if($user->is_admin, 400, 'Cannot delete an admin account.');
  463. $ts = now()->addMonth();
  464. $user->status = 'delete';
  465. $user->delete_after = $ts;
  466. $user->save();
  467. $profile->status = 'delete';
  468. $profile->delete_after = $ts;
  469. $profile->save();
  470. ModLogService::boot()
  471. ->objectUid($profile->id)
  472. ->objectId($profile->id)
  473. ->objectType('App\Profile::class')
  474. ->user($request->user())
  475. ->action('admin.user.delete')
  476. ->accessLevel('admin')
  477. ->save();
  478. PublicTimelineService::deleteByProfileId($profile->id);
  479. NetworkTimelineService::deleteByProfileId($profile->id);
  480. if($profile->user_id) {
  481. DB::table('oauth_access_tokens')->whereUserId($user->id)->delete();
  482. DB::table('oauth_auth_codes')->whereUserId($user->id)->delete();
  483. $user->email = $user->id;
  484. $user->password = '';
  485. $user->status = 'delete';
  486. $user->save();
  487. $profile->status = 'delete';
  488. $profile->delete_after = now()->addMonth();
  489. $profile->save();
  490. AccountService::del($profile->id);
  491. DeleteAccountPipeline::dispatch($user)->onQueue('high');
  492. } else {
  493. $profile->status = 'delete';
  494. $profile->delete_after = now()->addMonth();
  495. $profile->save();
  496. AccountService::del($profile->id);
  497. DeleteRemoteProfilePipeline::dispatch($profile)->onQueue('high');
  498. }
  499. return [
  500. 'status' => 200,
  501. 'msg' => 'deleted',
  502. ];
  503. } else if($action === 'refresh_stats') {
  504. $profile->following_count = DB::table('followers')->whereProfileId($user->profile_id)->count();
  505. $profile->followers_count = DB::table('followers')->whereFollowingId($user->profile_id)->count();
  506. $statusCount = Status::whereProfileId($user->profile_id)
  507. ->whereNull('in_reply_to_id')
  508. ->whereNull('reblog_of_id')
  509. ->whereIn('scope', ['public', 'unlisted', 'private'])
  510. ->count();
  511. $profile->status_count = $statusCount;
  512. $profile->save();
  513. } else if($action === 'verify_email') {
  514. $user->email_verified_at = now();
  515. $user->save();
  516. ModLogService::boot()
  517. ->objectUid($user->id)
  518. ->objectId($user->id)
  519. ->objectType('App\User::class')
  520. ->user($request->user())
  521. ->action('admin.user.moderate')
  522. ->metadata([
  523. 'action' => 'Manually verified email address',
  524. 'message' => 'Success!'
  525. ])
  526. ->accessLevel('admin')
  527. ->save();
  528. } else if($action === 'unlisted') {
  529. ModLogService::boot()
  530. ->objectUid($profile->id)
  531. ->objectId($profile->id)
  532. ->objectType('App\Profile::class')
  533. ->user($request->user())
  534. ->action('admin.user.moderate')
  535. ->metadata([
  536. 'action' => $action,
  537. 'message' => 'Success!'
  538. ])
  539. ->accessLevel('admin')
  540. ->save();
  541. $profile->unlisted = !$profile->unlisted;
  542. $profile->save();
  543. } else if($action === 'cw') {
  544. ModLogService::boot()
  545. ->objectUid($profile->id)
  546. ->objectId($profile->id)
  547. ->objectType('App\Profile::class')
  548. ->user($request->user())
  549. ->action('admin.user.moderate')
  550. ->metadata([
  551. 'action' => $action,
  552. 'message' => 'Success!'
  553. ])
  554. ->accessLevel('admin')
  555. ->save();
  556. $profile->cw = !$profile->cw;
  557. $profile->save();
  558. } else if($action === 'no_autolink') {
  559. ModLogService::boot()
  560. ->objectUid($profile->id)
  561. ->objectId($profile->id)
  562. ->objectType('App\Profile::class')
  563. ->user($request->user())
  564. ->action('admin.user.moderate')
  565. ->metadata([
  566. 'action' => $action,
  567. 'message' => 'Success!'
  568. ])
  569. ->accessLevel('admin')
  570. ->save();
  571. $profile->no_autolink = !$profile->no_autolink;
  572. $profile->save();
  573. } else {
  574. $profile->{$action} = filter_var($request->input('value'), FILTER_VALIDATE_BOOLEAN);
  575. $profile->save();
  576. ModLogService::boot()
  577. ->objectUid($user->id)
  578. ->objectId($user->id)
  579. ->objectType('App\User::class')
  580. ->user($request->user())
  581. ->action('admin.user.moderate')
  582. ->metadata([
  583. 'action' => $action,
  584. 'message' => 'Success!'
  585. ])
  586. ->accessLevel('admin')
  587. ->save();
  588. }
  589. AccountService::del($user->profile_id);
  590. $account = AccountService::get($user->profile_id, true);
  591. return (new AdminUser($user))->additional(['meta' => [
  592. 'account' => $account,
  593. 'moderation' => [
  594. 'unlisted' => (bool) $profile->unlisted,
  595. 'cw' => (bool) $profile->cw,
  596. 'no_autolink' => (bool) $profile->no_autolink
  597. ]
  598. ]]);
  599. }
  600. public function instances(Request $request)
  601. {
  602. abort_if(!$request->user() || !$request->user()->token(), 404);
  603. abort_unless($request->user()->is_admin == 1, 404);
  604. abort_unless($request->user()->tokenCan('admin:write'), 404);
  605. $this->validate($request, [
  606. 'q' => 'sometimes',
  607. 'sort' => 'sometimes|in:asc,desc',
  608. 'sort_by' => 'sometimes|in:id,status_count,user_count,domain',
  609. 'filter' => 'sometimes|in:all,unlisted,auto_cw,banned',
  610. ]);
  611. $q = $request->input('q');
  612. $sort = $request->input('sort', 'desc') === 'asc' ? 'asc' : 'desc';
  613. $sortBy = $request->input('sort_by', 'id');
  614. $filter = $request->input('filter');
  615. $res = Instance::when($q, function($query, $q) {
  616. return $query->where('domain', 'like', '%' . $q . '%');
  617. })
  618. ->when($filter, function($query, $filter) {
  619. if($filter === 'all') {
  620. return $query;
  621. } else {
  622. return $query->where($filter, true);
  623. }
  624. })
  625. ->when($sortBy, function($query, $sortBy) use($sort) {
  626. return $query->orderBy($sortBy, $sort);
  627. }, function($query) {
  628. return $query->orderBy('id', 'desc');
  629. })
  630. ->cursorPaginate(10)
  631. ->withQueryString();
  632. return AdminInstance::collection($res);
  633. }
  634. public function getInstance(Request $request)
  635. {
  636. abort_if(!$request->user() || !$request->user()->token(), 404);
  637. abort_unless($request->user()->is_admin == 1, 404);
  638. abort_unless($request->user()->tokenCan('admin:read'), 404);
  639. $id = $request->input('id');
  640. $res = Instance::findOrFail($id);
  641. return new AdminInstance($res);
  642. }
  643. public function moderateInstance(Request $request)
  644. {
  645. abort_if(!$request->user() || !$request->user()->token(), 404);
  646. abort_unless($request->user()->is_admin == 1, 404);
  647. abort_unless($request->user()->tokenCan('admin:write'), 404);
  648. $this->validate($request, [
  649. 'id' => 'required',
  650. 'key' => 'required|in:unlisted,auto_cw,banned',
  651. 'value' => 'required'
  652. ]);
  653. $id = $request->input('id');
  654. $key = $request->input('key');
  655. $value = (bool) filter_var($request->input('value'), FILTER_VALIDATE_BOOLEAN);
  656. $res = Instance::findOrFail($id);
  657. $res->{$key} = $value;
  658. $res->save();
  659. InstanceService::refresh();
  660. NetworkTimelineService::warmCache(true);
  661. return new AdminInstance($res);
  662. }
  663. public function refreshInstanceStats(Request $request)
  664. {
  665. abort_if(!$request->user() || !$request->user()->token(), 404);
  666. abort_unless($request->user()->is_admin == 1, 404);
  667. abort_unless($request->user()->tokenCan('admin:write'), 404);
  668. $this->validate($request, [
  669. 'id' => 'required',
  670. ]);
  671. $id = $request->input('id');
  672. $instance = Instance::findOrFail($id);
  673. $instance->user_count = Profile::whereDomain($instance->domain)->count();
  674. $instance->status_count = Profile::whereDomain($instance->domain)->leftJoin('statuses', 'profiles.id', '=', 'statuses.profile_id')->count();
  675. $instance->save();
  676. return new AdminInstance($instance);
  677. }
  678. public function getAllStats(Request $request)
  679. {
  680. abort_if(!$request->user() || !$request->user()->token(), 404);
  681. abort_unless($request->user()->is_admin === 1, 404);
  682. abort_unless($request->user()->tokenCan('admin:read'), 404);
  683. if($request->has('refresh')) {
  684. Cache::forget('admin-api:instance-all-stats-v1');
  685. }
  686. return Cache::remember('admin-api:instance-all-stats-v1', 1209600, function() {
  687. $days = range(1, 7);
  688. $res = [
  689. 'cached_at' => now()->format('c'),
  690. ];
  691. $minStatusId = SnowflakeService::byDate(now()->subDays(7));
  692. foreach($days as $day) {
  693. $label = now()->subDays($day)->format('D');
  694. $labelShort = substr($label, 0, 1);
  695. $res['users']['days'][] = [
  696. 'date' => now()->subDays($day)->format('M j Y'),
  697. 'label_full' => $label,
  698. 'label' => $labelShort,
  699. 'count' => User::whereDate('created_at', now()->subDays($day))->count()
  700. ];
  701. $res['posts']['days'][] = [
  702. 'date' => now()->subDays($day)->format('M j Y'),
  703. 'label_full' => $label,
  704. 'label' => $labelShort,
  705. 'count' => Status::whereNull('uri')->where('id', '>', $minStatusId)->whereDate('created_at', now()->subDays($day))->count()
  706. ];
  707. $res['instances']['days'][] = [
  708. 'date' => now()->subDays($day)->format('M j Y'),
  709. 'label_full' => $label,
  710. 'label' => $labelShort,
  711. 'count' => Instance::whereDate('created_at', now()->subDays($day))->count()
  712. ];
  713. }
  714. $res['users']['total'] = DB::table('users')->count();
  715. $res['users']['min'] = collect($res['users']['days'])->min('count');
  716. $res['users']['max'] = collect($res['users']['days'])->max('count');
  717. $res['users']['change'] = collect($res['users']['days'])->sum('count');;
  718. $res['posts']['total'] = DB::table('statuses')->whereNull('uri')->count();
  719. $res['posts']['min'] = collect($res['posts']['days'])->min('count');
  720. $res['posts']['max'] = collect($res['posts']['days'])->max('count');
  721. $res['posts']['change'] = collect($res['posts']['days'])->sum('count');
  722. $res['instances']['total'] = DB::table('instances')->count();
  723. $res['instances']['min'] = collect($res['instances']['days'])->min('count');
  724. $res['instances']['max'] = collect($res['instances']['days'])->max('count');
  725. $res['instances']['change'] = collect($res['instances']['days'])->sum('count');
  726. return $res;
  727. });
  728. }
  729. }