b1-66er/microblog.pub
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Filter the outbox when not authenticated

Browse Source
This commit is contained in:
Thomas Sileo
2018-07-07 13:06:57 +02:00
parent 8ffeb1fe4f
commit 285d2fa890
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app.py
View File

@@ -886,12 +886,11 @@ def outbox():
if request.method == "GET": if request.method == "GET":
if not is_api_request(): if not is_api_request():
abort(404) abort(404)
# TODO(tsileo): filter the outbox if not authenticated # TODO(tsileo): returns the whole outbox if authenticated
# FIXME(tsileo): filter deleted, add query support for build_ordered_collection
q = { q = {
"box": Box.OUTBOX.value, "box": Box.OUTBOX.value,
"meta.deleted": False, "meta.deleted": False, # TODO(tsileo): retrieve deleted and expose tombstone
# 'type': {'$in': [ActivityType.CREATE.value, ActivityType.ANNOUNCE.value]}, 'type': {'$in': [ActivityType.CREATE.value, ActivityType.ANNOUNCE.value]},
} }
return jsonify( return jsonify(
**activitypub.build_ordered_collection( **activitypub.build_ordered_collection(