forked from fedi/mastodon
1ae508bf2f
- Only exact search matches for queries with < 5 characters - Do not support queries with `offset` (pagination) - Return HTTP 401 on truthy `resolve` instead of overriding to false
45 lines
1.2 KiB
Ruby
45 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Api::V2::SearchController < Api::BaseController
|
|
include Authorization
|
|
|
|
RESULTS_LIMIT = 20
|
|
|
|
before_action -> { authorize_if_got_token! :read, :'read:search' }
|
|
before_action :validate_search_params!
|
|
|
|
def index
|
|
@search = Search.new(search_results)
|
|
render json: @search, serializer: REST::SearchSerializer
|
|
rescue Mastodon::SyntaxError
|
|
unprocessable_entity
|
|
rescue ActiveRecord::RecordNotFound
|
|
not_found
|
|
end
|
|
|
|
private
|
|
|
|
def validate_search_params!
|
|
params.require(:q)
|
|
|
|
return if user_signed_in?
|
|
|
|
return render json: { error: 'Search queries pagination is not supported without authentication' }, status: 401 if params[:offset].present?
|
|
|
|
render json: { error: 'Search queries that resolve remote resources are not supported without authentication' }, status: 401 if truthy_param?(:resolve)
|
|
end
|
|
|
|
def search_results
|
|
SearchService.new.call(
|
|
params[:q],
|
|
current_account,
|
|
limit_param(RESULTS_LIMIT),
|
|
search_params.merge(resolve: truthy_param?(:resolve), exclude_unreviewed: truthy_param?(:exclude_unreviewed))
|
|
)
|
|
end
|
|
|
|
def search_params
|
|
params.permit(:type, :offset, :min_id, :max_id, :account_id)
|
|
end
|
|
end
|