activitypub: only send accept back automatically if the account is not locked

This commit is contained in:
William Pitcock 2018-05-26 14:55:16 +00:00
parent 3208611bfc
commit e5206752e1
2 changed files with 8 additions and 2 deletions

View File

@ -252,6 +252,10 @@ def following?(%User{} = follower, %User{} = followed) do
Enum.member?(follower.following, followed.follower_address)
end
def locked?(%User{} = user) do
user.info["locked"] || false
end
def get_by_ap_id(ap_id) do
Repo.get_by(User, ap_id: ap_id)
end

View File

@ -137,9 +137,11 @@ def handle_incoming(
with %User{local: true} = followed <- User.get_cached_by_ap_id(followed),
%User{} = follower <- User.get_or_fetch_by_ap_id(follower),
{:ok, activity} <- ActivityPub.follow(follower, followed, id, false) do
if not User.locked?(followed) do
ActivityPub.accept(%{to: [follower.ap_id], actor: followed.ap_id, object: data, local: true})
User.follow(follower, followed)
end
{:ok, activity}
else
_e -> :error