* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
		
			
				
	
	
		
			40 lines
		
	
	
	
		
			1.1 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			40 lines
		
	
	
	
		
			1.1 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| class Api::V1::MediaController < Api::BaseController
 | |
|   before_action -> { doorkeeper_authorize! :write, :'write:media' }
 | |
|   before_action :require_user!
 | |
| 
 | |
|   include ObfuscateFilename
 | |
|   obfuscate_filename :file
 | |
| 
 | |
|   respond_to :json
 | |
| 
 | |
|   def create
 | |
|     @media = current_account.media_attachments.create!(media_params)
 | |
|     render json: @media, serializer: REST::MediaAttachmentSerializer
 | |
|   rescue Paperclip::Errors::NotIdentifiedByImageMagickError
 | |
|     render json: file_type_error, status: 422
 | |
|   rescue Paperclip::Error
 | |
|     render json: processing_error, status: 500
 | |
|   end
 | |
| 
 | |
|   def update
 | |
|     @media = current_account.media_attachments.where(status_id: nil).find(params[:id])
 | |
|     @media.update!(media_params)
 | |
|     render json: @media, serializer: REST::MediaAttachmentSerializer
 | |
|   end
 | |
| 
 | |
|   private
 | |
| 
 | |
|   def media_params
 | |
|     params.permit(:file, :description, :focus)
 | |
|   end
 | |
| 
 | |
|   def file_type_error
 | |
|     { error: 'File type of uploaded media could not be verified' }
 | |
|   end
 | |
| 
 | |
|   def processing_error
 | |
|     { error: 'Error processing thumbnail for uploaded media' }
 | |
|   end
 | |
| end
 |