diff --git a/packages/backend/src/server/api/endpoints/announcements.ts b/packages/backend/src/server/api/endpoints/announcements.ts index b2faf675b0..4d3b6b0fc9 100644 --- a/packages/backend/src/server/api/endpoints/announcements.ts +++ b/packages/backend/src/server/api/endpoints/announcements.ts @@ -14,7 +14,7 @@ import type { AnnouncementsRepository } from '@/models/_.js'; export const meta = { tags: ['meta'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/announcements/show.ts b/packages/backend/src/server/api/endpoints/announcements/show.ts index 20ae6cc2e5..b17db163fa 100644 --- a/packages/backend/src/server/api/endpoints/announcements/show.ts +++ b/packages/backend/src/server/api/endpoints/announcements/show.ts @@ -12,7 +12,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['meta'], - requireCredential: false, + requireCredential: true, res: { type: 'object', diff --git a/packages/backend/src/server/api/endpoints/channels/featured.ts b/packages/backend/src/server/api/endpoints/channels/featured.ts index 24323cbe63..27f7f2db5e 100644 --- a/packages/backend/src/server/api/endpoints/channels/featured.ts +++ b/packages/backend/src/server/api/endpoints/channels/featured.ts @@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['channels'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/channels/search.ts b/packages/backend/src/server/api/endpoints/channels/search.ts index 9476c494a3..c88e44a72e 100644 --- a/packages/backend/src/server/api/endpoints/channels/search.ts +++ b/packages/backend/src/server/api/endpoints/channels/search.ts @@ -15,7 +15,7 @@ import { sqlLikeEscape } from '@/misc/sql-like-escape.js'; export const meta = { tags: ['channels'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/channels/show.ts b/packages/backend/src/server/api/endpoints/channels/show.ts index e9c0c392c0..9e67d5a9b4 100644 --- a/packages/backend/src/server/api/endpoints/channels/show.ts +++ b/packages/backend/src/server/api/endpoints/channels/show.ts @@ -13,7 +13,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['channels'], - requireCredential: false, + requireCredential: true, res: { type: 'object', diff --git a/packages/backend/src/server/api/endpoints/channels/timeline.ts b/packages/backend/src/server/api/endpoints/channels/timeline.ts index fa5b948eca..5662b2a116 100644 --- a/packages/backend/src/server/api/endpoints/channels/timeline.ts +++ b/packages/backend/src/server/api/endpoints/channels/timeline.ts @@ -19,7 +19,7 @@ import { Brackets } from 'typeorm'; export const meta = { tags: ['notes', 'channels'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/clips/notes.ts b/packages/backend/src/server/api/endpoints/clips/notes.ts index 4758dbad00..bbcbd961c4 100644 --- a/packages/backend/src/server/api/endpoints/clips/notes.ts +++ b/packages/backend/src/server/api/endpoints/clips/notes.ts @@ -14,7 +14,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['account', 'notes', 'clips'], - requireCredential: false, + requireCredential: true, kind: 'read:account', diff --git a/packages/backend/src/server/api/endpoints/clips/show.ts b/packages/backend/src/server/api/endpoints/clips/show.ts index 949f0e70aa..970dba42d2 100644 --- a/packages/backend/src/server/api/endpoints/clips/show.ts +++ b/packages/backend/src/server/api/endpoints/clips/show.ts @@ -13,7 +13,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['clips', 'account'], - requireCredential: false, + requireCredential: true, kind: 'read:account', diff --git a/packages/backend/src/server/api/endpoints/emoji.ts b/packages/backend/src/server/api/endpoints/emoji.ts index 45cc4a10f3..6ddb4c01db 100644 --- a/packages/backend/src/server/api/endpoints/emoji.ts +++ b/packages/backend/src/server/api/endpoints/emoji.ts @@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['meta'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 3600, diff --git a/packages/backend/src/server/api/endpoints/emojis.ts b/packages/backend/src/server/api/endpoints/emojis.ts index 4909c948e3..954ba0e3de 100644 --- a/packages/backend/src/server/api/endpoints/emojis.ts +++ b/packages/backend/src/server/api/endpoints/emojis.ts @@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['meta'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 3600, diff --git a/packages/backend/src/server/api/endpoints/endpoint.ts b/packages/backend/src/server/api/endpoints/endpoint.ts index a1dbb26431..3bcee2f697 100644 --- a/packages/backend/src/server/api/endpoints/endpoint.ts +++ b/packages/backend/src/server/api/endpoints/endpoint.ts @@ -8,7 +8,7 @@ import { Endpoint } from '@/server/api/endpoint-base.js'; import endpoints from '../endpoints.js'; export const meta = { - requireCredential: false, + requireCredential: true, tags: ['meta'], diff --git a/packages/backend/src/server/api/endpoints/endpoints.ts b/packages/backend/src/server/api/endpoints/endpoints.ts index 8878f5d570..c4951095bd 100644 --- a/packages/backend/src/server/api/endpoints/endpoints.ts +++ b/packages/backend/src/server/api/endpoints/endpoints.ts @@ -8,7 +8,7 @@ import { Endpoint } from '@/server/api/endpoint-base.js'; import endpoints from '../endpoints.js'; export const meta = { - requireCredential: false, + requireCredential: true, tags: ['meta'], diff --git a/packages/backend/src/server/api/endpoints/fetch-rss.ts b/packages/backend/src/server/api/endpoints/fetch-rss.ts index 11244b30f6..632bd34088 100644 --- a/packages/backend/src/server/api/endpoints/fetch-rss.ts +++ b/packages/backend/src/server/api/endpoints/fetch-rss.ts @@ -13,7 +13,7 @@ import type { FeedItem } from 'domutils'; export const meta = { tags: ['meta'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 60 * 3, diff --git a/packages/backend/src/server/api/endpoints/hashtags/list.ts b/packages/backend/src/server/api/endpoints/hashtags/list.ts index b49c907432..4f9e0cbc6f 100644 --- a/packages/backend/src/server/api/endpoints/hashtags/list.ts +++ b/packages/backend/src/server/api/endpoints/hashtags/list.ts @@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['hashtags'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/hashtags/search.ts b/packages/backend/src/server/api/endpoints/hashtags/search.ts index ae6c98faf1..3dbb4b5e92 100644 --- a/packages/backend/src/server/api/endpoints/hashtags/search.ts +++ b/packages/backend/src/server/api/endpoints/hashtags/search.ts @@ -12,7 +12,7 @@ import { sqlLikeEscape } from '@/misc/sql-like-escape.js'; export const meta = { tags: ['hashtags'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/hashtags/show.ts b/packages/backend/src/server/api/endpoints/hashtags/show.ts index 588f76fbb5..35d83b0114 100644 --- a/packages/backend/src/server/api/endpoints/hashtags/show.ts +++ b/packages/backend/src/server/api/endpoints/hashtags/show.ts @@ -14,7 +14,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['hashtags'], - requireCredential: false, + requireCredential: true, res: { type: 'object', diff --git a/packages/backend/src/server/api/endpoints/hashtags/trend.ts b/packages/backend/src/server/api/endpoints/hashtags/trend.ts index 57db4f3e6e..c0ce5ead88 100644 --- a/packages/backend/src/server/api/endpoints/hashtags/trend.ts +++ b/packages/backend/src/server/api/endpoints/hashtags/trend.ts @@ -12,7 +12,7 @@ import { HashtagService } from '@/core/HashtagService.js'; export const meta = { tags: ['hashtags'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 60 * 1, diff --git a/packages/backend/src/server/api/endpoints/hashtags/users.ts b/packages/backend/src/server/api/endpoints/hashtags/users.ts index 68c795de73..099c898e16 100644 --- a/packages/backend/src/server/api/endpoints/hashtags/users.ts +++ b/packages/backend/src/server/api/endpoints/hashtags/users.ts @@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js'; import { RoleService } from '@/core/RoleService.js'; export const meta = { - requireCredential: false, + requireCredential: true, tags: ['hashtags', 'users'], diff --git a/packages/backend/src/server/api/endpoints/notes.ts b/packages/backend/src/server/api/endpoints/notes.ts index 00a88521fd..6eaf050125 100644 --- a/packages/backend/src/server/api/endpoints/notes.ts +++ b/packages/backend/src/server/api/endpoints/notes.ts @@ -13,6 +13,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['notes'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/notes/bubble-timeline.ts b/packages/backend/src/server/api/endpoints/notes/bubble-timeline.ts index 84d6aa0dc7..b6d8601312 100644 --- a/packages/backend/src/server/api/endpoints/notes/bubble-timeline.ts +++ b/packages/backend/src/server/api/endpoints/notes/bubble-timeline.ts @@ -16,6 +16,8 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/notes/children.ts b/packages/backend/src/server/api/endpoints/notes/children.ts index cf8b11ccb5..3eb79c1f0e 100644 --- a/packages/backend/src/server/api/endpoints/notes/children.ts +++ b/packages/backend/src/server/api/endpoints/notes/children.ts @@ -14,7 +14,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/clips.ts b/packages/backend/src/server/api/endpoints/notes/clips.ts index b3dcdcef12..af4d307c3d 100644 --- a/packages/backend/src/server/api/endpoints/notes/clips.ts +++ b/packages/backend/src/server/api/endpoints/notes/clips.ts @@ -15,7 +15,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['clips', 'notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/conversation.ts b/packages/backend/src/server/api/endpoints/notes/conversation.ts index 80aea580ec..2a58d189c5 100644 --- a/packages/backend/src/server/api/endpoints/notes/conversation.ts +++ b/packages/backend/src/server/api/endpoints/notes/conversation.ts @@ -15,7 +15,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/featured.ts b/packages/backend/src/server/api/endpoints/notes/featured.ts index 8ab9f72139..ac0f9a6e2a 100644 --- a/packages/backend/src/server/api/endpoints/notes/featured.ts +++ b/packages/backend/src/server/api/endpoints/notes/featured.ts @@ -18,9 +18,10 @@ import { RoleService } from '@/core/RoleService.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 3600, + kind: 'read:account', res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/global-timeline.ts b/packages/backend/src/server/api/endpoints/notes/global-timeline.ts index 506ea6fcda..851bfeded8 100644 --- a/packages/backend/src/server/api/endpoints/notes/global-timeline.ts +++ b/packages/backend/src/server/api/endpoints/notes/global-timeline.ts @@ -17,6 +17,8 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/notes/local-timeline.ts b/packages/backend/src/server/api/endpoints/notes/local-timeline.ts index 41b1ee1086..d33d410ce4 100644 --- a/packages/backend/src/server/api/endpoints/notes/local-timeline.ts +++ b/packages/backend/src/server/api/endpoints/notes/local-timeline.ts @@ -20,6 +20,8 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/notes/reactions.ts b/packages/backend/src/server/api/endpoints/notes/reactions.ts index f2355518a2..13c64a3314 100644 --- a/packages/backend/src/server/api/endpoints/notes/reactions.ts +++ b/packages/backend/src/server/api/endpoints/notes/reactions.ts @@ -15,7 +15,7 @@ import { QueryService } from '@/core/QueryService.js'; export const meta = { tags: ['notes', 'reactions'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 60, diff --git a/packages/backend/src/server/api/endpoints/notes/renotes.ts b/packages/backend/src/server/api/endpoints/notes/renotes.ts index be7cb0320f..9c67d1ea23 100644 --- a/packages/backend/src/server/api/endpoints/notes/renotes.ts +++ b/packages/backend/src/server/api/endpoints/notes/renotes.ts @@ -15,7 +15,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/replies.ts b/packages/backend/src/server/api/endpoints/notes/replies.ts index f79bfaa7df..a96380e0dd 100644 --- a/packages/backend/src/server/api/endpoints/notes/replies.ts +++ b/packages/backend/src/server/api/endpoints/notes/replies.ts @@ -13,7 +13,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/search-by-tag.ts b/packages/backend/src/server/api/endpoints/notes/search-by-tag.ts index 5064144d9c..e0e4e7be47 100644 --- a/packages/backend/src/server/api/endpoints/notes/search-by-tag.ts +++ b/packages/backend/src/server/api/endpoints/notes/search-by-tag.ts @@ -16,6 +16,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['notes', 'hashtags'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/notes/search.ts b/packages/backend/src/server/api/endpoints/notes/search.ts index f46f4d2adb..038911c7e9 100644 --- a/packages/backend/src/server/api/endpoints/notes/search.ts +++ b/packages/backend/src/server/api/endpoints/notes/search.ts @@ -13,7 +13,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/notes/show.ts b/packages/backend/src/server/api/endpoints/notes/show.ts index 44e7137f29..63a872fdba 100644 --- a/packages/backend/src/server/api/endpoints/notes/show.ts +++ b/packages/backend/src/server/api/endpoints/notes/show.ts @@ -14,7 +14,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'object', diff --git a/packages/backend/src/server/api/endpoints/notes/versions.ts b/packages/backend/src/server/api/endpoints/notes/versions.ts index 1c6f9838f5..c494ddd738 100644 --- a/packages/backend/src/server/api/endpoints/notes/versions.ts +++ b/packages/backend/src/server/api/endpoints/notes/versions.ts @@ -14,7 +14,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/pages/featured.ts b/packages/backend/src/server/api/endpoints/pages/featured.ts index 1886e7be28..0ef4171ca1 100644 --- a/packages/backend/src/server/api/endpoints/pages/featured.ts +++ b/packages/backend/src/server/api/endpoints/pages/featured.ts @@ -12,7 +12,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['pages'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/pages/show.ts b/packages/backend/src/server/api/endpoints/pages/show.ts index b763a471fa..2e7e8ca6aa 100644 --- a/packages/backend/src/server/api/endpoints/pages/show.ts +++ b/packages/backend/src/server/api/endpoints/pages/show.ts @@ -15,7 +15,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['pages'], - requireCredential: false, + requireCredential: true, res: { type: 'object', diff --git a/packages/backend/src/server/api/endpoints/pinned-users.ts b/packages/backend/src/server/api/endpoints/pinned-users.ts index 2e89d81404..c597b43636 100644 --- a/packages/backend/src/server/api/endpoints/pinned-users.ts +++ b/packages/backend/src/server/api/endpoints/pinned-users.ts @@ -15,7 +15,7 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/roles/show.ts b/packages/backend/src/server/api/endpoints/roles/show.ts index dd9f9481d4..e08f58e46c 100644 --- a/packages/backend/src/server/api/endpoints/roles/show.ts +++ b/packages/backend/src/server/api/endpoints/roles/show.ts @@ -13,7 +13,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['role', 'users'], - requireCredential: false, + requireCredential: true, errors: { noSuchRole: { diff --git a/packages/backend/src/server/api/endpoints/roles/users.ts b/packages/backend/src/server/api/endpoints/roles/users.ts index 774a6f889b..6f95ed26fa 100644 --- a/packages/backend/src/server/api/endpoints/roles/users.ts +++ b/packages/backend/src/server/api/endpoints/roles/users.ts @@ -15,7 +15,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['role', 'users'], - requireCredential: false, + requireCredential: true, errors: { noSuchRole: { diff --git a/packages/backend/src/server/api/endpoints/users.ts b/packages/backend/src/server/api/endpoints/users.ts index defd38fe96..684bd3b406 100644 --- a/packages/backend/src/server/api/endpoints/users.ts +++ b/packages/backend/src/server/api/endpoints/users.ts @@ -16,7 +16,7 @@ import type { SelectQueryBuilder } from 'typeorm'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/users/achievements.ts b/packages/backend/src/server/api/endpoints/users/achievements.ts index 6c0811d3f0..a9e4f7402f 100644 --- a/packages/backend/src/server/api/endpoints/users/achievements.ts +++ b/packages/backend/src/server/api/endpoints/users/achievements.ts @@ -9,7 +9,7 @@ import type { UserProfilesRepository } from '@/models/_.js'; import { DI } from '@/di-symbols.js'; export const meta = { - requireCredential: false, + requireCredential: true, res: { type: 'array', diff --git a/packages/backend/src/server/api/endpoints/users/clips.ts b/packages/backend/src/server/api/endpoints/users/clips.ts index a457a6c434..6b0fd7fc66 100644 --- a/packages/backend/src/server/api/endpoints/users/clips.ts +++ b/packages/backend/src/server/api/endpoints/users/clips.ts @@ -13,6 +13,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['users', 'clips'], + requireCredential: true, + description: 'Show all clips this user owns.', res: { diff --git a/packages/backend/src/server/api/endpoints/users/featured-notes.ts b/packages/backend/src/server/api/endpoints/users/featured-notes.ts index 3fb091cc0e..77e9afe9e6 100644 --- a/packages/backend/src/server/api/endpoints/users/featured-notes.ts +++ b/packages/backend/src/server/api/endpoints/users/featured-notes.ts @@ -16,7 +16,7 @@ import { QueryService } from '@/core/QueryService.js'; export const meta = { tags: ['notes'], - requireCredential: false, + requireCredential: true, allowGet: true, cacheSec: 3600, diff --git a/packages/backend/src/server/api/endpoints/users/flashs.ts b/packages/backend/src/server/api/endpoints/users/flashs.ts index 2da46e8747..ba65e440d2 100644 --- a/packages/backend/src/server/api/endpoints/users/flashs.ts +++ b/packages/backend/src/server/api/endpoints/users/flashs.ts @@ -13,6 +13,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['users', 'flashs'], + requireCredential: true, + description: 'Show all flashs this user created.', res: { diff --git a/packages/backend/src/server/api/endpoints/users/followers.ts b/packages/backend/src/server/api/endpoints/users/followers.ts index 82ce282bfc..14b752b878 100644 --- a/packages/backend/src/server/api/endpoints/users/followers.ts +++ b/packages/backend/src/server/api/endpoints/users/followers.ts @@ -18,7 +18,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Show everyone that follows this user.', diff --git a/packages/backend/src/server/api/endpoints/users/following.ts b/packages/backend/src/server/api/endpoints/users/following.ts index 80f0b0c484..9e3b4291a7 100644 --- a/packages/backend/src/server/api/endpoints/users/following.ts +++ b/packages/backend/src/server/api/endpoints/users/following.ts @@ -19,7 +19,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Show everyone that this user is following.', diff --git a/packages/backend/src/server/api/endpoints/users/get-frequently-replied-users.ts b/packages/backend/src/server/api/endpoints/users/get-frequently-replied-users.ts index 99568cfa12..533b656222 100644 --- a/packages/backend/src/server/api/endpoints/users/get-frequently-replied-users.ts +++ b/packages/backend/src/server/api/endpoints/users/get-frequently-replied-users.ts @@ -16,7 +16,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Get a list of other users that the specified user frequently replies to.', diff --git a/packages/backend/src/server/api/endpoints/users/notes.ts b/packages/backend/src/server/api/endpoints/users/notes.ts index 4602709067..85ec60d523 100644 --- a/packages/backend/src/server/api/endpoints/users/notes.ts +++ b/packages/backend/src/server/api/endpoints/users/notes.ts @@ -21,6 +21,8 @@ import { isQuote, isRenote } from '@/misc/is-renote.js'; export const meta = { tags: ['users', 'notes'], + requireCredential: true, + res: { type: 'array', optional: false, nullable: false, diff --git a/packages/backend/src/server/api/endpoints/users/pages.ts b/packages/backend/src/server/api/endpoints/users/pages.ts index 3cb958066e..6dad3701bd 100644 --- a/packages/backend/src/server/api/endpoints/users/pages.ts +++ b/packages/backend/src/server/api/endpoints/users/pages.ts @@ -13,6 +13,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['users', 'pages'], + requireCredential: true, + description: 'Show all pages this user created.', res: { diff --git a/packages/backend/src/server/api/endpoints/users/reactions.ts b/packages/backend/src/server/api/endpoints/users/reactions.ts index 553787ad58..1c104dc838 100644 --- a/packages/backend/src/server/api/endpoints/users/reactions.ts +++ b/packages/backend/src/server/api/endpoints/users/reactions.ts @@ -18,7 +18,7 @@ import { ApiError } from '../../error.js'; export const meta = { tags: ['users', 'reactions'], - requireCredential: false, + requireCredential: true, description: 'Show all reactions this user made.', diff --git a/packages/backend/src/server/api/endpoints/users/search-by-username-and-host.ts b/packages/backend/src/server/api/endpoints/users/search-by-username-and-host.ts index f1a0fc5ddb..ac215f5f87 100644 --- a/packages/backend/src/server/api/endpoints/users/search-by-username-and-host.ts +++ b/packages/backend/src/server/api/endpoints/users/search-by-username-and-host.ts @@ -10,7 +10,7 @@ import { UserSearchService } from '@/core/UserSearchService.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Search for a user by username and/or host.', diff --git a/packages/backend/src/server/api/endpoints/users/search.ts b/packages/backend/src/server/api/endpoints/users/search.ts index 138cef2ec5..d94f4ba549 100644 --- a/packages/backend/src/server/api/endpoints/users/search.ts +++ b/packages/backend/src/server/api/endpoints/users/search.ts @@ -12,7 +12,7 @@ import { UserSearchService } from '@/core/UserSearchService.js'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Search for users.', diff --git a/packages/backend/src/server/api/endpoints/users/show.ts b/packages/backend/src/server/api/endpoints/users/show.ts index 84eb661742..ca31966f7e 100644 --- a/packages/backend/src/server/api/endpoints/users/show.ts +++ b/packages/backend/src/server/api/endpoints/users/show.ts @@ -21,7 +21,7 @@ import type { FindOptionsWhere } from 'typeorm'; export const meta = { tags: ['users'], - requireCredential: false, + requireCredential: true, description: 'Show the properties of a user.', diff --git a/packages/frontend/package.json b/packages/frontend/package.json index 5d028ce142..661e01539f 100644 --- a/packages/frontend/package.json +++ b/packages/frontend/package.json @@ -18,12 +18,14 @@ "dependencies": { "@discordapp/twemoji": "15.1.0", "@github/webauthn-json": "2.1.1", + "@iconify/vue": "^4.3.0", "@mcaptcha/vanilla-glue": "0.1.0-alpha-3", "@misskey-dev/browser-image-resizer": "2024.1.0", "@phosphor-icons/web": "2.1.2", "@ruffle-rs/ruffle": "0.1.0-nightly.2024.10.15", "@sentry/vue": "9.14.0", "@syuilo/aiscript": "0.19.0", + "@types/js-cookie": "^3.0.6", "aiscript-vscode": "github:aiscript-dev/aiscript-vscode#v0.1.15", "broadcast-channel": "7.1.0", "buraha": "0.0.1", @@ -42,6 +44,7 @@ "idb-keyval": "6.2.1", "insert-text-at-cursor": "0.3.0", "is-file-animated": "1.0.2", + "js-cookie": "^3.0.5", "json5": "2.2.3", "katex": "0.16.22", "matter-js": "0.20.0", diff --git a/packages/frontend/src/pages/note.vue b/packages/frontend/src/pages/note.vue index 85befbb18b..4a416b6bf9 100644 --- a/packages/frontend/src/pages/note.vue +++ b/packages/frontend/src/pages/note.vue @@ -4,49 +4,73 @@ SPDX-License-Identifier: AGPL-3.0-only --> + + + diff --git a/packages/frontend/src/utility/misskey-api.ts b/packages/frontend/src/utility/misskey-api.ts index f8c4657655..3416217d9d 100644 --- a/packages/frontend/src/utility/misskey-api.ts +++ b/packages/frontend/src/utility/misskey-api.ts @@ -7,6 +7,7 @@ import * as Misskey from 'misskey-js'; import { ref } from 'vue'; import { apiUrl } from '@@/js/config.js'; import { $i } from '@/i.js'; +import Cookies from 'js-cookie' export const pendingApiRequestsCount = ref(0); export type Endpoint = keyof Misskey.Endpoints; @@ -63,7 +64,7 @@ export function misskeyApi< window.fetch(`${apiUrl}/${endpoint}`, { method: 'POST', body: JSON.stringify(data), - credentials: 'omit', + credentials: 'same-origin', cache: 'no-cache', headers, signal, @@ -120,10 +121,10 @@ export function misskeyApiGet< // Don't let the body value leak through query.delete('i'); - // Send request + window.fetch(`${apiUrl}/${endpoint}?${query}`, { method: 'GET', - credentials: 'omit', + credentials: 'same-origin', cache: 'default', headers, signal, diff --git a/packages/misskey-js/src/api.ts b/packages/misskey-js/src/api.ts index e663d712a7..35e6d5a751 100644 --- a/packages/misskey-js/src/api.ts +++ b/packages/misskey-js/src/api.ts @@ -109,7 +109,7 @@ export class APIClient { headers: { 'Content-Type': mediaType, }, - credentials: 'omit', + credentials: 'same-origin', cache: 'no-cache', }).then(async (res) => { const body = res.status === 204 ? null : await res.json(); diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index a8b6784dc6..acb54c8187 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -673,6 +673,9 @@ importers: '@github/webauthn-json': specifier: 2.1.1 version: 2.1.1 + '@iconify/vue': + specifier: ^4.3.0 + version: 4.3.0(vue@3.5.12(typescript@5.6.3)) '@mcaptcha/vanilla-glue': specifier: 0.1.0-alpha-3 version: 0.1.0-alpha-3 @@ -691,6 +694,9 @@ importers: '@syuilo/aiscript': specifier: 0.19.0 version: 0.19.0 + '@types/js-cookie': + specifier: ^3.0.6 + version: 3.0.6 aiscript-vscode: specifier: github:aiscript-dev/aiscript-vscode#v0.1.15 version: https://codeload.github.com/aiscript-dev/aiscript-vscode/tar.gz/c3cde89e79a41d93540cf8a48cd619c3f2dcb1b7 @@ -745,6 +751,9 @@ importers: is-file-animated: specifier: 1.0.2 version: 1.0.2 + js-cookie: + specifier: ^3.0.5 + version: 3.0.5 json5: specifier: 2.2.3 version: 2.2.3 @@ -2311,6 +2320,14 @@ packages: resolution: {integrity: sha512-xeO57FpIu4p1Ri3Jq/EXq4ClRm86dVF2z/+kvFnyqVYRavTZmaFaUBbWCOuuTh0o/g7DSsk6kc2vrS4Vl5oPOQ==} engines: {node: '>=18.18'} + '@iconify/types@2.0.0': + resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==} + + '@iconify/vue@4.3.0': + resolution: {integrity: sha512-Xq0h6zMrHBbrW8jXJ9fISi+x8oDQllg5hTDkDuxnWiskJ63rpJu9CvJshj8VniHVTbsxCg9fVoPAaNp3RQI5OQ==} + peerDependencies: + vue: '>=3' + '@img/sharp-darwin-arm64@0.34.1': resolution: {integrity: sha512-pn44xgBtgpEbZsu+lWf2KNb6OAf70X68k+yk69Ic2Xz11zHR/w24/U49XT7AeRwJ0Px+mhALhU5LPci1Aymk7A==} engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} @@ -4143,6 +4160,9 @@ packages: '@types/jest@29.5.14': resolution: {integrity: sha512-ZN+4sdnLUbo8EVvVc2ao0GFW6oVrQRPn4K2lglySj7APvSrgzxHiNNK99us4WDMi57xxA2yggblIAMNhXOotLQ==} + '@types/js-cookie@3.0.6': + resolution: {integrity: sha512-wkw9yd1kEXOPnvEeEV1Go1MmxtBJL0RR79aOTAApecWFVu7w0NNXNqhcWgvw2YgZDYadliXkl14pa3WXw5jlCQ==} + '@types/js-yaml@4.0.9': resolution: {integrity: sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==} @@ -7290,6 +7310,10 @@ packages: engines: {node: '>=12'} hasBin: true + js-cookie@3.0.5: + resolution: {integrity: sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==} + engines: {node: '>=14'} + js-stringify@1.0.2: resolution: {integrity: sha512-rtS5ATOo2Q5k1G+DADISilDA6lv79zIiwFd6CcjuIxGKLFm5C+RLImRscVap9k55i+MOZwgliw+NejvkLuGD5g==} @@ -12055,6 +12079,13 @@ snapshots: '@humanwhocodes/retry@0.4.2': {} + '@iconify/types@2.0.0': {} + + '@iconify/vue@4.3.0(vue@3.5.12(typescript@5.6.3))': + dependencies: + '@iconify/types': 2.0.0 + vue: 3.5.12(typescript@5.6.3) + '@img/sharp-darwin-arm64@0.34.1': optionalDependencies: '@img/sharp-libvips-darwin-arm64': 1.1.0 @@ -14308,6 +14339,8 @@ snapshots: expect: 29.7.0 pretty-format: 29.7.0 + '@types/js-cookie@3.0.6': {} + '@types/js-yaml@4.0.9': {} '@types/json-schema@7.0.15': {} @@ -18309,6 +18342,8 @@ snapshots: glob: 8.1.0 nopt: 6.0.0 + js-cookie@3.0.5: {} + js-stringify@1.0.2: {} js-tokens@4.0.0: {}