Add /api/v1/accounts/{id}/follow endpoint

app/Http/Controllers/Api/ApiV1Controller.php

@@ -6,14 +6,17 @@ use Illuminate\Http\Request;
 use App\Http\Controllers\Controller;
 use Illuminate\Support\Str;
 use App\Jobs\StatusPipeline\StatusDelete;
+use App\Jobs\FollowPipeline\FollowPipeline;
 use Laravel\Passport\Passport;
 use Auth, Cache, DB;
 use App\{
     Follower,
+    FollowRequest,
     Like,
     Media,
     Profile,
-    Status
+    Status,
+    UserFilter,
 };
 use League\Fractal;
 use App\Transformer\Api\{
@@ -21,6 +24,7 @@ use App\Transformer\Api\{
     RelationshipTransformer,
     StatusTransformer,
 };
+use App\Http\Controllers\FollowerController;
 use League\Fractal\Serializer\ArraySerializer;
 use League\Fractal\Pagination\IlluminatePaginatorAdapter;
 
@@ -235,41 +239,144 @@ class ApiV1Controller extends Controller
                 return $following->push($pid)->toArray();
             });
             $visibility = true == in_array($profile->id, $following) ? ['public', 'unlisted', 'private'] : ['public', 'unlisted'];
-
         }
 
-        $dir = $min_id ? '>' : '<';
+        if($min_id || $max_id) {
-        $id = $min_id ?? $max_id;
+            $dir = $min_id ? '>' : '<';
-        $timeline = Status::select(
+            $id = $min_id ?? $max_id;
-            'id', 
+            $timeline = Status::select(
-            'uri',
+                'id', 
-            'caption',
+                'uri',
-            'rendered',
+                'caption',
-            'profile_id', 
+                'rendered',
-            'type',
+                'profile_id', 
-            'in_reply_to_id',
+                'type',
-            'reblog_of_id',
+                'in_reply_to_id',
-            'is_nsfw',
+                'reblog_of_id',
-            'scope',
+                'is_nsfw',
-            'local',
+                'scope',
-            'place_id',
+                'local',
-            'created_at',
+                'place_id',
-            'updated_at'
+                'created_at',
-          )->whereProfileId($profile->id)
+                'updated_at'
-          ->whereIn('type', $scope)
+              )->whereProfileId($profile->id)
-          ->whereLocal(true)
+              ->whereIn('type', $scope)
-          ->whereNull('uri')
+              ->where('id', $dir, $id)
-          ->where('id', $dir, $id)
+              ->whereIn('visibility', $visibility)
-          ->whereIn('visibility', $visibility)
+              ->latest()
-          ->latest()
+              ->limit($limit)
-          ->limit($limit)
+              ->get();
-          ->get();
+        } else {
+            $timeline = Status::select(
+                'id', 
+                'uri',
+                'caption',
+                'rendered',
+                'profile_id', 
+                'type',
+                'in_reply_to_id',
+                'reblog_of_id',
+                'is_nsfw',
+                'scope',
+                'local',
+                'place_id',
+                'created_at',
+                'updated_at'
+              )->whereProfileId($profile->id)
+              ->whereIn('type', $scope)
+              ->whereIn('visibility', $visibility)
+              ->latest()
+              ->limit($limit)
+              ->get();
+        }
 
         $resource = new Fractal\Resource\Collection($timeline, new StatusTransformer());
         $res = $this->fractal->createData($resource)->toArray();
         return response()->json($res);
     }
 
+    /**
+     * POST /api/v1/accounts/{id}/follow
+     *
+     * @param  integer  $id
+     *
+     * @return \App\Transformer\Api\RelationshipTransformer
+     */
+    public function accountFollowById(Request $request, $id)
+    {
+        abort_if(!$request->user(), 403);
+
+        $user = $request->user();
+
+        $target = Profile::where('id', '!=', $user->id)
+            ->whereNull('status')
+            ->findOrFail($item);
+
+        $private = (bool) $target->is_private;
+        $remote = (bool) $target->domain;
+        $blocked = UserFilter::whereUserId($target->id)
+                ->whereFilterType('block')
+                ->whereFilterableId($user->id)
+                ->whereFilterableType('App\Profile')
+                ->exists();
+
+        if($blocked == true) {
+            abort(400, 'You cannot follow this user.');
+        }
+
+        $isFollowing = Follower::whereProfileId($user->id)
+            ->whereFollowingId($target->id)
+            ->exists();
+
+        // Following already, return empty response
+        if($isFollowing == true) {
+            return response()->json([]);
+        }
+
+        // Rate limits, max 7500 followers per account
+        if($user->following()->count() >= Follower::MAX_FOLLOWING) {
+            abort(400, 'You cannot follow more than ' . Follower::MAX_FOLLOWING . ' accounts');
+        }
+
+        // Rate limits, follow 30 accounts per hour max
+        if($user->following()->where('followers.created_at', '>', now()->subHour())->count() >= Follower::FOLLOW_PER_HOUR) {
+            abort(400, 'You can only follow ' . Follower::FOLLOW_PER_HOUR . ' users per hour');
+        }
+
+        if($private == true) {
+            $follow = FollowRequest::firstOrCreate([
+                'follower_id' => $user->id,
+                'following_id' => $target->id
+            ]);
+            if($remote == true && config('federation.activitypub.remoteFollow') == true) {
+                (new FollowerController())->sendFollow($user, $target);
+            } 
+        } else {
+            $follower = new Follower();
+            $follower->profile_id = $user->id;
+            $follower->following_id = $target->id;
+            $follower->save();
+
+            if($remote == true && config('federation.activitypub.remoteFollow') == true) {
+                (new FollowerController())->sendFollow($user, $target);
+            } 
+            FollowPipeline::dispatch($follower);
+        } 
+
+        Cache::forget('profile:following:'.$target->id);
+        Cache::forget('profile:followers:'.$target->id);
+        Cache::forget('profile:following:'.$user->id);
+        Cache::forget('profile:followers:'.$user->id);
+        Cache::forget('api:local:exp:rec:'.$user->id);
+        Cache::forget('user:account:id:'.$target->user_id);
+        Cache::forget('user:account:id:'.$user->user_id);
+
+        $resource = new Fractal\Resource\Item($target, new RelationshipTransformer());
+        $res = $this->fractal->createData($resource)->toArray();
+
+        return response()->json($res);
+    }
+
     public function statusById(Request $request, $id)
     {
         $status = Status::whereVisibility('public')->findOrFail($id);

routes/web.php

@@ -83,6 +83,7 @@ Route::domain(config('pixelfed.domain.app'))->middleware(['validemail', 'twofact
             Route::get('accounts/{id}/statuses', 'Api\ApiV1Controller@accountStatusesById')->middleware('auth:api');
             Route::get('accounts/{id}/following', 'Api\ApiV1Controller@accountFollowingById')->middleware('auth:api');
             Route::get('accounts/{id}/followers', 'Api\ApiV1Controller@accountFollowersById')->middleware('auth:api');
+            Route::post('accounts/{id}/follow', 'Api\ApiV1Controller@accountFollowById')->middleware('auth:api');
             // Route::get('accounts/{id}', 'PublicApiController@account');
             Route::get('accounts/{id}', 'Api\ApiV1Controller@accountById');
             Route::post('avatar/update', 'ApiController@avatarUpdate')->middleware('auth:api');