updated plugin ActivityPub version 9.1.0

This commit is contained in:
2026-07-28 15:03:10 +00:00
committed by Gitium
parent bf428f0e45
commit ff806e1811
217 changed files with 6098 additions and 3025 deletions

View File

@ -13,6 +13,7 @@ use Activitypub\Collection\Followers;
use Activitypub\Collection\Following;
use Activitypub\Collection\Remote_Actors;
use Activitypub\Moderation;
use Activitypub\OAuth\Server as OAuth_Server;
use function Activitypub\user_can_activitypub;
@ -118,6 +119,12 @@ class Actions_Controller extends \WP_REST_Controller {
* @return bool|\WP_Error True if the request has permission, WP_Error object otherwise.
*/
public function check_permission() {
// This is an admin endpoint; scoped OAuth C2S tokens must not drive it.
$denied = OAuth_Server::deny_if_oauth();
if ( null !== $denied ) {
return $denied;
}
if ( ! user_can_activitypub( \get_current_user_id() ) ) {
return new \WP_Error(
'rest_forbidden',

View File

@ -8,6 +8,7 @@
namespace Activitypub\Rest\Admin;
use Activitypub\Collection\Actors;
use Activitypub\OAuth\Server as OAuth_Server;
use Activitypub\Statistics;
use function Activitypub\user_can_act_as_blog;
@ -65,6 +66,12 @@ class Statistics_Controller extends \WP_REST_Controller {
* @return true|\WP_Error True if the request has access, WP_Error otherwise.
*/
public function get_item_permissions_check( $request ) {
// This is an admin endpoint; scoped OAuth C2S tokens must not drive it.
$denied = OAuth_Server::deny_if_oauth();
if ( null !== $denied ) {
return $denied;
}
$user_id = (int) $request->get_param( 'user_id' );
// Check if user can access stats for this actor.