ditto/src/controllers/api/apps.ts

import { z } from 'zod';

import type { AppController } from '@/app.ts';
import { parseBody } from '@/utils/api.ts';

/**
 * Apps are unnecessary cruft in Mastodon API, but necessary to make clients work.
 * So when clients try to "create" an app, pretend they did and return a hardcoded app.
 */
const FAKE_APP = {
  id: '1',
  name: 'Ditto',
  website: null,
  redirect_uri: 'urn:ietf:wg:oauth:2.0:oob',
  client_id: 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', // he cry
  client_secret: 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', // 😱 😱 😱
  vapid_key: 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=',
};

const createAppSchema = z.object({
  redirect_uris: z.string().url().optional(),
});

const createAppController: AppController = async (c) => {
  // TODO: Handle both formData and json. 422 on parsing error.
  try {
    const { redirect_uris } = createAppSchema.parse(await parseBody(c.req.raw));

    return c.json({
      ...FAKE_APP,
      redirect_uri: redirect_uris || FAKE_APP.redirect_uri,
    });
  } catch (_e) {
    return c.json(FAKE_APP);
  }
};

const appCredentialsController: AppController = (c) => {
  return c.json(FAKE_APP);
};

export { appCredentialsController, createAppController };