Api/Factory.php

@@ -2,6 +2,8 @@
 
 namespace Minds\Api;
 
+use Minds\Core\Di\Di;
+use Minds\Core\Pro\Domain\Security as ProDomainSecurity;
 use Minds\Interfaces;
 use Minds\Helpers;
 use Minds\Core\Security;
@@ -32,6 +34,7 @@ class Factory
         $loop = count($segments);
         while ($loop >= 0) {
             $offset = $loop -1;
+
             if ($loop < count($segments)) {
                 $slug_length = strlen($segments[$offset+1].'\\');
                 $route_length = strlen($route);
@@ -42,32 +45,51 @@ class Factory
             $actual = str_replace('\\', '/', $route);
             if (isset(Routes::$routes[$actual])) {
                 $class_name = Routes::$routes[$actual];
+
                 if (class_exists($class_name)) {
                     $handler = new $class_name();
+
+                    if (property_exists($handler, 'request')) {
+                        $handler->request = $request;
+                    }
+
                     if ($handler instanceof Interfaces\ApiAdminPam) {
                         self::adminCheck();
                     }
+
                     if (!$handler instanceof Interfaces\ApiIgnorePam) {
                         self::pamCheck($request, $response);
                     }
+
                     $pages = array_splice($segments, $loop) ?: [];
+
                     return $handler->$method($pages);
                 }
             }
 
             //autloaded routes
             $class_name = "\\Minds\\Controllers\api\\$route";
+
             if (class_exists($class_name)) {
                 $handler = new $class_name();
+
+                if (property_exists($handler, 'request')) {
+                    $handler->request = $request;
+                }
+
                 if ($handler instanceof Interfaces\ApiAdminPam) {
                     self::adminCheck();
                 }
+
                 if (!$handler instanceof Interfaces\ApiIgnorePam) {
                     self::pamCheck($request, $response);
                 }
+
                 $pages = array_splice($segments, $loop) ?: [];
+
                 return $handler->$method($pages);
             }
+
             --$loop;
         }
     }
@@ -78,15 +100,18 @@ class Factory
      */
     public static function pamCheck($request, $response)
     {
-        if ($request->getAttribute('oauth_user_id')
-            || Security\XSRF::validateRequest()
+        if (
+            $request->getAttribute('oauth_user_id') ||
+            Security\XSRF::validateRequest()
         ) {
             return true;
         } else {
             //error_log('failed authentication:: OAUTH via API');
             ob_end_clean();
+
+            static::setCORSHeader();
+
             header('Content-type: application/json');
-            header("Access-Control-Allow-Origin: *");
             header('HTTP/1.1 401 Unauthorized', true, 401);
             echo json_encode([
                 'error' => 'Sorry, you are not authenticated',
@@ -108,8 +133,10 @@ class Factory
         } else {
             error_log('security: unauthorized access to admin api');
             ob_end_clean();
+
+            static::setCORSHeader();
+
             header('Content-type: application/json');
-            header("Access-Control-Allow-Origin: *");
             header('HTTP/1.1 401 Unauthorized', true, 401);
             echo json_encode(['error'=>'You are not an admin', 'code'=>401]);
             exit;
@@ -126,8 +153,10 @@ class Factory
             return true;
         } else {
             ob_end_clean();
+
+            static::setCORSHeader();
+
             header('Content-type: application/json');
-            header("Access-Control-Allow-Origin: *");
             header('HTTP/1.1 401 Unauthorized', true, 401);
             echo json_encode([
               'status' => 'error',
@@ -151,11 +180,26 @@ class Factory
 
         ob_end_clean();
 
+        static::setCORSHeader();
+
         header('Content-type: application/json');
-        header("Access-Control-Allow-Origin: *");
         echo json_encode($data);
     }
 
+    /**
+     * Sets the CORS header, if not already set
+     */
+    public static function setCORSHeader(): void
+    {
+        $wasSet = count(array_filter(headers_list(), function ($header) {
+            return stripos($header, 'Access-Control-Allow-Origin:') === 0;
+        })) > 0;
+
+        if (!$wasSet) {
+            header("Access-Control-Allow-Origin: *");
+        }
+    }
+
     /**
      * Returns the exportable form of the entities
      * @param array $entities - an array of entities

Common/Jwt.php

+<?php
+/**
+ * Jwt
+ * @author edgebal
+ */
+
+namespace Minds\Common;
+
+use Exception;
+use Lcobucci\JWT\Builder;
+use Lcobucci\JWT\Claim;
+use Lcobucci\JWT\Parser;
+use Lcobucci\JWT\Signer\Hmac\Sha256;
+
+class Jwt
+{
+    /** @var string */
+    protected $key;
+
+    /**
+     * @param string $key
+     * @return Jwt
+     */
+    public function setKey(string $key): Jwt
+    {
+        $this->key = $key;
+        return $this;
+    }
+
+    /**
+     * @param object|array $payload
+     * @param int|null $exp
+     * @param int|null $nbf
+     * @return string
+     * @throws Exception
+     */
+    public function encode($payload, $exp = null, $nbf = null): string
+    {
+        if (!$this->key) {
+            throw new Exception('Invalid JWT key');
+        }
+
+        $builder = new Builder();
+
+        foreach ($payload as $key => $value) {
+            $builder->set($key, $value);
+        }
+
+        if ($exp !== null) {
+            $builder->setExpiration($exp);
+        }
+
+        if ($nbf !== null) {
+            $builder->setNotBefore($nbf);
+        }
+
+        $builder->sign(new Sha256(), $this->key);
+
+        return (string) $builder->getToken();
+    }
+
+    /**
+     * @param string $jwt
+     * @return array
+     * @throws Exception
+     */
+    public function decode($jwt): array
+    {
+        if (!$this->key) {
+            throw new Exception('Invalid JWT key');
+        }
+
+        $token = (new Parser())->parse($jwt);
+
+        if (!$token->verify(new Sha256(), $this->key)) {
+            throw new Exception('Invalid JWT');
+        }
+
+        return array_map(function (Claim $claim) {
+            return $claim->getValue();
+        }, $token->getClaims());
+    }
+
+    /**
+     * @return string
+     */
+    public function randomString(): string
+    {
+        $bytes = openssl_random_pseudo_bytes(128);
+        return hash('sha512', $bytes);
+    }
+}

Common/Repository/Response.php

@@ -328,4 +328,13 @@ class Response implements \Iterator, \ArrayAccess, \Countable, \JsonSerializable
     {
         return array_reduce($this->data, $callback, $initialValue);
     }
+
+    /**
+     * Returns the first element of the Response, or null if empty
+     * @return mixed|null
+     */
+    public function first()
+    {
+        return $this->data[0] ?? null;
+    }
 }

Controllers/Cli/Notification.php

+<?php
+
+namespace Minds\Controllers\Cli;
+
+use Minds\Cli;
+use Minds\Core\Events\Dispatcher;
+use Minds\Interfaces;
+
+class Notification extends Cli\Controller implements Interfaces\CliControllerInterface
+{
+    public function help($command = null)
+    {
+        switch ($command) {
+            case 'send':
+                $this->out('Send a notification');
+                $this->out('--namespace=<type> Notification namespace');
+                $this->out('--to=<user guid> User to send notification to');
+                $this->out('--from=<entity guid> Entity notification is from (defaults to system user)');
+                $this->out('--view=<view> Notification view');
+                $this->out('--params=<params> JSON payload data');
+            // no break
+            default:
+                $this->out('Syntax usage: cli notification <cmd>');
+                $this->displayCommandHelp();
+        }
+    }
+
+    public function exec()
+    {
+        $this->help();
+    }
+
+    public function send()
+    {
+        $namespace = $this->getOpt('namespace');
+        $to = $this->getOpt('to');
+        $from = $this->getOpt('from') ?? \Minds\Core\Notification\Notification::SYSTEM_ENTITY;
+        $view = $this->getOpt('view');
+        $params = $this->getOpt('params') ?? '{}';
+
+        if (is_null($namespace)) {
+            $this->out('namespace must be set');
+            return;
+        }
+
+        if (is_null($to)) {
+            $this->out('to must be set');
+            return;
+        }
+
+        if (is_null($view)) {
+            $this->out('view must be set');
+            return;
+        }
+
+        $paramsDecoded = json_decode($params, true);
+        if (is_null($paramsDecoded)) {
+            $this->out('Params is not valid JSON');
+            return;
+        }
+
+        $eventParams = [
+            'to' => [$to],
+            'from' => $from,
+            'notification_view' => $view,
+            'params' => $paramsDecoded
+        ];
+
+        $sent = Dispatcher::trigger('notification', $namespace, $eventParams);
+
+        if ($sent) {
+            $this->out('Notification sent');
+        } else {
+            $this->out('Error sending notification - is from guid valid?');
+        }
+    }
+}

Controllers/api/v1/admin/reports.php

@@ -31,7 +31,7 @@ class reports implements Interfaces\Api, Interfaces\ApiAdminPam
         /** @var Core\Reports\Repository $repository */
         $repository = Di::_()->get('Reports\Repository');
 
-        $reports = $repository->getAll([
+        $reports = $repository->getList([
             'state' => $state,
             'limit' => $limit,
             'offset' => $offset

Controllers/api/v1/authenticate.php

@@ -16,6 +16,8 @@ use Minds\Entities;
 use Minds\Interfaces;
 use Minds\Api\Factory;
 use Minds\Exceptions\TwoFactorRequired;
+use Minds\Core\Queue;
+use Minds\Core\Subscriptions;
 
 class authenticate implements Interfaces\Api, Interfaces\ApiIgnorePam
 {
@@ -44,6 +46,7 @@ class authenticate implements Interfaces\Api, Interfaces\ApiIgnorePam
         }
 
         $user = new Entities\User(strtolower($_POST['username']));
+
         /** @var Core\Security\LoginAttempts $attempts */
         $attempts = Core\Di\Di::_()->get('Security\LoginAttempts');
 
@@ -117,7 +120,7 @@ class authenticate implements Interfaces\Api, Interfaces\ApiIgnorePam
     public function delete($pages)
     {
         $sessions = Di::_()->get('Sessions\Manager');
-        
+
         if (isset($pages[0]) && $pages[0] === 'all') {
             $sessions->destroy(true);
         } else {

Controllers/api/v1/blog.php

@@ -141,6 +141,7 @@ class blog implements Interfaces\Api
                         !$blog ||
                         Helpers\Flags::shouldFail($blog) ||
                         !Core\Security\ACL::_()->read($blog)
+                        || ($blog->getTimeCreated() > time() && !$blog->canEdit())
                     ) {
                         break;
                     }
@@ -245,13 +246,6 @@ class blog implements Interfaces\Api
             }
         }
 
-        if (!$blog->isPublished()) {
-            $blog->setAccessId(Access::UNLISTED);
-            $blog->setDraftAccessId($_POST['access_id']);
-        } elseif ($blog->getTimePublished() == '') {
-            $blog->setTimePublished(time());
-        }
-
         $blog->setLastSave(time());
 
         if (isset($_POST['wire_threshold'])) {
@@ -298,6 +292,31 @@ class blog implements Interfaces\Api
             }
         }
 
+        
+        if (isset($_POST['time_created'])) {
+            try {
+                $timeCreatedDelegate = new Core\Blogs\Delegates\TimeCreatedDelegate();
+
+                if ($editing) {
+                    $timeCreatedDelegate->onUpdate($blog, $_POST['time_created'], time());
+                } else {
+                    $timeCreatedDelegate->onAdd($blog, $_POST['time_created'], time());
+                }
+            } catch (\Exception $e) {
+                return Factory::response([
+                    'status' => 'error',
+                    'message' => $e->getMessage(),
+                ]);
+            }
+        }
+
+        if (!$blog->isPublished()) {
+            $blog->setAccessId(Access::UNLISTED);
+            $blog->setDraftAccessId($_POST['access_id']);
+        } elseif ($blog->getTimePublished() == '') {
+            $blog->setTimePublished($blog->getTimeCreated() ?: time());
+        }
+
         if (!$blog->canEdit()) {
             return Factory::response([
                 'status' => 'error',
@@ -326,14 +345,20 @@ class blog implements Interfaces\Api
         }
 
         if ($saved && is_uploaded_file($_FILES['file']['tmp_name'])) {
-
             /** @var Core\Media\Imagick\Manager $manager */
             $manager = Core\Di\Di::_()->get('Media\Imagick\Manager');
 
-            $manager->setImage($_FILES['file']['tmp_name'])
-                ->resize(2000, 1000);
+            try {
+                $manager->setImage($_FILES['file']['tmp_name'])
+                    ->resize(2000, 1000);
 
-            $header->write($blog, $manager->getJpeg(), isset($_POST['header_top']) ? (int) $_POST['header_top'] : 0);
+                $header->write($blog, $manager->getJpeg(), isset($_POST['header_top']) ? (int)$_POST['header_top'] : 0);
+            } catch (\ImagickException $e) {
+                return Factory::response([
+                    'status' => 'error',
+                    'message' => 'Invalid image file',
+                ]);
+            }
         }
 
         if ($saved) {

Controllers/api/v1/channel.php

@@ -13,6 +13,7 @@ use Minds\Interfaces;
 use Minds\Entities;
 use Minds\Api\Factory;
 use Minds\Common\ChannelMode;
+use Minds\Core\Di\Di;
 use ElggFile;
 
 class channel implements Interfaces\Api
@@ -46,6 +47,10 @@ class channel implements Interfaces\Api
             return Factory::response(['status'=>'error', 'message'=>'The user is banned']);
         }
 
+        Di::_()->get('Referrals\Cookie')
+            ->setEntity($user)
+            ->create();
+
         $user->fullExport = true; //get counts
         $user->exportCounts = true;
         $return = Factory::exportable([$user]);
@@ -87,6 +92,19 @@ class channel implements Interfaces\Api
         $block = Core\Security\ACL\Block::_();
         $response['channel']['blocked'] = $block->isBlocked($user);
 
+        if ($user->isPro()) {
+            /** @var Core\Pro\Manager $manager */
+            $manager = Core\Di\Di::_()->get('Pro\Manager');
+            $manager
+                ->setUser($user);
+
+            $proSettings = $manager->get();
+
+            if ($proSettings) {
+                $response['channel']['pro_settings'] = $proSettings;
+            }
+        }
+
         return Factory::response($response);
     }
 

Controllers/api/v1/media/thumbnails.php

@@ -13,6 +13,7 @@ use Minds\Helpers;
 use Minds\Entities;
 use Minds\Interfaces;
 use Minds\Api\Factory;
+use Minds\Core\Features\Manager as FeaturesManager;
 
 class thumbnails implements Interfaces\Api, Interfaces\ApiIgnorePam
 {
@@ -28,6 +29,17 @@ class thumbnails implements Interfaces\Api, Interfaces\ApiIgnorePam
             exit;
         }
 
+        $featuresManager = new FeaturesManager();
+
+        if ($featuresManager->has('cdn-jwt')) {
+            error_log("{$_SERVER['REQUEST_URI']} was hit, and should not have been");
+
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'This endpoint has been deprecated. Please use fs/v1/thumbnail',
+            ]);
+        }
+
         $guid = $pages[0];
 
         Core\Security\ACL::$ignore = true;

Controllers/api/v1/newsfeed.php

@@ -516,6 +516,18 @@ class newsfeed implements Interfaces\Api
 
                     $attachmentPaywallDelegate = new Core\Feeds\Activity\Delegates\AttachmentPaywallDelegate();
                     $attachmentPaywallDelegate->onUpdate($activity);
+
+                    if (isset($_POST['time_created']) && ($_POST['time_created'] != $activity->getTimeCreated())) {
+                        try {
+                            $timeCreatedDelegate = new Core\Feeds\Activity\Delegates\TimeCreatedDelegate();
+                            $timeCreatedDelegate->onUpdate($activity, $_POST['time_created'], time());
+                        } catch (\Exception $e) {
+                            return Factory::response([
+                                'status' => 'error',
+                                'message' => $e->getMessage(),
+                            ]);
+                        }
+                    }
                     
                     $save->setEntity($activity)
                         ->save();
@@ -529,6 +541,19 @@ class newsfeed implements Interfaces\Api
                 $activity->setMature(isset($_POST['mature']) && !!$_POST['mature']);
 
                 $user = Core\Session::getLoggedInUser();
+
+                if (isset($_POST['time_created'])) {
+                    try {
+                        $timeCreatedDelegate = new Core\Feeds\Activity\Delegates\TimeCreatedDelegate();
+                        $timeCreatedDelegate->onAdd($activity, $_POST['time_created'], time());
+                    } catch (\Exception $e) {
+                        return Factory::response([
+                            'status' => 'error',
+                            'message' => $e->getMessage(),
+                        ]);
+                    }
+                }
+
                 if ($user->isMature()) {
                     $activity->setMature(true);
                 }
@@ -599,6 +624,8 @@ class newsfeed implements Interfaces\Api
 
                     $attachment->setNsfw($activity->getNsfw());
 
+                    $attachment->set('time_created', $activity->getTimeCreated());
+
                     $save->setEntity($attachment)->save();
 
                     switch ($attachment->subtype) {

Controllers/api/v1/register.php

@@ -5,14 +5,14 @@
  * @version 1
  * @author Mark Harding
  */
+
 namespace Minds\Controllers\api\v1;
 
+use Minds\Api\Factory;
 use Minds\Core;
 use Minds\Core\Di\Di;
-use Minds\Entities;
+use Minds\Entities\User;
 use Minds\Interfaces;
-use Minds\Api\Factory;
-use Minds\Helpers;
 
 class register implements Interfaces\Api, Interfaces\ApiIgnorePam
 {
@@ -21,7 +21,7 @@ class register implements Interfaces\Api, Interfaces\ApiIgnorePam
      */
     public function get($pages)
     {
-        return Factory::response(['status'=>'error', 'message'=>'GET is not supported for this endpoint']);
+        return Factory::response(['status' => 'error', 'message' => 'GET is not supported for this endpoint']);
     }
 
     /**
@@ -37,11 +37,11 @@ class register implements Interfaces\Api, Interfaces\ApiIgnorePam
     public function post($pages)
     {
         if (!isset($_POST['username']) || !isset($_POST['password']) || !isset($_POST['username']) || !isset($_POST['email'])) {
-            return Factory::response(['status'=>'error']);
+            return Factory::response(['status' => 'error']);
         }
 
         if (!$_POST['username'] || !$_POST['password'] || !$_POST['username'] || !$_POST['email']) {
-            return Factory::response(['status'=>'error', 'message' => "Please fill out all the fields"]);
+            return Factory::response(['status' => 'error', 'message' => "Please fill out all the fields"]);
         }
 
         try {
@@ -67,14 +67,37 @@ class register implements Interfaces\Api, Interfaces\ApiIgnorePam
                 ]);
             }
 
+            if (!(isset($_POST['parentId']) || isset($_POST['previousUrl']) || isset($_SERVER['HTTP_APP_VERSION']))) {
+                return Factory::response(['status'=>'error', 'message' => "Please refresh your browser or update you app. We don't recognise your platform."]);
+            }
+
             $user = register_user($_POST['username'], $_POST['password'], $_POST['username'], $_POST['email'], false);
             $guid = $user->guid;
 
+            // Hacky, move to service soon!
+            $hasSignupTags = false;
             if (isset($_COOKIE['mexp'])) {
                 $manager = Core\Di\Di::_()->get('Experiments\Manager');
                 $bucket = $manager->getBucketForExperiment('Homepage200619');
                 $user->expHomepage200619 = $bucket->getId();
+            }
+
+            if (isset($_POST['parentId'])) {
+                $user->signupParentId = (string) $_POST['parentId'];
+                $hasSignupTags = true;
+            }
+            if (isset($_POST['previousUrl'])) {
+                $user->signupPreviousUrl = (string) $_POST['previousUrl'];
+                $hasSignupTags = true;
+            }
+            if (isset($_SERVER['HTTP_APP_VERSION'])) {
+                $user->signupParentId = 'mobile-native';
+                $hasSignupTags = true;
+            }
+            if ($hasSignupTags) {
                 $user->save();
+            } else {
+                return Factory::response(['status'=>'error', 'message' => "Please refresh your browser or update you app. We don't recognise your platform."]);
             }
 
             $params = [
@@ -96,11 +119,11 @@ class register implements Interfaces\Api, Interfaces\ApiIgnorePam
             $sessions->save(); // Save to db and cookie
 
             $response = [
-              'guid' => $guid,
-              'user' => $user->export()
+                'guid' => $guid,
+                'user' => $user->export(),
             ];
         } catch (\Exception $e) {
-            $response = ['status'=>'error', 'message'=>$e->getMessage()];
+            $response = ['status' => 'error', 'message' => $e->getMessage()];
         }
         return Factory::response($response);
     }

Controllers/api/v1/settings.php

@@ -69,10 +69,6 @@ class settings implements Interfaces\Api
     {
         Factory::isLoggedIn();
 
-        if (!Core\Security\XSRF::validateRequest()) {
-            //return false;
-        }
-
         if (Core\Session::getLoggedInUser()->isAdmin() && isset($pages[0])) {
             $user = new entities\User($pages[0]);
         } else {

Controllers/api/v2/admin/pro.php

+<?php
+/**
+ * pro
+ *
+ * @author edgebal
+ */
+
+namespace Minds\Controllers\api\v2\admin;
+
+use Minds\Api\Factory;
+use Minds\Core\Pro\Manager;
+use Minds\Entities\User as UserEntity;
+use Minds\Interfaces;
+use Minds\Core\Di\Di;
+
+class pro implements Interfaces\Api, Interfaces\ApiAdminPam
+{
+    /**
+     * Equivalent to HTTP GET method
+     * @param array $pages
+     * @return mixed|null
+     */
+    public function get($pages)
+    {
+        return Factory::response([]);
+    }
+
+    /**
+     * Equivalent to HTTP POST method
+     * @param array $pages
+     * @return mixed|null
+     */
+    public function post($pages)
+    {
+        return Factory::response([]);
+    }
+
+    /**
+     * Equivalent to HTTP PUT method
+     * @param array $pages
+     * @return mixed|null
+     */
+    public function put($pages)
+    {
+        if (!($pages[0] ?? null)) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Emtpy target',
+            ]);
+        }
+
+        $target = new UserEntity($pages[0]);
+
+        if (!$target || !$target->guid) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Invalid target',
+            ]);
+        }
+
+        /** @var Manager $manager */
+        $manager = Di::_()->get('Pro\Manager');
+        $manager
+            ->setUser($target);
+
+        $success = $manager->enable(time() + (365 * 86400));
+
+        if (!$success) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Error disabling Pro',
+            ]);
+        }
+
+        return Factory::response([]);
+    }
+
+    /**
+     * Equivalent to HTTP DELETE method
+     * @param array $pages
+     * @return mixed|null
+     */
+    public function delete($pages)
+    {
+        if (!($pages[0] ?? null)) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Emtpy target',
+            ]);
+        }
+
+        $target = new UserEntity($pages[0]);
+
+        if (!$target || !$target->guid) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Invalid target',
+            ]);
+        }
+
+        /** @var Manager $manager */
+        $manager = Di::_()->get('Pro\Manager');
+        $manager
+            ->setUser($target);
+
+        $success = $manager->disable();
+
+        if (!$success) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Error disabling Pro',
+            ]);
+        }
+
+        return Factory::response([]);
+    }
+}

Controllers/api/v2/analytics/views.php

@@ -53,6 +53,7 @@ class views implements Interfaces\Api
                     $viewsManager->record(
                         (new Core\Analytics\Views\View())
                             ->setEntityUrn($boost->getEntity()->getUrn())
+                            ->setOwnerGuid((string) $boost->getEntity()->getOwnerGuid())
                             ->setClientMeta($_POST['client_meta'] ?? [])
                     );
                 } catch (\Exception $e) {
@@ -105,12 +106,17 @@ class views implements Interfaces\Api
                     $viewsManager->record(
                         (new Core\Analytics\Views\View())
                             ->setEntityUrn($activity->getUrn())
+                            ->setOwnerGuid((string) $activity->getOwnerGuid())
                             ->setClientMeta($_POST['client_meta'] ?? [])
                     );
                 } catch (\Exception $e) {
                     error_log($e);
                 }
 
+                Di::_()->get('Referrals\Cookie')
+                    ->setEntity($activity)
+                    ->create();
+
                 break;
         }
 

Controllers/api/v2/feeds/scheduled.php

+<?php
+
+namespace Minds\Controllers\api\v2\feeds;
+
+use Minds\Api\Exportable;
+use Minds\Api\Factory;
+use Minds\Core;
+use Minds\Core\Di\Di;
+use Minds\Entities\Factory as EntitiesFactory;
+use Minds\Entities\User;
+use Minds\Interfaces;
+
+class scheduled implements Interfaces\Api
+{
+    /**
+      * Equivalent to HTTP GET method
+      * @param array $pages
+      * @return mixed|null
+      * @throws \Exception
+      */
+    public function get($pages)
+    {
+        /** @var User $currentUser */
+        $currentUser = Core\Session::getLoggedinUser();
+
+        //
+
+        $container_guid = $pages[0] ?? null;
+
+        if (!$container_guid) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Invalid container',
+            ]);
+        }
+
+        $container = EntitiesFactory::build($container_guid);
+
+        if (!$container || !Core\Security\ACL::_()->read($container, $currentUser)) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Forbidden',
+            ]);
+        }
+
+        $type = '';
+        switch ($pages[1]) {
+            case 'activities':
+                $type = 'activity';
+                break;
+            case 'images':
+                $type = 'object:image';
+                break;
+            case 'videos':
+                $type = 'object:video';
+                break;
+            case 'blogs':
+                $type = 'object:blog';
+                break;
+            case 'count':
+                $type = 'activity';
+
+                /** @var Core\Feeds\Scheduled\Manager $manager */
+                $manager = new Core\Feeds\Scheduled\Manager;
+
+                return Factory::response([
+                    'status' => 'success',
+                    'count' => $manager->getScheduledCount(['container_guid' => $container_guid, 'type' => $type])
+                ]);
+            default:
+                return Factory::response([
+                    'status' => 'error',
+                    'message' => 'Invalid type',
+                ]);
+            
+        }
+
+        $hardLimit = 5000;
+        $offset = 0;
+
+        if (isset($_GET['offset'])) {
+            $offset = intval($_GET['offset']);
+        }
+
+        $limit = 12;
+
+        if (isset($_GET['limit'])) {
+            $limit = abs(intval($_GET['limit']));
+        }
+
+        if (($offset + $limit) > $hardLimit) {
+            $limit = $hardLimit - $offset;
+        }
+
+        if ($limit <= 0) {
+            return Factory::response([
+                'status' => 'success',
+                'entities' => [],
+                'load-next' => $hardLimit,
+                'overflow' => true,
+            ]);
+        }
+
+        //
+
+        $sync = (bool) ($_GET['sync'] ?? false);
+
+        $fromTimestamp = $_GET['from_timestamp'] ?? 0;
+
+        $asActivities = (bool) ($_GET['as_activities'] ?? true);
+
+        $forcePublic = (bool) ($_GET['force_public'] ?? false);
+
+        $query = null;
+
+        if (isset($_GET['query'])) {
+            $query = $_GET['query'];
+        }
+
+        $custom_type = isset($_GET['custom_type']) && $_GET['custom_type'] ? [$_GET['custom_type']] : null;
+
+        /** @var Core\Feeds\Top\Manager $manager */
+        $manager = Di::_()->get('Feeds\Top\Manager');
+
+        /** @var Core\Feeds\Top\Entities $entities */
+        $entities = new Core\Feeds\Top\Entities();
+        $entities->setActor($currentUser);
+
+        $isOwner = false;
+
+        if ($currentUser) {
+            $entities->setActor($currentUser);
+            $isOwner = $currentUser->guid == $container_guid;
+        }
+
+        $opts = [
+            'cache_key' => $currentUser ? $currentUser->guid : null,
+            'container_guid' => $container_guid,
+            'access_id' => $isOwner && !$forcePublic ? [0, 1, 2, $container_guid] : [2, $container_guid],
+            'custom_type' => $custom_type,
+            'limit' => $limit,
+            'type' => $type,
+            'algorithm' => 'latest',
+            'period' => '1y',
+            'sync' => $sync,
+            'from_timestamp' => $fromTimestamp,
+            'query' => $query,
+            'single_owner_threshold' => 0,
+            'pinned_guids' => $type === 'activity' ? array_reverse($container->getPinnedPosts()) : null,
+            'time_created_upper' => false,
+        ];
+
+        if (isset($_GET['nsfw'])) {
+            $nsfw = $_GET['nsfw'] ?? '';
+            $opts['nsfw'] = explode(',', $nsfw);
+        }
+        
+        try {
+            $result = $manager->getList($opts);
+
+            if (!$sync) {
+                // Remove all unlisted content, if ES document is not in sync, it'll
+                // also remove pending activities
+                $result = $result->filter([$entities, 'filter']);
+
+                if ($asActivities) {
+                    // Cast to ephemeral Activity entities, if another type
+                    $result = $result->map([$entities, 'cast']);
+                }
+            }
+
+            return Factory::response([
+                'status' => 'success',
+                'entities' => Exportable::_($result),
+                'load-next' => $result->getPagingToken(),
+            ]);
+        } catch (\Exception $e) {
+            error_log($e);
+            return Factory::response(['status' => 'error', 'message' => $e->getMessage()]);
+        }
+    }
+
+    public function post($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function put($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function delete($pages)
+    {
+        return Factory::response([]);
+    }
+}

Controllers/api/v2/payments/stripe/connect.php

@@ -20,7 +20,21 @@ class connect implements Interfaces\Api
 
         $connectManager = new Stripe\Connect\Manager();
 
-        $account = $connectManager->getByUser($user);
+        try {
+            $account = $connectManager->getByUser($user);
+        } catch (\Exception $e) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'There was an error returning the usd account',
+            ]);
+        }
+
+        if (!$account) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'Account not found',
+            ]);
+        }
 
         return Factory::response([
             'account' => $account->export(),

Controllers/api/v2/payments/stripe/connect/photoid.php

+<?php
+/**
+ *
+ */
+namespace Minds\Controllers\api\v2\payments\stripe\connect;
+
+use Minds\Api\Factory;
+use Minds\Common\Cookie;
+use Minds\Core\Di\Di;
+use Minds\Core\Config;
+use Minds\Core\Session;
+use Minds\Interfaces;
+use Minds\Core\Payments\Stripe;
+
+class photoid implements Interfaces\Api
+{
+    public function get($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function post($pages)
+    {
+        $user = Session::getLoggedInUser();
+        $connectManager = new Stripe\Connect\Manager();
+        $account = $connectManager->getByUser($user);
+        $fp = fopen($_FILES['file']['tmp_name'], 'r');
+        $connectManager->addPhotoId($account, $fp);
+        return Factory::response([ 'account_id' => $account->getId() ]);
+    }
+
+    public function put($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function delete($pages)
+    {
+        return Factory::response([]);
+    }
+}

Controllers/api/v2/payments/stripe/connect/terms.php

+<?php
+/**
+ *
+ */
+namespace Minds\Controllers\api\v2\payments\stripe\connect;
+
+use Minds\Api\Factory;
+use Minds\Common\Cookie;
+use Minds\Core\Di\Di;
+use Minds\Core\Config;
+use Minds\Core\Session;
+use Minds\Interfaces;
+use Minds\Core\Payments\Stripe;
+
+class terms implements Interfaces\Api
+{
+    public function get($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function post($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function put($pages)
+    {
+        $user = Session::getLoggedInUser();
+        $connectManager = new Stripe\Connect\Manager();
+        $account = $connectManager->getByUser($user);
+        $account->setIp($_SERVER['HTTP_X_FORWARDED_FOR']);
+        $connectManager->acceptTos($account);
+        return Factory::response([]);
+    }
+
+    public function delete($pages)
+    {
+        return Factory::response([]);
+    }
+}

Controllers/api/v2/payments/stripe/transactions.php

+<?php
+/**
+ *
+ */
+namespace Minds\Controllers\api\v2\payments\stripe;
+
+use Minds\Api\Factory;
+use Minds\Common\Cookie;
+use Minds\Core\Di\Di;
+use Minds\Core\Config;
+use Minds\Core\Session;
+use Minds\Interfaces;
+use Minds\Core\Payments\Stripe;
+
+class transactions implements Interfaces\Api
+{
+    public function get($pages)
+    {
+        $user = Session::getLoggedInUser();
+
+        $connectManager = new Stripe\Connect\Manager();
+
+        try {
+            $account = $connectManager->getByUser($user);
+        } catch (\Exception $e) {
+            return Factory::response([
+                'status' => 'error',
+                'message' => 'There was an error returning the usd account',
+            ]);
+        }
+ 
+        $transactionsManger = new Stripe\Transactions\Manager();
+        $transactions = $transactionsManger->getByAccount($account);
+
+        return Factory::response([
+            'transactions' => Factory::exportable($transactions),
+        ]);
+    }
+
+    public function post($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function put($pages)
+    {
+        return Factory::response([]);
+    }
+
+    public function delete($pages)
+    {
+        return Factory::response([]);
+    }
+}

Controllers/api/v2/permissions/comments.php

@@ -8,6 +8,7 @@ use Minds\Interfaces;
 use Minds\Core\Entities\Actions\Save;
 use Minds\Core\Session;
 use Minds\Core\Permissions\Permissions;
+use Minds\Core\Permissions\Entities\EntityPermissions;
 
 class comments implements Interfaces\Api
 {