From 8b166633c97107867bbe8f5be4d5c78d245e0293 Mon Sep 17 00:00:00 2001
From: Thomas Sileo <t@a4.io>
Date: Sun, 3 Jun 2018 12:15:30 +0200
Subject: [PATCH] make the boost/unboost actions use the new user API

---
 templates/utils.html | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/templates/utils.html b/templates/utils.html
index a8255d9..33dc7e1 100644
--- a/templates/utils.html
+++ b/templates/utils.html
@@ -62,19 +62,32 @@
 <div class="bottom-bar">
 {% if perma %}<span class="perma-item">{{ item.activity.object.published | format_time }}</span> {% endif %}	
 <a class ="bar-item" href="{{ item.activity.object.url }}">permalink</a> 
+
 {% if item.meta.count_reply %}<a class ="bar-item" href="{{ item.activity.object.url }}">{{ item.meta.count_reply }} replies</a>{% endif %}
 {% if item.meta.count_boost %}<a class ="bar-item" href="{{ item.activity.object.url }}">{{ item.meta.count_boost }} boosts</a>{% endif %}
 {% if item.meta.count_like %}<a class ="bar-item" href="{{ item.activity.object.url }}">{{ item.meta.count_like }} likes</a>{% endif %}
+
 {% if ui %}
+
 {% set aid = item.activity.object.id | quote_plus %}
 <a class="bar-item" href="/new?reply={{ aid }}">reply</a>
 
 {% set redir = request.path + "#activity-" + item['_id'].__str__() %}
 
 {% if item.meta.boosted %}
-<a class="bar-item" href="/ui/undo?id={{ item.meta.boosted | quote_plus }}&redirect={{redir | quote_plus }}">unboost</a>
+<form action="/api/undo" class="action-form"  method="POST">
+<input type="hidden" name="redirect" value="{{ redir }}">
+<input type="hidden" name="id" value="{{ item.meta.boosted }}">
+<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+<button type="submit" class="bar-item">unboost</button>
+</form>
 {% else %}
-<a class="bar-item" href="/ui/boost?id={{ aid }}&redirect={{ redir | quote_plus }}">boost</a>
+<form action="/api/boost" class="action-form"  method="POST">
+<input type="hidden" name="redirect" value="{{ redir }}">
+<input type="hidden" name="id" value="{{ item.activity.object.id }}">
+<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+<button type="submit" class="bar-item">boost</button>
+</form>
 {% endif %}
 
 {% if item.meta.liked %}