Star a drop (refs #280) c419455a82dd

- **Star a drop (#280):** a signed-in visitor stars a drop, or takes the star back, from its page, which shows how many it has.

    /// Its stars, and whether the viewer gave one (#280).

    stars: i64,

    starred: bool,

    signed_in: bool,

    let stars = db::repos::counts(&app.db, row.id).await.map(|(s, _)| s).unwrap_or(0);

    let starred = match viewer.account() {

        Some(a) => db::repos::starred(&app.db, a.id, row.id).await.unwrap_or(false),

        None => false,

    };

        stars,

        starred,

        signed_in: viewer.account().is_some(),

}

/// `POST /{owner}/drops/{id}/star` (#280): star it, or take the star back.

pub async fn star(

    State(app): State<Shared>,

    viewer: Viewer,

    Path((owner, id)): Path<(String, String)>,

    Form(f): Form<DeleteForm>,

) -> Result<Response, Error> {

    let shell = Shell::new(&app, &format!("/{owner}/drops/{id}"), &viewer);

    let me = require(&viewer, &shell)?;

    csrf(&viewer, &f.csrf_token, &shell)?;

    let row = lookup(&app, &shell, &viewer, &owner, &id).await?;

    db::repos::toggle_star(&app.db, me.account.id, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))?;

    Ok(Redirect::to(&drops::url_of(&row)).into_response())

        .route("/{owner}/drops/{id}/star", post(drops::star))

    // Stars: one per account, taken back by a second press.

    let page = get(app, &source, Some(&andy)).await.body;

    assert!(page.contains("☆ STAR 0"), "{page}");

    let star = |cookie: String| {

        let (app, source) = (app.clone(), source.clone());

        async move {

            let csrf = csrf_of(&get(&app, &source, Some(&cookie)).await.body);

            let r = post(&app, &format!("{source}/star"), Some(&cookie), &format!("_csrf={csrf}")).await;

            assert_eq!(r.status, StatusCode::SEE_OTHER, "{}", r.body);

        }

    };

    star(andy.clone()).await;

    star(carol.clone()).await;

    assert!(get(app, &source, Some(&andy)).await.body.contains("★ STARRED 2"));

    star(andy.clone()).await;

    assert!(get(app, &source, Some(&andy)).await.body.contains("☆ STAR 1"));

    assert!(get(app, &source, None).await.body.contains("1 star"), "the signed out see the count");

- **Stars** (#280): a signed-in visitor stars a drop, or takes the star back, from its page (`POST /{owner}/drops/{id}/star`, the repositories' `stars` table); the page shows the count, which never joins a list of starred repositories.

    <p class="small mute">A drop by <a href="/{{ repo.owner }}">{{ repo.owner }}</a> · {{ files.len() }} file{% if files.len() != 1 %}s{% endif %} · created <time title="{{ created_ms|when_i }}">{{ created_ms|ago_i }}</time> · updated <time title="{{ updated_ms|when_i }}">{{ updated_ms|ago_i }}</time> · <a href="{{ repo.url }}/changes/{{ repo.default_bookmark }}">history</a>{% if !signed_in && stars > 0 %} · {{ stars }} star{% if stars != 1 %}s{% endif %}{% endif %}{% if let Some(f) = forked_from %} · forked from <a href="{{ f }}">{{ f }}</a>{% endif %}</p>

  {% if signed_in || can_edit || can_delete || can_fork %}<div class="drop-actions">{% if signed_in %}<form class="inline" method="post" action="{{ repo.url }}/star"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button type="submit" title="{% if starred %}Take your star back{% else %}Star this drop{% endif %}" aria-pressed="{% if starred %}true{% else %}false{% endif %}">{% if starred %}★ STARRED{% else %}☆ STAR{% endif %} {{ stars }}</button></form>{% endif %}{% if can_fork %}<form class="inline" method="post" action="{{ repo.url }}/fork"><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button type="submit" title="A copy of this drop, history and all, as a drop of yours">FORK</button></form>{% endif %}{% if can_edit %}<a class="go" href="{{ repo.url }}/edit">EDIT</a>{% endif %}{% if can_delete %}<form class="inline" method="post" action="{{ repo.url }}/delete" data-confirm="Delete this drop and its history? Its address stops working."><input type="hidden" name="_csrf" value="{{ shell.csrf }}"><button type="submit" class="danger-btn">DELETE</button></form>{% endif %}</div>{% endif %}