| 1 | |
|
| 2 | |
|
| 3 | |
|
| 4 | |
|
| 5 | |
|
| 6 | |
|
| 7 | | use super::{caller, not_found, ApiError}; |
| 8 | | use crate::db; |
| 9 | | use crate::drops::{self, DropError, DropFile, NewFile}; |
| 10 | | use crate::Shared; |
| 11 | | use axum::extract::{Path, State}; |
| 12 | | use axum::http::{HeaderMap, StatusCode}; |
| 13 | | use axum::Json; |
| 14 | | use hub_api::{Drop, DropEdit, NewDrop}; |
| 15 | |
|
| 16 | | impl From<DropError> for ApiError { |
| 17 | 1× | fn from(e: DropError) -> ApiError { |
| 18 | 1× | match e { |
| 19 | 1× | DropError::Bad(m) => ApiError(StatusCode::UNPROCESSABLE_ENTITY, m), |
| 20 | 0× | DropError::Repo(e) => e.into(), |
| 21 | 0× | DropError::Db(e) => e.into(), |
| 22 | | } |
| 23 | 1× | } |
| 24 | | } |
| 25 | |
|
| 26 | |
|
| 27 | 11× | fn shape(app: &Shared, row: &db::repos::RepoRow, files: &[DropFile], content: bool) -> Drop { |
| 28 | 11× | let base = app.config.base_url(); |
| 29 | 11× | let url = drops::url_of(row); |
| 30 | | Drop { |
| 31 | 11× | id: drops::id_of(row).to_string(), |
| 32 | 11× | owner: row.owner.clone(), |
| 33 | 11× | title: row.title.clone(), |
| 34 | 11× | description: row.description.clone(), |
| 35 | 11× | visibility: drops::visibility_label(row).to_string(), |
| 36 | 11× | url: format!("{base}{url}"), |
| 37 | 11× | clone_url: format!("{base}{url}"), |
| 38 | 11× | created_ms: row.created_ms, |
| 39 | 11× | updated_ms: row.updated_ms, |
| 40 | 11× | files: files |
| 41 | 11× | .iter() |
| 42 | 11× | .map(|f| hub_api::DropFile { |
| 43 | 19× | name: f.path.clone(), |
| 44 | 19× | size: f.size, |
| 45 | 19× | content: if content { f.text.clone() } else { None }, |
| 46 | 19× | raw_url: format!("{base}{url}/raw/{}/{}", row.default_bookmark, f.path), |
| 47 | 19× | }) |
| 48 | 11× | .collect(), |
| 49 | | } |
| 50 | 11× | } |
| 51 | |
|
| 52 | 5× | async fn listed(app: &Shared, rows: Vec<db::repos::RepoRow>) -> Result<Vec<Drop>, ApiError> { |
| 53 | 5× | let mut out = Vec::with_capacity(rows.len()); |
| 54 | 5× | for row in rows { |
| 55 | 5× | let files = drops::files(app, &row, "").await.map(|(_, f)| f).unwrap_or_default(); |
| 56 | 5× | out.push(shape(app, &row, &files, false)); |
| 57 | | } |
| 58 | 5× | Ok(out) |
| 59 | 5× | } |
| 60 | |
|
| 61 | |
|
| 62 | 2× | pub(super) async fn mine(State(app): State<Shared>, headers: HeaderMap) -> Result<Json<Vec<Drop>>, ApiError> { |
| 63 | 2× | let c = caller(&app, &headers).await?; |
| 64 | 2× | let me = c.require("repo:read")?.clone(); |
| 65 | 2× | let rows = db::repos::drops_of(&app.db, &me.username).await?; |
| 66 | 2× | Ok(Json(listed(&app, rows).await?)) |
| 67 | 2× | } |
| 68 | |
|
| 69 | |
|
| 70 | |
|
| 71 | 3× | pub(super) async fn of_user(State(app): State<Shared>, headers: HeaderMap, Path(name): Path<String>) -> Result<Json<Vec<Drop>>, ApiError> { |
| 72 | 3× | let c = caller(&app, &headers).await?; |
| 73 | 3× | let account = db::accounts::account_by_name(&app.db, &name).await?.ok_or_else(|| not_found("no such user"))?; |
| 74 | 3× | let rows: Vec<_> = |
| 75 | 5× | db::repos::drops_of(&app.db, &account.username).await?.into_iter().filter(|r| drops::listed_to(c.account.as_ref(), r)).collect(); |
| 76 | 3× | Ok(Json(listed(&app, rows).await?)) |
| 77 | 3× | } |
| 78 | |
|
| 79 | |
|
| 80 | 2× | pub(super) async fn create( |
| 81 | 2× | State(app): State<Shared>, |
| 82 | 2× | headers: HeaderMap, |
| 83 | 2× | Json(body): Json<NewDrop>, |
| 84 | 2× | ) -> Result<(StatusCode, Json<Drop>), ApiError> { |
| 85 | 2× | let c = caller(&app, &headers).await?; |
| 86 | 2× | let me = c.require("repo:write")?.clone(); |
| 87 | 3× | let files: Vec<NewFile> = body.files.into_iter().map(|f| NewFile { name: f.name, content: f.content }).collect(); |
| 88 | 2× | let row = drops::create(&app, &me, &body.title, &body.description, body.secret, &files).await?; |
| 89 | 2× | let (_, files) = drops::files(&app, &row, "").await?; |
| 90 | 2× | Ok((StatusCode::CREATED, Json(shape(&app, &row, &files, true)))) |
| 91 | 2× | } |
| 92 | |
|
| 93 | 12× | async fn row_of(app: &Shared, id: &str) -> Result<db::repos::RepoRow, ApiError> { |
| 94 | 12× | if !crate::repos::names::valid_drop_id(id) { |
| 95 | 0× | return Err(not_found("no such drop")); |
| 96 | 12× | } |
| 97 | 12× | db::repos::drop_by_id(&app.db, id).await?.ok_or_else(|| not_found("no such drop")) |
| 98 | 12× | } |
| 99 | |
|
| 100 | |
|
| 101 | 5× | pub(super) async fn view(State(app): State<Shared>, headers: HeaderMap, Path(id): Path<String>) -> Result<Json<Drop>, ApiError> { |
| 102 | 5× | let c = caller(&app, &headers).await?; |
| 103 | 5× | let row = row_of(&app, &id).await?; |
| 104 | 3× | if c.account.as_ref().is_some_and(|a| a.blocked()) { |
| 105 | 0× | return Err(not_found("no such drop")); |
| 106 | 3× | } |
| 107 | 3× | let (_, files) = drops::files(&app, &row, "").await?; |
| 108 | 3× | Ok(Json(shape(&app, &row, &files, true))) |
| 109 | 5× | } |
| 110 | |
|
| 111 | |
|
| 112 | |
|
| 113 | 7× | async fn writable( |
| 114 | 7× | app: &Shared, |
| 115 | 7× | headers: &HeaderMap, |
| 116 | 7× | id: &str, |
| 117 | 7× | deleting: bool, |
| 118 | 7× | ) -> Result<(db::accounts::Account, db::repos::RepoRow), ApiError> { |
| 119 | 7× | let c = caller(app, headers).await?; |
| 120 | 7× | let me = c.require("repo:write")?.clone(); |
| 121 | 7× | let row = row_of(app, id).await?; |
| 122 | 7× | let may = if deleting { drops::may_delete(Some(&me), &row) } else { drops::may_edit(Some(&me), &row) }; |
| 123 | 7× | if !may { |
| 124 | 3× | return Err(super::forbidden(if deleting { |
| 125 | 1× | "only the drop's owner or a site administrator may delete it" |
| 126 | | } else { |
| 127 | 2× | "only the drop's owner may change it" |
| 128 | | })); |
| 129 | 4× | } |
| 130 | 4× | Ok((me, row)) |
| 131 | 7× | } |
| 132 | |
|
| 133 | |
|
| 134 | 4× | pub(super) async fn edit( |
| 135 | 4× | State(app): State<Shared>, |
| 136 | 4× | headers: HeaderMap, |
| 137 | 4× | Path(id): Path<String>, |
| 138 | 4× | Json(body): Json<DropEdit>, |
| 139 | 4× | ) -> Result<Json<Drop>, ApiError> { |
| 140 | 4× | let (me, row) = writable(&app, &headers, &id, false).await?; |
| 141 | 2× | let mut seen = Vec::new(); |
| 142 | 2× | let mut files = Vec::with_capacity(body.files.len()); |
| 143 | 2× | for f in body.files { |
| 144 | 2× | let name = drops::check_name(&f.name).map_err(|m| ApiError(StatusCode::UNPROCESSABLE_ENTITY, m))?; |
| 145 | 2× | if seen.contains(&name) { |
| 146 | 0× | return Err(ApiError(StatusCode::UNPROCESSABLE_ENTITY, format!("{name} is named twice."))); |
| 147 | 2× | } |
| 148 | 2× | seen.push(name.clone()); |
| 149 | 2× | files.push(oxy_core::repo::FileEdit { path: name, content: f.content.map(|c| c.replace("\r\n", "\n").into_bytes()) }); |
| 150 | | } |
| 151 | 2× | let update = drops::Update { |
| 152 | 2× | title: body.title.unwrap_or_else(|| row.title.clone()), |
| 153 | 2× | description: body.description.unwrap_or_else(|| row.description.clone()), |
| 154 | 2× | secret: body.secret.unwrap_or(row.visibility() != hub_api::Visibility::Public), |
| 155 | 2× | files, |
| 156 | 2× | message: body.message.unwrap_or_default(), |
| 157 | | }; |
| 158 | 2× | drops::update(&app, &me, &row, update).await?; |
| 159 | 1× | let row = db::repos::get_by_id(&app.db, row.id).await?.ok_or_else(|| not_found("no such drop"))?; |
| 160 | 1× | let (_, files) = drops::files(&app, &row, "").await?; |
| 161 | 1× | Ok(Json(shape(&app, &row, &files, true))) |
| 162 | 4× | } |
| 163 | |
|
| 164 | |
|
| 165 | 3× | pub(super) async fn delete(State(app): State<Shared>, headers: HeaderMap, Path(id): Path<String>) -> Result<StatusCode, ApiError> { |
| 166 | 3× | let (me, row) = writable(&app, &headers, &id, true).await?; |
| 167 | 2× | drops::delete(&app, &me, &row).await?; |
| 168 | 2× | Ok(StatusCode::NO_CONTENT) |
| 169 | 3× | } |