pixelfed/app/Http/Controllers/CollectionController.php
2024-05-22 02:21:07 -06:00

344 lines
11 KiB
PHP

<?php
namespace App\Http\Controllers;
use App\Collection;
use App\CollectionItem;
use App\Services\AccountService;
use App\Services\CollectionService;
use App\Services\FollowerService;
use App\Services\StatusService;
use App\Status;
use Auth;
use Illuminate\Http\Request;
class CollectionController extends Controller
{
public function create(Request $request)
{
abort_if(! Auth::check(), 403);
$profile = Auth::user()->profile;
$collection = Collection::firstOrCreate([
'profile_id' => $profile->id,
'published_at' => null,
]);
$collection->visibility = 'draft';
$collection->save();
return view('collection.create', compact('collection'));
}
public function show(Request $request, int $id)
{
$user = $request->user();
$collection = CollectionService::getCollection($id);
abort_if(! $collection, 404);
if ($collection['published_at'] == null || $collection['visibility'] != 'public') {
abort_if(! $user, 404);
if ($user->profile_id != $collection['pid']) {
if (! $user->is_admin) {
abort_if($collection['visibility'] != 'private', 404);
abort_if(! FollowerService::follows($user->profile_id, $collection['pid']), 404);
}
}
}
return view('collection.show', compact('collection'));
}
public function index(Request $request)
{
abort_if(! Auth::check(), 403);
return $request->all();
}
public function store(Request $request, $id)
{
abort_if(! $request->user(), 403);
$this->validate($request, [
'title' => 'nullable|max:50',
'description' => 'nullable|max:500',
'visibility' => 'nullable|string|in:public,private,draft',
]);
$pid = $request->user()->profile_id;
$collection = Collection::whereProfileId($pid)->findOrFail($id);
$collection->title = strip_tags($request->input('title'));
$collection->description = strip_tags($request->input('description'));
$collection->visibility = $request->input('visibility');
$collection->save();
CollectionService::deleteCollection($id);
return CollectionService::setCollection($collection->id, $collection);
}
public function publish(Request $request, int $id)
{
abort_if(! $request->user(), 403);
$this->validate($request, [
'title' => 'nullable|max:50',
'description' => 'nullable|max:500',
'visibility' => 'required|alpha|in:public,private,draft',
]);
$profile = Auth::user()->profile;
$collection = Collection::whereProfileId($profile->id)->findOrFail($id);
if ($collection->items()->count() == 0) {
abort(404);
}
$collection->title = strip_tags($request->input('title'));
$collection->description = strip_tags($request->input('description'));
$collection->visibility = $request->input('visibility');
$collection->published_at = now();
$collection->save();
return CollectionService::setCollection($collection->id, $collection);
}
public function delete(Request $request, int $id)
{
abort_if(! $request->user(), 403);
$user = $request->user();
$collection = Collection::whereProfileId($user->profile_id)->findOrFail($id);
$collection->items()->delete();
$collection->delete();
CollectionService::deleteCollection($id);
if ($request->wantsJson()) {
return 200;
}
return redirect('/');
}
public function storeId(Request $request)
{
abort_if(! $request->user(), 403);
$this->validate($request, [
'collection_id' => 'required|int|min:1|exists:collections,id',
'post_id' => 'required|int|min:1',
]);
$profileId = $request->user()->profile_id;
$collectionId = $request->input('collection_id');
$postId = $request->input('post_id');
$collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
$count = $collection->items()->count();
if ($count) {
CollectionItem::whereCollectionId($collection->id)
->get()
->filter(function ($col) {
return StatusService::get($col->object_id, false) == null;
})
->each(function ($col) use ($collectionId) {
CollectionService::removeItem($collectionId, $col->object_id);
$col->delete();
});
}
$max = config('pixelfed.max_collection_length');
if ($count >= $max) {
abort(400, 'You can only add '.$max.' posts per collection');
}
$status = Status::whereIn('scope', ['public', 'unlisted'])
->whereProfileId($profileId)
->whereIn('type', ['photo', 'photo:album', 'video'])
->findOrFail($postId);
$item = CollectionItem::firstOrCreate([
'collection_id' => $collection->id,
'object_type' => 'App\Status',
'object_id' => $status->id,
], [
'order' => $count,
]);
CollectionService::deleteCollection($collection->id);
$collection->updated_at = now();
$collection->save();
CollectionService::setCollection($collection->id, $collection);
return StatusService::get($status->id, false);
}
public function getCollection(Request $request, $id)
{
$user = $request->user();
$collection = CollectionService::getCollection($id);
if (! $collection) {
return response()->json([], 404);
}
if ($collection['published_at'] == null || $collection['visibility'] != 'public') {
abort_unless($user, 404);
if ($user->profile_id != $collection['pid']) {
if (! $user->is_admin) {
abort_if($collection['visibility'] != 'private', 404);
abort_if(! FollowerService::follows($user->profile_id, $collection['pid']), 404);
}
}
}
return $collection;
}
public function getItems(Request $request, int $id)
{
$user = $request->user();
$collection = CollectionService::getCollection($id);
if (! $collection) {
return response()->json([], 404);
}
if ($collection['published_at'] == null || $collection['visibility'] != 'public') {
abort_unless($user, 404);
if ($user->profile_id != $collection['pid']) {
if (! $user->is_admin) {
abort_if($collection['visibility'] != 'private', 404);
abort_if(! FollowerService::follows($user->profile_id, $collection['pid']), 404);
}
}
}
$page = $request->input('page') ?? 1;
$start = $page == 1 ? 0 : ($page * 10 - 10);
$end = $start + 10;
$items = CollectionService::getItems($id, $start, $end);
return collect($items)
->map(function ($id) {
return StatusService::get($id, false);
})
->filter(function ($item) {
return $item && ($item['visibility'] == 'public' || $item['visibility'] == 'unlisted') && isset($item['account'], $item['media_attachments']);
})
->values();
}
public function getUserCollections(Request $request, int $id)
{
$user = $request->user();
$pid = $user ? $user->profile_id : null;
$follows = false;
$visibility = ['public'];
$profile = AccountService::get($id, true);
if (! $profile || ! isset($profile['id'])) {
return response()->json([], 404);
}
if ($pid) {
$follows = FollowerService::follows($pid, $profile['id']);
}
if ($profile['locked']) {
abort_if(! $pid, 404);
if (! $user->is_admin) {
abort_if($profile['id'] != $pid && $follows == false, 404);
}
}
$owner = $pid ? $pid == $profile['id'] : false;
if ($follows) {
$visibility = ['public', 'private'];
}
if ($pid && $pid == $profile['id']) {
$visibility = ['public', 'private', 'draft'];
}
return Collection::whereProfileId($profile['id'])
->whereIn('visibility', $visibility)
->when(! $owner, function ($q, $owner) {
return $q->whereNotNull('published_at');
})
->orderByDesc('id')
->paginate(9)
->map(function ($collection) {
return CollectionService::getCollection($collection->id);
});
}
public function deleteId(Request $request)
{
abort_if(! $request->user(), 403);
$this->validate($request, [
'collection_id' => 'required|int|min:1|exists:collections,id',
'post_id' => 'required|int|min:1',
]);
$profileId = $request->user()->profile_id;
$collectionId = $request->input('collection_id');
$postId = $request->input('post_id');
$collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
$count = $collection->items()->count();
if ($count == 1) {
abort(400, 'You cannot delete the only post of a collection!');
}
$status = Status::whereIn('scope', ['public', 'unlisted'])
->whereIn('type', ['photo', 'photo:album', 'video'])
->findOrFail($postId);
$item = CollectionItem::whereCollectionId($collection->id)
->whereObjectType('App\Status')
->whereObjectId($status->id)
->firstOrFail();
$item->delete();
CollectionItem::whereCollectionId($collection->id)
->orderBy('created_at')
->get()
->each(function ($item, $index) {
$item->order = $index;
$item->save();
});
$collection->updated_at = now();
$collection->save();
CollectionService::deleteCollection($collection->id);
return 200;
}
public function getSelfCollections(Request $request)
{
abort_if(! $request->user(), 404);
$user = $request->user();
$pid = $user->profile_id;
$profile = AccountService::get($pid, true);
if (! $profile || ! isset($profile['id'])) {
return response()->json([], 404);
}
return Collection::whereProfileId($pid)
->orderByDesc('id')
->paginate(9)
->map(function ($collection) {
$c = CollectionService::getCollection($collection->id);
$c['items'] = collect(CollectionService::getItems($collection->id))
->map(function ($id) {
return StatusService::get($id, false);
})->filter()->values();
return $c;
})
->filter()
->values();
}
}