comfortable_media_surfer 3.0.0

data/app/controllers/application_controller.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+class ApplicationController < ActionController::Base
+  protect_from_forgery
+end

data/app/controllers/comfy/admin/base_controller.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::BaseController < ComfortableMediaSurfer.config.admin_base_controller.to_s.constantize
+  include Comfy::Paginate
+
+  # Authentication module must have `authenticate` method
+  include ComfortableMediaSurfer.config.admin_auth.to_s.constantize
+
+  # Authorization module must have `authorize` method
+  include ComfortableMediaSurfer.config.admin_authorization.to_s.constantize
+
+  helper Comfy::Admin::CmsHelper
+  helper Comfy::CmsHelper
+
+  protect_from_forgery with: :exception
+
+  before_action :authenticate
+
+  layout 'comfy/admin/cms'
+end

data/app/controllers/comfy/admin/cms/base_controller.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::BaseController < Comfy::Admin::BaseController
+  before_action :load_admin_site,
+                :set_locale,
+                :load_seeds,
+                except: :jump
+
+  layout :infer_layout
+
+  if ComfortableMediaSurfer.config.admin_cache_sweeper.present?
+    cache_sweeper(*ComfortableMediaSurfer.config.admin_cache_sweeper)
+  end
+
+  def jump
+    path = ComfortableMediaSurfer.config.admin_route_redirect
+    return redirect_to(path) unless path.blank?
+
+    load_admin_site
+    redirect_to comfy_admin_cms_site_pages_path(@site) if @site
+  end
+
+protected
+
+  def load_admin_site
+    id_param = params[:site_id] || session[:site_id]
+    if (@site = ::Comfy::Cms::Site.find_by(id: id_param) || ::Comfy::Cms::Site.first)
+      session[:site_id] = @site.id
+    else
+      I18n.locale = ComfortableMediaSurfer.config.admin_locale || I18n.default_locale
+      flash[:danger] = I18n.t('comfy.admin.cms.base.site_not_found')
+      redirect_to(new_comfy_admin_cms_site_path)
+    end
+  end
+
+  def set_locale
+    I18n.locale = ComfortableMediaSurfer.config.admin_locale || @site&.locale
+    true
+  end
+
+  def load_seeds
+    return unless ComfortableMediaSurfer.config.enable_seeds
+
+    controllers = %w[layouts pages snippets files].collect { |c| "comfy/admin/cms/#{c}" }
+    return unless controllers.member?(params[:controller]) && params[:action] == 'index'
+
+    ComfortableMediaSurfer::Seeds::Importer.new(@site.identifier).import!
+    flash.now[:warning] = I18n.t('comfy.admin.cms.base.seeds_enabled')
+  end
+
+  def infer_layout
+    false if params[:layout] == 'false'
+  end
+end

data/app/controllers/comfy/admin/cms/categories_controller.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::CategoriesController < Comfy::Admin::Cms::BaseController
+  before_action :load_category, only: %i[edit update destroy]
+  before_action :authorize
+
+  def edit
+    render
+  end
+
+  def create
+    @category = @site.categories.create!(category_params)
+  rescue ActiveRecord::RecordInvalid
+    head :ok
+  end
+
+  def update
+    @category.update!(category_params)
+  rescue ActiveRecord::RecordInvalid
+    head :ok
+  end
+
+  def destroy
+    @category.destroy
+  end
+
+protected
+
+  def load_category
+    @category = @site.categories.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    head :ok
+  end
+
+  def category_params
+    params.fetch(:category, {}).permit!
+  end
+end

data/app/controllers/comfy/admin/cms/files_controller.rb

@@ -0,0 +1,139 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::FilesController < Comfy::Admin::Cms::BaseController
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::File
+
+  include ActionView::Helpers::NumberHelper
+
+  before_action :build_file,  only: %i[new create]
+  before_action :load_file,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    files_scope = @site.files.with_attached_attachment
+
+    case params[:source]
+
+    # Integration with Redactor 1.0 Wysiwyg
+    when 'redactor'
+      file_scope  = files_scope.limit(100).order(:position)
+      file_hashes =
+        case params[:type]
+        when 'image'
+          file_scope.with_images.collect do |file|
+            { thumb: url_for(file.attachment.variant(combine_options: Comfy::Cms::File::VARIANT_SIZE[:redactor])),
+              image: url_for(file.attachment),
+              title: file.label }
+          end
+        else
+          file_scope.collect do |file|
+            { title: file.label,
+              name: file.attachment.filename,
+              link: url_for(file.attachment),
+              size: number_to_human_size(file.attachment.byte_size) }
+          end
+        end
+
+      render json: file_hashes
+
+    else
+      files_scope = files_scope
+        .includes(:categories)
+        .for_category(params[:categories])
+        .order('comfy_cms_files.position')
+      @files = comfy_paginate(files_scope, per_page: 50)
+    end
+  end
+
+  def new
+    render
+  end
+
+  def create
+    categories_scope = @site.categories.of_type('Comfy::Cms::File')
+
+    if params[:categories]
+      ids = categories_scope.where(label: params[:categories]).pluck(:id)
+      @file.category_ids = ids
+    end
+
+    # Automatically tagging upload if it's done through redactor
+    if params[:source] == 'redactor'
+      category = categories_scope.find_or_create_by(label: 'wysiwyg')
+      @file.category_ids = [category.id]
+    end
+
+    @file.save!
+
+    case params[:source]
+    when 'plupload'
+      render partial: 'file', object: @file
+    when 'redactor'
+      render json: {
+        filelink: url_for(@file.attachment),
+        filename: @file.attachment.filename
+      }
+    else
+      flash[:success] = I18n.t('comfy.admin.cms.files.created')
+      redirect_to action: :edit, id: @file
+    end
+  rescue ActiveRecord::RecordInvalid
+    case params[:source]
+    when 'plupload'
+      render body: @file.errors.full_messages.to_sentence, status: :unprocessable_entity
+    when 'redactor'
+      render body: nil, status: :unprocessable_entity
+    else
+      flash.now[:danger] = I18n.t('comfy.admin.cms.files.creation_failure')
+      render action: :new
+    end
+  end
+
+  def edit
+    render
+  end
+
+  def update
+    if @file.update(file_params)
+      flash[:success] = I18n.t('comfy.admin.cms.files.updated')
+      redirect_to action: :edit, id: @file
+    else
+      flash.now[:danger] = I18n.t('comfy.admin.cms.files.update_failure')
+      render action: :edit
+    end
+  end
+
+  def destroy
+    @file.destroy
+    respond_to do |format|
+      format.js
+      format.html do
+        flash[:success] = I18n.t('comfy.admin.cms.files.deleted')
+        redirect_to action: :index
+      end
+    end
+  end
+
+protected
+
+  def build_file
+    @file = @site.files.new(file_params)
+  end
+
+  def load_file
+    @file = @site.files.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.files.not_found')
+    redirect_to action: :index
+  end
+
+  def file_params
+    file = params[:file]
+    unless file.is_a?(Hash) || file.respond_to?(:to_unsafe_hash)
+      params[:file] = {}
+      params[:file][:file] = file
+    end
+    params.fetch(:file, {}).permit!
+  end
+end

data/app/controllers/comfy/admin/cms/layouts_controller.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::LayoutsController < Comfy::Admin::Cms::BaseController
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::Layout
+
+  before_action :build_layout,  only: %i[new create]
+  before_action :load_layout,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    return redirect_to action: :new if @site.layouts.count.zero?
+
+    @layouts = @site.layouts.roots.order(:position)
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @layout.save!
+    flash[:success] = I18n.t('comfy.admin.cms.layouts.created')
+    redirect_to action: :edit, id: @layout
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.layouts.creation_failure')
+    render action: :new
+  end
+
+  def update
+    @layout.update!(layout_params)
+    flash[:success] = I18n.t('comfy.admin.cms.layouts.updated')
+    redirect_to action: :edit, id: @layout
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.layouts.update_failure')
+    render action: :edit
+  end
+
+  def destroy
+    @layout.destroy
+    flash[:success] = I18n.t('comfy.admin.cms.layouts.deleted')
+    redirect_to action: :index
+  end
+
+protected
+
+  def build_layout
+    @layout = @site.layouts.new(layout_params)
+    @layout.parent      ||= ::Comfy::Cms::Layout.find_by_id(params[:parent_id])
+    @layout.app_layout  ||= @layout.parent.try(:app_layout)
+    @layout.content     ||= '{{ cms:wysiwyg content }}'
+  end
+
+  def load_layout
+    @layout = @site.layouts.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.layouts.not_found')
+    redirect_to action: :index
+  end
+
+  def layout_params
+    params.fetch(:layout, {}).permit!
+  end
+end

data/app/controllers/comfy/admin/cms/pages_controller.rb

@@ -0,0 +1,163 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::PagesController < Comfy::Admin::Cms::BaseController
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::Page
+
+  before_action :check_for_layouts, only: %i[new edit]
+  before_action :build_page,        only: %i[new create]
+  before_action :load_page,         only: %i[edit update destroy]
+
+  before_action :authorize
+
+  before_action :preview_page, only: %i[create update]
+
+  def index
+    return redirect_to action: :new if site_has_no_pages?
+
+    return index_for_redactor if params[:source] == 'redactor'
+
+    @pages_by_parent = pages_grouped_by_parent
+
+    @pages =
+      if params[:categories].present?
+        @site.pages.includes(:categories).for_category(params[:categories]).order(:label)
+      else
+        [@site.pages.root].compact
+      end
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def update_family
+    @page.siblings.each(&:save!) if @page.siblings
+    @page.parent.save! if @page.parent
+  end
+
+  def create
+    @page.save!
+    update_family
+    flash[:success] = I18n.t('comfy.admin.cms.pages.created')
+    redirect_to action: :edit, id: @page
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.pages.creation_failure')
+    render action: :new
+  end
+
+  def update
+    @page.save!
+    update_family
+    flash[:success] = I18n.t('comfy.admin.cms.pages.updated')
+    redirect_to action: :edit, id: @page
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.pages.update_failure')
+    render action: :edit
+  end
+
+  def destroy
+    @page.destroy
+    update_family
+    flash[:success] = I18n.t('comfy.admin.cms.pages.deleted')
+    redirect_to action: :index
+  end
+
+  def form_fragments
+    @page = @site.pages.find_by(id: params[:id]) || @site.pages.new
+    @page.layout = @site.layouts.find_by(id: params[:layout_id])
+
+    render(
+      partial: 'comfy/admin/cms/fragments/form_fragments',
+      locals: { record: @page, scope: :page },
+      layout: false
+    )
+  end
+
+  def toggle_branch
+    @pages_by_parent = pages_grouped_by_parent
+    @page = @site.pages.find(params[:id])
+    s   = (session[:cms_page_tree] ||= [])
+    id  = @page.id.to_s
+    s.member?(id) ? s.delete(id) : s << id
+  rescue ActiveRecord::RecordNotFound
+    render nothing: true
+  end
+
+protected
+
+  def index_for_redactor
+    tree_walker = ->(page, list, offset) do
+      return unless page.present?
+
+      label = "#{'. . ' * offset}#{page.label}"
+      list << { name: label, url: page.url(relative: true) }
+      page.children.each do |child_page|
+        tree_walker.call(child_page, list, offset + 1)
+      end
+      list
+    end
+
+    page_select_options = [{
+      name: I18n.t('comfy.admin.cms.pages.form.choose_link'),
+      url: false
+    }] + tree_walker.call(@site.pages.root, [], 0)
+
+    render json: page_select_options
+  end
+
+  def site_has_no_pages?
+    @site.pages.count.zero?
+  end
+
+  def pages_grouped_by_parent
+    @site.pages.order(:position).includes(:categories).group_by(&:parent_id)
+  end
+
+  def check_for_layouts
+    return unless @site.layouts.count.zero?
+
+    flash[:danger] = I18n.t('comfy.admin.cms.pages.layout_not_found')
+    redirect_to new_comfy_admin_cms_site_layout_path(@site)
+  end
+
+  def build_page
+    @page = @site.pages.new(page_params)
+    @page.parent ||= @site.pages.find_by_id(params[:parent_id]) || @site.pages.root
+    @page.layout ||= @page.parent&.layout || @site.layouts.first
+  end
+
+  def load_page
+    @page = @site.pages.find(params[:id])
+    @page.attributes = page_params
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.pages.not_found')
+    redirect_to action: :index
+  end
+
+  def preview_page
+    return unless params[:preview]
+
+    layout = @page.layout.app_layout.blank? ? false : @page.layout.app_layout
+    @cms_site   = @page.site
+    @cms_layout = @page.layout
+    @cms_page   = @page
+
+    # Make sure to use the site locale to render the preview becaue it might
+    # be different from the admin locale.
+    I18n.locale = @cms_site.locale
+
+    # Chrome chokes on content with iframes. Issue #434
+    response.headers['X-XSS-Protection'] = '0'
+
+    render inline: @page.render, layout: layout, content_type: 'text/html'
+  end
+
+  def page_params
+    params.fetch(:page, {}).permit!
+  end
+end

data/app/controllers/comfy/admin/cms/revisions/base_controller.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::BaseController < Comfy::Admin::Cms::BaseController
+  helper_method :record_path
+
+  before_action :load_record
+  before_action :load_revision, except: :index
+  before_action :authorize
+
+  def index
+    revision = @record.revisions.order(created_at: :desc).first
+    if revision
+      redirect_to action: :show, id: revision.id
+    else
+      redirect_to record_path
+    end
+  end
+
+  def show
+    @current_content    = @record.revision_fields.each_with_object({}) { |f, c| c[f] = @record.send(f) }
+    @versioned_content  = @record.revision_fields.each_with_object({}) { |f, c| c[f] = @revision.data[f] }
+
+    render 'comfy/admin/cms/revisions/show'
+  end
+
+  def revert
+    @record.restore_from_revision(@revision)
+    flash[:success] = I18n.t('comfy.admin.cms.revisions.reverted')
+    redirect_to record_path
+  end
+
+protected
+
+  def load_record
+    raise 'not implemented'
+  end
+
+  def load_revision
+    @revision = @record.revisions.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.revisions.not_found')
+    redirect_to record_path
+  end
+
+  def record_path
+    raise 'not implemented'
+  end
+end

data/app/controllers/comfy/admin/cms/revisions/layout_controller.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::LayoutController < Comfy::Admin::Cms::Revisions::BaseController
+private
+
+  def load_record
+    @record = @site.layouts.find(params[:layout_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.revisions.record_not_found')
+    redirect_to comfy_admin_cms_site_layouts_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_layout_path(@site, @record)
+  end
+end

data/app/controllers/comfy/admin/cms/revisions/page_controller.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::PageController < Comfy::Admin::Cms::Revisions::BaseController
+  def show
+    @current_content = @record.fragments.each_with_object({}) do |b, c|
+      c[b.identifier] = b.content
+    end
+    @versioned_content = @record.fragments.each_with_object({}) do |b, c|
+      d = @revision.data['fragments_attributes'].detect { |r| r[:identifier] == b.identifier }
+      c[b.identifier] = d.try(:[], :content)
+    end
+
+    render 'comfy/admin/cms/revisions/show'
+  end
+
+private
+
+  def load_record
+    @record = @site.pages.find(params[:page_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.revisions.record_not_found')
+    redirect_to comfy_admin_cms_site_pages_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_page_path(@site, @record)
+  end
+end

data/app/controllers/comfy/admin/cms/revisions/snippet_controller.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::SnippetController < Comfy::Admin::Cms::Revisions::BaseController
+private
+
+  def load_record
+    @record = @site.snippets.find(params[:snippet_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.revisions.record_not_found')
+    redirect_to comfy_admin_cms_site_snippets_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_snippet_path(@site, @record)
+  end
+end

data/app/controllers/comfy/admin/cms/revisions/translation_controller.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::TranslationController < Comfy::Admin::Cms::Revisions::BaseController
+  def show
+    @current_content = @record.fragments.each_with_object({}) do |b, c|
+      c[b.identifier] = b.content
+    end
+    @versioned_content = @record.fragments.each_with_object({}) do |b, c|
+      d = @revision.data['fragments_attributes'].detect { |r| r[:identifier] == b.identifier }
+      c[b.identifier] = d.try(:[], :content)
+    end
+
+    render 'comfy/admin/cms/revisions/show'
+  end
+
+private
+
+  def load_record
+    @page   = @site.pages.find(params[:page_id])
+    @record = @page.translations.find(params[:translation_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.revisions.record_not_found')
+    redirect_to comfy_admin_cms_site_pages_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_page_translation_path(@site, @page, @record)
+  end
+end

data/app/controllers/comfy/admin/cms/sites_controller.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::SitesController < Comfy::Admin::Cms::BaseController
+  skip_before_action  :load_admin_site,
+                      :load_seeds
+
+  before_action :build_site,  only: %i[new create]
+  before_action :load_site,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    return redirect_to action: :new if ::Comfy::Cms::Site.count.zero?
+
+    @site   = ::Comfy::Cms::Site.find_by_id(session[:site_id])
+    @sites  = ::Comfy::Cms::Site.all
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @site.save!
+    flash[:success] = I18n.t('comfy.admin.cms.sites.created')
+    redirect_to comfy_admin_cms_site_layouts_path(@site)
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.sites.creation_failure')
+    render action: :new
+  end
+
+  def update
+    @site.update!(site_params)
+    flash[:success] = I18n.t('comfy.admin.cms.sites.updated')
+    redirect_to action: :edit, id: @site
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t('comfy.admin.cms.sites.update_failure')
+    render action: :edit
+  end
+
+  def destroy
+    @site.destroy
+    flash[:success] = I18n.t('comfy.admin.cms.sites.deleted')
+    redirect_to action: :index
+  end
+
+protected
+
+  def build_site
+    @site = ::Comfy::Cms::Site.new(site_params)
+    @site.hostname ||= request.host.downcase
+  end
+
+  def load_site
+    @site = ::Comfy::Cms::Site.find(params[:id])
+    I18n.locale = ComfortableMediaSurfer.config.admin_locale || @site.locale
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t('comfy.admin.cms.sites.not_found')
+    redirect_to action: :index
+  end
+
+  def site_params
+    params.fetch(:site, {}).permit!
+  end
+end