elabs 2.0.0.pre

data/app/controllers/elabs/auth/passwords_controller.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module Elabs
+  module Auth
+    class PasswordsController < Devise::PasswordsController
+      include Elabs::Concerns::ElabsController
+      include Elabs::Concerns::Reportable
+      include Elabs::Concerns::Localizable
+
+      # GET /resource/password/new
+      # def new
+      #   super
+      # end
+
+      # POST /resource/password
+      # def create
+      #   super
+      # end
+
+      # GET /resource/password/edit?reset_password_token=abcdef
+      # def edit
+      #   super
+      # end
+
+      # PUT /resource/password
+      # def update
+      #   super
+      # end
+
+      protected
+
+      # Override the default "new_session_path" method to return a known path
+      def new_session_path(*)
+        new_user_session_path
+      end
+
+      # def after_resetting_password_path_for(resource)
+      #   super(resource)
+      # end
+
+      # The path used after sending reset password instructions
+      # def after_sending_reset_password_instructions_path_for(resource_name)
+      #   super(resource_name)
+      # end
+    end
+  end
+end

data/app/controllers/elabs/auth/registrations_controller.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+module Elabs
+  module Auth
+    class RegistrationsController < Devise::RegistrationsController
+      include Elabs::Concerns::ElabsController
+      include Elabs::Concerns::Reportable
+      include Elabs::Concerns::Localizable
+
+      before_action :configure_sign_up_params, only: [:create]
+      # before_action :configure_account_update_params, only: [:update]
+
+      # GET /resource/sign_up
+      # def new
+      #   super
+      # end
+
+      # POST /resource
+      # def create
+      #   super
+      # end
+
+      # GET /resource/edit
+      # def edit
+      #   super
+      # end
+
+      # PUT /resource
+      # def update
+      #   super
+      # end
+
+      # DELETE /resource
+      # def destroy
+      #   super
+      # end
+
+      # GET /resource/cancel
+      # Forces the session data which is usually expired after sign
+      # in to be expired now. This is useful if the user wants to
+      # cancel oauth signing in/up in the middle of the process,
+      # removing all OAuth session data.
+      # def cancel
+      #   super
+      # end
+
+      protected
+
+      # If you have extra params to permit, append them to the sanitizer.
+      def configure_sign_up_params
+        devise_parameter_sanitizer.permit(:sign_up, keys: ['username'])
+      end
+
+      # If you have extra params to permit, append them to the sanitizer.
+      # def configure_account_update_params
+      #   devise_parameter_sanitizer.permit(:account_update, keys: [:attribute])
+      # end
+
+      # The path used after sign up.
+      # def after_sign_up_path_for(resource)
+      #   super(resource)
+      # end
+
+      # The path used after sign up for inactive accounts.
+      # def after_inactive_sign_up_path_for(resource)
+      #   super(resource)
+      # end
+    end
+  end
+end

data/app/controllers/elabs/auth/sessions_controller.rb

@@ -0,0 +1,36 @@
+module Elabs
+  module Auth
+    class SessionsController < ::Devise::SessionsController
+      include Elabs::Concerns::ElabsController
+      include Elabs::Concerns::Reportable
+      include Elabs::Concerns::Localizable
+
+      # before_action :configure_sign_in_params, only: [:create]
+
+      # GET /resource/sign_in
+      # def new
+      #   super
+      # end
+
+      # POST /resource/sign_in
+      def create
+        super
+
+        session[:show_nsfw] = current_user.preference.show_nsfw
+        session[:locale]    = current_user.preference.locale
+      end
+
+      # DELETE /resource/sign_out
+      # def destroy
+      #   super
+      # end
+
+      # protected
+
+      # If you have extra params to permit, append them to the sanitizer.
+      # def configure_sign_in_params
+      #   devise_parameter_sanitizer.permit(:sign_in, keys: [:attribute])
+      # end
+    end
+  end
+end

data/app/controllers/elabs/auth/unlocks_controller.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Elabs
+  module Auth
+    class UnlocksController < Devise::UnlocksController
+      include Elabs::Concerns::ElabsController
+      include Elabs::Concerns::Reportable
+      include Elabs::Concerns::Localizable
+
+      # GET /resource/unlock/new
+      # def new
+      #   super
+      # end
+
+      # POST /resource/unlock
+      # def create
+      #   super
+      # end
+
+      # GET /resource/unlock?unlock_token=abcdef
+      # def show
+      #   super
+      # end
+
+      # protected
+
+      # The path used after sending unlock password instructions
+      # def after_sending_unlock_instructions_path_for(resource)
+      #   super(resource)
+      # end
+
+      # The path used after unlocking the resource
+      # def after_unlock_path_for(resource)
+      #   super(resource)
+      # end
+    end
+  end
+end

data/app/controllers/elabs/concerns/elabs_controller.rb

@@ -0,0 +1,18 @@
+module Elabs
+  module Concerns
+    # This concern is meant to be included in controllers extending
+    # other plugins/engines controllers (i.e.: Devise)
+    # This should not be used on Elabs controllers, as everything here is declared
+    # in ElabsApplicationController.
+    module ElabsController
+      extend ActiveSupport::Concern
+
+      included do
+        helper Elabs::ApplicationHelper
+        helper Elabs::ContentFiltersHelper
+
+        layout 'elabs/layouts/application'
+      end
+    end
+  end
+end

data/app/controllers/elabs/concerns/localizable.rb

@@ -0,0 +1,11 @@
+module Elabs
+  module Concerns
+    module Localizable
+      extend ActiveSupport::Concern
+
+      included do
+        before_action :set_gettext_locale
+      end
+    end
+  end
+end

data/app/controllers/elabs/concerns/reportable.rb

@@ -0,0 +1,17 @@
+module Elabs
+  module Concerns
+    module Reportable
+      extend ActiveSupport::Concern
+
+      included do
+        before_action :prepare_empty_report
+      end
+
+      private
+
+      def prepare_empty_report
+        @new_report = Elabs::Report.new
+      end
+    end
+  end
+end

data/app/controllers/elabs/content_application_controller.rb

@@ -0,0 +1,45 @@
+module Elabs
+  class ContentApplicationController < ElabsApplicationController
+    DEFAULT_ORDER      = { published_at: :desc }.freeze
+    IS_NSFW_FILTERABLE = true
+
+    before_action :new_comment
+
+    # POST /comments
+    # POST /comments.json
+    def create_comment
+      build_comment
+
+      respond_to do |format|
+        if @comment.save
+          format.html { redirect_to @comment.content, notice: _('Comment was successfully created.') }
+          format.json { render :show, status: :created, location: @comment.content }
+        else
+          @new_comment = @comment
+          format.html { redirect_to @comment.content }
+          format.json { render json: @comment.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    private
+
+    # Never trust parameters from the scary internet, only allow the white list through.
+    def comment_params
+      params.require(:comment).permit(:name, :email, :comment, :allow_contact)
+    end
+
+    def new_comment
+      @new_comment ||= Comment.new
+    end
+
+    def build_comment
+      @comment = Comment.new(comment_params)
+      params.each do |key, value|
+        @comment.content_id = value if %w[album_id article_id note_id project_id upload_id].include? key
+      end
+      @comment.content_type = params[:controller].classify
+      @comment.user         = current_user if user_signed_in?
+    end
+  end
+end

data/app/controllers/elabs/elabs_application_controller.rb

@@ -0,0 +1,95 @@
+module Elabs
+  class ElabsApplicationController < ActionController::Base
+    include Elabs::Concerns::Reportable
+    include Elabs::Concerns::Localizable
+
+    ALLOWED_NESTED_FROM = [].freeze
+    ALLOWED_ORDER_FROM  = [].freeze
+    DEFAULT_ORDER       = { id: :desc }.freeze
+    IS_NSFW_FILTERABLE  = false
+    MAX_ITEMS_PER_PAGE  = Elabs.max_items_per_page
+
+    before_action :set_nsfw_option
+    protect_from_forgery with: :exception
+
+    layout 'elabs/layouts/application'
+
+    private
+
+    def scope_request(orm_request)
+      orm_request = build_request_nested orm_request
+      orm_request = build_request_where orm_request
+      orm_request = build_request_nsfw orm_request if self.class::IS_NSFW_FILTERABLE
+
+      build_request_order orm_request
+    end
+
+    def build_request_nested(orm_request)
+      where_clauses = {}
+
+      params.each do |p|
+        # No need to do this with "album_id" as there is no action requiring it (as for a /albums/xxx/uploads)
+        next unless %w[tag_id project_id].include? p[0]
+        foreign_table                = p[0].chomp('_id').pluralize.to_sym
+        orm_request                  = orm_request.joins(foreign_table)
+        where_clauses[foreign_table] = { id: p[1] }
+        next
+      end
+
+      orm_request.where(where_clauses)
+    end
+
+    def build_request_where(orm_request)
+      allowed_scopes_ids = self.class::ALLOWED_NESTED_FROM.map { |n| "#{n}_id" }
+      clean_list = allowed_scopes_ids.reject { |s| %w[tag_id project_id].include? s }
+
+      params.each do |p|
+        orm_request = orm_request.where(p[0] => p[1]) if clean_list.include? p[0]
+      end
+
+      orm_request
+    end
+
+    def build_request_order(orm_request)
+      allowed_order_fields = self.class::ALLOWED_ORDER_FROM.map { |n| "order_by_#{n}" }
+      orders               = 0
+
+      params.each do |p|
+        next unless allowed_order_fields.include? p[0]
+        field       = p[0].gsub(/^order_by_/, '')
+        orm_request = orm_request.order "#{field}_id" => p[1]
+        orders += 1
+      end
+
+      orm_request = orm_request.order(self.class::DEFAULT_ORDER) if orders.zero?
+
+      orm_request
+    end
+
+    def build_request_nsfw(orm_request)
+      if params['sfw_status']
+        return case params['sfw_status']
+               when 'sfw_only'
+                 orm_request.where(sfw: true)
+               when 'nsfw_only'
+                 orm_request.where(sfw: false)
+               else
+                 orm_request
+               end
+      end
+      orm_request
+    end
+
+    def set_nsfw_option
+      session[:show_nsfw] ||= false
+      session[:show_nsfw] = params['show_nsfw'] == 'true' if params['show_nsfw']
+    end
+
+    # Wrapper method for `instance_variable_set` that adds the `@` character to the variable name.
+    #
+    # @return [void]
+    def create_instance_variable(variable, entity = @entity)
+      instance_variable_set "@#{variable}", entity
+    end
+  end
+end

data/app/controllers/elabs/languages_controller.rb

@@ -0,0 +1,36 @@
+module Elabs
+  class LanguagesController < ElabsApplicationController
+    ALLOWED_ORDER_FROM = %w[name].freeze
+    DEFAULT_ORDER      = { name: :desc }.freeze
+
+    before_action :set_language, only: %i[show edit]
+
+    # GET /languages
+    # GET /languages.json
+    def index
+      languages = Language.page(params[:page]).per(self.class::MAX_ITEMS_PER_PAGE)
+      @languages = if params['with_content_only'] && params['with_content_only'] == 'false'
+                     languages
+                   else
+                     languages.with_content_only
+                   end
+    end
+
+    # GET /languages/1
+    # GET /languages/1.json
+    def show
+      @language_albums = @language.albums.for_relation
+      @language_articles = @language.articles.for_relation
+      @language_notes = @language.notes.for_relation
+      @language_projects = @language.projects.for_relation
+      @language_uploads = @language.uploads.for_relation
+    end
+
+    private
+
+    # Use callbacks to share common setup or constraints between actions.
+    def set_language
+      @language = Language.find(params[:id])
+    end
+  end
+end

data/app/controllers/elabs/licenses_controller.rb

@@ -0,0 +1,31 @@
+module Elabs
+  class LicensesController < ElabsApplicationController
+    ALLOWED_ORDER_FROM = %w[name].freeze
+    DEFAULT_ORDER      = { name: :desc }.freeze
+
+    before_action :set_license, only: [:show]
+
+    # GET /licenses
+    # GET /licenses.json
+    def index
+      @licenses = License.all
+    end
+
+    # GET /licenses/1
+    # GET /licenses/1.json
+    def show
+      @license_albums = @license.albums.for_relation
+      @license_articles = @license.articles.for_relation
+      @license_notes = @license.notes.for_relation
+      @license_projects = @license.projects.for_relation
+      @license_uploads = @license.uploads.for_relation
+    end
+
+    private
+
+    # Use callbacks to share common setup or constraints between actions.
+    def set_license
+      @license = License.find(params[:id])
+    end
+  end
+end