kcy1 1.0

data/app/controllers/application_controller.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class ApplicationController < ActionController::Base
+
+  protect_from_forgery
+
+end

data/app/controllers/comfy/admin/base_controller.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::BaseController < ComfortableMexicanSofa.config.admin_base_controller.to_s.constantize
+
+  include Comfy::Paginate
+
+  # Authentication module must have `authenticate` method
+  include ComfortableMexicanSofa.config.admin_auth.to_s.constantize
+
+  # Authorization module must have `authorize` method
+  include ComfortableMexicanSofa.config.admin_authorization.to_s.constantize
+
+  helper Comfy::Admin::CmsHelper
+  helper Comfy::CmsHelper
+
+  protect_from_forgery with: :exception
+
+  before_action :authenticate
+
+  layout "comfy/admin/cms"
+
+end

data/app/controllers/comfy/admin/cms/base_controller.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::BaseController < Comfy::Admin::BaseController
+
+  before_action :load_admin_site,
+                :set_locale,
+                :load_seeds,
+                except: :jump
+
+  layout :infer_layout
+
+  if ComfortableMexicanSofa.config.admin_cache_sweeper.present?
+    cache_sweeper(*ComfortableMexicanSofa.config.admin_cache_sweeper)
+  end
+
+  def jump
+    path = ComfortableMexicanSofa.config.admin_route_redirect
+    return redirect_to(path) unless path.blank?
+    load_admin_site
+    redirect_to comfy_admin_cms_site_pages_path(@site) if @site
+  end
+
+protected
+
+  def load_admin_site
+    id_param = params[:site_id] || session[:site_id]
+    if (@site = ::Comfy::Cms::Site.find_by(id: id_param) || ::Comfy::Cms::Site.first)
+      session[:site_id] = @site.id
+    else
+      I18n.locale = ComfortableMexicanSofa.config.admin_locale || I18n.default_locale
+      flash[:danger] = I18n.t("comfy.admin.cms.base.site_not_found")
+      return redirect_to(new_comfy_admin_cms_site_path)
+    end
+  end
+
+  def set_locale
+    I18n.locale = ComfortableMexicanSofa.config.admin_locale || (@site&.locale)
+    true
+  end
+
+  def load_seeds
+    return unless ComfortableMexicanSofa.config.enable_seeds
+
+    controllers = %w[layouts pages snippets files].collect { |c| "comfy/admin/cms/" + c }
+    if controllers.member?(params[:controller]) && params[:action] == "index"
+      ComfortableMexicanSofa::Seeds::Importer.new(@site.identifier).import!
+      flash.now[:warning] = I18n.t("comfy.admin.cms.base.seeds_enabled")
+    end
+  end
+
+  def infer_layout
+    false if params[:layout] == "false"
+  end
+
+end

data/app/controllers/comfy/admin/cms/categories_controller.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::CategoriesController < Comfy::Admin::Cms::BaseController
+
+  before_action :load_category, only: %i[edit update destroy]
+  before_action :authorize
+
+  def edit
+    render
+  end
+
+  def create
+    @category = @site.categories.create!(category_params)
+  rescue ActiveRecord::RecordInvalid
+    head :ok
+  end
+
+  def update
+    @category.update!(category_params)
+  rescue ActiveRecord::RecordInvalid
+    head :ok
+  end
+
+  def destroy
+    @category.destroy
+  end
+
+protected
+
+  def load_category
+    @category = @site.categories.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    head :ok
+  end
+
+  def category_params
+    params.fetch(:category, {}).permit!
+  end
+
+end

data/app/controllers/comfy/admin/cms/files_controller.rb

@@ -0,0 +1,142 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::FilesController < Comfy::Admin::Cms::BaseController
+
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::File
+
+  include ActionView::Helpers::NumberHelper
+
+  before_action :build_file,  only: %i[new create]
+  before_action :load_file,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    files_scope = @site.files.with_attached_attachment
+
+    case params[:source]
+
+    # Integration with Redactor 1.0 Wysiwyg
+    when "redactor"
+      file_scope  = files_scope.limit(100).order(:position)
+      file_hashes =
+        case params[:type]
+        when "image"
+          file_scope.with_images.collect do |file|
+            { thumb: url_for(file.attachment.variant(combine_options: Comfy::Cms::File::VARIANT_SIZE[:redactor])),
+              image: url_for(file.attachment),
+              title: file.label }
+          end
+        else
+          file_scope.collect do |file|
+            { title:  file.label,
+              name:   file.attachment.filename,
+              link:   url_for(file.attachment),
+              size:   number_to_human_size(file.attachment.byte_size) }
+          end
+        end
+
+      render json: file_hashes
+
+    else
+      files_scope = files_scope
+        .includes(:categories)
+        .for_category(params[:categories])
+        .order("comfy_cms_files.position")
+      @files = comfy_paginate(files_scope, per_page: 50)
+    end
+  end
+
+  def new
+    render
+  end
+
+  def create
+    categories_scope = @site.categories.of_type("Comfy::Cms::File")
+
+    if params[:categories]
+      ids = categories_scope.where(label: params[:categories]).pluck(:id)
+      @file.category_ids = ids
+    end
+
+    # Automatically tagging upload if it's done through redactor
+    if params[:source] == "redactor"
+      category = categories_scope.find_or_create_by(label: "wysiwyg")
+      @file.category_ids = [category.id]
+    end
+
+    @file.save!
+
+    case params[:source]
+    when "plupload"
+      render partial: "file", object: @file
+    when "redactor"
+      render json: {
+        filelink: url_for(@file.attachment),
+        filename: @file.attachment.filename
+      }
+    else
+      flash[:success] = I18n.t("comfy.admin.cms.files.created")
+      redirect_to action: :edit, id: @file
+    end
+
+  rescue ActiveRecord::RecordInvalid
+    case params[:source]
+    when "plupload"
+      render body: @file.errors.full_messages.to_sentence, status: :unprocessable_entity
+    when "redactor"
+      render body: nil, status: :unprocessable_entity
+    else
+      flash.now[:danger] = I18n.t("comfy.admin.cms.files.creation_failure")
+      render action: :new
+    end
+  end
+
+  def edit
+    render
+  end
+
+  def update
+    if @file.update(file_params)
+      flash[:success] = I18n.t("comfy.admin.cms.files.updated")
+      redirect_to action: :edit, id: @file
+    else
+      flash.now[:danger] = I18n.t("comfy.admin.cms.files.update_failure")
+      render action: :edit
+    end
+  end
+
+  def destroy
+    @file.destroy
+    respond_to do |format|
+      format.js
+      format.html do
+        flash[:success] = I18n.t("comfy.admin.cms.files.deleted")
+        redirect_to action: :index
+      end
+    end
+  end
+
+protected
+
+  def build_file
+    @file = @site.files.new(file_params)
+  end
+
+  def load_file
+    @file = @site.files.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.files.not_found")
+    redirect_to action: :index
+  end
+
+  def file_params
+    file = params[:file]
+    unless file.is_a?(Hash) || file.respond_to?(:to_unsafe_hash)
+      params[:file] = {}
+      params[:file][:file] = file
+    end
+    params.fetch(:file, {}).permit!
+  end
+
+end

data/app/controllers/comfy/admin/cms/layouts_controller.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::LayoutsController < Comfy::Admin::Cms::BaseController
+
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::Layout
+
+  before_action :build_layout,  only: %i[new create]
+  before_action :load_layout,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    return redirect_to action: :new if @site.layouts.count.zero?
+    @layouts = @site.layouts.roots.order(:position)
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @layout.save!
+    flash[:success] = I18n.t("comfy.admin.cms.layouts.created")
+    redirect_to action: :edit, id: @layout
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.layouts.creation_failure")
+    render action: :new
+  end
+
+  def update
+    @layout.update!(layout_params)
+    flash[:success] = I18n.t("comfy.admin.cms.layouts.updated")
+    redirect_to action: :edit, id: @layout
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.layouts.update_failure")
+    render action: :edit
+  end
+
+  def destroy
+    @layout.destroy
+    flash[:success] = I18n.t("comfy.admin.cms.layouts.deleted")
+    redirect_to action: :index
+  end
+
+protected
+
+  def build_layout
+    @layout = @site.layouts.new(layout_params)
+    @layout.parent      ||= ::Comfy::Cms::Layout.find_by_id(params[:parent_id])
+    @layout.app_layout  ||= @layout.parent.try(:app_layout)
+    @layout.content     ||= "{{ cms:wysiwyg content }}"
+  end
+
+  def load_layout
+    @layout = @site.layouts.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.layouts.not_found")
+    redirect_to action: :index
+  end
+
+  def layout_params
+    params.fetch(:layout, {}).permit!
+  end
+
+end

data/app/controllers/comfy/admin/cms/pages_controller.rb

@@ -0,0 +1,156 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::PagesController < Comfy::Admin::Cms::BaseController
+
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::Page
+
+  before_action :check_for_layouts, only: %i[new edit]
+  before_action :build_page,        only: %i[new create]
+  before_action :load_page,         only: %i[edit update destroy]
+
+  before_action :authorize
+
+  before_action :preview_page, only: %i[create update]
+
+  def index
+    return redirect_to action: :new if site_has_no_pages?
+
+    return index_for_redactor if params[:source] == "redactor"
+
+    @pages_by_parent = pages_grouped_by_parent
+
+    @pages =
+      if params[:categories].present?
+        @site.pages.includes(:categories).for_category(params[:categories]).order(:label)
+      else
+        [@site.pages.root].compact
+      end
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @page.save!
+    flash[:success] = I18n.t("comfy.admin.cms.pages.created")
+    redirect_to action: :edit, id: @page
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.pages.creation_failure")
+    render action: :new
+  end
+
+  def update
+    @page.save!
+    flash[:success] = I18n.t("comfy.admin.cms.pages.updated")
+    redirect_to action: :edit, id: @page
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.pages.update_failure")
+    render action: :edit
+  end
+
+  def destroy
+    @page.destroy
+    flash[:success] = I18n.t("comfy.admin.cms.pages.deleted")
+    redirect_to action: :index
+  end
+
+  def form_fragments
+    @page = @site.pages.find_by(id: params[:id]) || @site.pages.new
+    @page.layout = @site.layouts.find_by(id: params[:layout_id])
+
+    render(
+      partial:  "comfy/admin/cms/fragments/form_fragments",
+      locals:   { record: @page, scope: :page },
+      layout:   false
+    )
+  end
+
+  def toggle_branch
+    @pages_by_parent = pages_grouped_by_parent
+    @page = @site.pages.find(params[:id])
+    s   = (session[:cms_page_tree] ||= [])
+    id  = @page.id.to_s
+    s.member?(id) ? s.delete(id) : s << id
+  rescue ActiveRecord::RecordNotFound
+    render nothing: true
+  end
+
+protected
+
+  def index_for_redactor
+    tree_walker = ->(page, list, offset) do
+      return unless page.present?
+      label = "#{'. . ' * offset}#{page.label}"
+      list << { name: label, url: page.url(relative: true) }
+      page.children.each do |child_page|
+        tree_walker.call(child_page, list, offset + 1)
+      end
+      list
+    end
+
+    page_select_options = [{
+      name: I18n.t("comfy.admin.cms.pages.form.choose_link"),
+      url: false
+    }] + tree_walker.call(@site.pages.root, [], 0)
+
+    render json: page_select_options
+  end
+
+  def site_has_no_pages?
+    @site.pages.count.zero?
+  end
+
+  def pages_grouped_by_parent
+    @site.pages.order(:position).includes(:categories).group_by(&:parent_id)
+  end
+
+  def check_for_layouts
+    if @site.layouts.count.zero?
+      flash[:danger] = I18n.t("comfy.admin.cms.pages.layout_not_found")
+      redirect_to new_comfy_admin_cms_site_layout_path(@site)
+    end
+  end
+
+  def build_page
+    @page = @site.pages.new(page_params)
+    @page.parent ||= (@site.pages.find_by_id(params[:parent_id]) || @site.pages.root)
+    @page.layout ||= (@page.parent&.layout || @site.layouts.first)
+  end
+
+  def load_page
+    @page = @site.pages.find(params[:id])
+    @page.attributes = page_params
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.pages.not_found")
+    redirect_to action: :index
+  end
+
+  def preview_page
+    if params[:preview]
+      layout = @page.layout.app_layout.blank? ? false : @page.layout.app_layout
+      @cms_site   = @page.site
+      @cms_layout = @page.layout
+      @cms_page   = @page
+
+      # Make sure to use the site locale to render the preview becaue it might
+      # be different from the admin locale.
+      I18n.locale = @cms_site.locale
+
+      # Chrome chokes on content with iframes. Issue #434
+      response.headers["X-XSS-Protection"] = "0"
+
+      render inline: @page.render, layout: layout, content_type: "text/html"
+    end
+  end
+
+  def page_params
+    params.fetch(:page, {}).permit!
+  end
+
+end