kcy1 1.0

data/app/controllers/comfy/admin/cms/revisions/base_controller.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::BaseController < Comfy::Admin::Cms::BaseController
+
+  helper_method :record_path
+
+  before_action :load_record
+  before_action :load_revision, except: :index
+  before_action :authorize
+
+  def index
+    revision = @record.revisions.order(created_at: :desc).first
+    if revision
+      redirect_to action: :show, id: revision.id
+    else
+      redirect_to record_path
+    end
+  end
+
+  def show
+    @current_content    = @record.revision_fields.each_with_object({}) { |f, c| c[f] = @record.send(f) }
+    @versioned_content  = @record.revision_fields.each_with_object({}) { |f, c| c[f] = @revision.data[f] }
+
+    render "comfy/admin/cms/revisions/show"
+  end
+
+  def revert
+    @record.restore_from_revision(@revision)
+    flash[:success] = I18n.t("comfy.admin.cms.revisions.reverted")
+    redirect_to record_path
+  end
+
+protected
+
+  def load_record
+    raise "not implemented"
+  end
+
+  def load_revision
+    @revision = @record.revisions.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.revisions.not_found")
+    redirect_to record_path
+  end
+
+  def record_path
+    raise "no implemented"
+  end
+
+end

data/app/controllers/comfy/admin/cms/revisions/layout_controller.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::LayoutController < Comfy::Admin::Cms::Revisions::BaseController
+
+private
+
+  def load_record
+    @record = @site.layouts.find(params[:layout_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.revisions.record_not_found")
+    redirect_to comfy_admin_cms_site_layouts_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_layout_path(@site, @record)
+  end
+
+end

data/app/controllers/comfy/admin/cms/revisions/page_controller.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::PageController < Comfy::Admin::Cms::Revisions::BaseController
+
+  def show
+    @current_content = @record.fragments.each_with_object({}) do |b, c|
+      c[b.identifier] = b.content
+    end
+    @versioned_content = @record.fragments.each_with_object({}) do |b, c|
+      d = @revision.data["fragments_attributes"].detect { |r| r[:identifier] == b.identifier }
+      c[b.identifier] = d.try(:[], :content)
+    end
+
+    render "comfy/admin/cms/revisions/show"
+  end
+
+private
+
+  def load_record
+    @record = @site.pages.find(params[:page_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.revisions.record_not_found")
+    redirect_to comfy_admin_cms_site_pages_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_page_path(@site, @record)
+  end
+
+end

data/app/controllers/comfy/admin/cms/revisions/snippet_controller.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::SnippetController < Comfy::Admin::Cms::Revisions::BaseController
+
+private
+
+  def load_record
+    @record = @site.snippets.find(params[:snippet_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.revisions.record_not_found")
+    redirect_to comfy_admin_cms_site_snippets_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_snippet_path(@site, @record)
+  end
+
+end

data/app/controllers/comfy/admin/cms/revisions/translation_controller.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::Revisions::TranslationController < Comfy::Admin::Cms::Revisions::BaseController
+
+  def show
+    @current_content = @record.fragments.each_with_object({}) do |b, c|
+      c[b.identifier] = b.content
+    end
+    @versioned_content = @record.fragments.each_with_object({}) do |b, c|
+      d = @revision.data["fragments_attributes"].detect { |r| r[:identifier] == b.identifier }
+      c[b.identifier] = d.try(:[], :content)
+    end
+
+    render "comfy/admin/cms/revisions/show"
+  end
+
+private
+
+  def load_record
+    @page   = @site.pages.find(params[:page_id])
+    @record = @page.translations.find(params[:translation_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.revisions.record_not_found")
+    redirect_to comfy_admin_cms_site_pages_path(@site)
+  end
+
+  def record_path
+    edit_comfy_admin_cms_site_page_translation_path(@site, @page, @record)
+  end
+
+end

data/app/controllers/comfy/admin/cms/sites_controller.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::SitesController < Comfy::Admin::Cms::BaseController
+
+  skip_before_action  :load_admin_site,
+                      :load_seeds
+
+  before_action :build_site,  only: %i[new create]
+  before_action :load_site,   only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    return redirect_to action: :new if ::Comfy::Cms::Site.count.zero?
+    @site   = ::Comfy::Cms::Site.find_by_id(session[:site_id])
+    @sites  = ::Comfy::Cms::Site.all
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @site.save!
+    flash[:success] = I18n.t("comfy.admin.cms.sites.created")
+    redirect_to comfy_admin_cms_site_layouts_path(@site)
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.sites.creation_failure")
+    render action: :new
+  end
+
+  def update
+    @site.update!(site_params)
+    flash[:success] = I18n.t("comfy.admin.cms.sites.updated")
+    redirect_to action: :edit, id: @site
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.sites.update_failure")
+    render action: :edit
+  end
+
+  def destroy
+    @site.destroy
+    flash[:success] = I18n.t("comfy.admin.cms.sites.deleted")
+    redirect_to action: :index
+  end
+
+protected
+
+  def build_site
+    @site = ::Comfy::Cms::Site.new(site_params)
+    @site.hostname ||= request.host.downcase
+  end
+
+  def load_site
+    @site = ::Comfy::Cms::Site.find(params[:id])
+    I18n.locale = ComfortableMexicanSofa.config.admin_locale || @site.locale
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.sites.not_found")
+    redirect_to action: :index
+  end
+
+  def site_params
+    params.fetch(:site, {}).permit!
+  end
+
+end

data/app/controllers/comfy/admin/cms/snippets_controller.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::SnippetsController < Comfy::Admin::Cms::BaseController
+
+  include ::Comfy::ReorderAction
+  self.reorder_action_resource = ::Comfy::Cms::Snippet
+
+  before_action :build_snippet, only: %i[new create]
+  before_action :load_snippet,  only: %i[edit update destroy]
+  before_action :authorize
+
+  def index
+    return redirect_to action: :new if @site.snippets.count.zero?
+    @snippets = @site.snippets.includes(:categories).for_category(params[:categories]).order(:position)
+  end
+
+  def new
+    render
+  end
+
+  def edit
+    @snippet.attributes = snippet_params
+  end
+
+  def create
+    @snippet.save!
+    flash[:success] = I18n.t("comfy.admin.cms.snippets.created")
+    redirect_to action: :edit, id: @snippet
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.snippets.creation_failure")
+    render action: :new
+  end
+
+  def update
+    @snippet.update!(snippet_params)
+    flash[:success] = I18n.t("comfy.admin.cms.snippets.updated")
+    redirect_to action: :edit, id: @snippet
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.snippets.update_failure")
+    render action: :edit
+  end
+
+  def destroy
+    @snippet.destroy
+    flash[:success] = I18n.t("comfy.admin.cms.snippets.deleted")
+    redirect_to action: :index
+  end
+
+protected
+
+  def build_snippet
+    @snippet = @site.snippets.new(snippet_params)
+  end
+
+  def load_snippet
+    @snippet = @site.snippets.find(params[:id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.snippets.not_found")
+    redirect_to action: :index
+  end
+
+  def snippet_params
+    params.fetch(:snippet, {}).permit!
+  end
+
+end

data/app/controllers/comfy/admin/cms/translations_controller.rb

@@ -0,0 +1,107 @@
+# frozen_string_literal: true
+
+class Comfy::Admin::Cms::TranslationsController < Comfy::Admin::Cms::BaseController
+
+  helper_method :translation_select_options
+
+  before_action :load_page
+  before_action :build_translation,   only: %i[new create]
+  before_action :load_translation,    only: %i[edit update destroy]
+  before_action :authorize
+  before_action :preview_translation, only: %i[create update]
+
+  def new
+    render
+  end
+
+  def edit
+    render
+  end
+
+  def create
+    @translation.save!
+    flash[:success] = I18n.t("comfy.admin.cms.translations.created")
+    redirect_to action: :edit, id: @translation
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.translations.creation_failure")
+    render action: :new
+  end
+
+  def update
+    @translation.update!(translation_params)
+    flash[:success] = I18n.t("comfy.admin.cms.translations.updated")
+    redirect_to action: :edit, id: @translation
+  rescue ActiveRecord::RecordInvalid
+    flash.now[:danger] = I18n.t("comfy.admin.cms.translations.update_failure")
+    render action: :edit
+  end
+
+  def destroy
+    @translation.destroy
+    flash[:success] = I18n.t("comfy.admin.cms.translations.deleted")
+    redirect_to edit_comfy_admin_cms_site_page_path(@site, @page)
+  end
+
+  def form_fragments
+    @translation = @page.translations.find_by(id: params[:id]) || @page.translations.new
+    @translation.layout = @site.layouts.find_by(id: params[:layout_id])
+
+    render(
+      partial:  "comfy/admin/cms/fragments/form_fragments",
+      locals:   { record: @translation, scope: :translation },
+      layout:   false
+    )
+  end
+
+private
+
+  def translation_select_options
+    all = ComfortableMexicanSofa.config.locales
+    taken = @page.translations.pluck(:locale) + [@site.locale] - [@translation.locale]
+    all.except(*taken).map { |k, v| ["#{v} (#{k})", k] }
+  end
+
+  def load_page
+    @page = @site.pages.find(params[:page_id])
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.pages.not_found")
+    redirect_to comfy_admin_cms_site_pages_path(@site)
+  end
+
+  def build_translation
+    @translation = @page.translations.new(translation_params)
+    @translation.layout ||= @page.layout
+  end
+
+  def load_translation
+    @translation = @page.translations.find(params[:id])
+    @translation.attributes = translation_params
+  rescue ActiveRecord::RecordNotFound
+    flash[:danger] = I18n.t("comfy.admin.cms.translations.not_found")
+    redirect_to edit_comfy_admin_cms_site_page_path(@site, @page)
+  end
+
+  def translation_params
+    params.fetch(:translation, {}).permit!
+  end
+
+  def preview_translation
+    if params[:preview]
+      layout = @translation.layout.app_layout.blank? ? false : @translation.layout.app_layout
+      @cms_site   = @page.site
+      @cms_layout = @translation.layout
+      @cms_page   = @page
+
+      # Make sure to use the site locale to render the preview becaue it might
+      # be different from the admin locale.
+      I18n.locale = @translation.locale
+
+      # Chrome chokes on content with iframes. Issue #434
+      response.headers["X-XSS-Protection"] = "0"
+
+      # raise
+      render inline: @translation.render, layout: layout, content_type: "text/html"
+    end
+  end
+
+end

data/app/controllers/comfy/cms/assets_controller.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class Comfy::Cms::AssetsController < Comfy::Cms::BaseController
+
+  skip_before_action :verify_authenticity_token, raise: false
+
+  before_action :load_cms_layout,
+                :use_null_session
+
+  after_action :set_cache_control_header
+
+  def render_css
+    render body: @cms_layout.css, content_type: "text/css"
+  end
+
+  def render_js
+    render body: @cms_layout.js, content_type: "application/javascript"
+  end
+
+protected
+
+  def load_cms_layout
+    @cms_layout = @cms_site.layouts.find_by_identifier!(params[:identifier])
+  rescue ActiveRecord::RecordNotFound
+    render body: nil, status: 404
+  end
+
+  # null_session avoids cookies and flash updates
+  def use_null_session
+    ActionController::RequestForgeryProtection::ProtectionMethods::NullSession.new(self)
+      .handle_unverified_request
+  end
+
+  def set_cache_control_header
+    if params[:cache_buster].present?
+      response.headers["Cache-Control"] = "public, max-age=#{1.year.to_i}"
+    end
+  end
+
+end

data/app/controllers/comfy/cms/base_controller.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+class Comfy::Cms::BaseController < ComfortableMexicanSofa.config.public_base_controller.to_s.constantize
+
+  before_action :load_cms_site
+
+  helper Comfy::CmsHelper
+
+protected
+
+  def load_cms_site
+    @cms_site ||=
+      if params[:site_id]
+        ::Comfy::Cms::Site.find_by_id(params[:site_id])
+      else
+        ::Comfy::Cms::Site.find_site(request.host_with_port.downcase, request.fullpath)
+      end
+
+    if @cms_site
+      if @cms_site.path.present? && !params[:site_id]
+        if params[:cms_path]&.match(%r{\A#{@cms_site.path}})
+          params[:cms_path].gsub!(%r{\A#{@cms_site.path}}, "")
+          params[:cms_path]&.gsub!(%r{\A/}, "")
+        else
+          raise ActionController::RoutingError, "Site Not Found"
+        end
+      end
+    else
+      raise ActionController::RoutingError, "Site Not Found"
+    end
+  end
+
+end