test_hyrax 0.0.1.alpha

data/app/controllers/hyrax/admin/workflows_controller.rb

@@ -0,0 +1,28 @@
+module Hyrax
+  # Presents a list of works in workflow
+  class Admin::WorkflowsController < ApplicationController
+    before_action :ensure_admin!
+    layout 'admin'
+
+    def index
+      add_breadcrumb t(:'hyrax.controls.home'), root_path
+      add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+      add_breadcrumb t(:'hyrax.admin.sidebar.tasks'), '#'
+      add_breadcrumb t(:'hyrax.admin.sidebar.workflow_review'), request.path
+      @status_list = Hyrax::Workflow::StatusListService.new(self, "-workflow_state_name_ssim:#{deposited_workflow_state_name}")
+      @published_list = Hyrax::Workflow::StatusListService.new(self, "workflow_state_name_ssim:#{deposited_workflow_state_name}")
+    end
+
+    private
+
+      def ensure_admin!
+        # Even though the user can view this admin set, they may not be able to view
+        # it on the admin page.
+        authorize! :read, :admin_dashboard
+      end
+
+      def deposited_workflow_state_name
+        'deposited'
+      end
+  end
+end

data/app/controllers/hyrax/admin_controller.rb

@@ -0,0 +1,20 @@
+module Hyrax
+  class AdminController < ApplicationController
+    include Blacklight::Base
+    before_action :ensure_admin!
+    layout 'admin'
+
+    def show
+      add_breadcrumb t(:'hyrax.controls.home'), root_path
+      add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+      @presenter = AdminDashboardPresenter.new
+      @admin_set_rows = Hyrax::AdminSetService.new(self).search_results_with_work_count(:read)
+    end
+
+    private
+
+      def ensure_admin!
+        authorize! :read, :admin_dashboard
+      end
+  end
+end

data/app/controllers/hyrax/admin_sets_controller.rb

@@ -0,0 +1,25 @@
+module Hyrax
+  class AdminSetsController < ApplicationController
+    include Hyrax::CollectionsControllerBehavior
+
+    self.presenter_class = Hyrax::AdminSetPresenter
+
+    self.list_search_builder_class = Hyrax::AdminSetSearchBuilder
+    # Used for the show action
+    self.single_item_search_builder_class = Hyrax::SingleAdminSetSearchBuilder
+    # Used to get the members for the show action
+    self.member_search_builder_class = Hyrax::AdminSetMemberSearchBuilder
+
+    # Override the default prefixes so that we use the collection partals.
+    def self.local_prefixes
+      ["hyrax/admin_sets", "hyrax/collections", 'catalog']
+    end
+
+    private
+
+      # Overriding the way that the search builder is initialized
+      def list_search_builder
+        list_search_builder_class.new(self, :read)
+      end
+  end
+end

data/app/controllers/hyrax/api/items_controller.rb

@@ -0,0 +1,82 @@
+module Hyrax
+  module API
+    # Adds an endpoint that consumes and RESTfully emits JSON from Arkivo
+    # representing new and updated Zotero-managed publications. An item in the
+    # Zotero parlance is mapped to a work in Hyrax.
+    class ItemsController < ApplicationController
+      skip_before_action :verify_authenticity_token
+      before_action :validate_item, only: [:create, :update]
+      before_action :authorize_token
+      before_action :my_load_and_authorize_resource, only: [:update, :destroy, :show]
+
+      attr_reader :item
+
+      def create
+        head :created, location: hyrax.api_item_path(actor.create_work_from_item)
+      end
+
+      def update
+        actor.update_work_from_item(@work)
+        head :no_content
+      end
+
+      def destroy
+        actor.destroy_work(@work)
+        head :no_content
+      end
+
+      def show
+        head :no_content
+      end
+
+      private
+
+        def my_load_and_authorize_resource
+          @work = Hyrax::WorkRelation.new.find(params[:id])
+
+          unless user.can? :edit, @work
+            return render plain: "#{user} lacks access to #{@work}", status: :unauthorized
+          end
+
+          if @work.arkivo_checksum.nil?
+            return render plain: "Forbidden: #{@work} not deposited via Arkivo", status: :forbidden
+          end
+        rescue ActiveFedora::ObjectNotFoundError
+          return render plain: "id '#{params[:id]}' not found", status: :not_found
+        end
+
+        def actor
+          Hyrax::Arkivo::Actor.new(user, item)
+        end
+
+        def token
+          request.get? || request.delete? ? params[:token] : item['token']
+        end
+
+        def user
+          ::User.find_by(arkivo_token: token)
+        end
+
+        def validate_item
+          return render plain: 'no item parameter', status: :bad_request if post_data.blank?
+          Hyrax::Arkivo::SchemaValidator.new(post_data).call
+        rescue Hyrax::Arkivo::InvalidItem => exception
+          return render plain: "invalid item parameter: #{exception.message}", status: :bad_request
+        else
+          @item = JSON.parse(post_data)
+        end
+
+        def post_data
+          request.raw_post
+        end
+
+        def authorize_token
+          render plain: "invalid user token: #{token}", status: :unauthorized unless valid_token?
+        end
+
+        def valid_token?
+          user.present?
+        end
+    end
+  end
+end

data/app/controllers/hyrax/api/zotero_controller.rb

@@ -0,0 +1,85 @@
+require 'oauth'
+
+module Hyrax
+  module API
+    # Adds the ability to authenticate against Zotero's OAuth endpoint
+    class ZoteroController < ApplicationController
+      before_action :authenticate_user!
+      before_action :authorize_user!
+      before_action :validate_params, only: :callback
+
+      def initiate
+        request_token = client.get_request_token(oauth_callback: callback_url)
+        session[:request_token] = request_token
+        current_user.zotero_token = request_token
+        current_user.save
+        redirect_to request_token.authorize_url(identity: '1', oauth_callback: callback_url)
+      rescue OAuth::Unauthorized
+        redirect_to root_url, alert: 'Invalid Zotero client key pair'
+      end
+
+      def callback
+        access_token = current_token.get_access_token(oauth_verifier: params['oauth_verifier'])
+        # parse userID and API key out of token and store in user instance
+        current_user.zotero_userid = access_token.params[:userID]
+        current_user.save
+        Hyrax::Arkivo::CreateSubscriptionJob.perform_later(current_user)
+        redirect_to hyrax.profile_path(current_user), notice: 'Successfully connected to Zotero!'
+      rescue OAuth::Unauthorized
+        redirect_to hyrax.edit_profile_path(current_user.to_param), alert: 'Please re-authenticate with Zotero'
+      ensure
+        current_user.zotero_token = nil
+        current_user.save
+      end
+
+      private
+
+        def authorize_user!
+          authorize! :create, Hyrax.primary_work_type
+        rescue CanCan::AccessDenied
+          return redirect_to root_url, alert: 'You are not authorized to perform this operation'
+        end
+
+        def validate_params
+          if malformed_request?
+            redirect_to hyrax.edit_profile_path(current_user.to_param),
+                        alert: "Malformed request from Zotero"
+          elsif invalid_token?
+            redirect_to hyrax.edit_profile_path(current_user.to_param),
+                        alert: "You have not yet connected to Zotero"
+          end
+        end
+
+        def malformed_request?
+          params[:oauth_token].blank? || params[:oauth_verifier].blank?
+        end
+
+        def invalid_token?
+          !current_token || current_token.params[:oauth_token] != params[:oauth_token]
+        end
+
+        def client
+          ::OAuth::Consumer.new(Hyrax::Zotero.config['client_key'], Hyrax::Zotero.config['client_secret'], options)
+        end
+
+        def current_token
+          current_user.zotero_token
+        end
+
+        def callback_url
+          "#{request.base_url}/api/zotero/callback"
+        end
+
+        def options
+          {
+            site: 'https://www.zotero.org',
+            scheme: :query_string,
+            http_method: :get,
+            request_token_path: '/oauth/request',
+            access_token_path: '/oauth/access',
+            authorize_path: '/oauth/authorize'
+          }
+        end
+    end
+  end
+end

data/app/controllers/hyrax/audits_controller.rb

@@ -0,0 +1,16 @@
+module Hyrax
+  class AuditsController < ApplicationController
+    before_action :authenticate_user!
+
+    def create
+      render json: audit_service.audit
+    end
+
+    protected
+
+      def audit_service
+        file_set = ::FileSet.find(params[:file_set_id])
+        FileSetAuditService.new(file_set)
+      end
+  end
+end

data/app/controllers/hyrax/batch_edits_controller.rb

@@ -0,0 +1,7 @@
+module Hyrax
+  class BatchEditsController < ApplicationController
+    include Hydra::BatchEditBehavior
+    include FileSetHelper
+    include BatchEditsControllerBehavior
+  end
+end

data/app/controllers/hyrax/batch_uploads_controller.rb

@@ -0,0 +1,3 @@
+class Hyrax::BatchUploadsController < ApplicationController
+  include Hyrax::BatchUploadsControllerBehavior
+end

data/app/controllers/hyrax/citations_controller.rb

@@ -0,0 +1,28 @@
+module Hyrax
+  class CitationsController < ApplicationController
+    include CurationConcernController
+    include Breadcrumbs
+    include SingularSubresourceController
+
+    before_action :build_breadcrumbs, only: [:work, :file]
+
+    def work
+      show
+    end
+
+    def file
+      # We set _@presenter_ here so it isn't set in CurationConcernController#presenter
+      # which is intended to find works (not files)
+      solr_file = ::SolrDocument.find(params[:id])
+      authorize! :show, solr_file
+      @presenter = FileSetPresenter.new(solr_file, current_ability, request)
+      show
+    end
+
+    private
+
+      def show_presenter
+        WorkShowPresenter
+      end
+  end
+end

data/app/controllers/hyrax/collections_controller.rb

@@ -0,0 +1,6 @@
+module Hyrax
+  class CollectionsController < ApplicationController
+    include CollectionsControllerBehavior
+    include BreadcrumbsForCollections
+  end
+end

data/app/controllers/hyrax/contact_form_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class ContactFormController < ApplicationController
+    include ContactFormControllerBehavior
+  end
+end

data/app/controllers/hyrax/content_blocks_controller.rb

@@ -0,0 +1,33 @@
+module Hyrax
+  class ContentBlocksController < ApplicationController
+    load_and_authorize_resource except: :index
+    before_action :load_featured_researchers, only: :index
+    authorize_resource only: :index
+
+    def index; end
+
+    def create
+      @content_block.save
+      redirect_back fallback_location: hyrax.content_blocks_path
+    end
+
+    def update
+      @content_block.update(update_params)
+      redirect_back fallback_location: hyrax.content_blocks_path
+    end
+
+    protected
+
+      def create_params
+        params.require(:content_block).permit([:name, :value, :external_key])
+      end
+
+      def update_params
+        params.require(:content_block).permit([:value, :external_key])
+      end
+
+      def load_featured_researchers
+        @content_blocks = ContentBlock.recent_researchers.page(params[:page])
+      end
+  end
+end

data/app/controllers/hyrax/dashboard_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class DashboardController < ApplicationController
+    include Hyrax::DashboardControllerBehavior
+  end
+end

data/app/controllers/hyrax/depositors_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class DepositorsController < ApplicationController
+    include DepositorsControllerBehavior
+  end
+end

data/app/controllers/hyrax/downloads_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class DownloadsController < ApplicationController
+    include Hyrax::DownloadBehavior
+  end
+end

data/app/controllers/hyrax/featured_work_lists_controller.rb

@@ -0,0 +1,18 @@
+module Hyrax
+  class FeaturedWorkListsController < ApplicationController
+    def create
+      authorize! :update, FeaturedWork
+      FeaturedWorkList.new.featured_works_attributes = list_params[:featured_works_attributes]
+      respond_to do |format|
+        format.html { redirect_to root_path }
+        format.json { head :no_content }
+      end
+    end
+
+    protected
+
+      def list_params
+        params.require(:featured_work_list).permit(featured_works_attributes: [:id, :order])
+      end
+  end
+end

data/app/controllers/hyrax/featured_works_controller.rb

@@ -0,0 +1,30 @@
+module Hyrax
+  class FeaturedWorksController < ApplicationController
+    def create
+      authorize! :create, FeaturedWork
+      @featured_work = FeaturedWork.new(work_id: params[:id])
+
+      respond_to do |format|
+        if @featured_work.save
+          format.json { render json: @featured_work, status: :created }
+        else
+          format.json { render json: @featured_work.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    def destroy
+      authorize! :destroy, FeaturedWork
+      @featured_work = FeaturedWork.find_by(work_id: params[:id])
+      if @featured_work
+        # Handle the case where a separate request may have already
+        # destroyed this work
+        @featured_work.destroy
+      end
+
+      respond_to do |format|
+        format.json { head :no_content }
+      end
+    end
+  end
+end

data/app/controllers/hyrax/file_sets_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class FileSetsController < ApplicationController
+    include Hyrax::FileSetsControllerBehavior
+  end
+end

data/app/controllers/hyrax/homepage_controller.rb

@@ -0,0 +1,3 @@
+class Hyrax::HomepageController < ApplicationController
+  include Hyrax::HomepageControllerBehavior
+end

data/app/controllers/hyrax/mailbox_controller.rb

@@ -0,0 +1,26 @@
+module Hyrax
+  class MailboxController < ApplicationController
+    before_action :authenticate_user!
+
+    def index
+      @messages = user_mailbox.inbox
+    end
+
+    def delete_all
+      user_mailbox.delete_all
+      redirect_to hyrax.notifications_path, alert: t('hyrax.mailbox.notifications_deleted')
+    end
+
+    def destroy
+      message_id = params[:id]
+      alert = user_mailbox.destroy(message_id)
+      redirect_to hyrax.notifications_path, alert: alert
+    end
+
+    private
+
+      def user_mailbox
+        UserMailbox.new(current_user)
+      end
+  end
+end