threddedDANIEL 0.14.5

data/app/controllers/thredded/private_posts_controller.rb

@@ -0,0 +1,96 @@
+# frozen_string_literal: true
+
+module Thredded
+  # A controller for managing {PrivatePost}s.
+  class PrivatePostsController < Thredded::ApplicationController
+    include ActionView::RecordIdentifier
+    include NewPrivatePostParams
+
+    helper_method :topic
+    after_action :update_user_activity
+
+    after_action :verify_authorized
+
+    def new
+      @post_form = Thredded::PrivatePostForm.new(
+        user: thredded_current_user, topic: parent_topic, post_params: new_private_post_params
+      )
+      authorize_creating @post_form.post
+    end
+
+    def create
+      @post_form = Thredded::PrivatePostForm.new(
+        user: thredded_current_user, topic: parent_topic, post_params: new_private_post_params
+      )
+      authorize_creating @post_form.post
+      if @post_form.save
+        redirect_to post_path(@post_form.post, user: thredded_current_user)
+      else
+        render :new
+      end
+    end
+
+    def edit
+      @post_form = Thredded::PrivatePostForm.for_persisted(post)
+      authorize @post_form.post, :update?
+      return redirect_to(canonical_topic_params) unless params_match?(canonical_topic_params)
+      render
+    end
+
+    def update
+      authorize post, :update?
+      post.update(new_private_post_params)
+
+      redirect_to post_path(post, user: thredded_current_user)
+    end
+
+    def destroy
+      authorize post, :destroy?
+      post.destroy!
+
+      redirect_back fallback_location: topic_url(topic),
+                    notice: I18n.t('thredded.posts.deleted_notice')
+    end
+
+    def mark_as_unread
+      authorize post, :read?
+      page = post.page
+      post.mark_as_unread(thredded_current_user, page)
+      after_mark_as_unread # customization hook
+    end
+
+    def quote
+      authorize_reading post
+      render plain: Thredded::ContentFormatter.quote_content(post.content)
+    end
+
+    private
+
+    def canonical_topic_params
+      { private_topic_id: topic.slug }
+    end
+
+    def after_mark_as_unread
+      redirect_to private_topics_path
+    end
+
+    def topic
+      post.postable
+    end
+
+    def parent_topic
+      Thredded::PrivateTopic
+        .includes(:private_users)
+        .friendly
+        .find(params[:private_topic_id])
+    end
+
+    def post
+      @post ||= Thredded::PrivatePost.find(params[:id])
+    end
+
+    def current_page
+      params[:page].nil? ? 1 : params[:page].to_i
+    end
+  end
+end

data/app/controllers/thredded/private_topic_previews_controller.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Thredded
+  class PrivateTopicPreviewsController < Thredded::ApplicationController
+    include Thredded::NewPrivateTopicParams
+    include Thredded::RenderPreview
+
+    def preview
+      form = Thredded::PrivateTopicForm.new(new_private_topic_params)
+      @private_post = form.post
+      @private_post.postable = form.private_topic
+      render_preview
+    end
+  end
+end

data/app/controllers/thredded/private_topics_controller.rb

@@ -0,0 +1,102 @@
+# frozen_string_literal: true
+
+module Thredded
+  class PrivateTopicsController < Thredded::ApplicationController
+    include Thredded::NewPrivateTopicParams
+    include Thredded::NewPrivatePostParams
+
+    before_action :thredded_require_login!
+
+    def index
+      page_scope = Thredded::PrivateTopic
+        .distinct
+        .for_user(thredded_current_user)
+        .order_recently_posted_first
+        .page(params[:page])
+      return redirect_to(last_page_params(page_scope)) if page_beyond_last?(page_scope)
+      @private_topics = Thredded::PrivateTopicsPageView.new(thredded_current_user, page_scope)
+
+      Thredded::PrivateTopicForm.new(user: thredded_current_user).tap do |form|
+        @new_private_topic = form if policy(form.private_topic).create?
+      end
+    end
+
+    def show
+      authorize private_topic, :read?
+      return redirect_to(canonical_topic_params) unless params_match?(canonical_topic_params)
+
+      page_scope = private_topic
+        .posts
+        .includes(:user)
+        .order_oldest_first
+        .page(current_page)
+      return redirect_to(last_page_params(page_scope)) if page_beyond_last?(page_scope)
+      @posts = Thredded::TopicPostsPageView.new(thredded_current_user, private_topic, page_scope)
+
+      if thredded_signed_in?
+        Thredded::UserPrivateTopicReadState.touch!(
+          thredded_current_user.id, private_topic.id, page_scope.last, current_page
+        )
+      end
+
+      @new_post = Thredded::PrivatePostForm.new(
+        user: thredded_current_user, topic: private_topic, post_params: new_private_post_params
+      )
+    end
+
+    def new
+      @private_topic = Thredded::PrivateTopicForm.new(new_private_topic_params)
+      authorize_creating @private_topic.private_topic
+    end
+
+    def create
+      @private_topic = Thredded::PrivateTopicForm.new(new_private_topic_params)
+      if @private_topic.save
+        redirect_to @private_topic.private_topic
+      else
+        render :new
+      end
+    end
+
+    def edit
+      authorize private_topic, :update?
+      return redirect_to(canonical_topic_params) unless params_match?(canonical_topic_params)
+      render
+    end
+
+    def update
+      authorize private_topic, :update?
+      if private_topic.update(private_topic_params)
+        redirect_to private_topic_url(private_topic),
+                    notice: t('thredded.private_topics.updated_notice')
+      else
+        render :edit
+      end
+    end
+
+    private
+
+    def canonical_topic_params
+      { id: private_topic.slug }
+    end
+
+    def current_page
+      (params[:page] || 1).to_i
+    end
+
+    # Returns the `@private_topic` instance variable.
+    # If `@private_topic` is not set, it first sets it to the topic with the slug or ID given by `params[:id]`.
+    #
+    # @return [Thredded::PrivateTopic]
+    # @raise [Thredded::Errors::PrivateTopicNotFound] if the topic with the given slug does not exist.
+    def private_topic
+      @private_topic ||= Thredded::PrivateTopic.friendly_find!(params[:id])
+    end
+
+    def private_topic_params
+      params
+        .require(:private_topic)
+        .permit(:title)
+    end
+  end
+end

data/app/controllers/thredded/read_states_controller.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Thredded
+  class ReadStatesController < Thredded::ApplicationController
+    before_action :thredded_require_login!
+
+    def update
+      Thredded::MarkAllRead.run(thredded_current_user) if thredded_signed_in?
+
+      redirect_to request.referer
+    end
+  end
+end

data/app/controllers/thredded/theme_previews_controller.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module Thredded
+  class ThemePreviewsController < Thredded::ApplicationController
+    def show # rubocop:disable Metrics/MethodLength
+      @messageboard = Thredded::Messageboard.first
+      fail Thredded::Errors::DatabaseEmpty unless @messageboard
+      @user = if thredded_current_user.thredded_anonymous?
+                Thredded.user_class.new(id: 1334, name: 'joe', email: 'joe@example.com')
+              else
+                thredded_current_user
+              end
+      @messageboards = Thredded::Messageboard.all
+      @topics = Thredded::TopicsPageView.new(@user, @messageboard.topics.page(1).limit(3))
+      @private_topics = Thredded::PrivateTopicsPageView.new(@user, @user.thredded_private_topics.page(1).limit(3))
+      topic = Thredded::Topic.new(messageboard: @messageboard, title: 'Hello', slug: 'hello', user: @user)
+      @topic = Thredded::TopicView.from_user(topic, @user)
+      @posts = Thredded::TopicPostsPageView.new(@user, topic, topic.posts.page(1).limit(3))
+      @post = topic.posts.build(id: 1337, postable: topic, content: 'Hello world', user: @user)
+      @post_form = Thredded::PostForm.for_persisted(@post)
+      @new_post = Thredded::PostForm.new(user: @user, topic: topic)
+      @new_topic = Thredded::TopicForm.new(user: @user, messageboard: @messageboard)
+      @new_private_topic = Thredded::PrivateTopicForm.new(user: @user)
+      private_topic = Thredded::PrivateTopic.new(id: 17, title: 'Hello', user: @user, last_user: @user, users: [@user])
+      @private_topic = Thredded::PrivateTopicView.from_user(private_topic, @user)
+      @private_posts = Thredded::TopicPostsPageView.new(@user, private_topic, private_topic.posts.page(1).limit(3))
+      @private_post = private_topic.posts.build(
+        id: 1337, postable: private_topic, content: 'A private hello world', user: @user
+      )
+      @private_post_form = Thredded::PrivatePostForm.for_persisted(@private_post)
+      @preferences = Thredded::UserPreferencesForm.new(user: @user, messageboard: @messageboard)
+    end
+  end
+end

data/app/controllers/thredded/topic_previews_controller.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Thredded
+  class TopicPreviewsController < Thredded::ApplicationController
+    include Thredded::NewTopicParams
+    include Thredded::RenderPreview
+
+    def preview
+      form = Thredded::TopicForm.new(new_topic_params)
+      @post = form.post
+      @post.postable = form.topic
+      render_preview
+    end
+  end
+end

data/app/controllers/thredded/topics_controller.rb

@@ -0,0 +1,205 @@
+# frozen_string_literal: true
+
+module Thredded
+  class TopicsController < Thredded::ApplicationController # rubocop:disable Metrics/ClassLength
+    include Thredded::NewTopicParams
+    include Thredded::NewPostParams
+
+    before_action :thredded_require_login!,
+                  only: %i[edit new update create destroy follow unfollow]
+
+    before_action :use_topic_messageboard,
+                  only: %i[show edit update destroy follow unfollow]
+
+    after_action :update_user_activity
+
+    after_action :verify_authorized, except: %i[search]
+    after_action :verify_policy_scoped, except: %i[show new create edit update destroy follow unfollow]
+
+    def index
+      authorize_reading messageboard
+      unless params_match?(canonical_messageboard_params)
+        skip_policy_scope
+        return redirect_to(canonical_messageboard_params)
+      end
+
+      page_scope = policy_scope(messageboard.topics)
+        .order_sticky_first.order_recently_posted_first
+        .page(current_page)
+      return redirect_to(last_page_params(page_scope)) if page_beyond_last?(page_scope)
+      @topics = Thredded::TopicsPageView.new(thredded_current_user, page_scope)
+      Thredded::TopicForm.new(messageboard: messageboard, user: thredded_current_user).tap do |form|
+        @new_topic = form if policy(form.topic).create?
+      end
+    end
+
+    def show
+      authorize topic, :read?
+      return redirect_to(canonical_topic_params) unless params_match?(canonical_topic_params)
+      page_scope = policy_scope(topic.posts)
+        .order_oldest_first
+        .includes(:user, :messageboard, :postable)
+        .page(current_page)
+      return redirect_to(last_page_params(page_scope)) if page_beyond_last?(page_scope)
+      @posts = Thredded::TopicPostsPageView.new(thredded_current_user, topic, page_scope)
+
+      if thredded_signed_in?
+        Thredded::UserTopicReadState.touch!(
+          thredded_current_user.id, topic.id, page_scope.last, current_page
+        )
+      end
+
+      @new_post = Thredded::PostForm.new(user: thredded_current_user, topic: topic, post_params: new_post_params)
+    end
+
+    def search
+      in_messageboard = params.key?(:messageboard_id)
+      if in_messageboard
+        authorize_reading messageboard
+        unless params_match?(canonical_messageboard_params)
+          skip_policy_scope
+          return redirect_to(canonical_messageboard_params)
+        end
+      end
+      @query = params[:q].to_s
+      topics_scope = policy_scope(
+        if in_messageboard
+          messageboard.topics
+        else
+          Thredded::Topic.where(messageboard_id: policy_scope(Thredded::Messageboard.all).pluck(:id))
+        end
+      )
+      page_scope = topics_scope
+        .search_query(@query)
+        .order_recently_posted_first
+        .includes(:categories, :last_user, :user)
+        .page(current_page)
+      return redirect_to(last_page_params(page_scope)) if page_beyond_last?(page_scope)
+      @topics = Thredded::TopicsPageView.new(thredded_current_user, page_scope)
+    end
+
+    def new
+      @new_topic = Thredded::TopicForm.new(new_topic_params)
+      authorize_creating @new_topic.topic
+      return redirect_to(canonical_messageboard_params) unless params_match?(canonical_messageboard_params)
+      render
+    end
+
+    def category
+      authorize_reading messageboard
+      @category = messageboard.categories.friendly.find(params[:category_id])
+      @topics = Thredded::TopicsPageView.new(
+        thredded_current_user,
+        policy_scope(@category.topics)
+          .unstuck
+          .order_recently_posted_first
+          .page(current_page)
+      )
+      render :index
+    end
+
+    def create
+      @new_topic = Thredded::TopicForm.new(new_topic_params)
+      authorize_creating @new_topic.topic
+      if @new_topic.save
+        redirect_to messageboard_topics_path(messageboard)
+      else
+        render :new
+      end
+    end
+
+    def edit
+      authorize topic, :update?
+      return redirect_to(canonical_topic_params) unless params_match?(canonical_topic_params)
+      @edit_topic = Thredded::EditTopicForm.new(user: thredded_current_user, topic: topic)
+    end
+
+    def update
+      topic.assign_attributes(topic_params_for_update)
+      authorize topic, :update?
+      if topic.messageboard_id_changed?
+        # Work around the association not being reset.
+        # TODO: report issue to Rails. Looks like a regression of:
+        # https://rails.lighthouseapp.com/projects/8994/tickets/2989
+        topic.messageboard = Thredded::Messageboard.find(topic.messageboard_id)
+
+        authorize topic.messageboard, :post?
+      end
+      @edit_topic = Thredded::EditTopicForm.new(user: thredded_current_user, topic: topic)
+      if @edit_topic.save
+        redirect_to messageboard_topic_url(topic.messageboard, topic),
+                    notice: t('thredded.topics.updated_notice')
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      authorize topic, :destroy?
+      topic.destroy!
+      redirect_to messageboard_topics_path(messageboard),
+                  notice: t('thredded.topics.deleted_notice')
+    end
+
+    def follow
+      authorize topic, :read?
+      Thredded::UserTopicFollow.create_unless_exists(thredded_current_user.id, topic.id)
+      follow_change_response(following: true)
+    end
+
+    def unfollow
+      authorize topic, :read?
+      Thredded::UserTopicFollow.find_by(topic_id: topic.id, user_id: thredded_current_user.id).try(:destroy)
+      follow_change_response(following: false)
+    end
+
+    private
+
+    def canonical_messageboard_params
+      { messageboard_id: messageboard.slug }
+    end
+
+    def canonical_topic_params
+      { messageboard_id: messageboard.slug, id: topic.slug }
+    end
+
+    def follow_change_response(following:)
+      notice = following ? t('thredded.topics.followed_notice') : t('thredded.topics.unfollowed_notice')
+      respond_to do |format|
+        format.html { redirect_to messageboard_topic_url(messageboard, topic), notice: notice }
+        format.json { render(json: { follow: following }) }
+      end
+    end
+
+    # Returns the `@topic` instance variable.
+    # If `@topic` is not set, it first sets it to the topic with the slug or ID given by `params[:id]`.
+    #
+    # @return [Thredded::Topic]
+    # @raise [Thredded::Errors::TopicNotFound] if the topic with the given slug does not exist.
+    def topic
+      @topic ||= Thredded::Topic.friendly_find!(params[:id])
+    end
+
+    # Use the topic's messageboard instead of the one specified in the URL,
+    # to account for `params[:messageboard_id]` pointing to the wrong messageboard
+    def use_topic_messageboard
+      @messageboard = topic.messageboard
+    end
+
+    def topic_params
+      params
+        .require(:topic)
+        .permit(:title, :locked, :sticky, category_ids: [])
+    end
+
+    def topic_params_for_update
+      params
+        .require(:topic)
+        .permit(:title, :locked, :sticky, :messageboard_id, category_ids: [])
+    end
+
+    def current_page
+      (params[:page] || 1).to_i
+    end
+  end
+end