@taon-dev/cms 21.0.22 → 21.0.24

package/lib-prod/taon-cms-comment/taon-cms-comment.abstract.context.js

@@ -6,12 +6,22 @@ import { TaonCmsCommentRepository } from './taon-cms-comment.repository';
 import { TaonCmsCommentProvider } from './taon-cms-comment.provider';
 import { TaonCmsCommentMiddleware } from './taon-cms-comment.middleware';
 import { TaonCmsCommentSubscriber } from './taon-cms-comment.subscriber';
+import { TaonCmsCommentVoteEntity } from './taon-cms-comment-vote.entity';
+import { TaonCmsCommentSpamReportEntity } from './taon-cms-comment-spam-report.entity';
+import { TaonCmsCommentBlockedUserEntity } from './taon-cms-comment-blocked-user.entity';
+import { TaonCmsCommentBlockedPhraseEntity } from './taon-cms-comment-blocked-phrase.entity';
 //#endregion
 export const TaonCmsCommentAbstractContext = createContext(() => ({
     contextName: 'TaonCmsCommentAbstractContext',
     abstract: true,
     contexts: { TaonBaseContext },
-    entities: { TaonCmsCommentEntity },
+    entities: {
+        TaonCmsCommentEntity,
+        TaonCmsCommentVoteEntity,
+        TaonCmsCommentSpamReportEntity,
+        TaonCmsCommentBlockedUserEntity,
+        TaonCmsCommentBlockedPhraseEntity,
+    },
     controllers: { TaonCmsCommentController },
     repositories: { TaonCmsCommentRepository },
     providers: { TaonCmsCommentProvider },

package/lib-prod/taon-cms-comment/taon-cms-comment.abstract.context.js.map

@@ -1 +1 @@
-{"version":3,"file":"taon-cms-comment.abstract.context.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,YAAY;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,WAAW,EAAE,+BAA+B;IAC5C,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,EAAE,eAAe,EAAE;IAC7B,QAAQ,EAAE,EAAE,oBAAoB,EAAE;IAClC,WAAW,EAAE,EAAE,wBAAwB,EAAE;IACzC,YAAY,EAAE,EAAE,wBAAwB,EAAE;IAC1C,SAAS,EAAE,EAAE,sBAAsB,EAAE;IACrC,WAAW,EAAE,EAAE,wBAAwB,EAAE;IACzC,WAAW,EAAE,EAAE,wBAAwB,EAAE;CAC1C,CAAC,CAAC,CAAC"}
+{"version":3,"file":"taon-cms-comment.abstract.context.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EAAE,iCAAiC,EAAE,MAAM,0CAA0C,CAAC;AAC7F,YAAY;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,WAAW,EAAE,+BAA+B;IAC5C,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,EAAE,eAAe,EAAE;IAC7B,QAAQ,EAAE;QACR,oBAAoB;QACpB,wBAAwB;QACxB,8BAA8B;QAC9B,+BAA+B;QAC/B,iCAAiC;KAClC;IACD,WAAW,EAAE,EAAE,wBAAwB,EAAE;IACzC,YAAY,EAAE,EAAE,wBAAwB,EAAE;IAC1C,SAAS,EAAE,EAAE,sBAAsB,EAAE;IACrC,WAAW,EAAE,EAAE,wBAAwB,EAAE;IACzC,WAAW,EAAE,EAAE,wBAAwB,EAAE;CAC1C,CAAC,CAAC,CAAC"}

package/lib-prod/taon-cms-comment/taon-cms-comment.controller.d.ts

@@ -1,11 +1,53 @@
 import { TaonBaseCrudController, Taon__NS__Response } from 'taon/lib-prod';
+import { TaonCmsCommentBlockedPhraseEntity } from './taon-cms-comment-blocked-phrase.entity';
+import { TaonCmsCommentBlockedUserEntity } from './taon-cms-comment-blocked-user.entity';
 import { TaonCmsCommentEntity } from './taon-cms-comment.entity';
-import { TaonCmsCommentRepository } from './taon-cms-comment.repository';
+interface CreateCommentInput {
+    contentId: number;
+    body: string;
+}
+interface VoteInput {
+    commentId: number;
+    value: -1 | 1;
+}
+interface BlockedUserInput {
+    userId: number;
+    blocked: boolean;
+}
+export interface CommentListItem extends TaonCmsCommentEntity {
+    voteScore: number;
+    upvotes: number;
+    downvotes: number;
+    spamReports: number;
+    currentUserVote: -1 | 1 | 0;
+    currentUserReported: boolean;
+    postTitle: string;
+    postSlug: string;
+    authorName: string;
+}
 export declare class TaonCmsCommentController extends TaonBaseCrudController<TaonCmsCommentEntity> {
     entityClassResolveFn: () => typeof TaonCmsCommentEntity;
-    taonCmsCommentRepository: TaonCmsCommentRepository;
-    /**
-     * TODO remove this demo example method
-     */
-    helloWord(yourName: string): Taon__NS__Response<string>;
+    private readonly taonSessionRepository;
+    private readonly taonAuthContextRepository;
+    private readonly posts;
+    private repository;
+    private requireAuthenticated;
+    private requireCmsManager;
+    getComments(contentId: number): Taon__NS__Response<CommentListItem[]>;
+    createComment(input: CreateCommentInput): Taon__NS__Response<CommentListItem>;
+    deleteComment(commentId: number): Taon__NS__Response<boolean>;
+    voteComment(input: VoteInput): Taon__NS__Response<CommentListItem>;
+    reportSpam(commentId: number): Taon__NS__Response<boolean>;
+    getCommentsBackoffice(pageNumber?: number, pageSize?: number, id?: string, text?: string, author?: string): Taon__NS__Response<{
+        items: CommentListItem[];
+        total: number;
+    }>;
+    getBlockedUsers(): Taon__NS__Response<TaonCmsCommentBlockedUserEntity[]>;
+    setBlockedUser(input: BlockedUserInput): Taon__NS__Response<boolean>;
+    getBlockedPhrases(): Taon__NS__Response<TaonCmsCommentBlockedPhraseEntity[]>;
+    addBlockedPhrase(phrase: string): Taon__NS__Response<TaonCmsCommentBlockedPhraseEntity>;
+    deleteBlockedPhrase(id: number): Taon__NS__Response<boolean>;
+    private requirePostReadAccess;
+    private withModerationData;
 }
+export {};

package/lib-prod/taon-cms-comment/taon-cms-comment.controller.js

@@ -1,40 +1,522 @@
-var TaonCmsCommentController_1;
 //#region imports
-import { TaonController, TaonBaseCrudController, Query, GET, ClassHelpers__NS__getName } from 'taon/lib-prod';
+import { Body, DELETE, GET, HttpStatusEnum, POST, Query, TaonBaseCrudController, TaonController, getStatusCode, Taon__NS__error } from 'taon/lib-prod';
+import { TaonAuthContextRepository, TaonSessionRepository, TaonSessionUserEntity, } from '@taon-dev/session/lib-prod';
+import { TaonCmsContentEntity } from '../taon-cms-content/taon-cms-content.entity';
+import { TaonCmsContentRepository } from '../taon-cms-content/taon-cms-content.repository';
+import { TaonCmsCommentBlockedPhraseEntity } from './taon-cms-comment-blocked-phrase.entity';
+import { TaonCmsCommentBlockedUserEntity } from './taon-cms-comment-blocked-user.entity';
 import { TaonCmsCommentEntity } from './taon-cms-comment.entity';
-import { TaonCmsCommentRepository } from './taon-cms-comment.repository';
-//#endregion
-let TaonCmsCommentController = TaonCmsCommentController_1 = class TaonCmsCommentController extends TaonBaseCrudController {
+import { TaonCmsCommentSpamReportEntity } from './taon-cms-comment-spam-report.entity';
+import { TaonCmsCommentVoteEntity } from './taon-cms-comment-vote.entity';
+let TaonCmsCommentController = class TaonCmsCommentController extends TaonBaseCrudController {
     entityClassResolveFn = () => TaonCmsCommentEntity;
-    taonCmsCommentRepository = this.injectCustomRepo(TaonCmsCommentRepository);
-    //#region methods & getters / hello world
-    /**
-     * TODO remove this demo example method
-     */
-    helloWord(yourName) {
+    taonSessionRepository = this.injectCustomRepo(TaonSessionRepository);
+    taonAuthContextRepository = this.injectCustomRepo(TaonAuthContextRepository);
+    posts = this.injectCustomRepo(TaonCmsContentRepository);
+    repository(entity) {
+        return this.ctx.connection.manager.getRepository(entity);
+    }
+    async requireAuthenticated(req, res, t) {
+        //#region @websqlFunc
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req, res });
+        const userId = Number(req.userId);
+        if (!Number.isSafeInteger(userId) || userId <= 0) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.UNAUTHORIZED),
+                message: t.gettext('Authentication is required to comment.'),
+            });
+        }
+        return userId;
+        //#endregion
+    }
+    async requireCmsManager(req, t) {
+        //#region @websqlFunc
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req });
+        const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+        if (!context?.hasAccess?.toManageCms) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                message: t.gettext("You can't manage CMS comments."),
+            });
+        }
+        //#endregion
+    }
+    getComments(contentId) {
+        //#region @websqlFunc
+        return async (req, res, { t }) => {
+            const id = Number(contentId);
+            if (!Number.isSafeInteger(id) || id <= 0) {
+                return [];
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id },
+            });
+            if (!post) {
+                return [];
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const currentUserId = Number(req.userId) || 0;
+            const comments = await this.db.find({
+                where: { contentId: id, status: 'published' },
+                order: { createdAt: 'ASC' },
+            });
+            return this.withModerationData(comments, currentUserId);
+        };
+        //#endregion
+    }
+    createComment(input) {
+        //#region @websqlFunc
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const contentId = Number(input?.contentId);
+            const body = typeof input?.body === 'string' ? input.body.trim() : '';
+            if (!Number.isSafeInteger(contentId) || contentId <= 0 || !body) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A post and comment text are required.'),
+                });
+            }
+            if (body.length > 500) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Comments cannot exceed 500 characters.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const blockedUser = await this.repository(TaonCmsCommentBlockedUserEntity).findOne({ where: { userId } });
+            if (blockedUser) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                    message: t.gettext('Your account is not allowed to comment.'),
+                });
+            }
+            const blockedPhrases = await this.repository(TaonCmsCommentBlockedPhraseEntity).find();
+            const lowerBody = body.toLowerCase();
+            if (blockedPhrases.some(phrase => lowerBody.includes(phrase.normalizedPhrase))) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Your comment contains a blocked word or phrase.'),
+                });
+            }
+            const dayStart = new Date();
+            dayStart.setHours(0, 0, 0, 0);
+            const tomorrow = new Date(dayStart);
+            tomorrow.setDate(tomorrow.getDate() + 1);
+            const commentsToday = await this.db
+                .createQueryBuilder('comment')
+                .where('comment.userId = :userId', { userId })
+                .andWhere('comment.createdAt >= :dayStart', { dayStart })
+                .andWhere('comment.createdAt < :tomorrow', { tomorrow })
+                .getCount();
+            if (commentsToday >= 50) {
+                Taon__NS__error({
+                    status: 429,
+                    message: t.gettext('You have reached the limit of 50 comments per day.'),
+                });
+            }
+            const comment = await this.db.save(this.db.create({
+                contentId,
+                parentCommentId: null,
+                userId,
+                body,
+                status: 'published',
+            }));
+            return (await this.withModerationData([comment], userId))[0];
+        };
+        //#endregion
+    }
+    deleteComment(commentId) {
+        //#region @websqlFunc
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const comment = await this.db.findOne({ where: { id: commentId } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+            if (comment.userId !== userId && !context?.hasAccess?.toManageCms) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                    message: t.gettext('You are not allowed to delete this comment.'),
+                });
+            }
+            await this.repository(TaonCmsCommentVoteEntity).delete({ commentId });
+            await this.repository(TaonCmsCommentSpamReportEntity).delete({
+                commentId,
+            });
+            await this.db.remove(comment);
+            return true;
+        };
+        //#endregion
+    }
+    voteComment(input) {
+        //#region @websqlFunc
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            if (!Number.isSafeInteger(Number(input?.commentId)) ||
+                (input.value !== -1 && input.value !== 1)) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Choose a valid comment vote.'),
+                });
+            }
+            const commentId = Number(input.commentId);
+            const comment = await this.db.findOne({ where: { id: commentId } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: comment.contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const votes = this.repository(TaonCmsCommentVoteEntity);
+            const existing = await votes.findOne({ where: { commentId, userId } });
+            if (existing?.value === input.value) {
+                await votes.remove(existing);
+            }
+            else if (existing) {
+                existing.value = input.value;
+                await votes.save(existing);
+            }
+            else {
+                await votes.save(votes.create({ commentId, userId, value: input.value }));
+            }
+            return (await this.withModerationData([comment], userId))[0];
+        };
+        //#endregion
+    }
+    reportSpam(commentId) {
+        //#region @websqlFunc
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const id = Number(commentId);
+            if (!Number.isSafeInteger(id) || id <= 0) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A valid comment is required.'),
+                });
+            }
+            const comment = await this.db.findOne({ where: { id } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: comment.contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const reports = this.repository(TaonCmsCommentSpamReportEntity);
+            const existing = await reports.findOne({
+                where: { commentId: id, userId },
+            });
+            if (!existing) {
+                await reports.save(reports.create({ commentId: id, userId }));
+            }
+            return true;
+        };
+        //#endregion
+    }
+    getCommentsBackoffice(pageNumber = 1, pageSize = 10, id, text, author) {
+        //#region @websqlFunc
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const page = Math.max(1, Number(pageNumber) || 1);
+            const size = Math.min(100, Math.max(1, Number(pageSize) || 10));
+            const query = this.db.createQueryBuilder('comment');
+            if (id?.trim()) {
+                const commentId = Number(id.trim());
+                query.andWhere('comment.id = :id', {
+                    id: Number.isSafeInteger(commentId) && commentId > 0 ? commentId : -1,
+                });
+            }
+            if (text?.trim()) {
+                query.andWhere('LOWER(comment.body) LIKE :text', {
+                    text: `%${text.trim().toLowerCase()}%`,
+                });
+            }
+            if (author?.trim()) {
+                query
+                    .leftJoin(TaonSessionUserEntity, 'sessionUser', 'sessionUser.id = comment.userId')
+                    .andWhere('(LOWER(sessionUser.username) LIKE :author OR CAST(comment.userId AS TEXT) LIKE :author)', { author: `%${author.trim().toLowerCase()}%` });
+            }
+            query.orderBy('comment.createdAt', 'DESC');
+            query.skip((page - 1) * size).take(size);
+            const [comments, total] = await query.getManyAndCount();
+            return {
+                items: await this.withModerationData(comments, Number(req.userId) || 0),
+                total,
+            };
+        };
+        //#endregion
+    }
+    getBlockedUsers() {
+        //#region @websqlFunc
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            return this.repository(TaonCmsCommentBlockedUserEntity).find({
+                order: { createdAt: 'DESC' },
+            });
+        };
+        //#endregion
+    }
+    setBlockedUser(input) {
+        //#region @websqlFunc
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const userId = Number(input?.userId);
+            if (!Number.isSafeInteger(userId) ||
+                userId <= 0 ||
+                typeof input?.blocked !== 'boolean') {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A valid user ID and blocked status are required.'),
+                });
+            }
+            if (input.blocked) {
+                const user = await this.repository(TaonSessionUserEntity).findOne({
+                    where: { id: userId },
+                });
+                if (!user) {
+                    Taon__NS__error({
+                        status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                        message: t.gettext('The user was not found.'),
+                    });
+                }
+            }
+            const blockedUsers = this.repository(TaonCmsCommentBlockedUserEntity);
+            const existing = await blockedUsers.findOne({ where: { userId } });
+            if (input.blocked && !existing) {
+                await blockedUsers.save(blockedUsers.create({ userId }));
+            }
+            else if (!input.blocked && existing) {
+                await blockedUsers.remove(existing);
+            }
+            return true;
+        };
+        //#endregion
+    }
+    getBlockedPhrases() {
+        //#region @websqlFunc
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            return this.repository(TaonCmsCommentBlockedPhraseEntity).find({
+                order: { phrase: 'ASC' },
+            });
+        };
+        //#endregion
+    }
+    addBlockedPhrase(phrase) {
         //#region @websqlFunc
-        return async (req, res) => {
-            const numOfEntities = await this.db.count();
-            const numberOfEvenEntities = await this.taonCmsCommentRepository.countEntitesWithEvenId();
-            return `Hello ${yourName || 'world'} from ${ClassHelpers__NS__getName(TaonCmsCommentController_1)}
-      controller..  ${numOfEntities} entites in db..
-      ${numberOfEvenEntities} entites with even ids (2,4,6,8 etc.)
-      `;
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const normalizedPhrase = typeof phrase === 'string' ? phrase.trim().toLowerCase() : '';
+            const displayPhrase = typeof phrase === 'string' ? phrase.trim() : '';
+            if (!displayPhrase || displayPhrase.length > 500) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Enter a word or phrase of at most 500 characters.'),
+                });
+            }
+            const phrases = this.repository(TaonCmsCommentBlockedPhraseEntity);
+            const existing = await phrases.findOne({ where: { normalizedPhrase } });
+            if (existing) {
+                return existing;
+            }
+            return phrases.save(phrases.create({ phrase: displayPhrase, normalizedPhrase }));
         };
         //#endregion
     }
+    deleteBlockedPhrase(id) {
+        //#region @websqlFunc
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const phrase = await this.repository(TaonCmsCommentBlockedPhraseEntity).findOne({ where: { id } });
+            if (!phrase) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The blocked phrase was not found.'),
+                });
+            }
+            await this.repository(TaonCmsCommentBlockedPhraseEntity).remove(phrase);
+            return true;
+        };
+        //#endregion
+    }
+    async requirePostReadAccess(post, req, res, t) {
+        //#region @websqlFunc
+        const { permissions } = await this.posts.getPermissionConfiguration(post.id, true);
+        const isPublic = post.status === 'published' && permissions.length === 0;
+        if (isPublic) {
+            return;
+        }
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req, res });
+        const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+        const userPermissions = new Set(context?.permissions ?? []);
+        if (!context?.isSuperUser &&
+            !permissions.some(permission => userPermissions.has(permission.code))) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                message: t.gettext('You do not have access to this post.'),
+            });
+        }
+        //#endregion
+    }
+    async withModerationData(comments, currentUserId) {
+        //#region @websqlFunc
+        const voteRepository = this.repository(TaonCmsCommentVoteEntity);
+        const reportRepository = this.repository(TaonCmsCommentSpamReportEntity);
+        return Promise.all(comments.map(async (comment) => {
+            const [votes, reports, post, user] = await Promise.all([
+                voteRepository.find({ where: { commentId: comment.id } }),
+                reportRepository.find({ where: { commentId: comment.id } }),
+                this.repository(TaonCmsContentEntity).findOne({
+                    where: { id: comment.contentId },
+                }),
+                this.repository(TaonSessionUserEntity).findOne({
+                    where: { id: comment.userId },
+                }),
+            ]);
+            const upvotes = votes.filter(vote => vote.value === 1).length;
+            const downvotes = votes.filter(vote => vote.value === -1).length;
+            return Object.assign(new TaonCmsCommentEntity(), comment, {
+                upvotes,
+                downvotes,
+                voteScore: upvotes - downvotes,
+                spamReports: reports.length,
+                currentUserVote: votes.find(vote => vote.userId === currentUserId)?.value ?? 0,
+                currentUserReported: reports.some(report => report.userId === currentUserId),
+                postTitle: post?.title ?? '',
+                postSlug: post?.slug ?? '',
+                authorName: user?.username?.trim() || `User #${comment.userId}`,
+            });
+        }));
+        //#endregion
+    }
 };
 __decorate([
     GET(),
-    __param(0, Query('yourName')),
+    __param(0, Query('contentId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "getComments", null);
+__decorate([
+    POST(),
+    __param(0, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "createComment", null);
+__decorate([
+    DELETE(),
+    __param(0, Query('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "deleteComment", null);
+__decorate([
+    POST(),
+    __param(0, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "voteComment", null);
+__decorate([
+    POST(),
+    __param(0, Body('commentId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "reportSpam", null);
+__decorate([
+    GET(),
+    __param(0, Query('pageNumber')),
+    __param(1, Query('pageSize')),
+    __param(2, Query('id')),
+    __param(3, Query('text')),
+    __param(4, Query('author')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String, String, String]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "getCommentsBackoffice", null);
+__decorate([
+    GET(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "getBlockedUsers", null);
+__decorate([
+    POST(),
+    __param(0, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "setBlockedUser", null);
+__decorate([
+    GET(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "getBlockedPhrases", null);
+__decorate([
+    POST(),
+    __param(0, Body('phrase')),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Object)
-], TaonCmsCommentController.prototype, "helloWord", null);
-TaonCmsCommentController = TaonCmsCommentController_1 = __decorate([
+], TaonCmsCommentController.prototype, "addBlockedPhrase", null);
+__decorate([
+    DELETE(),
+    __param(0, Query('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", Object)
+], TaonCmsCommentController.prototype, "deleteBlockedPhrase", null);
+TaonCmsCommentController = __decorate([
     TaonController({
         className: 'TaonCmsCommentController',
-        allowedMethods: []
+        allowedMethods: [
+            'getComments',
+            'createComment',
+            'deleteComment',
+            'voteComment',
+            'reportSpam',
+            'getCommentsBackoffice',
+            'getBlockedUsers',
+            'setBlockedUser',
+            'getBlockedPhrases',
+            'addBlockedPhrase',
+            'deleteBlockedPhrase',
+        ],
     })
 ], TaonCmsCommentController);
 export { TaonCmsCommentController };