ghost 4.48.0 → 5.0.2

package/core/server/api/v2/slugs.js

@@ -1,51 +0,0 @@
-const models = require('../../models');
-const tpl = require('@tryghost/tpl');
-const errors = require('@tryghost/errors');
-
-const messages = {
-    couldNotGenerateSlug: 'Could not generate slug.'
-};
-
-const allowedTypes = {
-    post: models.Post,
-    tag: models.Tag,
-    user: models.User
-};
-
-module.exports = {
-    docName: 'slugs',
-    generate: {
-        options: [
-            'include',
-            'type'
-        ],
-        data: [
-            'name'
-        ],
-        permissions: true,
-        validation: {
-            options: {
-                type: {
-                    required: true,
-                    values: Object.keys(allowedTypes)
-                }
-            },
-            data: {
-                name: {
-                    required: true
-                }
-            }
-        },
-        query(frame) {
-            return models.Base.Model.generateSlug(allowedTypes[frame.options.type], frame.data.name, {status: 'all'})
-                .then((slug) => {
-                    if (!slug) {
-                        return Promise.reject(new errors.InternalServerError({
-                            message: tpl(messages.couldNotGenerateSlug)
-                        }));
-                    }
-                    return slug;
-                });
-        }
-    }
-};

package/core/server/api/v2/tags-public.js

@@ -1,71 +0,0 @@
-const Promise = require('bluebird');
-const tpl = require('@tryghost/tpl');
-const errors = require('@tryghost/errors');
-const models = require('../../models');
-
-const ALLOWED_INCLUDES = ['count.posts'];
-
-const messages = {
-    tagNotFound: 'Tag not found.'
-};
-
-module.exports = {
-    docName: 'tags',
-
-    browse: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'limit',
-            'order',
-            'page',
-            'debug'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.TagPublic.findPage(frame.options);
-        }
-    },
-
-    read: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'debug'
-        ],
-        data: [
-            'id',
-            'slug',
-            'visibility'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.TagPublic.findOne(frame.data, frame.options)
-                .then((model) => {
-                    if (!model) {
-                        return Promise.reject(new errors.NotFoundError({
-                            message: tpl(messages.tagNotFound)
-                        }));
-                    }
-
-                    return model;
-                });
-        }
-    }
-};

package/core/server/api/v2/tags.js

@@ -1,159 +0,0 @@
-const Promise = require('bluebird');
-const tpl = require('@tryghost/tpl');
-const errors = require('@tryghost/errors');
-const models = require('../../models');
-
-const ALLOWED_INCLUDES = ['count.posts'];
-
-const messages = {
-    tagNotFound: 'Tag not found.'
-};
-
-module.exports = {
-    docName: 'tags',
-
-    browse: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'limit',
-            'order',
-            'page',
-            'debug'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Tag.findPage(frame.options);
-        }
-    },
-
-    read: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'debug'
-        ],
-        data: [
-            'id',
-            'slug',
-            'visibility'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Tag.findOne(frame.data, frame.options)
-                .then((model) => {
-                    if (!model) {
-                        return Promise.reject(new errors.NotFoundError({
-                            message: tpl(messages.tagNotFound)
-                        }));
-                    }
-
-                    return model;
-                });
-        }
-    },
-
-    add: {
-        statusCode: 201,
-        headers: {
-            cacheInvalidate: true
-        },
-        options: [
-            'include'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Tag.add(frame.data.tags[0], frame.options);
-        }
-    },
-
-    edit: {
-        headers: {},
-        options: [
-            'id',
-            'include'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                },
-                id: {
-                    required: true
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Tag.edit(frame.data.tags[0], frame.options)
-                .then((model) => {
-                    if (!model) {
-                        return Promise.reject(new errors.NotFoundError({
-                            message: tpl(messages.tagNotFound)
-                        }));
-                    }
-
-                    if (model.wasChanged()) {
-                        this.headers.cacheInvalidate = true;
-                    } else {
-                        this.headers.cacheInvalidate = false;
-                    }
-
-                    return model;
-                });
-        }
-    },
-
-    destroy: {
-        statusCode: 204,
-        headers: {
-            cacheInvalidate: true
-        },
-        options: [
-            'id'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                },
-                id: {
-                    required: true
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Tag.destroy(frame.options)
-                .then(() => null)
-                .catch(models.Tag.NotFoundError, () => {
-                    return Promise.reject(new errors.NotFoundError({
-                        message: tpl(messages.tagNotFound)
-                    }));
-                });
-        }
-    }
-};

package/core/server/api/v2/themes.js

@@ -1,133 +0,0 @@
-const themeService = require('../../services/themes');
-const limitService = require('../../services/limits');
-const models = require('../../models');
-
-// Used to emit theme.uploaded which is used in core/server/analytics-events
-const events = require('../../lib/common/events');
-
-module.exports = {
-    docName: 'themes',
-
-    browse: {
-        permissions: true,
-        query() {
-            return themeService.api.getJSON();
-        }
-    },
-
-    activate: {
-        headers: {
-            cacheInvalidate: true
-        },
-        options: [
-            'name'
-        ],
-        validation: {
-            options: {
-                name: {
-                    required: true
-                }
-            }
-        },
-        permissions: true,
-        async query(frame) {
-            let themeName = frame.options.name;
-
-            if (limitService.isLimited('customThemes')) {
-                await limitService.errorIfWouldGoOverLimit('customThemes', {value: themeName});
-            }
-
-            const newSettings = [{
-                key: 'active_theme',
-                value: themeName
-            }];
-
-            return themeService.api.activate(themeName)
-                .then((checkedTheme) => {
-                    // @NOTE: we use the model, not the API here, as we don't want to trigger permissions
-                    return models.Settings.edit(newSettings, frame.options)
-                        .then(() => checkedTheme);
-                })
-                .then((checkedTheme) => {
-                    return themeService.api.getJSON(themeName, checkedTheme);
-                });
-        }
-    },
-
-    upload: {
-        headers: {},
-        permissions: {
-            method: 'add'
-        },
-        async query(frame) {
-            if (limitService.isLimited('customThemes')) {
-                // Sending a bad string to make sure it fails (empty string isn't valid)
-                await limitService.errorIfWouldGoOverLimit('customThemes', {value: '.'});
-            }
-
-            // @NOTE: consistent filename uploads
-            {
-                frame.options.originalname = frame.file.originalname.toLowerCase();
-            }
-
-            let zip = {
-                path: frame.file.path,
-                name: frame.file.originalname
-            };
-
-            return themeService.api.setFromZip(zip)
-                .then(({theme, themeOverridden}) => {
-                    if (themeOverridden) {
-                        // CASE: clear cache
-                        this.headers.cacheInvalidate = true;
-                    }
-                    events.emit('theme.uploaded');
-                    return theme;
-                });
-        }
-    },
-
-    download: {
-        options: [
-            'name'
-        ],
-        validation: {
-            options: {
-                name: {
-                    required: true
-                }
-            }
-        },
-        permissions: {
-            method: 'read'
-        },
-        query(frame) {
-            let themeName = frame.options.name;
-
-            return themeService.api.getZip(themeName);
-        }
-    },
-
-    destroy: {
-        statusCode: 204,
-        headers: {
-            cacheInvalidate: true
-        },
-        options: [
-            'name'
-        ],
-        validation: {
-            options: {
-                name: {
-                    required: true
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            let themeName = frame.options.name;
-
-            return themeService.api.destroy(themeName);
-        }
-    }
-};

package/core/server/api/v2/users.js

@@ -1,179 +0,0 @@
-const Promise = require('bluebird');
-const tpl = require('@tryghost/tpl');
-const errors = require('@tryghost/errors');
-const models = require('../../models');
-const permissionsService = require('../../services/permissions');
-const ALLOWED_INCLUDES = ['count.posts', 'permissions', 'roles', 'roles.permissions'];
-const UNSAFE_ATTRS = ['status', 'roles'];
-
-const messages = {
-    userNotFound: 'User not found.'
-};
-
-module.exports = {
-    docName: 'users',
-
-    browse: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'limit',
-            'order',
-            'page',
-            'debug'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.User.findPage(frame.options);
-        }
-    },
-
-    read: {
-        options: [
-            'include',
-            'filter',
-            'fields',
-            'debug'
-        ],
-        data: [
-            'id',
-            'slug',
-            'email',
-            'role'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.User.findOne(frame.data, frame.options)
-                .then((model) => {
-                    if (!model) {
-                        return Promise.reject(new errors.NotFoundError({
-                            message: tpl(messages.userNotFound)
-                        }));
-                    }
-
-                    return model;
-                });
-        }
-    },
-
-    edit: {
-        headers: {},
-        options: [
-            'id',
-            'include'
-        ],
-        validation: {
-            options: {
-                include: {
-                    values: ALLOWED_INCLUDES
-                },
-                id: {
-                    required: true
-                }
-            }
-        },
-        permissions: {
-            unsafeAttrs: UNSAFE_ATTRS
-        },
-        query(frame) {
-            return models.User.edit(frame.data.users[0], frame.options)
-                .then((model) => {
-                    if (!model) {
-                        return Promise.reject(new errors.NotFoundError({
-                            message: tpl(messages.userNotFound)
-                        }));
-                    }
-
-                    if (model.wasChanged()) {
-                        this.headers.cacheInvalidate = true;
-                    } else {
-                        this.headers.cacheInvalidate = false;
-                    }
-
-                    return model;
-                });
-        }
-    },
-
-    destroy: {
-        statusCode: 204,
-        headers: {
-            cacheInvalidate: true
-        },
-        options: [
-            'id'
-        ],
-        validation: {
-            options: {
-                id: {
-                    required: true
-                }
-            }
-        },
-        permissions: true,
-        query(frame) {
-            return models.Base.transaction((t) => {
-                frame.options.transacting = t;
-
-                return Promise.all([
-                    models.Post.destroyByAuthor(frame.options)
-                ]).then(() => {
-                    return models.User.destroy(Object.assign({status: 'all'}, frame.options));
-                }).then(() => null);
-            }).catch((err) => {
-                return Promise.reject(new errors.NoPermissionError({
-                    err: err
-                }));
-            });
-        }
-    },
-
-    changePassword: {
-        validation: {
-            docName: 'password',
-            data: {
-                newPassword: {required: true},
-                ne2Password: {required: true},
-                user_id: {required: true}
-            }
-        },
-        permissions: {
-            docName: 'user',
-            method: 'edit',
-            identifier(frame) {
-                return frame.data.password[0].user_id;
-            }
-        },
-        query(frame) {
-            frame.options.skipSessionID = frame.original.session.id;
-            return models.User.changePassword(frame.data.password[0], frame.options);
-        }
-    },
-
-    transferOwnership: {
-        permissions(frame) {
-            return models.Role.findOne({name: 'Owner'})
-                .then((ownerRole) => {
-                    return permissionsService.canThis(frame.options.context).assign.role(ownerRole);
-                });
-        },
-        query(frame) {
-            return models.User.transferOwnership(frame.data.owner[0], frame.options);
-        }
-    }
-};

package/core/server/api/v2/utils/index.js

@@ -1,34 +0,0 @@
-module.exports = {
-    get permissions() {
-        return require('./permissions');
-    },
-
-    get serializers() {
-        return require('./serializers');
-    },
-
-    get validators() {
-        return require('./validators');
-    },
-
-    /**
-     * @description Does the request access the Content API?
-     *
-     * Each controller is either for the Content or for the Admin API.
-     * When Ghost registers each controller, it currently passes a String "content" if the controller
-     * is a Content API implementation -  see index.js file.
-     *
-     * @TODO: Move this helper function into a utils.js file.
-     * @param {Object} frame
-     * @return {boolean}
-     */
-    isContentAPI: (frame) => {
-        return frame.apiType === 'content';
-    },
-
-    // @TODO: Remove, not used.
-    isAdminAPIKey: (frame) => {
-        return frame.options.context && Object.keys(frame.options.context).length !== 0 && frame.options.context.api_key &&
-            frame.options.context.api_key.type === 'admin';
-    }
-};