package main import ( "errors" "fmt" "net/http" "strconv" "time" "git.32bit.cafe/32bitcafe/guestbook/internal/forms" "git.32bit.cafe/32bitcafe/guestbook/internal/models" "git.32bit.cafe/32bitcafe/guestbook/internal/validator" "git.32bit.cafe/32bitcafe/guestbook/ui/views" ) func (app *application) getGuestbook(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } if !website.Guestbook.Settings.IsVisible { u := app.getCurrentUser(r) if u == nil { app.clientError(w, http.StatusForbidden) return } if u.ID != website.UserId { app.clientError(w, http.StatusForbidden) return } } comments, err := app.guestbookComments.GetAll(website.Guestbook.ID) if err != nil { app.serverError(w, r, err) return } data := app.newCommonData(r) views.GuestbookView("Guestbook", data, website, website.Guestbook, comments, forms.CommentCreateForm{}).Render(r.Context(), w) } func (app *application) getGuestbookSettings(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } data := app.newCommonData(r) views.GuestbookSettingsView(data, website).Render(r.Context(), w) } func (app *application) putGuestbookSettings(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } var form forms.GuestbookSettingsForm err = app.decodePostForm(r, &form) if err != nil { app.clientError(w, http.StatusBadRequest) app.serverError(w, r, err) return } form.CheckField(validator.PermittedValue(form.Visibility, "true", "false"), "gb_visible", "Invalid value") form.CheckField(validator.PermittedValue(form.CommentingEnabled, models.ValidDisableDurations...), "gb_visible", "Invalid value") form.CheckField(validator.PermittedValue(form.WidgetsEnabled, "true", "false"), "gb_remote", "Invalid value") if !form.Valid() { // TODO: rerender template with errors app.clientError(w, http.StatusUnprocessableEntity) } c, err := strconv.ParseBool(form.CommentingEnabled) if err != nil { website.Guestbook.Settings.IsCommentingEnabled = false website.Guestbook.Settings.ReenableCommenting, err = app.durationToTime(form.CommentingEnabled) if err != nil { app.serverError(w, r, err) } } else { website.Guestbook.Settings.IsCommentingEnabled = c } // can skip error checking for these two since we verify valid values above website.Guestbook.Settings.IsVisible, err = strconv.ParseBool(form.Visibility) if err != nil { app.serverError(w, r, err) } website.Guestbook.Settings.AllowRemoteHostAccess, err = strconv.ParseBool(form.WidgetsEnabled) if err != nil { app.serverError(w, r, err) } err = app.guestbooks.UpdateGuestbookSettings(website.Guestbook.ID, website.Guestbook.Settings) if err != nil { app.serverError(w, r, err) return } app.sessionManager.Put(r.Context(), "flash", "Settings changed successfully") data := app.newCommonData(r) w.Header().Add("HX-Refresh", "true") views.GuestbookSettingsView(data, website).Render(r.Context(), w) } func (app *application) getGuestbookComments(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } comments, err := app.guestbookComments.GetAll(website.Guestbook.ID) if err != nil { app.serverError(w, r, err) return } data := app.newCommonData(r) views.GuestbookDashboardCommentsView("Comments", data, website, website.Guestbook, comments).Render(r.Context(), w) } func (app *application) getGuestbookCommentCreate(w http.ResponseWriter, r *http.Request) { // TODO: This will be the embeddable form slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } data := app.newCommonData(r) form := forms.CommentCreateForm{} views.CreateGuestbookComment("New Comment", data, website, website.Guestbook, form).Render(r.Context(), w) } func (app *application) postGuestbookCommentCreate(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } if !website.Guestbook.CanComment() { app.clientError(w, http.StatusForbidden) return } var form forms.CommentCreateForm err = app.decodePostForm(r, &form) if err != nil { app.clientError(w, http.StatusBadRequest) return } form.CheckField(validator.NotBlank(form.AuthorName), "authorName", "This field cannot be blank") form.CheckField(validator.MaxChars(form.AuthorName, 256), "authorName", "This field cannot be more than 256 characters long") form.CheckField(validator.NotBlank(form.AuthorEmail), "authorEmail", "This field cannot be blank") form.CheckField(validator.MaxChars(form.AuthorEmail, 256), "authorEmail", "This field cannot be more than 256 characters long") form.CheckField(validator.NotBlank(form.AuthorSite), "authorSite", "This field cannot be blank") form.CheckField(validator.MaxChars(form.AuthorSite, 256), "authorSite", "This field cannot be more than 256 characters long") form.CheckField(validator.NotBlank(form.Content), "content", "This field cannot be blank") if !form.Valid() { comments, err := app.guestbookComments.GetAll(website.Guestbook.ID) if err != nil { app.serverError(w, r, err) return } data := app.newCommonData(r) views.GuestbookView("Guestbook", data, website, website.Guestbook, comments, forms.CommentCreateForm{}).Render(r.Context(), w) return } shortId := app.createShortId() _, err = app.guestbookComments.Insert(shortId, website.Guestbook.ID, 0, form.AuthorName, form.AuthorEmail, form.AuthorSite, form.Content, "", true) if err != nil { app.serverError(w, r, err) return } // app.sessionManager.Put(r.Context(), "flash", "Comment successfully posted!") http.Redirect(w, r, fmt.Sprintf("/websites/%s/guestbook", slug), http.StatusSeeOther) } func (app *application) getCommentQueue(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } comments, err := app.guestbookComments.GetUnpublished(website.Guestbook.ID) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } data := app.newCommonData(r) views.GuestbookDashboardCommentsView("Message Queue", data, website, website.Guestbook, comments).Render(r.Context(), w) } func (app *application) getCommentTrash(w http.ResponseWriter, r *http.Request) { slug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(slug)) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } comments, err := app.guestbookComments.GetDeleted(website.Guestbook.ID) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } data := app.newCommonData(r) views.GuestbookDashboardCommentsView("Trash", data, website, website.Guestbook, comments).Render(r.Context(), w) } func (app *application) putHideGuestbookComment(w http.ResponseWriter, r *http.Request) { user := app.getCurrentUser(r) wSlug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(wSlug)) if err != nil { app.logger.Info("website 404") if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } if user.ID != website.UserId { app.clientError(w, http.StatusUnauthorized) } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } cSlug := r.PathValue("commentId") comment, err := app.guestbookComments.Get(slugToShortId(cSlug)) if err != nil { app.logger.Info("comment 404") if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } comment.IsPublished = !comment.IsPublished err = app.guestbookComments.UpdateComment(&comment) if err != nil { app.serverError(w, r, err) } } func (app *application) deleteGuestbookComment(w http.ResponseWriter, r *http.Request) { user := app.getCurrentUser(r) wSlug := r.PathValue("id") website, err := app.websites.Get(slugToShortId(wSlug)) if err != nil { app.logger.Info("website 404") if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } if user.ID != website.UserId { app.clientError(w, http.StatusUnauthorized) } website.Guestbook, err = app.guestbooks.Get(website.Guestbook.ShortId) if err != nil { if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } } cSlug := r.PathValue("commentId") comment, err := app.guestbookComments.Get(slugToShortId(cSlug)) if err != nil { app.logger.Info("comment 404") if errors.Is(err, models.ErrNoRecord) { http.NotFound(w, r) } else { app.serverError(w, r, err) } return } comment.Deleted = time.Now().UTC() err = app.guestbookComments.UpdateComment(&comment) if err != nil { app.serverError(w, r, err) } } func (app *application) getAllGuestbooks(w http.ResponseWriter, r *http.Request) { websites, err := app.websites.GetAll() if err != nil { app.serverError(w, r, err) } views.AllGuestbooksView(app.newCommonData(r), websites).Render(r.Context(), w) }