CollectionController.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322
  1. <?php
  2. namespace App\Http\Controllers;
  3. use Illuminate\Http\Request;
  4. use Auth;
  5. use App\{
  6. Collection,
  7. CollectionItem,
  8. Profile,
  9. Status
  10. };
  11. use League\Fractal;
  12. use App\Transformer\Api\{
  13. AccountTransformer,
  14. StatusTransformer,
  15. };
  16. use League\Fractal\Serializer\ArraySerializer;
  17. use League\Fractal\Pagination\IlluminatePaginatorAdapter;
  18. use App\Services\AccountService;
  19. use App\Services\CollectionService;
  20. use App\Services\FollowerService;
  21. use App\Services\StatusService;
  22. class CollectionController extends Controller
  23. {
  24. public function create(Request $request)
  25. {
  26. abort_if(!Auth::check(), 403);
  27. $profile = Auth::user()->profile;
  28. $collection = Collection::firstOrCreate([
  29. 'profile_id' => $profile->id,
  30. 'published_at' => null
  31. ]);
  32. $collection->visibility = 'draft';
  33. $collection->save();
  34. return view('collection.create', compact('collection'));
  35. }
  36. public function show(Request $request, int $id)
  37. {
  38. $user = $request->user();
  39. $collection = CollectionService::getCollection($id);
  40. abort_if(!$collection, 404);
  41. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  42. abort_if(!$user, 404);
  43. if($user->profile_id != $collection['pid']) {
  44. if(!$user->is_admin) {
  45. abort_if($collection['visibility'] != 'private', 404);
  46. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  47. }
  48. }
  49. }
  50. return view('collection.show', compact('collection'));
  51. }
  52. public function index(Request $request)
  53. {
  54. abort_if(!Auth::check(), 403);
  55. return $request->all();
  56. }
  57. public function store(Request $request, $id)
  58. {
  59. abort_if(!$request->user(), 403);
  60. $this->validate($request, [
  61. 'title' => 'nullable|max:50',
  62. 'description' => 'nullable|max:500',
  63. 'visibility' => 'nullable|string|in:public,private,draft'
  64. ]);
  65. $pid = $request->user()->profile_id;
  66. $collection = Collection::whereProfileId($pid)->findOrFail($id);
  67. $collection->title = strip_tags($request->input('title'));
  68. $collection->description = strip_tags($request->input('description'));
  69. $collection->visibility = $request->input('visibility');
  70. $collection->save();
  71. CollectionService::deleteCollection($id);
  72. return CollectionService::setCollection($collection->id, $collection);
  73. }
  74. public function publish(Request $request, int $id)
  75. {
  76. abort_if(!$request->user(), 403);
  77. $this->validate($request, [
  78. 'title' => 'nullable|max:50',
  79. 'description' => 'nullable|max:500',
  80. 'visibility' => 'required|alpha|in:public,private,draft'
  81. ]);
  82. $profile = Auth::user()->profile;
  83. $collection = Collection::whereProfileId($profile->id)->findOrFail($id);
  84. if($collection->items()->count() == 0) {
  85. abort(404);
  86. }
  87. $collection->title = strip_tags($request->input('title'));
  88. $collection->description = strip_tags($request->input('description'));
  89. $collection->visibility = $request->input('visibility');
  90. $collection->published_at = now();
  91. $collection->save();
  92. return CollectionService::setCollection($collection->id, $collection);
  93. }
  94. public function delete(Request $request, int $id)
  95. {
  96. abort_if(!$request->user(), 403);
  97. $user = $request->user();
  98. $collection = Collection::whereProfileId($user->profile_id)->findOrFail($id);
  99. $collection->items()->delete();
  100. $collection->delete();
  101. CollectionService::deleteCollection($id);
  102. if($request->wantsJson()) {
  103. return 200;
  104. }
  105. return redirect('/');
  106. }
  107. public function storeId(Request $request)
  108. {
  109. abort_if(!$request->user(), 403);
  110. $this->validate($request, [
  111. 'collection_id' => 'required|int|min:1|exists:collections,id',
  112. 'post_id' => 'required|int|min:1'
  113. ]);
  114. $profileId = $request->user()->profile_id;
  115. $collectionId = $request->input('collection_id');
  116. $postId = $request->input('post_id');
  117. $collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
  118. $count = $collection->items()->count();
  119. if($count) {
  120. CollectionItem::whereCollectionId($collection->id)
  121. ->get()
  122. ->filter(function($col) {
  123. return StatusService::get($col->object_id, false) == null;
  124. })
  125. ->each(function($col) use($collectionId) {
  126. CollectionService::removeItem($collectionId, $col->object_id);
  127. $col->delete();
  128. });
  129. }
  130. $max = config('pixelfed.max_collection_length');
  131. if($count >= $max) {
  132. abort(400, 'You can only add '.$max.' posts per collection');
  133. }
  134. $status = Status::whereIn('scope', ['public', 'unlisted'])
  135. ->whereProfileId($profileId)
  136. ->whereIn('type', ['photo', 'photo:album', 'video'])
  137. ->findOrFail($postId);
  138. $item = CollectionItem::firstOrCreate([
  139. 'collection_id' => $collection->id,
  140. 'object_type' => 'App\Status',
  141. 'object_id' => $status->id
  142. ],[
  143. 'order' => $count,
  144. ]);
  145. CollectionService::deleteCollection($collection->id);
  146. $collection->updated_at = now();
  147. $collection->save();
  148. CollectionService::setCollection($collection->id, $collection);
  149. return StatusService::get($status->id, false);
  150. }
  151. public function getCollection(Request $request, $id)
  152. {
  153. $user = $request->user();
  154. $collection = CollectionService::getCollection($id);
  155. if(!$collection) {
  156. return response()->json([], 404);
  157. }
  158. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  159. abort_unless($user, 404);
  160. if($user->profile_id != $collection['pid']) {
  161. if(!$user->is_admin) {
  162. abort_if($collection['visibility'] != 'private', 404);
  163. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  164. }
  165. }
  166. }
  167. return $collection;
  168. }
  169. public function getItems(Request $request, int $id)
  170. {
  171. $user = $request->user();
  172. $collection = CollectionService::getCollection($id);
  173. if(!$collection) {
  174. return response()->json([], 404);
  175. }
  176. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  177. abort_unless($user, 404);
  178. if($user->profile_id != $collection['pid']) {
  179. if(!$user->is_admin) {
  180. abort_if($collection['visibility'] != 'private', 404);
  181. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  182. }
  183. }
  184. }
  185. $page = $request->input('page') ?? 1;
  186. $start = $page == 1 ? 0 : ($page * 10 - 10);
  187. $end = $start + 10;
  188. $items = CollectionService::getItems($id, $start, $end);
  189. return collect($items)
  190. ->map(function($id) {
  191. return StatusService::get($id, false);
  192. })
  193. ->filter(function($item) {
  194. return $item && ($item['visibility'] == 'public' || $item['visibility'] == 'unlisted') && isset($item['account'], $item['media_attachments']);
  195. })
  196. ->values();
  197. }
  198. public function getUserCollections(Request $request, int $id)
  199. {
  200. $user = $request->user();
  201. $pid = $user ? $user->profile_id : null;
  202. $follows = false;
  203. $visibility = ['public'];
  204. $profile = AccountService::get($id, true);
  205. if(!$profile || !isset($profile['id'])) {
  206. return response()->json([], 404);
  207. }
  208. if($pid) {
  209. $follows = FollowerService::follows($pid, $profile['id']);
  210. }
  211. if($profile['locked']) {
  212. abort_if(!$pid, 404);
  213. if(!$user->is_admin) {
  214. abort_if($profile['id'] != $pid && $follows == false, 404);
  215. }
  216. }
  217. $owner = $pid ? $pid == $profile['id'] : false;
  218. if($follows) {
  219. $visibility = ['public', 'private'];
  220. }
  221. if($pid && $pid == $profile['id']) {
  222. $visibility = ['public', 'private', 'draft'];
  223. }
  224. return Collection::whereProfileId($profile['id'])
  225. ->whereIn('visibility', $visibility)
  226. ->when(!$owner, function($q, $owner) {
  227. return $q->whereNotNull('published_at');
  228. })
  229. ->orderByDesc('id')
  230. ->paginate(9)
  231. ->map(function($collection) {
  232. return CollectionService::getCollection($collection->id);
  233. });
  234. }
  235. public function deleteId(Request $request)
  236. {
  237. abort_if(!$request->user(), 403);
  238. $this->validate($request, [
  239. 'collection_id' => 'required|int|min:1|exists:collections,id',
  240. 'post_id' => 'required|int|min:1'
  241. ]);
  242. $profileId = $request->user()->profile_id;
  243. $collectionId = $request->input('collection_id');
  244. $postId = $request->input('post_id');
  245. $collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
  246. $count = $collection->items()->count();
  247. if($count == 1) {
  248. abort(400, 'You cannot delete the only post of a collection!');
  249. }
  250. $status = Status::whereIn('scope', ['public', 'unlisted'])
  251. ->whereIn('type', ['photo', 'photo:album', 'video'])
  252. ->findOrFail($postId);
  253. $item = CollectionItem::whereCollectionId($collection->id)
  254. ->whereObjectType('App\Status')
  255. ->whereObjectId($status->id)
  256. ->firstOrFail();
  257. $item->delete();
  258. CollectionItem::whereCollectionId($collection->id)
  259. ->orderBy('created_at')
  260. ->get()
  261. ->each(function($item, $index) {
  262. $item->order = $index;
  263. $item->save();
  264. });
  265. $collection->updated_at = now();
  266. $collection->save();
  267. CollectionService::deleteCollection($collection->id);
  268. return 200;
  269. }
  270. }