CollectionController.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327
  1. <?php
  2. namespace App\Http\Controllers;
  3. use Illuminate\Http\Request;
  4. use Auth;
  5. use App\{
  6. Collection,
  7. CollectionItem,
  8. Profile,
  9. Status
  10. };
  11. use League\Fractal;
  12. use App\Transformer\Api\{
  13. AccountTransformer,
  14. StatusTransformer,
  15. };
  16. use League\Fractal\Serializer\ArraySerializer;
  17. use League\Fractal\Pagination\IlluminatePaginatorAdapter;
  18. use App\Services\AccountService;
  19. use App\Services\CollectionService;
  20. use App\Services\FollowerService;
  21. use App\Services\StatusService;
  22. class CollectionController extends Controller
  23. {
  24. public function create(Request $request)
  25. {
  26. abort_if(!Auth::check(), 403);
  27. $profile = Auth::user()->profile;
  28. $collection = Collection::firstOrCreate([
  29. 'profile_id' => $profile->id,
  30. 'published_at' => null
  31. ]);
  32. $collection->visibility = 'draft';
  33. $collection->save();
  34. return view('collection.create', compact('collection'));
  35. }
  36. public function show(Request $request, int $id)
  37. {
  38. $user = $request->user();
  39. $collection = CollectionService::getCollection($id);
  40. abort_if(!$collection, 404);
  41. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  42. abort_if(!$user, 404);
  43. if($user->profile_id != $collection['pid']) {
  44. if(!$user->is_admin) {
  45. abort_if($collection['visibility'] != 'private', 404);
  46. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  47. }
  48. }
  49. }
  50. return view('collection.show', compact('collection'));
  51. }
  52. public function index(Request $request)
  53. {
  54. abort_if(!Auth::check(), 403);
  55. return $request->all();
  56. }
  57. public function store(Request $request, $id)
  58. {
  59. abort_if(!$request->user(), 403);
  60. $this->validate($request, [
  61. 'title' => 'nullable|max:50',
  62. 'description' => 'nullable|max:500',
  63. 'visibility' => 'nullable|string|in:public,private,draft'
  64. ]);
  65. $pid = $request->user()->profile_id;
  66. $collection = Collection::whereProfileId($pid)->findOrFail($id);
  67. $collection->title = strip_tags($request->input('title'));
  68. $collection->description = strip_tags($request->input('description'));
  69. $collection->visibility = $request->input('visibility');
  70. $collection->save();
  71. CollectionService::deleteCollection($id);
  72. return CollectionService::setCollection($collection->id, $collection);
  73. }
  74. public function publish(Request $request, int $id)
  75. {
  76. abort_if(!$request->user(), 403);
  77. $this->validate($request, [
  78. 'title' => 'nullable|max:50',
  79. 'description' => 'nullable|max:500',
  80. 'visibility' => 'required|alpha|in:public,private,draft'
  81. ]);
  82. $profile = Auth::user()->profile;
  83. $collection = Collection::whereProfileId($profile->id)->findOrFail($id);
  84. if($collection->items()->count() == 0) {
  85. abort(404);
  86. }
  87. $collection->title = strip_tags($request->input('title'));
  88. $collection->description = strip_tags($request->input('description'));
  89. $collection->visibility = $request->input('visibility');
  90. $collection->published_at = now();
  91. $collection->save();
  92. return CollectionService::setCollection($collection->id, $collection);
  93. }
  94. public function delete(Request $request, int $id)
  95. {
  96. abort_if(!$request->user(), 403);
  97. $user = $request->user();
  98. $collection = Collection::whereProfileId($user->profile_id)->findOrFail($id);
  99. $collection->items()->delete();
  100. $collection->delete();
  101. CollectionService::deleteCollection($id);
  102. if($request->wantsJson()) {
  103. return 200;
  104. }
  105. return redirect('/');
  106. }
  107. public function storeId(Request $request)
  108. {
  109. abort_if(!$request->user(), 403);
  110. $this->validate($request, [
  111. 'collection_id' => 'required|int|min:1|exists:collections,id',
  112. 'post_id' => 'required|int|min:1'
  113. ]);
  114. $profileId = $request->user()->profile_id;
  115. $collectionId = $request->input('collection_id');
  116. $postId = $request->input('post_id');
  117. $collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
  118. $count = $collection->items()->count();
  119. CollectionService::deleteCollection($collection->id);
  120. if($count) {
  121. CollectionItem::whereCollectionId($collection->id)
  122. ->get()
  123. ->filter(function($col) {
  124. return StatusService::get($col->object_id, false) == null;
  125. })
  126. ->each(function($col) use($collectionId) {
  127. CollectionService::removeItem($collectionId, $col->object_id);
  128. $col->delete();
  129. });
  130. }
  131. $max = config('pixelfed.max_collection_length');
  132. if($count >= $max) {
  133. abort(400, 'You can only add '.$max.' posts per collection');
  134. }
  135. $status = Status::whereScope('public')
  136. ->whereProfileId($profileId)
  137. ->whereIn('type', ['photo', 'photo:album', 'video'])
  138. ->findOrFail($postId);
  139. $item = CollectionItem::firstOrCreate([
  140. 'collection_id' => $collection->id,
  141. 'object_type' => 'App\Status',
  142. 'object_id' => $status->id
  143. ],[
  144. 'order' => $count,
  145. ]);
  146. CollectionService::addItem(
  147. $collection->id,
  148. $status->id,
  149. $count
  150. );
  151. $collection->updated_at = now();
  152. $collection->save();
  153. CollectionService::setCollection($collection->id, $collection);
  154. return StatusService::get($status->id);
  155. }
  156. public function getCollection(Request $request, $id)
  157. {
  158. $user = $request->user();
  159. $collection = CollectionService::getCollection($id);
  160. if(!$collection) {
  161. return response()->json([], 404);
  162. }
  163. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  164. abort_unless($user, 404);
  165. if($user->profile_id != $collection['pid']) {
  166. if(!$user->is_admin) {
  167. abort_if($collection['visibility'] != 'private', 404);
  168. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  169. }
  170. }
  171. }
  172. return $collection;
  173. }
  174. public function getItems(Request $request, int $id)
  175. {
  176. $user = $request->user();
  177. $collection = CollectionService::getCollection($id);
  178. if(!$collection) {
  179. return response()->json([], 404);
  180. }
  181. if($collection['published_at'] == null || $collection['visibility'] != 'public') {
  182. abort_unless($user, 404);
  183. if($user->profile_id != $collection['pid']) {
  184. if(!$user->is_admin) {
  185. abort_if($collection['visibility'] != 'private', 404);
  186. abort_if(!FollowerService::follows($user->profile_id, $collection['pid']), 404);
  187. }
  188. }
  189. }
  190. $page = $request->input('page') ?? 1;
  191. $start = $page == 1 ? 0 : ($page * 10 - 10);
  192. $end = $start + 10;
  193. $items = CollectionService::getItems($id, $start, $end);
  194. return collect($items)
  195. ->map(function($id) {
  196. return StatusService::get($id);
  197. })
  198. ->filter(function($item) {
  199. return $item && isset($item['account'], $item['media_attachments']);
  200. })
  201. ->values();
  202. }
  203. public function getUserCollections(Request $request, int $id)
  204. {
  205. $user = $request->user();
  206. $pid = $user ? $user->profile_id : null;
  207. $follows = false;
  208. $visibility = ['public'];
  209. $profile = AccountService::get($id, true);
  210. if(!$profile || !isset($profile['id'])) {
  211. return response()->json([], 404);
  212. }
  213. if($pid) {
  214. $follows = FollowerService::follows($pid, $profile['id']);
  215. }
  216. if($profile['locked']) {
  217. abort_if(!$pid, 404);
  218. if(!$user->is_admin) {
  219. abort_if($profile['id'] != $pid && $follows == false, 404);
  220. }
  221. }
  222. $owner = $pid ? $pid == $profile['id'] : false;
  223. if($follows) {
  224. $visibility = ['public', 'private'];
  225. }
  226. if($pid && $pid == $profile['id']) {
  227. $visibility = ['public', 'private', 'draft'];
  228. }
  229. return Collection::whereProfileId($profile['id'])
  230. ->whereIn('visibility', $visibility)
  231. ->when(!$owner, function($q, $owner) {
  232. return $q->whereNotNull('published_at');
  233. })
  234. ->orderByDesc('id')
  235. ->paginate(9)
  236. ->map(function($collection) {
  237. return CollectionService::getCollection($collection->id);
  238. });
  239. }
  240. public function deleteId(Request $request)
  241. {
  242. abort_if(!$request->user(), 403);
  243. $this->validate($request, [
  244. 'collection_id' => 'required|int|min:1|exists:collections,id',
  245. 'post_id' => 'required|int|min:1'
  246. ]);
  247. $profileId = $request->user()->profile_id;
  248. $collectionId = $request->input('collection_id');
  249. $postId = $request->input('post_id');
  250. $collection = Collection::whereProfileId($profileId)->findOrFail($collectionId);
  251. $count = $collection->items()->count();
  252. if($count == 1) {
  253. abort(400, 'You cannot delete the only post of a collection!');
  254. }
  255. $status = Status::whereScope('public')
  256. ->whereIn('type', ['photo', 'photo:album', 'video'])
  257. ->findOrFail($postId);
  258. $item = CollectionItem::whereCollectionId($collection->id)
  259. ->whereObjectType('App\Status')
  260. ->whereObjectId($status->id)
  261. ->firstOrFail();
  262. $item->delete();
  263. CollectionItem::whereCollectionId($collection->id)
  264. ->orderBy('created_at')
  265. ->get()
  266. ->each(function($item, $index) {
  267. $item->order = $index;
  268. $item->save();
  269. });
  270. $collection->updated_at = now();
  271. $collection->save();
  272. CollectionService::deleteCollection($collection->id);
  273. return 200;
  274. }
  275. }