package api import ( "crypto/sha1" "encoding/base64" "log" "net/http" "strconv" "strings" "github.com/go-chi/chi" "github.com/go-chi/render" blackfriday "gopkg.in/russross/blackfriday.v2" "github.com/umputun/remark/app/rest" "github.com/umputun/remark/app/rest/cache" "github.com/umputun/remark/app/store" ) // GET /find?site=siteID&url=post-url&format=[tree|plain]&sort=[+/-time|+/-score] // find comments for given post. Returns in tree or plain formats, sorted func (s *Rest) findCommentsCtrl(w http.ResponseWriter, r *http.Request) { locator := store.Locator{SiteID: r.URL.Query().Get("site"), URL: r.URL.Query().Get("url")} sort := r.URL.Query().Get("sort") if strings.HasPrefix(sort, " ") { // restore + replaced by " " sort = "+" + sort[1:] } log.Printf("[DEBUG] get comments for %+v, sort %s, format %s", locator, sort, r.URL.Query().Get("format")) data, err := s.Cache.Get(cache.Key(cache.URLKey(r), locator.SiteID, locator.URL), func() ([]byte, error) { comments, e := s.DataService.Find(locator, sort) if e != nil { return nil, e } maskedComments := s.adminService.alterComments(comments, r) var b []byte switch r.URL.Query().Get("format") { case "tree": tree := rest.MakeTree(maskedComments, sort, s.ReadOnlyAge) if s.DataService.IsReadOnly(locator) { tree.Info.ReadOnly = true } b, e = encodeJSONWithHTML(tree) default: withInfo := commentsWithInfo{Comments: maskedComments} if info, ee := s.DataService.Info(locator, s.ReadOnlyAge); ee == nil { withInfo.Info = info } b, e = encodeJSONWithHTML(withInfo) } return b, e }) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't find comments") return } renderJSONFromBytes(w, r, data) } // POST /preview, body is a comment, returns rendered html func (s *Rest) previewCommentCtrl(w http.ResponseWriter, r *http.Request) { comment := store.Comment{} if err := render.DecodeJSON(http.MaxBytesReader(w, r.Body, hardBodyLimit), &comment); err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't bind comment") return } user, err := rest.GetUserInfo(r) if err != nil { // this not suppose to happen (handled by Auth), just dbl-check rest.SendErrorJSON(w, r, http.StatusUnauthorized, err, "can't get user info") return } comment.User = user comment.Orig = comment.Text if err = s.DataService.ValidateComment(&comment); err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "invalid comment") return } //comment.Text = string(blackfriday.Run([]byte(comment.Text), // blackfriday.WithRenderer(bfchroma.NewRenderer(bfchroma.WithoutAutodetect())))) comment.Text = string(blackfriday.Run([]byte(comment.Text), blackfriday.WithExtensions(mdExt))) comment.Text = s.ImageProxy.Convert(comment.Text) comment.Sanitize() render.HTML(w, r, comment.Text) } // GET /info?site=siteID&url=post-url - get info about the post func (s *Rest) infoCtrl(w http.ResponseWriter, r *http.Request) { locator := store.Locator{SiteID: r.URL.Query().Get("site"), URL: r.URL.Query().Get("url")} data, err := s.Cache.Get(cache.Key(cache.URLKey(r), locator.SiteID, locator.URL), func() ([]byte, error) { info, e := s.DataService.Info(locator, s.ReadOnlyAge) if e != nil { return nil, e } return encodeJSONWithHTML(info) }) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get post info") return } renderJSONFromBytes(w, r, data) } // GET /last/{limit}?site=siteID - last comments for the siteID, across all posts, sorted by time func (s *Rest) lastCommentsCtrl(w http.ResponseWriter, r *http.Request) { siteID := r.URL.Query().Get("site") log.Printf("[DEBUG] get last comments for %s", siteID) limit, err := strconv.Atoi(chi.URLParam(r, "limit")) if err != nil { limit = 0 } data, err := s.Cache.Get(cache.Key(cache.URLKey(r), "last", siteID), func() ([]byte, error) { comments, e := s.DataService.Last(siteID, limit) if e != nil { return nil, e } comments = s.adminService.alterComments(comments, r) // filter deleted from last comments view. Blocked marked as deleted and will sneak in without filterDeleted := []store.Comment{} for _, c := range comments { if c.Deleted { continue } filterDeleted = append(filterDeleted, c) } return encodeJSONWithHTML(filterDeleted) }) if err != nil { rest.SendErrorJSON(w, r, http.StatusInternalServerError, err, "can't get last comments") return } renderJSONFromBytes(w, r, data) } // GET /id/{id}?site=siteID&url=post-url - gets a comment by id func (s *Rest) commentByIDCtrl(w http.ResponseWriter, r *http.Request) { id := chi.URLParam(r, "id") siteID := r.URL.Query().Get("site") url := r.URL.Query().Get("url") log.Printf("[DEBUG] get comments by id %s, %s %s", id, siteID, url) comment, err := s.DataService.Get(store.Locator{SiteID: siteID, URL: url}, id) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get comment by id") return } comment = s.adminService.alterComments([]store.Comment{comment}, r)[0] render.Status(r, http.StatusOK) renderJSONWithHTML(w, r, comment) } // GET /comments?site=siteID&user=id - returns comments for given userID func (s *Rest) findUserCommentsCtrl(w http.ResponseWriter, r *http.Request) { userID := r.URL.Query().Get("user") siteID := r.URL.Query().Get("site") limit, err := strconv.Atoi(r.URL.Query().Get("limit")) if err != nil { limit = 0 } resp := struct { Comments []store.Comment Count int }{} log.Printf("[DEBUG] get comments for userID %s, %s", userID, siteID) data, err := s.Cache.Get(cache.Key(cache.URLKey(r), userID, siteID), func() ([]byte, error) { comments, e := s.DataService.User(siteID, userID, limit, 0) if e != nil { return nil, e } comments = s.adminService.alterComments(comments, r) count, e := s.DataService.UserCount(siteID, userID) if e != nil { return nil, e } resp.Comments, resp.Count = comments, count return encodeJSONWithHTML(resp) }) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get comment by user id") return } renderJSONFromBytes(w, r, data) } // GET /config?site=siteID - returns configuration func (s *Rest) configCtrl(w http.ResponseWriter, r *http.Request) { type config struct { Version string `json:"version"` EditDuration int `json:"edit_duration"` MaxCommentSize int `json:"max_comment_size"` Admins []string `json:"admins"` AdminEmail string `json:"admin_email"` Auth []string `json:"auth_providers"` LowScore int `json:"low_score"` CriticalScore int `json:"critical_score"` ReadOnlyAge int `json:"readonly_age"` } cnf := config{ Version: s.Version, EditDuration: int(s.DataService.EditDuration.Seconds()), MaxCommentSize: s.DataService.MaxCommentSize, Admins: s.Authenticator.Admins, AdminEmail: s.Authenticator.AdminEmail, LowScore: s.ScoreThresholds.Low, CriticalScore: s.ScoreThresholds.Critical, ReadOnlyAge: s.ReadOnlyAge, } cnf.Auth = []string{} for _, ap := range s.Authenticator.Providers { cnf.Auth = append(cnf.Auth, ap.Name) } if cnf.Admins == nil { // prevent json serialization to nil cnf.Admins = []string{} } render.Status(r, http.StatusOK) render.JSON(w, r, cnf) } // GET /count?site=siteID&url=post-url - get number of comments for given post func (s *Rest) countCtrl(w http.ResponseWriter, r *http.Request) { locator := store.Locator{SiteID: r.URL.Query().Get("site"), URL: r.URL.Query().Get("url")} count, err := s.DataService.Count(locator) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get count") return } render.JSON(w, r, JSON{"count": count, "locator": locator}) } // POST /count?site=siteID - get number of comments for posts from post body func (s *Rest) countMultiCtrl(w http.ResponseWriter, r *http.Request) { siteID := r.URL.Query().Get("site") posts := []string{} if err := render.DecodeJSON(http.MaxBytesReader(w, r.Body, hardBodyLimit), &posts); err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get list of posts from request") return } // key could be long for multiple posts, make it sha1 key := cache.URLKey(r) + strings.Join(posts, ",") hasher := sha1.New() if _, err := hasher.Write([]byte(key)); err != nil { rest.SendErrorJSON(w, r, http.StatusInternalServerError, err, "can't make sha1 for list of urls") return } sha := base64.URLEncoding.EncodeToString(hasher.Sum(nil)) data, err := s.Cache.Get(cache.Key(sha, siteID), func() ([]byte, error) { counts, e := s.DataService.Counts(siteID, posts) if e != nil { return nil, e } return encodeJSONWithHTML(counts) }) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get counts for "+siteID) return } renderJSONFromBytes(w, r, data) } // GET /list?site=siteID&limit=50&skip=10 - list posts with comments func (s *Rest) listCtrl(w http.ResponseWriter, r *http.Request) { siteID := r.URL.Query().Get("site") limit, skip := 0, 0 if v, err := strconv.Atoi(r.URL.Query().Get("limit")); err == nil { limit = v } if v, err := strconv.Atoi(r.URL.Query().Get("skip")); err == nil { skip = v } data, err := s.Cache.Get(cache.Key(cache.URLKey(r), siteID), func() ([]byte, error) { posts, e := s.DataService.List(siteID, limit, skip) if e != nil { return nil, e } return encodeJSONWithHTML(posts) }) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get list of comments for "+siteID) return } renderJSONFromBytes(w, r, data) }