148 lines
4.4 KiB
Go
148 lines
4.4 KiB
Go
package api
|
|
|
|
import (
|
|
"compress/gzip"
|
|
"fmt"
|
|
"io"
|
|
"log"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/go-chi/chi"
|
|
"github.com/go-chi/render"
|
|
|
|
"github.com/umputun/remark/app/migrator"
|
|
"github.com/umputun/remark/app/rest"
|
|
"github.com/umputun/remark/app/store"
|
|
)
|
|
|
|
// admin provides router for all requests available for admin users only
|
|
type admin struct {
|
|
dataService store.Service
|
|
exporter migrator.Exporter
|
|
cache rest.LoadingCache
|
|
defAvatarURL string
|
|
}
|
|
|
|
func (a *admin) routes(middlewares ...func(http.Handler) http.Handler) chi.Router {
|
|
router := chi.NewRouter()
|
|
router.Use(middlewares...)
|
|
router.Delete("/comment/{id}", a.deleteCommentCtrl)
|
|
router.Put("/user/{userid}", a.setBlockCtrl)
|
|
router.Get("/export", a.exportCtrl)
|
|
|
|
router.Put("/pin/{id}", a.setPinCtrl)
|
|
router.Get("/blocked", a.blockedUsersCtrl)
|
|
return router
|
|
}
|
|
|
|
// DELETE /comment/{id}?site=siteID&url=post-url - removes comment
|
|
func (a *admin) deleteCommentCtrl(w http.ResponseWriter, r *http.Request) {
|
|
|
|
id := chi.URLParam(r, "id")
|
|
locator := store.Locator{SiteID: r.URL.Query().Get("site"), URL: r.URL.Query().Get("url")}
|
|
log.Printf("[INFO] delete comment %s", id)
|
|
|
|
err := a.dataService.Delete(locator, id)
|
|
if err != nil {
|
|
rest.SendErrorJSON(w, r, http.StatusInternalServerError, err, "can't delete comment")
|
|
return
|
|
}
|
|
a.cache.Flush()
|
|
render.Status(r, http.StatusOK)
|
|
render.JSON(w, r, JSON{"id": id, "locator": locator})
|
|
}
|
|
|
|
// PUT /user/{userid}?site=side-id&block=1 - block or unblock user
|
|
func (a *admin) setBlockCtrl(w http.ResponseWriter, r *http.Request) {
|
|
userID := chi.URLParam(r, "userid")
|
|
siteID := r.URL.Query().Get("site")
|
|
blockStatus := r.URL.Query().Get("block") == "1"
|
|
|
|
if err := a.dataService.SetBlock(siteID, userID, blockStatus); err != nil {
|
|
rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't set blocking status")
|
|
return
|
|
}
|
|
a.cache.Flush()
|
|
render.JSON(w, r, JSON{"user_id": userID, "site_id": siteID, "block": blockStatus})
|
|
}
|
|
|
|
// GET /blocked?site=siteID - list blocked users
|
|
func (a *admin) blockedUsersCtrl(w http.ResponseWriter, r *http.Request) {
|
|
siteID := r.URL.Query().Get("site")
|
|
users, err := a.dataService.Blocked(siteID)
|
|
if err != nil {
|
|
rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't get blocked users")
|
|
return
|
|
}
|
|
render.JSON(w, r, users)
|
|
}
|
|
|
|
// PUT /pin/{id}?site=siteID&url=post-url&pin=1
|
|
// mark/unmark comment as a special
|
|
func (a *admin) setPinCtrl(w http.ResponseWriter, r *http.Request) {
|
|
commentID := chi.URLParam(r, "id")
|
|
locator := store.Locator{SiteID: r.URL.Query().Get("site"), URL: r.URL.Query().Get("url")}
|
|
pinStatus := r.URL.Query().Get("pin") == "1"
|
|
|
|
if err := a.dataService.SetPin(locator, commentID, pinStatus); err != nil {
|
|
rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't set pin status")
|
|
return
|
|
}
|
|
a.cache.Flush()
|
|
render.JSON(w, r, JSON{"id": commentID, "locator": locator, "pin": pinStatus})
|
|
}
|
|
|
|
// GET /export?site=site-id?mode=file|stream
|
|
// exports all comments for siteID as json stream or gz file
|
|
func (a *admin) exportCtrl(w http.ResponseWriter, r *http.Request) {
|
|
siteID := r.URL.Query().Get("site")
|
|
var writer io.Writer = w
|
|
if r.URL.Query().Get("mode") == "file" {
|
|
exportFile := fmt.Sprintf("%s-%s.json.gz", siteID, time.Now().Format("20060102"))
|
|
w.Header().Set("Content-Type", "application/gzip")
|
|
w.Header().Set("Content-Disposition", "attachment;filename="+exportFile)
|
|
w.WriteHeader(http.StatusOK)
|
|
writer = gzip.NewWriter(w)
|
|
}
|
|
|
|
if _, err := a.exporter.Export(writer, siteID); err != nil {
|
|
rest.SendErrorJSON(w, r, http.StatusInternalServerError, err, "export failed")
|
|
return
|
|
}
|
|
|
|
}
|
|
|
|
func (a *admin) checkBlocked(siteID string, user store.User) bool {
|
|
return a.dataService.IsBlocked(siteID, user.ID)
|
|
}
|
|
|
|
// post-processes comments, hides text of all comments for blocked users,
|
|
// resets score and votes too. Also hides sensitive info for non-admin users
|
|
func (a *admin) alterComments(comments []store.Comment, r *http.Request) (res []store.Comment) {
|
|
res = make([]store.Comment, len(comments))
|
|
|
|
user, err := rest.GetUserInfo(r)
|
|
isAdmin := err == nil && user.Admin // make separate cache key for admins
|
|
|
|
for i, c := range comments {
|
|
|
|
// process blocked users
|
|
if a.dataService.IsBlocked(c.Locator.SiteID, c.User.ID) {
|
|
if !isAdmin { // reset comment to deleted for non-admins
|
|
c.SetDeleted()
|
|
}
|
|
c.User.Blocked = true
|
|
c.Deleted = true
|
|
}
|
|
|
|
// hide info from non-admins
|
|
if !isAdmin {
|
|
c.User.IP = ""
|
|
}
|
|
|
|
res[i] = c
|
|
}
|
|
return res
|
|
}
|