/* Copyright 2025 Dnote Authors * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package controllers import ( "net/http" "net/url" "strconv" "strings" "github.com/dnote/dnote/pkg/server/app" "github.com/dnote/dnote/pkg/server/context" "github.com/dnote/dnote/pkg/server/database" "github.com/dnote/dnote/pkg/server/operations" "github.com/dnote/dnote/pkg/server/presenters" "github.com/gorilla/mux" "github.com/pkg/errors" ) // NewNotes creates a new Notes controller. // It panics if the necessary templates are not parsed. func NewNotes(app *app.App) *Notes { return &Notes{ app: app, } } var notesPerPage = 30 // Notes is a user controller. type Notes struct { app *app.App } // escapeSearchQuery escapes the query for full text search func escapeSearchQuery(searchQuery string) string { return strings.Join(strings.Fields(searchQuery), "&") } func parseSearchQuery(q url.Values) string { searchStr := q.Get("q") return escapeSearchQuery(searchStr) } func parsePageQuery(q url.Values) (int, error) { pageStr := q.Get("page") if len(pageStr) == 0 { return 1, nil } p, err := strconv.Atoi(pageStr) return p, err } func parseGetNotesQuery(q url.Values) (app.GetNotesParams, error) { yearStr := q.Get("year") monthStr := q.Get("month") books := q["book"] pageStr := q.Get("page") page, err := parsePageQuery(q) if err != nil { return app.GetNotesParams{}, errors.Errorf("invalid page %s", pageStr) } if page < 1 { return app.GetNotesParams{}, errors.Errorf("invalid page %s", pageStr) } var year int if len(yearStr) > 0 { y, err := strconv.Atoi(yearStr) if err != nil { return app.GetNotesParams{}, errors.Errorf("invalid year %s", yearStr) } year = y } var month int if len(monthStr) > 0 { m, err := strconv.Atoi(monthStr) if err != nil { return app.GetNotesParams{}, errors.Errorf("invalid month %s", monthStr) } if m < 1 || m > 12 { return app.GetNotesParams{}, errors.Errorf("invalid month %s", monthStr) } month = m } ret := app.GetNotesParams{ Year: year, Month: month, Page: page, Search: parseSearchQuery(q), Books: books, PerPage: notesPerPage, } return ret, nil } func (n *Notes) getNotes(r *http.Request) (app.GetNotesResult, app.GetNotesParams, error) { user := context.User(r.Context()) if user == nil { return app.GetNotesResult{}, app.GetNotesParams{}, app.ErrLoginRequired } query := r.URL.Query() p, err := parseGetNotesQuery(query) if err != nil { return app.GetNotesResult{}, app.GetNotesParams{}, errors.Wrap(err, "parsing query") } res, err := n.app.GetNotes(user.ID, p) if err != nil { return app.GetNotesResult{}, app.GetNotesParams{}, errors.Wrap(err, "getting notes") } return res, p, nil } // GetNotesResponse is a reponse by getNotesHandler type GetNotesResponse struct { Notes []presenters.Note `json:"notes"` Total int64 `json:"total"` } // V3Index is a v3 handler for getting notes func (n *Notes) V3Index(w http.ResponseWriter, r *http.Request) { result, _, err := n.getNotes(r) if err != nil { handleJSONError(w, err, "getting notes") return } respondJSON(w, http.StatusOK, GetNotesResponse{ Notes: presenters.PresentNotes(result.Notes), Total: result.Total, }) } func (n *Notes) getNote(r *http.Request) (database.Note, error) { user := context.User(r.Context()) vars := mux.Vars(r) noteUUID := vars["noteUUID"] note, ok, err := operations.GetNote(n.app.DB, noteUUID, user) if !ok { return database.Note{}, app.ErrNotFound } if err != nil { return database.Note{}, errors.Wrap(err, "finding note") } return note, nil } // V3Show is api for show func (n *Notes) V3Show(w http.ResponseWriter, r *http.Request) { note, err := n.getNote(r) if err != nil { handleJSONError(w, err, "getting note") return } respondJSON(w, http.StatusOK, presenters.PresentNote(note)) } type createNotePayload struct { BookUUID string `schema:"book_uuid" json:"book_uuid"` Content string `schema:"content" json:"content"` AddedOn *int64 `schema:"added_on" json:"added_on"` EditedOn *int64 `schema:"edited_on" json:"edited_on"` } func validateCreateNotePayload(p createNotePayload) error { if p.BookUUID == "" { return app.ErrBookUUIDRequired } return nil } func (n *Notes) create(r *http.Request) (database.Note, error) { user := context.User(r.Context()) if user == nil { return database.Note{}, app.ErrLoginRequired } var params createNotePayload if err := parseRequestData(r, ¶ms); err != nil { return database.Note{}, errors.Wrap(err, "parsing request payload") } if err := validateCreateNotePayload(params); err != nil { return database.Note{}, err } var book database.Book if err := n.app.DB.Where("uuid = ? AND user_id = ?", params.BookUUID, user.ID).First(&book).Error; err != nil { return database.Note{}, errors.Wrapf(err, "finding book %s", params.BookUUID) } client := getClientType(r) note, err := n.app.CreateNote(*user, params.BookUUID, params.Content, params.AddedOn, params.EditedOn, client) if err != nil { return database.Note{}, errors.Wrap(err, "creating note") } // preload associations note.User = *user note.Book = book return note, nil } func (n *Notes) del(r *http.Request) (database.Note, error) { vars := mux.Vars(r) noteUUID := vars["noteUUID"] user := context.User(r.Context()) if user == nil { return database.Note{}, app.ErrLoginRequired } var note database.Note if err := n.app.DB.Where("uuid = ? AND user_id = ?", noteUUID, user.ID).Preload("Book").First(¬e).Error; err != nil { return database.Note{}, errors.Wrap(err, "finding note") } tx := n.app.DB.Begin() note, err := n.app.DeleteNote(tx, *user, note) if err != nil { tx.Rollback() return database.Note{}, errors.Wrap(err, "deleting note") } tx.Commit() return note, nil } // CreateNoteResp is a response for creating a note type CreateNoteResp struct { Result presenters.Note `json:"result"` } // V3Create creates note func (n *Notes) V3Create(w http.ResponseWriter, r *http.Request) { note, err := n.create(r) if err != nil { handleJSONError(w, err, "creating note") return } respondJSON(w, http.StatusCreated, CreateNoteResp{ Result: presenters.PresentNote(note), }) } type DeleteNoteResp struct { Status int `json:"status"` Result presenters.Note `json:"result"` } // V3Delete deletes note func (n *Notes) V3Delete(w http.ResponseWriter, r *http.Request) { note, err := n.del(r) if err != nil { handleJSONError(w, err, "deleting note") return } respondJSON(w, http.StatusOK, DeleteNoteResp{ Status: http.StatusNoContent, Result: presenters.PresentNote(note), }) } type updateNotePayload struct { BookUUID *string `schema:"book_uuid" json:"book_uuid"` Content *string `schema:"content" json:"content"` } func validateUpdateNotePayload(p updateNotePayload) error { if p.BookUUID == nil && p.Content == nil { return app.ErrEmptyUpdate } return nil } func (n *Notes) update(r *http.Request) (database.Note, error) { vars := mux.Vars(r) noteUUID := vars["noteUUID"] user := context.User(r.Context()) if user == nil { return database.Note{}, app.ErrLoginRequired } var params updateNotePayload err := parseRequestData(r, ¶ms) if err != nil { return database.Note{}, errors.Wrap(err, "decoding params") } if err := validateUpdateNotePayload(params); err != nil { return database.Note{}, err } var note database.Note if err := n.app.DB.Where("uuid = ? AND user_id = ?", noteUUID, user.ID).First(¬e).Error; err != nil { return database.Note{}, errors.Wrap(err, "finding note") } tx := n.app.DB.Begin() note, err = n.app.UpdateNote(tx, *user, note, &app.UpdateNoteParams{ BookUUID: params.BookUUID, Content: params.Content, }) if err != nil { tx.Rollback() return database.Note{}, errors.Wrap(err, "updating note") } var book database.Book if err := tx.Where("uuid = ? AND user_id = ?", note.BookUUID, user.ID).First(&book).Error; err != nil { tx.Rollback() return database.Note{}, errors.Wrapf(err, "finding book %s to preload", note.BookUUID) } tx.Commit() // preload associations note.User = *user note.Book = book return note, nil } type updateNoteResp struct { Status int `json:"status"` Result presenters.Note `json:"result"` } // V3Update updates a note func (n *Notes) V3Update(w http.ResponseWriter, r *http.Request) { note, err := n.update(r) if err != nil { handleJSONError(w, err, "updating note") return } respondJSON(w, http.StatusOK, updateNoteResp{ Status: http.StatusOK, Result: presenters.PresentNote(note), }) } // IndexOptions is a handler for OPTIONS endpoint for notes func (n *Notes) IndexOptions(w http.ResponseWriter, r *http.Request) { w.Header().Set("Access-Control-Allow-Methods", "POST") w.Header().Set("Access-Control-Allow-Headers", "Authorization, Version") }