add POST /posts (pun not intended)

imagesplan.txt

@@ -1,14 +0,0 @@
-GET /images/uuid.filetype DONE
- -> returns the image with the correct filetype - uuid.png would return the image in png format, etc
-
-GET /images/by-user/username DONE
- -> gets all of the images made by {username}, if you are {username}, or if you have admin.
-
-POST /images/create {image: "image data"} DONE
- -> returns the uuid of the image, which it saves to the folder and database
-
-DELETE /images/uuid DONE
- -> if you're the owner of the image or an admin, deletes the image. returns basic success/faliure
-
-images are stored in /images/uuid.png. Image::get_by_uuid(uuid) just gets the image from the folder, verifies that it is an image, and returns it. Image::get_by_username(username) gets all database images from the database and returns the uuids. the client is responsible for getting the images.
-

src/main.rs

@@ -117,6 +117,12 @@ async fn migrate(rocket: Rocket<Build>) -> Rocket<Build> {
                 ADD COLUMN IF NOT EXISTS text_id TEXT NOT NULL UNIQUE",
         ))
         .await;
+    let _ = conn
+        .execute(sqlx::query(
+            "ALTER TABLE posts 
+                ADD COLUMN IF NOT EXISTS author STRING NOT NULL",
+        ))
+        .await;
     let _ = conn
         .execute(sqlx::query(
             "ALTER TABLE posts 

src/routes/posts.rs

@@ -1,13 +1,14 @@
 /*
 * POST /posts: uses json request body to get the post info and, y'know, create it
-* GET /posts/<id>: figures out what type of id <id> is, gets post via that, returns it
+* TODO GET /posts/<id>: figures out what type of id <id> is, gets post via that, returns it
-* UPDATE /posts/<id>: figures out what type of id <id> is, uses json request body to update
+* TODO UPDATE /posts/<id>: figures out what type of id <id> is, uses json request body to update
 *                     specific data about the post
-* DELETE /posts/<id>: you can figure out what this one does
+* TODO DELETE /posts/<id>: you can figure out what this one does
 *
-* GET /posts: gets all posts, maybe json request body for args?
+* TODO GET /posts: gets all posts, maybe json request body for args?
 */
 
+use crate::tables::posts::Post;
 use crate::tables::{users::LoginStatus, users::User, Db};
 use rocket::http::CookieJar;
 use rocket::http::Status;
@@ -16,6 +17,7 @@ use rocket::response::status;
 use rocket::serde::json::Json;
 use rocket::serde::Deserialize;
 use rocket_db_pools::Connection;
+use uuid::Uuid;
 
 #[derive(Deserialize)]
 #[serde(crate = "rocket::serde")]
@@ -23,6 +25,7 @@ pub struct PostCreateInfo {
     pub title: String,
     pub text_id: String,
     pub body: String,
+    pub auto_pubilsh: bool,
 }
 
 #[post("/posts", data = "<info>")]
@@ -33,12 +36,41 @@ pub async fn create(
 ) -> status::Custom<String> {
     match User::login_status(&mut db, cookies).await {
         LoginStatus::LoggedIn(user) => {
+            match user.make_posts || user.admin {
+                true => {
                     // if post with same text id exists, fail
-            // make sure user has perms to do this first tho
+                    match Post::get_by_text_id(&mut db, &info.text_id).await {
-            // and uhhhhh
+                        Some(_) => status::Custom(
-            // yeah thats it idk
+                            Status::Forbidden,
-            // TODO: implement all that
+                            "A post already exists with this text id.".to_string(),
-            status::Custom(Status::NotImplemented, "Not implemented yet".to_string())
+                        ),
+                        None => {
+                            // create post
+                            match Post::create(
+                                &mut db,
+                                &info.title,
+                                &info.body,
+                                info.auto_pubilsh,
+                                Uuid::new_v4().to_string(),
+                                &info.text_id,
+                                user.username,
+                            )
+                            .await
+                            {
+                                Some(_) => status::Custom(Status::Ok, "Created.".to_string()),
+                                None => status::Custom(
+                                    Status::InternalServerError,
+                                    "Couldn't create post.".to_string(),
+                                ),
+                            }
+                        }
+                    }
+                }
+                false => status::Custom(
+                    Status::Unauthorized,
+                    "You don't have the permissions to do this".to_string(),
+                ),
+            }
         }
         LoginStatus::InvalidToken => {
             status::Custom(Status::Unauthorized, "Invalid login token".to_string())

src/tables/posts.rs

@@ -17,32 +17,35 @@ pub struct Post {
 }
 impl Post {
     pub async fn create(
-        mut db: Connection<Db>,
+        db: &mut Connection<Db>,
-        title: String, /*ex: Why Trans People Deserve All Your Money*/
+        title: &String, /*ex: Why Trans People Deserve All Your Money*/
-        body: String, /*ex: # Because we're cooler than you \n\n![trans flag image](https://sadlynotsappho.dev/pfp.png)*/
+        body: &String, /*ex: # Because we're cooler than you \n\n![trans flag image](https://sadlynotsappho.dev/pfp.png)*/
         published: bool,
         uuid: String,
-        text_id: String, /*ex: why-trans-people-deserve-all-your-money */
+        text_id: &String, /*ex: why-trans-people-deserve-all-your-money */
-    ) {
+        author: String
+    ) -> Option<()> {
         match db
-            .fetch_all(
+            .execute(
                 sqlx::query(
                     r#"
-                        INSERT INTO posts   (title,     body,   published,  uuid,   text_id)
+                        INSERT INTO posts   (title,     body,   published,  uuid,   text_id,    author)
-                        VALUES              ($1,        $2,     $3,         $4,     $5);    
+                        VALUES              ($1,        $2,     $3,         $4,     $5,         $6);    
                     "#,
                 )
                 .bind(title)
                 .bind(body)
                 .bind(published)
                 .bind(uuid)
-                .bind(text_id),
+                .bind(text_id)
+                .bind(author),
             )
             .await
         {
-            Ok(_) => (),
+            Ok(_) => Some(()),
             Err(why) => {
                 eprintln!("Couldn't create database entry: {why:?}");
+                None
             }
         }
     }
@@ -58,7 +61,7 @@ impl Post {
             title: res.get::<String, _>("title"),
             body: res.get::<String, _>("body"),
             published: res.get::<bool, _>("published"),
-            timestamp: res.get::<NaiveDateTime, _>("timestamp")
+            timestamp: res.get::<NaiveDateTime, _>("timestamp"),
         }
     }
     pub async fn get_by_uuid(mut db: Connection<Db>, uuid: String) -> Post {
@@ -73,22 +76,27 @@ impl Post {
             title: res.get::<String, _>("title"),
             body: res.get::<String, _>("body"),
             published: res.get::<bool, _>("published"),
-            timestamp: res.get::<NaiveDateTime, _>("timestamp")
+            timestamp: res.get::<NaiveDateTime, _>("timestamp"),
         }
     }
-    pub async fn get_by_text_id(mut db: Connection<Db>, text_id: String) -> Post {
+    pub async fn get_by_text_id(db: &mut Connection<Db>, text_id: &String) -> Option<Post> {
-        let res = db
+        match db
             .fetch_one(sqlx::query("SELECT * FROM posts WHERE text_id = $1;").bind(text_id))
             .await
-            .unwrap();
+        {
-        Post {
+            Ok(res) => Some(Post {
                 id: res.get::<i32, _>("id"),
                 uuid: res.get::<String, _>("uuid"),
                 text_id: res.get::<String, _>("text_id"),
                 title: res.get::<String, _>("title"),
                 body: res.get::<String, _>("body"),
                 published: res.get::<bool, _>("published"),
-            timestamp: res.get::<NaiveDateTime, _>("timestamp")
+                timestamp: res.get::<NaiveDateTime, _>("timestamp"),
+            }),
+            Err(why) => {
+                eprintln!("{why:?}");
+                None
+            }
         }
     }