add POST /posts (pun not intended)

This commit is contained in:
SadlyNotSappho 2024-04-12 11:35:08 -07:00
parent 518dd26b0f
commit 0e4d5210f0
4 changed files with 79 additions and 47 deletions

View File

@ -1,14 +0,0 @@
GET /images/uuid.filetype DONE
-> returns the image with the correct filetype - uuid.png would return the image in png format, etc
GET /images/by-user/username DONE
-> gets all of the images made by {username}, if you are {username}, or if you have admin.
POST /images/create {image: "image data"} DONE
-> returns the uuid of the image, which it saves to the folder and database
DELETE /images/uuid DONE
-> if you're the owner of the image or an admin, deletes the image. returns basic success/faliure
images are stored in /images/uuid.png. Image::get_by_uuid(uuid) just gets the image from the folder, verifies that it is an image, and returns it. Image::get_by_username(username) gets all database images from the database and returns the uuids. the client is responsible for getting the images.

View File

@ -117,6 +117,12 @@ async fn migrate(rocket: Rocket<Build>) -> Rocket<Build> {
ADD COLUMN IF NOT EXISTS text_id TEXT NOT NULL UNIQUE", ADD COLUMN IF NOT EXISTS text_id TEXT NOT NULL UNIQUE",
)) ))
.await; .await;
let _ = conn
.execute(sqlx::query(
"ALTER TABLE posts
ADD COLUMN IF NOT EXISTS author STRING NOT NULL",
))
.await;
let _ = conn let _ = conn
.execute(sqlx::query( .execute(sqlx::query(
"ALTER TABLE posts "ALTER TABLE posts

View File

@ -1,13 +1,14 @@
/* /*
* POST /posts: uses json request body to get the post info and, y'know, create it * POST /posts: uses json request body to get the post info and, y'know, create it
* GET /posts/<id>: figures out what type of id <id> is, gets post via that, returns it * TODO GET /posts/<id>: figures out what type of id <id> is, gets post via that, returns it
* UPDATE /posts/<id>: figures out what type of id <id> is, uses json request body to update * TODO UPDATE /posts/<id>: figures out what type of id <id> is, uses json request body to update
* specific data about the post * specific data about the post
* DELETE /posts/<id>: you can figure out what this one does * TODO DELETE /posts/<id>: you can figure out what this one does
* *
* GET /posts: gets all posts, maybe json request body for args? * TODO GET /posts: gets all posts, maybe json request body for args?
*/ */
use crate::tables::posts::Post;
use crate::tables::{users::LoginStatus, users::User, Db}; use crate::tables::{users::LoginStatus, users::User, Db};
use rocket::http::CookieJar; use rocket::http::CookieJar;
use rocket::http::Status; use rocket::http::Status;
@ -16,6 +17,7 @@ use rocket::response::status;
use rocket::serde::json::Json; use rocket::serde::json::Json;
use rocket::serde::Deserialize; use rocket::serde::Deserialize;
use rocket_db_pools::Connection; use rocket_db_pools::Connection;
use uuid::Uuid;
#[derive(Deserialize)] #[derive(Deserialize)]
#[serde(crate = "rocket::serde")] #[serde(crate = "rocket::serde")]
@ -23,6 +25,7 @@ pub struct PostCreateInfo {
pub title: String, pub title: String,
pub text_id: String, pub text_id: String,
pub body: String, pub body: String,
pub auto_pubilsh: bool,
} }
#[post("/posts", data = "<info>")] #[post("/posts", data = "<info>")]
@ -33,12 +36,41 @@ pub async fn create(
) -> status::Custom<String> { ) -> status::Custom<String> {
match User::login_status(&mut db, cookies).await { match User::login_status(&mut db, cookies).await {
LoginStatus::LoggedIn(user) => { LoginStatus::LoggedIn(user) => {
// if post with same text id exists, fail match user.make_posts || user.admin {
// make sure user has perms to do this first tho true => {
// and uhhhhh // if post with same text id exists, fail
// yeah thats it idk match Post::get_by_text_id(&mut db, &info.text_id).await {
// TODO: implement all that Some(_) => status::Custom(
status::Custom(Status::NotImplemented, "Not implemented yet".to_string()) Status::Forbidden,
"A post already exists with this text id.".to_string(),
),
None => {
// create post
match Post::create(
&mut db,
&info.title,
&info.body,
info.auto_pubilsh,
Uuid::new_v4().to_string(),
&info.text_id,
user.username,
)
.await
{
Some(_) => status::Custom(Status::Ok, "Created.".to_string()),
None => status::Custom(
Status::InternalServerError,
"Couldn't create post.".to_string(),
),
}
}
}
}
false => status::Custom(
Status::Unauthorized,
"You don't have the permissions to do this".to_string(),
),
}
} }
LoginStatus::InvalidToken => { LoginStatus::InvalidToken => {
status::Custom(Status::Unauthorized, "Invalid login token".to_string()) status::Custom(Status::Unauthorized, "Invalid login token".to_string())

View File

@ -17,32 +17,35 @@ pub struct Post {
} }
impl Post { impl Post {
pub async fn create( pub async fn create(
mut db: Connection<Db>, db: &mut Connection<Db>,
title: String, /*ex: Why Trans People Deserve All Your Money*/ title: &String, /*ex: Why Trans People Deserve All Your Money*/
body: String, /*ex: # Because we're cooler than you \n\n![trans flag image](https://sadlynotsappho.dev/pfp.png)*/ body: &String, /*ex: # Because we're cooler than you \n\n![trans flag image](https://sadlynotsappho.dev/pfp.png)*/
published: bool, published: bool,
uuid: String, uuid: String,
text_id: String, /*ex: why-trans-people-deserve-all-your-money */ text_id: &String, /*ex: why-trans-people-deserve-all-your-money */
) { author: String
) -> Option<()> {
match db match db
.fetch_all( .execute(
sqlx::query( sqlx::query(
r#" r#"
INSERT INTO posts (title, body, published, uuid, text_id) INSERT INTO posts (title, body, published, uuid, text_id, author)
VALUES ($1, $2, $3, $4, $5); VALUES ($1, $2, $3, $4, $5, $6);
"#, "#,
) )
.bind(title) .bind(title)
.bind(body) .bind(body)
.bind(published) .bind(published)
.bind(uuid) .bind(uuid)
.bind(text_id), .bind(text_id)
.bind(author),
) )
.await .await
{ {
Ok(_) => (), Ok(_) => Some(()),
Err(why) => { Err(why) => {
eprintln!("Couldn't create database entry: {why:?}"); eprintln!("Couldn't create database entry: {why:?}");
None
} }
} }
} }
@ -58,7 +61,7 @@ impl Post {
title: res.get::<String, _>("title"), title: res.get::<String, _>("title"),
body: res.get::<String, _>("body"), body: res.get::<String, _>("body"),
published: res.get::<bool, _>("published"), published: res.get::<bool, _>("published"),
timestamp: res.get::<NaiveDateTime, _>("timestamp") timestamp: res.get::<NaiveDateTime, _>("timestamp"),
} }
} }
pub async fn get_by_uuid(mut db: Connection<Db>, uuid: String) -> Post { pub async fn get_by_uuid(mut db: Connection<Db>, uuid: String) -> Post {
@ -73,22 +76,27 @@ impl Post {
title: res.get::<String, _>("title"), title: res.get::<String, _>("title"),
body: res.get::<String, _>("body"), body: res.get::<String, _>("body"),
published: res.get::<bool, _>("published"), published: res.get::<bool, _>("published"),
timestamp: res.get::<NaiveDateTime, _>("timestamp") timestamp: res.get::<NaiveDateTime, _>("timestamp"),
} }
} }
pub async fn get_by_text_id(mut db: Connection<Db>, text_id: String) -> Post { pub async fn get_by_text_id(db: &mut Connection<Db>, text_id: &String) -> Option<Post> {
let res = db match db
.fetch_one(sqlx::query("SELECT * FROM posts WHERE text_id = $1;").bind(text_id)) .fetch_one(sqlx::query("SELECT * FROM posts WHERE text_id = $1;").bind(text_id))
.await .await
.unwrap(); {
Post { Ok(res) => Some(Post {
id: res.get::<i32, _>("id"), id: res.get::<i32, _>("id"),
uuid: res.get::<String, _>("uuid"), uuid: res.get::<String, _>("uuid"),
text_id: res.get::<String, _>("text_id"), text_id: res.get::<String, _>("text_id"),
title: res.get::<String, _>("title"), title: res.get::<String, _>("title"),
body: res.get::<String, _>("body"), body: res.get::<String, _>("body"),
published: res.get::<bool, _>("published"), published: res.get::<bool, _>("published"),
timestamp: res.get::<NaiveDateTime, _>("timestamp") timestamp: res.get::<NaiveDateTime, _>("timestamp"),
}),
Err(why) => {
eprintln!("{why:?}");
None
}
} }
} }