chamilo/chamilo-lms

<?php

declare(strict_types=1);
/* For licensing terms, see /license.txt */

namespace Chamilo\PluginBundle\XApi\Lrs;

use Chamilo\CoreBundle\Entity\XApiActivityState;
use Database;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Response;
use Xabbuh\XApi\Model\Actor;
use Xabbuh\XApi\Serializer\Symfony\Serializer;

/**
 * Class ActivitiesStateController.
 */
class ActivitiesStateController extends BaseController
{
    public function get(): Response
    {
        $serializer = Serializer::createSerializer();

        $requestedAgent = $this->httpRequest->query->get('agent');
        $activityId = $this->httpRequest->query->get('activityId');
        $stateId = $this->httpRequest->query->get('stateId');

        $state = Database::select(
            '*',
            Database::get_main_table('xapi_activity_state'),
            [
                'where' => [
                    'state_id = ? AND activity_id = ? AND MD5(agent) = ?' => [
                        Database::escape_string($stateId),
                        Database::escape_string($activityId),
                        md5($requestedAgent),
                    ],
                ],
            ],
            'first'
        );

        if (empty($state)) {
            return JsonResponse::create([], Response::HTTP_NOT_FOUND);
        }

        $requestedAgent = $serializer->deserialize(
            $this->httpRequest->query->get('agent'),
            Actor::class,
            'json'
        );

        /** @var Actor $stateAgent */
        $stateAgent = $serializer->deserialize(
            $state['agent'],
            Actor::class,
            'json'
        );

        if (!$stateAgent->equals($requestedAgent)) {
            return JsonResponse::create([], Response::HTTP_NOT_FOUND);
        }

        $documentData = json_decode($state['document_data'], true);

        return JsonResponse::create($documentData);
    }

    public function head(): Response
    {
        return $this->get()->setContent('');
    }

    public function post(): Response
    {
        return $this->put();
    }

    public function put(): Response
    {
        $activityId = $this->httpRequest->query->get('activityId');
        $agent = $this->httpRequest->query->get('agent');
        $stateId = $this->httpRequest->query->get('stateId');
        $documentData = $this->httpRequest->getContent();

        $state = Database::select(
            'id',
            Database::get_main_table('xapi_activity_state'),
            [
                'where' => [
                    'state_id = ? AND activity_id = ? AND MD5(agent) = ?' => [
                        Database::escape_string($stateId),
                        Database::escape_string($activityId),
                        md5($agent),
                    ],
                ],
            ],
            'first'
        );

        $em = Database::getManager();

        if (empty($state)) {
            $state = new XApiActivityState();
            $state
                ->setActivityId($activityId)
                ->setAgent(json_decode($agent, true))
                ->setStateId($stateId)
            ;
        } else {
            $state = $em->find(XApiActivityState::class, $state['id']);
        }

        $state->setDocumentData(json_decode($documentData, true));

        $em->persist($state);
        $em->flush();

        return Response::create('', Response::HTTP_NO_CONTENT);
    }
}