glittergallery/GlitterGallery

require 'escape'

class ApplicationController < ActionController::Base
  include Escape
  include SessionsHelper
  include PathsHelper
  protect_from_forgery with: :exception
  before_action :configure_devise_permitted_parameters, if: :devise_controller?
  before_action :return_current_user_projects

  rescue_from CanCan::AccessDenied do
    render file: "#{Rails.root}/public/403.html", status: 403, layout: false
  end

  private

  def render_404
    render file: "#{Rails.root}/public/404.html", layout: false, status: 404
  end

  def return_current_user_projects
    @projects = current_user.projects if user_signed_in?
  end

  def satellite_delete(repo, file_name)
    repo.index.remove file_name
    author = current_user.git_author_params
    options = @project.rugged_commit_options(author,
                                             repo,
                                             "Deleted #{file_name}"
                                            )
    Rugged::Commit.create repo, options
    repo.index.write
  end

  def pg(things, num)
    things.paginate(page: params[:page], per_page: num) unless things.nil?
  end

  # used to deliver notification on various events
  def notify_users(action, model_id, victims, url = nil)
    return if victims.empty?
    actions = { 'project_comment' => 0,
                'follow_project' => 1,
                'fork' => 2,
                'follow_user' => 3,
                'project_create' => 4,
                'issue_comment' => 5,
                'issue_create' => 6,
                'blob_comment' => 7,
                'commit_comment' => 8,
                'tree_comment' => 9,
                'annotation' => 10
              }
    Notification.create(
          actor: current_user,
          action: actions[action],
          model_id: model_id,
          victims: victims,
          url: url
        )
  end

  # if url comes from a comment then append comment id to url
  # change space to %20 with URI
  # if url has master in it then replace it with repo head
  def notification_url
    params[:url] = "#{params[:url]}#comment_#{@comment.id}" if @comment
    match_data = params[:url].match %r{((blob|tree)\/master)}
    return params[:url] unless match_data
    replace_str = "#{match_data[2]}/#{@project.barerepo.head.target.oid}"
    params[:url].gsub %r{((blob|tree)\/master)}, replace_str
  end

  # used to set user and projects obejcts from the params
  def get_context
    @user = User.find_by username: params[:user_id]
    @project = Project.find_by user_id: @user.id, name: params[:project_id]
    render_404 && return if @project.blank?
  end

  protected

  def configure_devise_permitted_parameters
    registration_params = [:email, :password, :password_confirmation]

    if params[:action] == 'update'
      devise_parameter_sanitizer.for(:account_update) do |u|
        u.permit(registration_params << :name << :current_password)
      end
    elsif params[:action] == 'create'
      devise_parameter_sanitizer.for(:sign_up) do |u|
        u.permit(registration_params << :username)
      end
    end
  end

  def after_sign_in_path_for(_)
    dashboard_path
  end
end