maestrano/mno-enterprise

module MnoEnterprise
  # From the Admin panel, an admin can:
  # - add widgets to staff dashboards (passing the dashboard id)
  # - add widgets to template dashboards (passing the dashboard template id)
  # - update any widget (passing its id)
  # - delete any widget (passing its id)
  class Jpi::V1::Admin::Impac::WidgetsController < Jpi::V1::Admin::BaseResourceController

    # POST /mnoe/jpi/v1/admin/impac/dashboard_templates/:id/widgets
    # POST /mnoe/jpi/v1/admin/impac/dashboards/:id/widgets
    def create
      return render json: { errors: { message: "#{container} not found" } }, status: :not_found unless dashboard.present?

      @widget = dashboard.widgets.create(widget_create_params)
      return render json: { errors: (widget && widget.errors).to_a }, status: :bad_request unless widget.present? && widget.valid?

      MnoEnterprise::EventLogger.info('widget_create', current_user.id, "#{container} Widget Creation", widget)
      @no_content = true
      render 'show'
    end

    # PUT /mnoe/jpi/v1/admin/impac/widgets/:id
    def update
      unless widget.present? && widget.update(widget_update_params)
        return render json: { errors: 'Cannot update widget' }, status: :bad_request
      end

      MnoEnterprise::EventLogger.info('widget_update', current_user.id, "#{container} Widget Update", widget)
      @nocontent = !params['metadata']
      render 'show'
    end

    # DELETE /mnoe/jpi/v1/admin/impac/widgets/:id
    def destroy
      unless widget.present? && widget.destroy
        return render json: { errors: 'Cannot delete widget' }, status: :bad_request
      end

      MnoEnterprise::EventLogger.info('widget_delete', current_user.id, "#{container} Widget Deletion", widget)
      head status: :ok
    end

    private

    def dashboard
      @dashboard ||= if params[:dashboard_template_id]
                       MnoEnterprise::Impac::Dashboard.templates.find(params[:dashboard_template_id])
                     elsif params[:dashboard_id]
                       MnoEnterprise::Impac::Dashboard.find_by(id: params[:dashboard_id], owner_type: 'User', owner_id: current_user.id)
                     end
    end

    # Used to customise the error message
    def container
      params[:dashboard_template_id] ? 'Dashboard template' : 'Dashboard'
    end

    def widget
      @widget ||= MnoEnterprise::Impac::Widget.find(params[:id].to_i)
    end

    def widget_create_params
      permitted_attrs = [:endpoint, :name, :width, { layouts: [] }]
      params.require(:widget).permit(*permitted_attrs).tap do |whitelisted|
        whitelisted[:settings] = params[:widget][:metadata] || {}
        # TODO: remove when all deployed versions of Impac! Angular will be above v1.5.0
        # When this is done:
        # - :widget_category can definitively be renamed to :endpoint in mnohub and mnoe
        # - the widget templates can be completely removed from mnohub and mnoe
        whitelisted[:widget_category] = params[:widget][:endpoint]
      end
      .except(:metadata)
    end

    def widget_update_params
      params.require(:widget).permit(:name, :width).tap do |whitelisted|
        whitelisted[:settings] = params[:widget][:metadata] || {}
      end
      .except(:metadata)
    end
  end
end