vinc/pi.ctu.re

class PicturesController < ApplicationController
  include PaginationContext

  before_action :authenticate_user!, except: %i[index search show]

  before_action :set_picture,        except: %i[index import search new create]
  before_action :set_album,            only: %i[index show]
  before_action :set_user,             only: %i[index show]

  before_action :set_from,             only: %i[index show]
  before_action :set_order,            only: %i[index show]

  before_action :set_pictures,         only: %i[index show]

  def index
    case @order
    when "view"
      @pictures = @pictures.order_by_view.page(params[:page])
    when "time"
      @pictures = @pictures.order_by_time.page(params[:page])
    else
      raise ActionController::BadRequest, "Invalid query parameters: order"
    end
  end

  def search
    if params[:q].present?
      @pictures = Picture.public_setting.enabled.
        where("description ILIKE ?", "%#{params[:q]}%").page(params[:page])
    end

    respond_to do |format|
      format.html # search.html.erb
      format.js { render template: "pictures/index" }
    end
  end

  def import
  end

  def show
    @picture.protected_param = params[:secret]
    authorize @picture

    case @order
    when "view"
      @previous_picture = @pictures.order_by_view_at(@picture).previous(false)
      @next_picture     = @pictures.order_by_view_at(@picture).next(false)
    else
      @previous_picture = @pictures.order_by_time_at(@picture).previous(false)
      @next_picture     = @pictures.order_by_time_at(@picture).next(false)
    end

    Picture.increment_counter(:views_count, @picture.id)
  end

  def new
    @picture = current_user.pictures.new
  end

  def edit
  end

  def create
    @picture = current_user.pictures.create(picture_params)
    respond_with(@picture)
  end

  def update
    @picture.update(picture_params)
    respond_with(@picture)
  end

  def destroy
    @picture.destroy
    respond_with(@picture)
  end

  protected

  def set_picture
    @picture = Picture.find_by!(token: params[:token])
  end

  def set_album
    token = params[:album_token] || params[:from] unless %w[all explore user].include?(params[:from])

    @album = Album.find_by(token: token) if token
  end

  def set_user
    @user =
      if params[:user_username]
        User.find_by!(username: params[:user_username])
      elsif @picture
        @picture.user
      end
  end

  def set_pictures
    @pictures =
      case @from
      when "all"
        Picture.public_setting.enabled
      when "explore"
        Picture.featured.public_setting.enabled
      when "user"
        if @user == current_user
          @user.pictures
        else
          @user.pictures.public_setting.enabled
        end
      when /\w+/ # album token
        raise(ActionController::BadRequest, "Invalid query parameters: from") if @album.nil?

        if @album.user == current_user
          @album.pictures
        else
          @album.pictures.public_setting.enabled
        end
      end
  end

  def picture_params
    params.require(:picture).permit(:description, :image, :privacy_setting, :regenerate_secret, album_ids: [])
  end
end