UserBlogController.java

/**
 * Balero CMS Project: Proyecto 100% Mexicano de código libre.
 * Página Oficial: http://www.balerocms.com
 *
 * @author      Anibal Gomez <anibalgomez@icloud.com>
 * @copyright   Copyright (C) 2015 Neblina Software. Derechos reservados.
 * @license     Licencia BSD; vea LICENSE.txt
 */

package com.neblina.balero.web.authorized.user;

import com.github.slugify.Slugify;
import com.neblina.balero.domain.Blog;
import com.neblina.balero.service.BlogService;
import com.neblina.balero.service.PropertyService;
import com.neblina.balero.service.UserService;
import com.neblina.balero.service.repository.CommentRepository;
import com.neblina.balero.util.AntiXSS;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.access.annotation.Secured;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;

import java.io.IOException;
import java.time.LocalDate;


@Controller
@RequestMapping("/user/blog")
public class UserBlogController {

    private static final Logger log = LogManager.getLogger(UserBlogController.class.getName());

    @Autowired
    private BlogService blogService;

    @Autowired
    private CommentRepository commentRepository;

    @Autowired
    private UserService userService;

    @Autowired
    private PropertyService propertyService;

    @Secured("ROLE_USER")
    @RequestMapping(value = {"", "/"} )
    public String blog(Model model) {
        String username = userService.getMyUsername();
        model.addAttribute("posts", blogService.findAllByAuthor(username));
        model.addAttribute("url", "user");
        return "authorized/blog";
    }

    @Secured("ROLE_USER")
    @RequestMapping(value = "/{id}/{permalink}", method = RequestMethod.GET)
    public String blogEditGet(Model model,
                              @PathVariable("id") Long id,
                              @PathVariable("permalink") String permalink) {
        try {
            Blog blog = blogService.findOneById(id);
            if(!blog.getAuthor().equals(userService.getMyUsername())) {
                throw new Exception("You can't access to another user post!");
            }
            model.addAttribute("comments", commentRepository.findAllByPostPermalink(permalink));
            model.addAttribute("posts", blogService.findOneById(id));
            model.addAttribute("url", userService.getUserType());
            model.addAttribute("multiLanguage" , propertyService.isMultiLanguage());
        } catch (Exception e) {
            model.addAttribute("securityError", e.getMessage());
        }
        return "authorized/blog_edit";
    }

    @Secured("ROLE_USER")
    @RequestMapping(value = "/{id}/{permalink}", method = RequestMethod.POST)
    public String blogEditPost(Model model,
                               @PathVariable("id") Long id,
                               @PathVariable("permalink") String urlPermalink,
                               @RequestParam("bloname") String bloname,
                               @RequestParam("title") String title,
                               @RequestParam("introPost") String introPost,
                               @RequestParam("fullPost") String fullPost,
                               @RequestParam("code") String code,
                               @RequestParam("permalink") String permalink,
                               @RequestParam("author") String author) {
        try {
            if(!author.equals(userService.getMyUsername())) {
                throw new Exception("Security Exception");
            }
            AntiXSS antiXSS = new AntiXSS();
            String uintroPost = antiXSS.blind(introPost);
            String ufullPost = antiXSS.blind(fullPost);
            Slugify slg = new Slugify();
            String result = slg.slugify(permalink);
            blogService.savePost(
                    id,
                    bloname,
                    title,
                    uintroPost,
                    ufullPost,
                    code,
                    result,
                    "pending"
            );
            model.addAttribute("success", 1);
            model.addAttribute("posts", blogService.findOneById(id));
        } catch (Exception e) {
            model.addAttribute("securityError", e.getMessage());
        }
        model.addAttribute("url", "user");
        return "authorized/blog_edit";
    }

    @Secured("ROLE_USER")
    @RequestMapping(value = "/new", method = RequestMethod.GET)
    public String blogEditGet(Model model) {
        String username = userService.getMyUsername();
        LocalDate today = LocalDate.now();
        model.addAttribute("date", today);
        model.addAttribute("user", userService.findOneByUsername(username));
        model.addAttribute("url", "user");
        model.addAttribute("multiLanguage" , propertyService.isMultiLanguage());
        log.debug("Date: " + today);
        return "authorized/blog_new";
    }

    @Secured("ROLE_USER")
    @RequestMapping(value = "/new", method = RequestMethod.POST)
    public String blogNew(
                              @RequestParam("bloname") String bloname,
                              @RequestParam("title") String title,
                              @RequestParam("introPost") String introPost,
                              @RequestParam("fullPost") String fullPost,
                              @RequestParam("code") String code,
                              @RequestParam("permalink") String permalink,
                              @RequestParam("author") String author) throws IOException {
        AntiXSS antiXSS = new AntiXSS();
        String uintroPost = antiXSS.blind(introPost);
        String ufullPost = antiXSS.blind(fullPost);
        Slugify slg = new Slugify();
        String result = slg.slugify(permalink);
        blogService.createPost(
                bloname,
                title,
                uintroPost,
                ufullPost,
                code,
                result,
                author,
                "pending"
        );
        return "redirect:/user/blog";
    }

    @Secured("ROLE_USER")
    @RequestMapping(value = "/delete/{id}", method = RequestMethod.GET)
    public String pageDelete(
                            @PathVariable("id") Long id) {
        blogService.deletePost(id);
        return "redirect:/user/blog";
    }

}