/* * Copyright 2002-2016 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.springframework.security.samples.mvc; import javax.validation.Valid; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.security.samples.data.Message; import org.springframework.security.samples.data.MessageRepository; import org.springframework.stereotype.Controller; import org.springframework.validation.BindingResult; import org.springframework.web.bind.annotation.ModelAttribute; import org.springframework.web.bind.annotation.PathVariable; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.servlet.ModelAndView; import org.springframework.web.servlet.mvc.support.RedirectAttributes; @Controller @RequestMapping("/") public class MessageController { private MessageRepository messageRepository; @Autowired public MessageController(MessageRepository messageRepository) { this.messageRepository = messageRepository; } @RequestMapping public ModelAndView list() { Iterable<Message> messages = messageRepository.findAll(); return new ModelAndView("messages/inbox", "messages", messages); } @RequestMapping("{id}") public ModelAndView view(@PathVariable("id") Message message) { return new ModelAndView("messages/show", "message", message); } @RequestMapping(value = "{id}", method = RequestMethod.DELETE) public String delete(@PathVariable("id") Message message, RedirectAttributes redirect) { messageRepository.delete(message); redirect.addFlashAttribute("globalMessage", "Message removed successfully"); return "redirect:/"; } @RequestMapping(params = "form", method = RequestMethod.GET) public String createForm(@ModelAttribute Message message) { return "messages/compose"; } @RequestMapping(method = RequestMethod.POST) public ModelAndView create(@Valid Message message, BindingResult result, RedirectAttributes redirect) { if (result.hasErrors()) { return new ModelAndView("messages/compose"); } message = messageRepository.save(message); redirect.addFlashAttribute("globalMessage", "Successfully created a new message"); return new ModelAndView("redirect:/{message.id}", "message.id", message.getId()); } }