add: layouts api

crates/app/src/routes/api/v1/layouts.rs

@@ -0,0 +1,175 @@
+use crate::{
+    get_user_from_token,
+    routes::{
+        api::v1::{CreateLayout, UpdateLayoutName, UpdateLayoutPages, UpdateLayoutPrivacy},
+    },
+    State,
+};
+use axum::{extract::Path, response::IntoResponse, Extension, Json};
+use axum_extra::extract::CookieJar;
+use tetratto_core::{
+    model::{
+        layouts::{Layout, LayoutPrivacy},
+        oauth,
+        permissions::FinePermission,
+        ApiReturn, Error,
+    },
+};
+
+pub async fn get_request(
+    jar: CookieJar,
+    Path(id): Path<usize>,
+    Extension(data): Extension<State>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadStacks) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let layout = match data.get_layout_by_id(id).await {
+        Ok(x) => x,
+        Err(e) => return Json(e.into()),
+    };
+
+    if layout.privacy == LayoutPrivacy::Public
+        && user.id != layout.owner
+        && !user.permissions.check(FinePermission::MANAGE_USERS)
+    {
+        return Json(Error::NotAllowed.into());
+    }
+
+    Json(ApiReturn {
+        ok: true,
+        message: "Success".to_string(),
+        payload: Some(layout),
+    })
+}
+
+pub async fn list_request(jar: CookieJar, Extension(data): Extension<State>) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.get_layouts_by_user(user.id).await {
+        Ok(x) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: Some(x),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn create_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Json(req): Json<CreateLayout>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserCreateLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data
+        .create_layout(Layout::new(req.name, user.id, req.replaces))
+        .await
+    {
+        Ok(s) => Json(ApiReturn {
+            ok: true,
+            message: "Layout created".to_string(),
+            payload: s.id.to_string(),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn update_name_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+    Json(req): Json<UpdateLayoutName>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserManageLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.update_layout_title(id, &user, &req.name).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Layout updated".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn update_privacy_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+    Json(req): Json<UpdateLayoutPrivacy>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserManageLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.update_layout_privacy(id, &user, req.privacy).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Layout updated".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn update_pages_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+    Json(req): Json<UpdateLayoutPages>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserManageLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.update_layout_pages(id, &user, req.pages).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Layout updated".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn delete_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserManageLayouts) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.delete_layout(id, &user).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Layout deleted".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}

crates/app/src/routes/api/v1/mod.rs

@@ -3,6 +3,7 @@ pub mod auth;
 pub mod channels;
 pub mod communities;
 pub mod journals;
+pub mod layouts;
 pub mod notes;
 pub mod notifications;
 pub mod reactions;
@@ -26,6 +27,7 @@ use tetratto_core::model::{
     },
     communities_permissions::CommunityPermission,
     journals::JournalPrivacyPermission,
+    layouts::{CustomizablePage, LayoutPage, LayoutPrivacy},
     oauth::AppScope,
     permissions::{FinePermission, SecondaryPermission},
     reactions::AssetType,
@@ -612,6 +614,17 @@ pub fn routes() -> Router {
         // uploads
         .route("/uploads/{id}", get(uploads::get_request))
         .route("/uploads/{id}", delete(uploads::delete_request))
+        // layouts
+        .route("/layouts", get(layouts::list_request))
+        .route("/layouts", post(layouts::create_request))
+        .route("/layouts/{id}", get(layouts::get_request))
+        .route("/layouts/{id}", delete(layouts::delete_request))
+        .route("/layouts/{id}/title", post(layouts::update_name_request))
+        .route(
+            "/layouts/{id}/privacy",
+            post(layouts::update_privacy_request),
+        )
+        .route("/layouts/{id}/pages", post(layouts::update_pages_request))
 }
 
 #[derive(Deserialize)]
@@ -993,3 +1006,24 @@ pub struct UpdateNoteTags {
 pub struct AwardAchievement {
     pub name: AchievementName,
 }
+
+#[derive(Deserialize)]
+pub struct CreateLayout {
+    pub name: String,
+    pub replaces: CustomizablePage,
+}
+
+#[derive(Deserialize)]
+pub struct UpdateLayoutName {
+    pub name: String,
+}
+
+#[derive(Deserialize)]
+pub struct UpdateLayoutPrivacy {
+    pub privacy: LayoutPrivacy,
+}
+
+#[derive(Deserialize)]
+pub struct UpdateLayoutPages {
+    pub pages: Vec<LayoutPage>,
+}