add: block list stacks

crates/app/src/routes/api/v1/mod.rs

@@ -537,8 +537,11 @@ pub fn routes() -> Router {
         .route("/stacks/{id}/privacy", post(stacks::update_privacy_request))
         .route("/stacks/{id}/mode", post(stacks::update_mode_request))
         .route("/stacks/{id}/sort", post(stacks::update_sort_request))
+        .route("/stacks/{id}/users", get(stacks::get_users_request))
         .route("/stacks/{id}/users", post(stacks::add_user_request))
         .route("/stacks/{id}/users", delete(stacks::remove_user_request))
+        .route("/stacks/{id}/block", post(stacks::block_request))
+        .route("/stacks/{id}/block", delete(stacks::unblock_request))
         .route("/stacks/{id}", delete(stacks::delete_request))
         // uploads
         .route("/uploads/{id}", get(uploads::get_request))

crates/app/src/routes/api/v1/stacks.rs

@@ -1,7 +1,16 @@
-use crate::{State, get_user_from_token};
-use axum::{Extension, Json, extract::Path, response::IntoResponse};
+use crate::{get_user_from_token, routes::pages::PaginatedQuery, State};
+use axum::{
+    extract::{Path, Query},
+    response::IntoResponse,
+    Extension, Json,
+};
 use axum_extra::extract::CookieJar;
-use tetratto_core::model::{oauth, stacks::UserStack, ApiReturn, Error};
+use tetratto_core::model::{
+    oauth,
+    permissions::FinePermission,
+    stacks::{StackBlock, StackPrivacy, UserStack},
+    ApiReturn, Error,
+};
 use super::{
     AddOrRemoveStackUser, CreateStack, UpdateStackMode, UpdateStackName, UpdateStackPrivacy,
     UpdateStackSort,
@@ -221,3 +230,93 @@ pub async fn delete_request(
         Err(e) => Json(e.into()),
     }
 }
+
+pub async fn get_users_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+    Query(props): Query<PaginatedQuery>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadProfiles) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let stack = match data.get_stack_by_id(id).await {
+        Ok(s) => s,
+        Err(e) => return Json(e.into()),
+    };
+
+    if stack.privacy == StackPrivacy::Private
+        && user.id != stack.owner
+        && !user.permissions.check(FinePermission::MANAGE_STACKS)
+    {
+        return Json(Error::NotAllowed.into());
+    }
+
+    match data.get_stack_users(id, 12, props.page).await {
+        Ok(users) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: Some({
+                let mut out = Vec::new();
+
+                for mut u in users.clone() {
+                    u.clean();
+                    out.push(u)
+                }
+
+                out
+            }),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn block_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadProfiles) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    match data.create_stackblock(StackBlock::new(user.id, id)).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}
+
+pub async fn unblock_request(
+    jar: CookieJar,
+    Extension(data): Extension<State>,
+    Path(id): Path<usize>,
+) -> impl IntoResponse {
+    let data = &(data.read().await).0;
+    let user = match get_user_from_token!(jar, data, oauth::AppScope::UserReadProfiles) {
+        Some(ua) => ua,
+        None => return Json(Error::NotAllowed.into()),
+    };
+
+    let block = match data.get_stackblock_by_initiator_stack(user.id, id).await {
+        Ok(b) => b,
+        Err(e) => return Json(e.into()),
+    };
+
+    match data.delete_stackblock(block.id, user).await {
+        Ok(_) => Json(ApiReturn {
+            ok: true,
+            message: "Success".to_string(),
+            payload: (),
+        }),
+        Err(e) => Json(e.into()),
+    }
+}