class ChatChannelsController < ApplicationController before_action :authenticate_user!, only: %i[moderate] before_action :set_channel, only: %i[show update update_channel open moderate] after_action :verify_authorized CHANNEL_ATTRIBUTES_FOR_SERIALIZATION = %i[id description channel_name].freeze private_constant :CHANNEL_ATTRIBUTES_FOR_SERIALIZATION def index case params[:state] when "unopened" authorize ChatChannel render_unopened_json_response when "unopened_ids" authorize ChatChannel render_unopened_ids_response when "pending" authorize ChatChannel render_pending_json_response when "joining_request" authorize ChatChannel render_joining_request_json_response else skip_authorization render_channels_html end end def show @chat_messages = @chat_channel.messages .includes(:user) .order(created_at: :desc) .offset(params[:message_offset]) .limit(50) end def create authorize ChatChannel @chat_channel = current_user.chat_channels.create( channel_type: "invite_only", channel_name: chat_channel_params[:channel_name], slug: chat_channel_params[:slug], ) render_chat_channel end def update @chat_channel.update(chat_channel_params) if @chat_channel.errors.any? flash[:error] = @chat_channel.errors.full_messages.to_sentence else if chat_channel_params[:discoverable].to_i.zero? ChatChannelMembership.create(user_id: SiteConfig.mascot_user_id, chat_channel_id: @chat_channel.id, role: "member", status: "active") else ChatChannelMembership.find_by(user_id: SiteConfig.mascot_user_id)&.destroy end flash[:settings_notice] = "Channel settings updated." end current_user_membership = @chat_channel.mod_memberships.find_by!(user: current_user) redirect_to edit_chat_channel_membership_path(current_user_membership) end def update_channel @chat_channel.update(chat_channel_params) if @chat_channel.errors.any? render json: { success: false, errors: @chat_channel.errors.full_messages, message: "Channel settings updation failed. Try again later." }, success: :bad_request else if chat_channel_params[:discoverable] ChatChannelMembership.create(user_id: SiteConfig.mascot_user_id, chat_channel_id: @chat_channel.id, role: "member", status: "active") else ChatChannelMembership.find_by(user_id: SiteConfig.mascot_user_id)&.destroy end render json: { success: true, message: "Channel settings updated.", data: {} }, success: :ok end end def open membership = @chat_channel.chat_channel_memberships.where(user_id: current_user.id).first membership.update(last_opened_at: 1.second.from_now, has_unopened_messages: false) send_open_notification render json: { status: "success", channel: params[:id] }, status: :ok end def moderate chat_channel = ChatChannel.find_by(id: params[:id]) authorize chat_channel command, username = chat_channel_params[:command].split case command when "/ban" user = User.find_by(username: username) membership = user&.chat_channel_memberships&.find_by(chat_channel: chat_channel) if user && membership user.add_role :banned user.messages.where(chat_channel: chat_channel).delete_all membership.update(status: "removed_from_channel") Pusher.trigger(chat_channel.pusher_channels, "user-banned", { userId: user.id }.to_json) render json: { status: "moderation-success", message: "#{username} was suspended.", userId: user.id, chatChannelId: chat_channel.id }, status: :ok else render json: { status: "error", message: "Ban failed. user with username '#{username}' not found in this channel." }, status: :bad_request end when "/unban" user = User.find_by(username: username) if user user.remove_role :banned render json: { status: "moderation-success", message: "#{username} was unsuspended." }, status: :ok else render json: { status: "error", message: "Unban failed. User with username '#{username}' not found in this channel." }, status: :bad_request end when "/clearchannel" @chat_channel.clear_channel render json: { status: "success", message: "cleared!" }, status: :ok else render json: { status: "error", message: "invalid command" }, status: :bad_request end end def create_chat chat_recipient = User.find(params[:user_id]) valid_listing = Listing.where(user_id: params[:user_id], contact_via_connect: true).limit(1) authorize ChatChannel if chat_recipient.inbox_type == "open" || valid_listing.length == 1 chat = ChatChannels::CreateWithUsers.call(users: [current_user, chat_recipient], channel_type: "direct") message_markdown = params[:message] message = Message.new( chat_channel: chat, message_markdown: message_markdown, user: current_user, ) chat.messages.append(message) render json: { status: "success", message: "chat channel created!" }, status: :ok else render json: { status: "error", message: "not allowed!" }, status: :bad_request end rescue StandardError => e render json: { status: "error", message: e.message }, status: :bad_request end def block_chat chat_channel = ChatChannel.find(params[:chat_id]) authorize chat_channel chat_channel.status = "blocked" chat_channel.save chat_channel.chat_channel_memberships.map(&:index_to_elasticsearch) render json: { status: "success", message: "chat channel blocked" }, status: :ok end # Note: this is part of an effort of moving some things from the external to # the internal API. No behavior was changes as part of this refactoring, so # this action is a bit unusual. def channel_info skip_authorization @chat_channel = ChatChannel .select(CHANNEL_ATTRIBUTES_FOR_SERIALIZATION) .find_by(id: params[:id]) return if @chat_channel&.has_member?(current_user) render json: { error: "not found", status: 404 }, status: :not_found end private def set_channel @chat_channel = ChatChannel.find_by(id: params[:id]) || not_found authorize @chat_channel end def chat_channel_params params.require(:chat_channel).permit(policy(ChatChannel).permitted_attributes) end def render_unopened_json_response @chat_channels_memberships = if session_current_user_id ChatChannelMembership.where(user_id: session_current_user_id) .where(has_unopened_messages: true) .where(show_global_badge_notification: true) .where.not(status: %w[removed_from_channel left_channel]) .includes(%i[chat_channel user]) .order("chat_channel_memberships.updated_at" => :desc) else [] end render "index.json" end def render_pending_json_response @chat_channels_memberships = if current_user current_user .chat_channel_memberships.includes(:chat_channel) .where(status: "pending") .order("chat_channel_memberships.updated_at" => :desc) else [] end render "index.json" end def render_unopened_ids_response @unopened_ids = ChatChannelMembership.where(user_id: session_current_user_id).includes(:chat_channel) .where(has_unopened_messages: true).where.not(status: %w[removed_from_channel left_channel]).pluck(:chat_channel_id) render json: { unopened_ids: @unopened_ids } end def render_joining_request_json_response requested_memberships_id = current_user .chat_channel_memberships .includes(:chat_channel) .where(chat_channels: { discoverable: true }, role: "mod") .pluck(:chat_channel_id) .map { |membership_id| ChatChannel.find_by(id: membership_id).requested_memberships } .flatten .map(&:id) @chat_channels_memberships = ChatChannelMembership .includes(%i[user chat_channel]) .where(id: requested_memberships_id) render "index.json" end def render_channels_html return unless current_user && params[:slug] slug = if params[:slug]&.start_with?("@") [current_user.username, params[:slug].delete("@")].sort.join("/") else params[:slug] end chat_channel = ChatChannel.find_by(slug: slug) return unless chat_channel membership = chat_channel.chat_channel_memberships.find_by(user_id: current_user.id) @active_channel = membership&.status == "active" ? chat_channel : nil end def render_chat_channel if @chat_channel.valid? render json: { status: "success", chat_channel: @chat_channel.to_json(only: %i[channel_name slug]) }, status: :ok else render json: { errors: @chat_channel.errors.full_messages } end end def send_open_notification adjusted_slug = if @chat_channel.group? @chat_channel.adjusted_slug else @chat_channel.adjusted_slug(current_user) end payload = { channel_type: @chat_channel.channel_type, adjusted_slug: adjusted_slug }.to_json Pusher.trigger(ChatChannel.pm_notifications_channel(session_current_user_id), "message-opened", payload) end end