mint/app/Http/Controllers/ArticleController.php

<?php

namespace App\Http\Controllers;

use App\Models\Article;
use App\Models\ArticleCollection;
use App\Models\Collection;

use Illuminate\Http\Request;
use Illuminate\Support\Str;
use App\Http\Resources\ArticleResource;
use App\Http\Api\AuthApi;
use App\Http\Api\ShareApi;
use App\Http\Api\StudioApi;
use Illuminate\Support\Facades\DB;

class ArticleController extends Controller
{
    public static function userCanRead($user_uid,Article $article){
        if($article->status === 30 ){
            return true;
        }
        if(empty($user_uid)){
            return false;
        }
            //私有文章，判断是否为所有者
        if($user_uid === $article->owner){
            return true;
        }
        //非所有者
        //判断是否为文章协作者
        $power = ShareApi::getResPower($user_uid,$article->uid);
        if($power >= 10 ){
            return true;
        }
        //无读取权限
        //判断文集是否有读取权限
        $inCollection = ArticleCollection::where('article_id',$article->uid)
                                        ->select('collect_id')
                                        ->groupBy('collect_id')->get();
        if(!$inCollection){
            return false;
        }
        //查找与文章同主人的文集
        $collections = Collection::whereIn('uid',$inCollection)
                                    ->where('owner',$article->owner)
                                    ->select('uid')
                                    ->get();
        if(!$collections){
            return false;
        }
        //查找与文章同主人的文集是否是共享的
        $power = 0;
        foreach ($collections as $collection) {
            # code...
            $currPower = ShareApi::getResPower($user_uid,$collection->uid);
            if($currPower >= 10){
                return true;
            }
        }
        return false;
    }

    public static function userCanEdit($user_uid,$article){
        if(empty($user_uid)){
            return false;
        }
        //私有文章，判断是否为所有者
        if($user_uid === $article->owner){
            return true;
        }
        //非所有者
        //判断是否为文章协作者
        $power = ShareApi::getResPower($user_uid,$article->uid);
        if($power >= 20 ){
            return true;
        }
        //无读取权限
        //判断文集是否有读取权限
        $inCollection = ArticleCollection::where('article_id',$article->uid)
                                        ->select('collect_id')
                                        ->groupBy('collect_id')->get();
        if(!$inCollection){
            return false;
        }
        //查找与文章同主人的文集
        $collections = Collection::whereIn('uid',$inCollection)
                                    ->where('owner',$article->owner)
                                    ->select('uid')
                                    ->get();
        if(!$collections){
            return false;
        }
        //查找与文章同主人的文集是否是共享的
        $power = 0;
        foreach ($collections as $collection) {
            # code...
            $currPower = ShareApi::getResPower($user_uid,$collection->uid);
            if($currPower >= 20){
                return true;
            }
        }
        return false;
    }

    public static function userCanManage($user_uid,$studioName){
        if(empty($user_uid)){
            return false;
        }
        //判断是否为所有者
        if($user_uid === StudioApi::getIdByName($studioName)){
            return true;
        }else{
            return false;
        }
    }
    /**
     * Display a listing of the resource.
     *
     * @return \Illuminate\Http\Response
     */
    public function index(Request $request)
    {
        //
        $indexCol = ['uid','title','subtitle','summary','owner','lang','status','updated_at','created_at'];
        switch ($request->get('view')) {
            case 'studio':
				# 获取studio内所有channel
                $user = \App\Http\Api\AuthApi::current($request);
                if(!$user){
                    return $this->error(__('auth.failed'));
                }
                //判断当前用户是否有指定的studio的权限
                $studioId = StudioApi::getIdByName($request->get('name'));
                if($user['user_uid'] !== $studioId){
                    return $this->error(__('auth.failed'));
                }
                $table = Article::select($indexCol)->where('owner', $studioId);
                //根据anthology过滤
                if($request->has('anthology')){
                    switch ($request->get('anthology')) {
                        case 'all':
                            break;
                        case 'none':
                            # 我的文集
                            $myCollection = Collection::where('owner',$studioId)->select('uid')->get();
                            //收录在我的文集里面的文章
                            $articles = ArticleCollection::whereIn('collect_id',$myCollection)
                                                         ->select('article_id')->groupBy('article_id')->get();
                            //不在这些范围之内的文章
                            $table =  $table->whereNotIn('uid',$articles);
                            break;
                        default:
                            $articles = ArticleCollection::where('collect_id',$request->get('anthology'))
                                                         ->select('article_id')->get();
                            $table =  $table->whereIn('uid',$articles);
                            break;
                    }
                }
				break;
        }
        //处理搜索
        if($request->has("search") && !empty($request->has("search"))){
            $table = $table->where('title', 'like', "%".$request->get("search")."%");
        }
        //获取记录总条数
        $count = $table->count();
        //处理排序
        if(isset($_GET["order"]) && isset($_GET["dir"])){
            $table = $table->orderBy($_GET["order"],$_GET["dir"]);
        }else{
            //默认排序
            $table = $table->orderBy('updated_at','desc');
        }
        //处理分页
        if($request->has("limit")){

            if($request->has("offset")){
                $offset = $request->get("offset");
            }else{
                $offset = 0;
            }
            $table = $table->skip($offset)->take($request->get("limit"));
        }
        //获取数据
        $result = $table->get();
        if($result){
			return $this->ok(["rows"=>ArticleResource::collection($result),"count"=>$count]);
		}else{
			return $this->error("没有查询到数据");
		}
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function store(Request $request)
    {
        //判断权限
        $user = AuthApi::current($request);
        if(!$user){
            return $this->error(__('auth.failed'),[],401);
        }else{
            $user_uid=$user['user_uid'];
        }

        $canManage = ArticleController::userCanManage($user_uid,$request->get('studio'));
        if(!$canManage){
            return $this->error(__('auth.failed'),[],403);
        }
        //权限判断结束
        $studioUuid = StudioApi::getIdByName($request->get('studio'));
        //查询标题是否重复
        /*
        if(Article::where('title',$request->get('title'))->where('owner',$studioUuid)->exists()){
            return $this->error(__('validation.exists'));
        }*/

        $newOne = new Article;
        $newOne->id = app('snowflake')->id();
        $newOne->uid = Str::uuid();
        $newOne->title = $request->get('title');
        $newOne->lang = $request->get('lang');
        $newOne->owner = $studioUuid;
        $newOne->owner_id = $user['user_id'];
        $newOne->editor_id = $user['user_id'];
        $newOne->create_time = time()*1000;
        $newOne->modify_time = time()*1000;
        $newOne->save();
        return $this->ok($newOne);
    }

    /**
     * Display the specified resource.
     * @param  \Illuminate\Http\Request  $request
     * @param  \App\Models\Article  $article
     * @return \Illuminate\Http\Response
     */
    public function show(Request  $request,Article $article)
    {
        //
        if(!$article){
            return $this->error("no recorder");
        }
        //判断权限
        $user = AuthApi::current($request);
        if(!$user){
            $user_uid="";
        }else{
            $user_uid=$user['user_uid'];
        }

        $canRead = ArticleController::userCanRead($user_uid,$article);
        if(!$canRead){
            return $this->error(__('auth.failed'),[],401);
        }
        return $this->ok(new ArticleResource($article));
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \App\Models\Article  $article
     * @return \Illuminate\Http\Response
     */
    public function update(Request $request, Article $article)
    {
        //
        if(!$article){
            return $this->error("no recorder");
        }
        //鉴权
        $user = AuthApi::current($request);
        if(!$user){
            return $this->error(__('auth.failed'),[],401);
        }else{
            $user_uid=$user['user_uid'];
        }

        $canEdit = ArticleController::userCanEdit($user_uid,$article);
        if(!$canEdit){
            return $this->error(__('auth.failed'),[],401);
        }

        /*
        //查询标题是否重复
        if(Article::where('title',$request->get('title'))
                  ->where('owner',$article->owner)
                  ->where('uid',"<>",$article->uid)
                  ->exists()){
            return $this->error(__('validation.exists'));
        }*/

        $article->title = $request->get('title');
        $article->subtitle = $request->get('subtitle');
        $article->summary = $request->get('summary');
        $article->content = $request->get('content');
        $article->lang = $request->get('lang');
        $article->status = $request->get('status',10);
        $article->editor_id = $user['user_id'];
        $article->modify_time = time()*1000;
        $article->save();
        return $this->ok($article);

    }

    /**
     * Remove the specified resource from storage.
     * @param  \Illuminate\Http\Request  $request
     * @param  \App\Models\Article  $article
     * @return \Illuminate\Http\Response
     */
    public function destroy(Request $request,Article $article)
    {
        //
        $user = AuthApi::current($request);
        if(!$user){
            return $this->error(__('auth.failed'));
        }
        //判断当前用户是否有指定的studio的权限
        if($user['user_uid'] !== $article->owner){
            return $this->error(__('auth.failed'));
        }
        $delete = 0;
        DB::transaction(function() use($article,$delete){
            //TODO 删除文集中的文章
            $delete = $article->delete();
        });

        return $this->ok($delete);
    }
}