get('/v1/{sbas_id}/{record_id}/caption/', 'controller.permalink:deliverCaption') ->assert('sbas_id', '\d+')->assert('record_id', '\d+') ->bind('permalinks_caption'); $controllers->match('/v1/{sbas_id}/{record_id}/caption/', 'controller.permalink:getOptionsResponse') ->assert('sbas_id', '\d+')->assert('record_id', '\d+') ->method('OPTIONS'); $controllers->get('/v1/{sbas_id}/{record_id}/{subdef}/', 'controller.permalink:deliverPermaview') ->bind('permalinks_permaview') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); $controllers->match('/v1/{sbas_id}/{record_id}/{subdef}/', 'controller.permalink:getOptionsResponse') ->method('OPTIONS') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); $controllers->get('/v1/{label}/{sbas_id}/{record_id}/{token}/{subdef}/view/', 'controller.permalink:deliverPermaviewOldWay') ->bind('permalinks_permaview_old') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); $controllers->get('/v1/{sbas_id}/{record_id}/{subdef}/{label}', 'controller.permalink:deliverPermalink') ->bind('permalinks_permalink') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); $controllers->match('/v1/{sbas_id}/{record_id}/{subdef}/{label}', 'controller.permalink:getOptionsResponse') ->method('OPTIONS') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); $controllers->get('/v1/{label}/{sbas_id}/{record_id}/{token}/{subdef}/', 'controller.permalink:deliverPermalinkOldWay') ->bind('permalinks_permalink_old') ->assert('sbas_id', '\d+') ->assert('record_id', '\d+'); return $controllers; } public function getOptionsResponse(PhraseaApplication $app, Request $request, $sbas_id, $record_id) { $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id); $record = $this->retrieveRecord($app, $databox, $request->query->get('token'), $record_id, $request->get('subdef', 'thumbnail')); if (null === $record) { throw new NotFoundHttpException("Record not found"); } return new Response('', 200, array('Allow' => 'GET, HEAD, OPTIONS')); } public function deliverCaption(PhraseaApplication $app, Request $request, $sbas_id, $record_id) { $token = $request->query->get('token'); $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id); $record = \media_Permalink_Adapter::challenge_token($app, $databox, $token, $record_id, 'thumbnail'); if (null === $record) { throw new NotFoundHttpException("Caption not found"); } $caption = $record->get_caption(); return new Response($caption->serialize(\caption_record::SERIALIZE_JSON), 200, array("Content-Type" => 'application/json')); } public function deliverPermaview(PhraseaApplication $app, Request $request, $sbas_id, $record_id, $subdef) { return $this->doDeliverPermaview($sbas_id, $record_id, $request->query->get('token'), $subdef, $app); } public function deliverPermaviewOldWay(PhraseaApplication $app, $label, $sbas_id, $record_id, $token, $subdef) { return $this->doDeliverPermaview($sbas_id, $record_id, $token, $subdef, $app); } public function deliverPermalink(PhraseaApplication $app, Request $request, $sbas_id, $record_id, $subdef, $label) { return $this->doDeliverPermalink($app, $sbas_id, $record_id, $request->query->get('token'), $subdef); } public function deliverPermalinkOldWay(PhraseaApplication $app, $label, $sbas_id, $record_id, $token, $subdef) { return $this->doDeliverPermalink($app, $sbas_id, $record_id, $token, $subdef); } private function retrieveRecord($app, $databox, $token, $record_id, $subdef) { if (in_array($subdef, array(\databox_subdef::CLASS_PREVIEW, \databox_subdef::CLASS_THUMBNAIL)) && \Feed_Entry_Item::is_record_in_public_feed($app, $databox->get_sbas_id(), $record_id)) { $record = $databox->get_record($record_id); } else { $record = \media_Permalink_Adapter::challenge_token($app, $databox, $token, $record_id, $subdef); if (! ($record instanceof \record_adapter)) { throw new NotFoundHttpException('Wrong token.'); } } return $record; } private function doDeliverPermaview($sbas_id, $record_id, $token, $subdef, PhraseaApplication $app) { $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id); $record = $this->retrieveRecord($app, $databox, $token, $record_id, $subdef); return $app['twig']->render('overview.html.twig', array( 'subdef_name' => $subdef, 'module_name' => 'overview', 'module' => 'overview', 'view' => 'overview', 'record' => $record, )); } private function doDeliverPermalink(PhraseaApplication $app, $sbas_id, $record_id, $token, $subdef) { $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id); $record = $this->retrieveRecord($app, $databox, $token, $record_id, $subdef); $watermark = $stamp = false; if ($app['authentication']->isAuthenticated()) { $user = \User_Adapter::getInstance($app['authentication']->getUser()->get_id(), $app); $watermark = ! $user->ACL()->has_right_on_base($record->get_base_id(), 'nowatermark'); if ($watermark) { $repository = $app['EM']->getRepository('\Entities\BasketElement'); if (count($repository->findReceivedValidationElementsByRecord($record, $user)) > 0) { $watermark = false; } elseif (count($repository->findReceivedElementsByRecord($record, $user)) > 0) { $watermark = false; } } $response = $this->deliverContent($app['request'], $record, $subdef, $watermark, $stamp, $app); $linkToCaption = $app->url("permalinks_caption", array('sbas_id' => $sbas_id, 'record_id' => $record_id, 'token' => $token)); $response->headers->set('Link', $linkToCaption); return $response; } $collection = \collection::get_from_base_id($app, $record->get_base_id()); switch ($collection->get_pub_wm()) { default: case 'none': $watermark = false; break; case 'stamp': $stamp = true; break; case 'wm': $watermark = false; break; } $response = $this->deliverContent($app['request'], $record, $subdef, $watermark, $stamp, $app); $linkToCaption = $app->url("permalinks_caption", array('sbas_id' => $sbas_id, 'record_id' => $record_id, 'token' => $token)); $response->headers->set('Link', $linkToCaption); return $response; } }