Phraseanet/lib/Alchemy/Phrasea/Controller/Permalink.php

<?php

/*
 * This file is part of Phraseanet
 *
 * (c) 2005-2014 Alchemy
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Alchemy\Phrasea\Controller;

use Alchemy\Phrasea\Application as PhraseaApplication;
use Alchemy\Phrasea\Model\Serializer\CaptionSerializer;
use Silex\Application;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;

class Permalink extends AbstractDelivery
{
    public function connect(Application $app)
    {
        $app['controller.permalink'] = $this;

        $controllers = $app['controllers_factory'];

        $controllers->get('/v1/{sbas_id}/{record_id}/caption/', 'controller.permalink:deliverCaption')
                    ->assert('sbas_id', '\d+')->assert('record_id', '\d+')
                    ->bind('permalinks_caption');

        $controllers->match('/v1/{sbas_id}/{record_id}/caption/', 'controller.permalink:getOptionsResponse')
                    ->assert('sbas_id', '\d+')->assert('record_id', '\d+')
                    ->method('OPTIONS');

        $controllers->get('/v1/{sbas_id}/{record_id}/{subdef}/', 'controller.permalink:deliverPermaview')
                    ->bind('permalinks_permaview')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        $controllers->match('/v1/{sbas_id}/{record_id}/{subdef}/', 'controller.permalink:getOptionsResponse')
                    ->method('OPTIONS')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        $controllers->get('/v1/{label}/{sbas_id}/{record_id}/{token}/{subdef}/view/', 'controller.permalink:deliverPermaviewOldWay')
                    ->bind('permalinks_permaview_old')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        $controllers->get('/v1/{sbas_id}/{record_id}/{subdef}/{label}', 'controller.permalink:deliverPermalink')
                    ->bind('permalinks_permalink')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        $controllers->match('/v1/{sbas_id}/{record_id}/{subdef}/{label}', 'controller.permalink:getOptionsResponse')
                    ->method('OPTIONS')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        $controllers->get('/v1/{label}/{sbas_id}/{record_id}/{token}/{subdef}/', 'controller.permalink:deliverPermalinkOldWay')
                    ->bind('permalinks_permalink_old')
                    ->assert('sbas_id', '\d+')
                    ->assert('record_id', '\d+');

        return $controllers;
    }

    public function getOptionsResponse(PhraseaApplication $app, Request $request, $sbas_id, $record_id)
    {
        $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id);

        $record = $this->retrieveRecord($app, $databox, $request->query->get('token'), $record_id, $request->get('subdef', 'thumbnail'));

        if (null === $record) {
            throw new NotFoundHttpException("Record not found");
        }

        return new Response('', 200, ['Allow' => 'GET, HEAD, OPTIONS']);
    }

    public function deliverCaption(PhraseaApplication $app, Request $request, $sbas_id, $record_id)
    {
        $token = $request->query->get('token');

        $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id);

        $record = $this->retrieveRecord($app, $databox, $token, $record_id, \databox_subdef::CLASS_THUMBNAIL);
        if (null === $record) {
            throw new NotFoundHttpException("Caption not found");
        }
        $caption = $record->get_caption();

        return new Response($app['serializer.caption']->serialize($caption, CaptionSerializer::SERIALIZE_JSON), 200, ["Content-Type" => 'application/json']);
    }

    public function deliverPermaview(PhraseaApplication $app, Request $request, $sbas_id, $record_id, $subdef)
    {
        return $this->doDeliverPermaview($sbas_id, $record_id, $request->query->get('token'), $subdef, $app);
    }

    public function deliverPermaviewOldWay(PhraseaApplication $app, $label, $sbas_id, $record_id, $token, $subdef)
    {
        return $this->doDeliverPermaview($sbas_id, $record_id, $token, $subdef, $app);
    }

    public function deliverPermalink(PhraseaApplication $app, Request $request, $sbas_id, $record_id, $subdef, $label)
    {
        return $this->doDeliverPermalink($app, $sbas_id, $record_id, $request->query->get('token'), $subdef);
    }

    public function deliverPermalinkOldWay(PhraseaApplication $app, $label, $sbas_id, $record_id, $token, $subdef)
    {
        return $this->doDeliverPermalink($app, $sbas_id, $record_id, $token, $subdef);
    }

    private function retrieveRecord($app, $databox, $token, $record_id, $subdef)
    {
        if (in_array($subdef, [\databox_subdef::CLASS_PREVIEW, \databox_subdef::CLASS_THUMBNAIL]) && $app['EM']->getRepository('Phraseanet:FeedItem')->isRecordInPublicFeed($app, $databox->get_sbas_id(), $record_id)) {
            $record = $databox->get_record($record_id);
        } else {
            $record = \media_Permalink_Adapter::challenge_token($app, $databox, $token, $record_id, $subdef);

            if (! ($record instanceof \record_adapter)) {
                throw new NotFoundHttpException('Wrong token.');
            }
        }

        return $record;
    }

    private function doDeliverPermaview($sbas_id, $record_id, $token, $subdef, PhraseaApplication $app)
    {
        $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id);

        $record = $this->retrieveRecord($app, $databox, $token, $record_id, $subdef);

        return $app['twig']->render('overview.html.twig', [
            'subdef_name' => $subdef,
            'module_name' => 'overview',
            'module'      => 'overview',
            'view'        => 'overview',
            'record'      => $record,
        ]);
    }

    private function doDeliverPermalink(PhraseaApplication $app, $sbas_id, $record_id, $token, $subdef)
    {
        $databox = $app['phraseanet.appbox']->get_databox((int) $sbas_id);

        $record = $this->retrieveRecord($app, $databox, $token, $record_id, $subdef);

        $watermark = $stamp = false;

        if ($app['authentication']->isAuthenticated()) {
            $watermark = !$app['acl']->get($app['authentication']->getUser())->has_right_on_base($record->get_base_id(), 'nowatermark');

            if ($watermark) {
                $repository = $app['EM']->getRepository('Phraseanet:BasketElement');

                if (count($repository->findReceivedValidationElementsByRecord($record, $app['authentication']->getUser())) > 0) {
                    $watermark = false;
                } elseif (count($repository->findReceivedElementsByRecord($record, $app['authentication']->getUser())) > 0) {
                    $watermark = false;
                }
            }
            $response = $this->deliverContent($app['request'], $record, $subdef, $watermark, $stamp, $app);

            $linkToCaption = $app->url("permalinks_caption", ['sbas_id' => $sbas_id, 'record_id' => $record_id, 'token' => $token]);
            $response->headers->set('Link', $linkToCaption);

            return $response;
        }

        $collection = \collection::get_from_base_id($app, $record->get_base_id());
        switch ($collection->get_pub_wm()) {
            default:
            case 'none':
                $watermark = false;
                break;
            case 'stamp':
                $stamp = true;
                break;
            case 'wm':
                $watermark = false;
                break;
        }

        $response = $this->deliverContent($app['request'], $record, $subdef, $watermark, $stamp, $app);

        $linkToCaption = $app->url("permalinks_caption", ['sbas_id' => $sbas_id, 'record_id' => $record_id, 'token' => $token]);
        $response->headers->set('Link', $linkToCaption);

        return $response;
    }
}