Merge from booking branch

booking/ApiControllers/BlogsController.cs

@@ -0,0 +1,256 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Web;
+using System.Web.Security;
+using System.Web.Http;
+using Npgsql.Web.Blog;
+using Yavsc.Model.Blogs;
+using System.IO;
+using System.Net;
+using System.Net.Http;
+using System.Threading.Tasks;
+using System.Diagnostics;
+using Yavsc.Formatters;
+using Yavsc.Model;
+
+namespace Yavsc.ApiControllers
+{
+	/// <summary>
+	/// Blogs API controller.
+	/// </summary>
+	public class BlogsController : YavscController
+	{
+		/// <summary>
+		/// Tag the specified model.
+		/// </summary>
+		/// <param name="model">Model.</param>
+		[Authorize, 
+			AcceptVerbs ("POST")]
+		public void Tag (PostTag model) {
+			if (ModelState.IsValid) {
+				BlogManager.GetForEditing (model.PostId);
+				BlogManager.Tag (model.PostId, model.Tag);
+			}
+		}
+		static string [] officalTags = new string[] { "Artistes", "Accueil", "Événements", "Mentions légales", "Admin", "Web" } ;
+		/// <summary> 
+		/// Tags the specified pattern.
+		/// </summary>
+		/// <param name="pattern">Pattern.</param>
+		[ValidateAjaxAttribute]
+		public IEnumerable<string> Tags(string pattern)
+		{
+			return officalTags;
+		}
+
+		/// <summary>
+		/// Untag the specified model.
+		/// </summary>
+		/// <param name="model">Model.</param>
+		[Authorize, 
+			AcceptVerbs ("POST")]
+		public void Untag (PostTag model) {
+			if (ModelState.IsValid) {
+				BlogManager.GetForEditing (model.PostId);
+				BlogManager.Untag (model.PostId, model.Tag);
+			}
+		}
+
+		/// <summary>
+		/// Removes the post.
+		/// </summary>
+		/// <param name="user">User.</param>
+		/// <param name="title">Title.</param>
+		[Authorize, ValidateAjaxAttribute, HttpPost]
+		public void RemoveTitle(string user,  string title) {
+			if (Membership.GetUser ().UserName != user)
+			if (!Roles.IsUserInRole("Admin"))
+				throw new AuthorizationDenied (user);
+			BlogManager.RemoveTitle (user, title);
+		}
+
+		/// <summary>
+		/// Removes the tag.
+		/// </summary>
+		/// <param name="tagid">Tagid.</param>
+		[Authorize, ValidateAjaxAttribute, HttpPost]
+		public void RemoveTag([FromBody] long tagid) {
+			
+			throw new NotImplementedException ();
+		}
+
+		/// <summary>
+		/// The allowed media types.
+		/// </summary>
+		protected string[] allowedMediaTypes = { 
+			"text/plain",
+			"text/x-tex",
+			"text/html",
+			"image/png",
+			"image/gif",
+			"image/jpeg",
+			"image/x-xcf",
+			"application/pdf",
+			"application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+		};
+
+		/// <summary>
+		/// Posts the file.
+		/// </summary>
+		/// <returns>The file.</returns>
+		[Authorize, HttpPost]
+		public async Task<HttpResponseMessage> PostFile(long id) {
+			if (!(Request.Content.Headers.ContentType.MediaType=="multipart/form-data"))
+				throw new HttpRequestException ("not a multipart/form-data request");
+			BlogEntry be = BlogManager.GetPost (id);
+			if (be.Author != Membership.GetUser ().UserName)
+				throw new AuthorizationDenied ("b"+id);
+			string root = HttpContext.Current.Server.MapPath("~/bfiles/"+id);
+			DirectoryInfo di = new DirectoryInfo (root);
+			if (!di.Exists) di.Create ();
+
+			var provider = new MultipartFormDataStreamProvider(root);
+			try
+			{
+				// Read the form data.
+				await Request.Content.ReadAsMultipartAsync(provider) ;
+				var invalidChars = Path.GetInvalidFileNameChars();
+				foreach (var f in provider.FileData) {
+					string filename = f.LocalFileName;
+					string orgname = f.Headers.ContentDisposition.FileName;
+					Trace.WriteLine(filename);
+					string nicename = HttpUtility.UrlDecode(orgname) ;
+					if (orgname.StartsWith("\"") && orgname.EndsWith("\"") && orgname.Length > 2)
+						nicename = orgname.Substring(1,orgname.Length-2);
+					nicename = new string (nicename.Where( x=> !invalidChars.Contains(x)).ToArray());
+					nicename = nicename.Replace(' ','_');
+					var dest = Path.Combine(root,nicename);
+					var fi = new FileInfo(dest);
+					if (fi.Exists) fi.Delete();
+					File.Move(filename, fi.FullName);
+				}
+
+				return Request.CreateResponse(HttpStatusCode.OK);
+			}
+			catch (System.Exception e)
+			{
+				return Request.CreateResponse(HttpStatusCode.InternalServerError, e);
+			}
+		}
+
+		/// <summary>
+		/// Create the specified blog entry.
+		/// </summary>
+		/// <param name="bp">Bp.</param>
+		[Authorize, HttpPost]
+		public long Create (BasePost bp) 
+		{
+			return BlogManager.Post (User.Identity.Name, bp.Title, "", bp.Visible, null);
+		}
+
+		[Authorize, HttpPost]
+		public void Note (long id, int note)
+		{
+			if (note < 0 || note > 100)
+				throw new ArgumentException ("0<=note<=100");
+			BlogManager.Note (id, note);
+		}
+		/// <summary>
+		/// Searchs the file.
+		/// </summary>
+		/// <returns>The file.</returns>
+		/// <param name="id">Postid.</param>
+		/// <param name="terms">Terms.</param>
+		[HttpGet]
+		public async Task<HttpResponseMessage> SearchFile(long id, string terms) {
+			throw new NotImplementedException ();
+		}
+
+		/// <summary>
+		/// Sets the photo.
+		/// </summary>
+		/// <param name="id">Identifier.</param>
+		/// <param name="photo">Photo.</param>
+		[Authorize, HttpPost, ValidateAjaxAttribute]
+		public void SetPhoto(long id, [FromBody] string photo)
+		{
+			BlogManager.Provider.UpdatePostPhoto (id, photo);
+		}
+
+		/// <summary>
+		/// Import the specified id.
+		/// </summary>
+		/// <param name="id">Identifier.</param>
+		[Authorize, HttpPost, ValidateAjaxAttribute]
+		public async Task<HttpResponseMessage> Import(long id) {
+			if (!(Request.Content.Headers.ContentType.MediaType=="multipart/form-data"))
+				throw new HttpRequestException ("not a multipart/form-data request");
+			BlogEntry be = BlogManager.GetPost (id);
+			if (be.Author != Membership.GetUser ().UserName)
+				throw new AuthorizationDenied ("post: "+id);
+			string root = HttpContext.Current.Server.MapPath("~/bfiles/"+id);
+			DirectoryInfo di = new DirectoryInfo (root);
+			if (!di.Exists) di.Create ();
+			var provider = new MultipartFormDataStreamProvider(root);
+			try
+			{
+				// Read the form data.
+				//IEnumerable<HttpContent> data = 
+				await Request.Content.ReadAsMultipartAsync(provider) ;
+
+				var invalidChars = Path.GetInvalidFileNameChars();
+				List<string> bodies = new List<string>();
+
+				foreach (var f in provider.FileData) {
+					string filename = f.LocalFileName;
+					
+					string nicename= f.Headers.ContentDisposition.FileName;
+					var filtered  = new string (nicename.Where( x=> !invalidChars.Contains(x)).ToArray());
+
+					FileInfo fi = new FileInfo(filtered);
+					FileInfo fo = new FileInfo(filtered+".md");
+					FileInfo fp = new FileInfo (Path.Combine(root,filename));
+					if (fi.Exists) fi.Delete();
+					fp.MoveTo(fi.FullName);
+					// TODO Get the mime type
+					using (Process p = new Process ()) {			
+						p.StartInfo.WorkingDirectory = root;
+						p.StartInfo = new ProcessStartInfo ();
+						p.StartInfo.UseShellExecute = false;
+						p.StartInfo.FileName = "/usr/bin/pandoc";
+						p.StartInfo.Arguments = 
+							string.Format (" -o '{0}' -t markdown '{1}'",
+								fo.FullName,
+								fi.FullName);
+						p.StartInfo.RedirectStandardError = true;
+						p.StartInfo.RedirectStandardOutput = true;
+						p.Start ();
+						p.WaitForExit ();
+						if (p.ExitCode != 0) { 
+							return Request.CreateResponse (HttpStatusCode.InternalServerError,
+								"# Import failed with exit code: " + p.ExitCode + "---\n" 
+								+  LocalizedText.ImportException + "---\n" 
+										+ p.StandardError.ReadToEnd() + "---\n" 
+										+ p.StandardOutput.ReadToEnd()
+									);
+						}
+					}
+					bodies.Add(fo.OpenText().ReadToEnd());
+
+					 
+					fi.Delete();
+					fo.Delete();
+				}
+
+				return Request.CreateResponse(HttpStatusCode.OK,string.Join("\n---\n",bodies),new SimpleFormatter("text/plain"));
+
+			}
+			catch (System.Exception e)
+			{
+				return Request.CreateResponse(HttpStatusCode.InternalServerError, e);
+			}
+		}
+	}
+}
+