date-poll-sf5/public/old/api/PollController.php

<?php

namespace App\Controller\api;

use App\Controller\FramadateController;
use App\Entity\Choice;
use App\Entity\Owner;
use App\Entity\Poll;
use JMS\Serializer\Exception\RuntimeException;
use JMS\Serializer\SerializerBuilder;
use JMS\Serializer\SerializerInterface;
use Swift_Mailer;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Sensio\Bundle\FrameworkExtraBundle\Configuration\ParamConverter;

use FOS\RestBundle\Controller\Annotations\Get;
use FOS\RestBundle\Controller\Annotations\Put;
use FOS\RestBundle\Controller\Annotations\Delete;
use FOS\RestBundle\Controller\Annotations\Post;
use FOS\RestBundle\Controller\Annotations\Route;

/**
 * Class DefaultController
 * @package App\Controller
 * @Route("/api/v1/poll",name="api_")
 */
class PollController extends FramadateController {
	/**
	 * @Get(
	 *     path = "/",
	 *     name = "get_all_polls"
	 * )
	 */
	public function getAllPollsAction() {
		$repository = $this->getDoctrine()->getRepository( Poll::class );
		$data       = $repository->findAll();


		return $this->json( [
			'message' => 'here are your polls',
			'poll'    => count( $data ),
		] );
	}

	/**
	 * @param $id
	 * message when the poll is not found
	 * @return JsonResponse
	 */
	public function notFoundPoll($id){
		return $this->json( [
			'message' => $id . ' : poll not found',
		],
			404 );
	}
	/**
	 * get a poll config by its custom URL, we do not want polls to be reachable by their numeric id
	 * @Get(
	 *     path = "/{id}",
	 *     name = "get_poll",
	 *     requirements = {"id"="\w+"}
	 * )
	 *
	 * @param SerializerInterface $serializer
	 * @param Request $request
	 *
	 * @return JsonResponse|Response
	 */
	public function getPollConfig(
		SerializerInterface $serializer,
		$id,
		Request $request
	) {
		$repository = $this->getDoctrine()->getRepository( Poll::class );
		$poll       = $repository->findOneByCustomUrl( $id );

		if ( ! $poll ) {
			return $this->notFoundPoll($id);
		}

		$comments = $poll->getComments();
		$pass     = $poll->getPassword();

		$returnedPoll = [
			'message'            => 'your poll config for ' . $poll->getTitle(),
			'password_protected' => $pass ? 'yes' : 'no',
			// TODO do not render sub objects of owner, it returns too many things
			'poll'               => $poll,
			'stacks_count'       => count( $poll->getStacksOfVotes() ),
			'stacks'             => $poll->getStacksOfVotes(),
			'choices_count'      => $poll->computeAnswers(),
			'choices'            => $poll->getChoices(),
			'comments'       => $comments,
			'comments_count'     => count( $comments ),
		];

		/**
		 * password protected content
		 */
		if ( $pass ) {
			// no password possibly given by this route
			return $this->json( [
				'message' => 'this is protected by a password,but you did not provide the encoded password parameter, and you should feel bad. ' ,
			],
				403 );

		} else {
			// free access to poll
			return $this->returnPollData( $poll, $serializer );
		}

	}

	/**
	 * get a poll config by its custom URL, we do not want polls to be reachable by their numeric id
	 * @Get(
	 *     path = "/{id}/pass/{md5}",
	 *     name = "get_protected_poll",
	 *     requirements = {"id"="\w+"}
	 * )
	 *
	 * @param SerializerInterface $serializer
	 * @param Request $request
	 *
	 * @return JsonResponse|Response
	 */
	function getProtectedPoll($id,$md5, SerializerInterface $serializer){
		$repository = $this->getDoctrine()->getRepository( Poll::class );
		$poll       = $repository->findOneByCustomUrl( $id );

		if ( ! $poll ) {
			return $this->notFoundPoll($id);
		}

		if (  $poll->getPassword() === $md5 ) {
			// good matching pass
			return $this->returnPollData( $poll, $serializer );
		} else {
			// wrong pass
			return $this->json( [
				'message' => 'this is protected by a password, your password "' . $md5 . '" is wrong, and you should feel bad',
				'md5' => md5($md5),
				'data'    => null,
			],
				403 );
		}


	}

	function returnPollData( $poll, $serializer ) {
		$jsonResponse = $serializer->serialize( $poll, 'json' );

		$response = new Response( $jsonResponse );
		$response->headers->set( 'Content-Type', 'application/json' );
		$response->setStatusCode( 200 );

		return $response;
	}

	/**
	 * @Put(
	 *     path = "/{id}/{token}",
	 *     name = "update_poll",
	 *     requirements = {"content"="\w+",  "poll_id"="\d+"}
	 * )
	 */
	public function updatePollConfig(
		Poll $poll,
		string $token,
		Request $request
	) {
		if ( $poll->getAdminKey() !== $token ) {
			return $this->json( [
				'message' => 'you are NOT allowed to update the poll ' . $poll->getTitle(),
			],
				403 );
		}

		// TODO check validity of request
		// update only if we have the admin key
		$em = $this->getDoctrine()->getManager();
		$em->persist( $poll );
		$em->flush();

		return $this->json( [
			'message' => 'you updated the poll ' . $poll->getTitle(),
		],
			200 );
	}

	/**
	 * @Post(
	 *     path = "/",
	 *     name = "new_poll",
	 *     requirements = {"creator"="\w+"}
	 * )
	 * @param Request $request
	 *
	 * @return JsonResponse
	 */
	public function newPollAction( Request $request ) {

		$data = $request->getContent();

		$serializer = SerializerBuilder::create()->build();
		try {
			$newpoll = $serializer->deserialize( $data, 'App\Entity\Poll', 'json' );
		} catch ( RuntimeException $e ) {
			return $this->json( [ "message" => "Incorrect JSON in request" ], 400 );
		}
		$newpoll
			->setAdminKey( $newpoll->generateAdminKey() )
			->setCreationDate( new DateTime() )
			->setModificationPolicy( 'nobody' );
		$timeStamp = time() + ( 3600 * 24 * 90 ); // 90 days by default
		$newpoll->setExpiracyDate( ( new DateTime() )->setTimestamp( $timeStamp ),
			new DateTimeZone( 'Europe/Paris' ) );
		$data       = json_decode( $data, true );
		$em         = $this->getDoctrine()->getRepository( Owner::class );
		$foundOwner = $em->findOneBy( [ 'email' => $data[ 'owner' ][ 'email' ] ] );


		$userWasFound = false;
		if ( ! $foundOwner ) {
			//create a new owner
			$owner = new Owner();

			$owner->setPseudo( $data[ 'owner' ][ 'pseudo' ] );
			$owner->setEmail( $data[ 'owner' ][ 'email' ] );
			$foundOwner = $owner;
		} else {
			$userWasFound = true;
		}
		// link the owner and the poll
		$newpoll->setOwner( $foundOwner );
		$foundOwner->addPoll( $newpoll );


		$em = $this->getDoctrine()->getManager();
		$em->persist( $newpoll );
		$em->persist( $foundOwner );

		// emails
		$newpoll->setMailOnComment( true );
		$newpoll->setMailOnVote( true );
		$newpoll->setHideResults( false );
		// possible answers
		$newpoll->setAllowedAnswers( [ 'yes' ] );
		if ( $data[ 'voteChoices' ] ) {
			switch ( $data[ 'voteChoices' ] ) {
				case "only_yes":
				default:

					break;
			}
		}
		// setup the password, converting the raw with md5 hash
		if ( $data[ 'password' ] ) {
			$newpoll->setPassword( $data[ 'password' ] );
		}
		// manage choices
		// text kind of answers, dates are below
		if ( $data[ 'pollType' ] == 'classic' ) {
			$choices = $data[ 'dateList' ];
			foreach ( $choices as $c ) {
				$newChoice = new Choice();
				$newChoice
					->setPoll( $newpoll )
//					->setUrl( $c[ 'url' ] )
					->setName( $c[ 'literal' ] );
				$em->persist( $newChoice );
				// TODO add also choices for each time range in a day
			}
		} elseif ( $data[ 'pollType' ] == 'dates' ) {
			if ( $data[ 'allowSeveralHours' ] == true ) {
				// different hours spans
				$choices = $data[ 'dateList' ];
			} else {
//TODO (Sébastien) I assume this shouldn't be empty ?
// all days have the same hour spans
			}


		}

		$em->persist( $newpoll );
		$em->flush();
		$precision = '';
		if ( $userWasFound ) {
			$precision = 'from an existing user : ' . $foundOwner->getEmail();
		}

		$this->sendCreationMailAction( $foundOwner, $newpoll );

		return $this->json( [
			'message'              => 'you created a poll ' . $precision,
			'poll'                 => $newpoll,
			'password_protected'   => is_string( $newpoll->getPassword() ),
			'admin_key'            => $newpoll->getAdminKey(),
			'owner_modifier_token' => $foundOwner->getModifierToken(),

		],
			201 );

	}

	/**
	 * @Get(
	 *     path = "/mail/test-mail-poll/{emailChoice}",
	 *     name = "test-mail-poll",
	 * )
	 *
	 * send the creation mail to owner
	 *
	 * @param Owner $admin_user
	 * @param Poll $poll
	 * @param Swift_Mailer $mailer
	 *
	 * @return int
	 * not that the email tktest_commentateur@tktest.com does not really exist
	 */
//	public function sendCreationMailAction( Owner $admin_user, Poll $poll, \Swift_Mailer $mailer) {
	public function testSendCreationMailAction(
		$emailChoice = 'tktest_commentateur@tktest.com'
	) {
		$em         = $this->getDoctrine()->getRepository( Owner::class );
		$foundOwner = $em->findOneByEmail( $emailChoice );
		if ( $foundOwner ) {
			$poll    = $foundOwner->getPolls()[ 0 ];
			$comment = $foundOwner->getComments()[ 0 ];

			$sent = $this->sendOwnerPollsAction( $foundOwner, $poll );
			if ( $sent ) {
				return $this->json( [ "message" => "test email sent to " . $foundOwner->getEmail() . "!" ], 200 );
			}
		}

		return $this->json( [ "message" => "user with this email was not found" ], 400 );

	}


	/**
	 * @Delete(
	 *     path = "/{id}",
	 *     name = "poll_delete",
	 *     requirements = {"accessToken"="\w+",  "poll_id"="\d+"}
	 * )
	 * @param Poll $poll
	 * @param $accessToken
	 *
	 * @return JsonResponse
	 */
	public
	function deletePollAction(
		Poll $poll,
		$accessToken
	) {

		if ( $accessToken == $poll->getAdminKey() ) {
			$em = $this->getDoctrine()->getManager();
			$em->remove( $poll );
			$em->flush();

			return $this->json( [
				'message' => 'boom! le sondage et ses objets assocités a été supprimé',
			] );
		} else {
			return $this->json( [
				'message' => 'le token d\'autorisation est invalide, vous ne pouvez pas modifier ce sondage',
			] );
		}

	}

	/**
	 * Checks if a slug is already taken by a poll
	 * @Get(
	 *     path = "/slug/{slug}",
	 *     name = "check_slug_is_unique",
	 * )
	 */
	public function checkSlugIsUniqueAction( string $slug ) {
		$emPoll                     = $this->getDoctrine()->getRepository( Poll::class );
		$found                      = $emPoll->findOneByCustomUrl( $slug );
		$elaborated_message_version = false;

		if ( $found ) {
			if ( ! $elaborated_message_version ) {
				return $this->json( null,
					204 );
			}

			// we should use an other slug
			return $this->json( [
				'message' => ' NO, this slug is already taken on this Framadate instance ',
				'data'    => [
					'slug' => $slug,
				],
			],
				204 );
		}
		if ( ! $elaborated_message_version ) {
			return $this->json( null,
				404 );
		}

		return $this->json( [
			'message' => ' yes this slug is available on this Framadate instance ',
			'data'    => [
				'slug' => $slug,
			],
		],
			404 );

	}

	/**
	 * Get Admin poll config
	 * @Get(
	 *     path = "/admin/{token}",
	 *     name = "get_admin_config",
	 * )
	 *
	 * @param SerializerInterface $serializer
	 * @param $token
	 *
	 * @return JsonResponse|Response
	 */
	public function getAdministrationConfig( SerializerInterface $serializer, $token ) {
		$emPoll    = $this->getDoctrine()->getRepository( Poll::class );
		$pollFound = $emPoll->findOneByAdminKey( $token );

		if ( $pollFound ) {

			$poll     = $pollFound;
			$comments = $poll->getComments();
			$stacks   = $poll->getStacksOfVotes();

			$returnedPoll = [
				'message'        => 'your poll config',
				'poll'           => $poll,
				'stacks_count'   => count( $stacks ),
				'stacks'         => $stacks,
				'choices_count'  => $poll->computeAnswers(),
				'choices'        => $poll->getChoices(),
				'comments'       => $comments,
				'comments_count' => count( $comments ),
				'token'          => $token,
			];

			$jsonResponse = $serializer->serialize( $returnedPoll, 'json' );

			$response = new Response( $jsonResponse );
			$response->headers->set( 'Content-Type', 'application/json' );
			$response->setStatusCode( 200 );

			return $response;
		}

		return $this->json( [
			'message' => 'You are not allowed to do anything with this token',
			'data'    => [
				'token' => $token,
			],
		],
			403 );

	}

}