metamaps--metamaps/app/controllers/maps_controller.rb

class MapsController < ApplicationController
  before_action :require_user, only: [:create, :update, :access, :screenshot, :events, :destroy]
  after_action :verify_authorized, except: [:activemaps, :featuredmaps, :mymaps, :sharedmaps, :usermaps, :events]
  after_action :verify_policy_scoped, only: [:activemaps, :featuredmaps, :mymaps, :sharedmaps, :usermaps]

  respond_to :html, :json, :csv

  autocomplete :map, :name, full: true, extra_data: [:user_id]

  # GET /explore/active
  def activemaps
    page = params[:page].present? ? params[:page] : 1
    @maps = policy_scope(Map).order('updated_at DESC')
                             .page(page).per(20)

    respond_to do |format|
      format.html do
        # root url => main/home. main/home renders maps/activemaps view.
        redirect_to(root_url) && return if authenticated?
        respond_with(@maps, @user)
      end
      format.json { render json: @maps }
    end
  end

  # GET /explore/featured
  def featuredmaps
    page = params[:page].present? ? params[:page] : 1
    @maps = policy_scope(
      Map.where('maps.featured = ? AND maps.permission != ?',
                true, 'private')
    ).order('updated_at DESC').page(page).per(20)

    respond_to do |format|
      format.html { respond_with(@maps, @user) }
      format.json { render json: @maps }
    end
  end

  # GET /explore/mine
  def mymaps
    unless authenticated?
      skip_policy_scope
      return redirect_to explore_active_path
    end

    page = params[:page].present? ? params[:page] : 1
    @maps = policy_scope(
      Map.where('maps.user_id = ?', current_user.id)
    ).order('updated_at DESC').page(page).per(20)

    respond_to do |format|
      format.html { respond_with(@maps, @user) }
      format.json { render json: @maps }
    end
  end

  # GET /explore/shared
  def sharedmaps
    unless authenticated?
      skip_policy_scope
      return redirect_to explore_active_path
    end

    page = params[:page].present? ? params[:page] : 1
    @maps = policy_scope(
      Map.where('maps.id IN (?)', current_user.shared_maps.map(&:id))
    ).order('updated_at DESC').page(page).per(20)

    respond_to do |format|
      format.html { respond_with(@maps, @user) }
      format.json { render json: @maps }
    end
  end

  # GET /explore/mapper/:id
  def usermaps
    page = params[:page].present? ? params[:page] : 1
    @user = User.find(params[:id])
    @maps = policy_scope(Map.where(user: @user))
            .order('updated_at DESC').page(page).per(20)

    respond_to do |format|
      format.html { respond_with(@maps, @user) }
      format.json { render json: @maps }
    end
  end

  # GET maps/:id
  def show
    @map = Map.find(params[:id])
    authorize @map

    respond_to do |format|
      format.html do
        @allmappers = @map.contributors
        @allcollaborators = @map.editors
        @alltopics = @map.topics.to_a.delete_if { |t| !policy(t).show? }
        @allsynapses = @map.synapses.to_a.delete_if { |s| !policy(s).show? }
        @allmappings = @map.mappings.to_a.delete_if { |m| !policy(m).show? }
        @allmessages = @map.messages.sort_by(&:created_at)

        respond_with(@allmappers, @allcollaborators, @allmappings, @allsynapses, @alltopics, @allmessages, @map)
      end
      format.json { render json: @map }
      format.csv { redirect_to action: :export, format: :csv }
      format.xls { redirect_to action: :export, format: :xls }
    end
  end

  # GET maps/:id/export
  def export
    map = Map.find(params[:id])
    authorize map
    exporter = MapExportService.new(current_user, map)
    respond_to do |format|
      format.json { render json: exporter.json }
      format.csv { send_data exporter.csv }
      format.xls { @spreadsheet = exporter.xls }
    end
  end

  # POST maps/:id/events/:event
  def events
    map = Map.find(params[:id])
    authorize map

    valid_event = false
    if params[:event] == 'conversation'
      Events::ConversationStartedOnMap.publish!(map, current_user)
      valid_event = true
    elsif params[:event] == 'user_presence'
      Events::UserPresentOnMap.publish!(map, current_user)
      valid_event = true
    end

    respond_to do |format|
      format.json do
        head :ok if valid_event
        head :bad_request unless valid_event
      end
    end
  end

  # GET maps/:id/contains
  def contains
    @map = Map.find(params[:id])
    authorize @map

    @allmappers = @map.contributors
    @allcollaborators = @map.editors
    @alltopics = @map.topics.to_a.delete_if { |t| !policy(t).show? }
    @allsynapses = @map.synapses.to_a.delete_if { |s| !policy(s).show? }
    @allmappings = @map.mappings.to_a.delete_if { |m| !policy(m).show? }

    @json = {}
    @json['map'] = @map
    @json['topics'] = @alltopics
    @json['synapses'] = @allsynapses
    @json['mappings'] = @allmappings
    @json['mappers'] = @allmappers
    @json['collaborators'] = @allcollaborators
    @json['messages'] = @map.messages.sort_by(&:created_at)

    respond_to do |format|
      format.json { render json: @json }
    end
  end

  # POST maps
  def create
    @user = current_user
    @map = Map.new
    @map.name = params[:name]
    @map.desc = params[:desc]
    @map.permission = params[:permission]
    @map.user = @user
    @map.arranged = false

    if params[:topicsToMap]
      @all = params[:topicsToMap]
      @all = @all.split(',')
      @all.each do |topic|
        topic = topic.split('/')
        mapping = Mapping.new
        mapping.map = @map
        mapping.user = @user
        mapping.mappable = Topic.find(topic[0])
        mapping.xloc = topic[1]
        mapping.yloc = topic[2]
        authorize mapping, :create?
        mapping.save
      end

      if params[:synapsesToMap]
        @synAll = params[:synapsesToMap]
        @synAll = @synAll.split(',')
        @synAll.each do |synapse_id|
          mapping = Mapping.new
          mapping.map = @map
          mapping.user = @user
          mapping.mappable = Synapse.find(synapse_id)
          authorize mapping, :create?
          mapping.save
        end
      end

      @map.arranged = true
    end

    authorize @map

    if @map.save
      respond_to do |format|
        format.json { render json: @map }
      end
    else
      respond_to do |format|
        format.json { render json: 'invalid params' }
      end
    end
  end

  # PUT maps/:id
  def update
    @map = Map.find(params[:id])
    authorize @map

    respond_to do |format|
      if @map.update_attributes(map_params)
        format.json { head :no_content }
      else
        format.json { render json: @map.errors, status: :unprocessable_entity }
      end
    end
  end

  # POST maps/:id/access
  def access
    @map = Map.find(params[:id])
    authorize @map
    userIds = params[:access] || []
    added = userIds.select do |uid|
      user = User.find(uid)
      if user.nil? || (current_user && user == current_user)
        false
      else
        !@map.collaborators.include?(user)
      end
    end
    removed = @map.collaborators.select { |user| !userIds.include?(user.id.to_s) }.map(&:id)
    added.each do |uid|
      UserMap.create(user_id: uid.to_i, map_id: @map.id)
      user = User.find(uid.to_i)
      MapMailer.invite_to_edit_email(@map, current_user, user).deliver_later
    end
    removed.each do |uid|
      @map.user_maps.select { |um| um.user_id == uid }.each(&:destroy)
    end

    respond_to do |format|
      format.json do
        render json: { message: 'Successfully altered edit permissions' }
      end
    end
  end

  # POST maps/:id/upload_screenshot
  def screenshot
    @map = Map.find(params[:id])
    authorize @map

    png = Base64.decode64(params[:encoded_image]['data:image/png;base64,'.length..-1])
    StringIO.open(png) do |data|
      data.class.class_eval { attr_accessor :original_filename, :content_type }
      data.original_filename = 'map-' + @map.id.to_s + '-screenshot.png'
      data.content_type = 'image/png'
      @map.screenshot = data
    end

    if @map.save
      render json: { message: 'Successfully uploaded the map screenshot.' }
    else
      render json: { message: 'Failed to upload image.' }
    end
  end

  # DELETE maps/:id
  def destroy
    @map = Map.find(params[:id])
    authorize @map

    @map.delete

    respond_to do |format|
      format.json do
        head :no_content
      end
    end
  end

  private

  # Never trust parameters from the scary internet, only allow the white list through.
  def map_params
    params.require(:map).permit(:id, :name, :arranged, :desc, :permission)
  end
end