website/pkg/controller/inbox/compose.go

package inbox

import (
	"fmt"
	"net/http"

	"code.nonshy.com/nonshy/website/pkg/models"
	"code.nonshy.com/nonshy/website/pkg/session"
	"code.nonshy.com/nonshy/website/pkg/templates"
)

// Compose a new chat coming from a user's profile page.
func Compose() http.HandlerFunc {
	tmpl := templates.Must("inbox/compose.html")
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		// To whom?
		username := r.FormValue("to")
		user, err := models.FindUser(username)
		if err != nil {
			templates.NotFoundPage(w, r)
			return
		}

		currentUser, err := session.CurrentUser(r)
		if err != nil {
			session.FlashError(w, r, "Unexpected error: could not get currentUser.")
			templates.Redirect(w, "/")
			return
		}

		if currentUser.ID == user.ID {
			session.FlashError(w, r, "You cannot send a message to yourself.")
			templates.Redirect(w, "/messages")
			return
		}

		// Any blocking?
		if models.IsBlocking(currentUser.ID, user.ID) && !currentUser.IsAdmin {
			session.FlashError(w, r, "You are blocked from sending a message to this user.")
			templates.Redirect(w, "/messages")
			return
		}

		// POSTing?
		if r.Method == http.MethodPost {
			var (
				message = r.FormValue("message")
				from    = r.FormValue("from") // e.g. "inbox", default "profile", where to redirect to
			)
			if len(message) == 0 {
				session.FlashError(w, r, "A message is required.")
				templates.Redirect(w, r.URL.Path+"?to="+username)
				return
			}

			// Post it!
			m, err := models.SendMessage(currentUser.ID, user.ID, message)
			if err != nil {
				session.FlashError(w, r, "Failed to create the message in the database: %s", err)
				templates.Redirect(w, r.URL.Path+"?to="+username)
				return
			}

			session.Flash(w, r, "Your message has been delivered!")
			if from == "inbox" {
				templates.Redirect(w, fmt.Sprintf("/messages/read/%d", m.ID))
			}
			templates.Redirect(w, "/messages")
			return
		}

		// If we already have a thread open with them, go to that instead of the stand-alone compose page.
		if msgID, ok := models.HasMessageThread(currentUser, user); ok {
			templates.Redirect(w, fmt.Sprintf("/messages/read/%d", msgID))
			return
		}

		// On GET request (come from a user profile page):
		// Do not allow a shy user to initiate DMs with a non-shy one.
		var (
			imShy      = currentUser.IsShy()
			theyreShy  = user.IsShy()
			areFriends = models.AreFriends(currentUser.ID, user.ID)
			isShyFrom  = currentUser.IsShyFrom(user) || (imShy && !areFriends)
		)
		if imShy && isShyFrom && !theyreShy && !user.IsAdmin {
			session.FlashError(w, r, "You have a Shy Account and can not initiate Direct Messages with a non-shy member.")
			templates.Redirect(w, "/u/"+user.Username)
			return
		}

		// Does the recipient have a privacy control on their DMs?
		switch user.GetProfileField("dm_privacy") {
		case "friends":
			if !areFriends && !currentUser.IsAdmin {
				session.FlashError(w, r, "This user only wants to receive new DMs from their friends.")
				templates.Redirect(w, "/u/"+user.Username)
				return
			}
		case "nobody":
			if !currentUser.IsAdmin {
				session.FlashError(w, r, "This user's DMs are closed and they do not want any new conversations.")
				templates.Redirect(w, "/u/"+user.Username)
				return
			}
		}

		var vars = map[string]interface{}{
			"User": user,
		}
		if err := tmpl.Execute(w, r, vars); err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
	})
}