website/pkg/controller/account/inner_circle.go

package account

import (
	"net/http"

	"code.nonshy.com/nonshy/website/pkg/log"
	"code.nonshy.com/nonshy/website/pkg/models"
	"code.nonshy.com/nonshy/website/pkg/session"
	"code.nonshy.com/nonshy/website/pkg/templates"
)

// InnerCircle is the landing page for inner circle members only.
func InnerCircle() http.HandlerFunc {
	tmpl := templates.Must("account/inner_circle.html")
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		currentUser, err := session.CurrentUser(r)
		if err != nil || !currentUser.IsInnerCircle() {
			templates.NotFoundPage(w, r)
			return
		}

		if err := tmpl.Execute(w, r, nil); err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
	})
}

// InviteCircle is the landing page to invite a user into the circle.
func InviteCircle() http.HandlerFunc {
	tmpl := templates.Must("account/invite_circle.html")
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		currentUser, err := session.CurrentUser(r)
		if err != nil || !currentUser.IsInnerCircle() {
			templates.NotFoundPage(w, r)
			return
		}

		// Invite whom?
		username := r.FormValue("to")
		user, err := models.FindUser(username)
		if err != nil {
			templates.NotFoundPage(w, r)
			return
		}

		if currentUser.ID == user.ID && currentUser.InnerCircle {
			session.FlashError(w, r, "You are already part of the inner circle.")
			templates.Redirect(w, "/inner-circle")
			return
		}

		// Any blocking?
		if models.IsBlocking(currentUser.ID, user.ID) && !currentUser.IsAdmin {
			session.FlashError(w, r, "You are blocked from inviting this user to the circle.")
			templates.Redirect(w, "/inner-circle")
			return
		}

		// POSTing?
		if r.Method == http.MethodPost {
			var (
				confirm = r.FormValue("intent") == "confirm"
			)

			if !confirm {
				templates.Redirect(w, "/u/"+username)
				return
			}

			// Add them!
			if err := models.AddToInnerCircle(user); err != nil {
				session.FlashError(w, r, "Couldn't add to the inner circle: %s", err)
			}

			log.Info("InnerCircle: %s adds %s to the inner circle", currentUser.Username, user.Username)

			session.Flash(w, r, "%s has been added to the inner circle!", user.Username)
			templates.Redirect(w, "/photo/u/"+user.Username)
			return
		}

		var vars = map[string]interface{}{
			"User": user,
		}
		if err := tmpl.Execute(w, r, vars); err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
	})
}

// RemoveCircle is the admin-only page to remove a member from the circle.
func RemoveCircle() http.HandlerFunc {
	tmpl := templates.Must("account/remove_circle.html")
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		currentUser, err := session.CurrentUser(r)
		if err != nil || !currentUser.IsInnerCircle() {
			templates.NotFoundPage(w, r)
			return
		}

		// Remove whom?
		username := r.FormValue("to")
		user, err := models.FindUser(username)
		if err != nil {
			templates.NotFoundPage(w, r)
			return
		}

		// POSTing?
		if r.Method == http.MethodPost {
			var (
				confirm = r.FormValue("intent") == "confirm"
			)

			if !confirm {
				templates.Redirect(w, "/u/"+username)
				return
			}

			// Add them!
			if err := models.RemoveFromInnerCircle(user); err != nil {
				session.FlashError(w, r, "Couldn't remove from the inner circle: %s", err)
			}

			session.Flash(w, r, "%s has been removed from the inner circle!", user.Username)
			templates.Redirect(w, "/u/"+user.Username)
			return
		}

		var vars = map[string]interface{}{
			"User": user,
		}
		if err := tmpl.Execute(w, r, vars); err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
	})
}