chitter-challenge/app.rb at main · sarahc-dev/chitter-challenge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
require 'sinatra/base'
require 'sinatra/reloader'
require_relative 'lib/database_connection'
require_relative 'lib/peep_repository'
require_relative 'lib/user_repository'

DatabaseConnection.connect

class Application < Sinatra::Base

  enable :sessions

  configure :development do
    register Sinatra::Reloader
  end

  get '/' do
    return redirect('/peeps') unless session[:user_id].nil?

    return erb(:index)
  end

  get '/peeps' do
    repo = PeepRepository.new
    @peeps = repo.all_with_user

    return erb(:peeps)
  end

  get '/peeps/new' do
    return redirect('/login') if session[:user_id].nil?

    return erb(:create_peep)
  end

  post '/peeps' do
    halt 400, "peep should not be empty" if params[:message].empty?

    # prevents dangerous input
    clean_param = Rack::Utils.escape_html(params[:message])

    repo = PeepRepository.new
    peep = Peep.new
    peep.message = clean_param
    peep.user_id = session[:user_id]
    peep.peep_id = params[:peep_id]
    id = repo.create(peep)
    # p id[0]['id']

    UserRepository.new.tag_users(id[0]['id'],
    params[:tags]) unless params[:tags].nil? || params[:tags].empty?

    return params[:peep_id] ? redirect("/peeps/#{params[:peep_id]}") : redirect('/peeps')
  end

  get '/peeps/:id' do
    return redirect('/login') if session[:user_id].nil?

    id = params[:id]
    repo = PeepRepository.new
    @peep = repo.find_by_id(id)
    @replies = repo.get_replies(id)

    return erb(:peep)
  end

  post '/signup' do
    halt 400, "fields must be completed" if params[:email].empty? || \
    params[:password].empty? || params[:name].empty? || params[:username].empty?

    repo = UserRepository.new
    user = User.new
    user.email = Rack::Utils.escape_html(params[:email])
    user.password = Rack::Utils.escape_html(params[:password])
    user.name = Rack::Utils.escape_html(params[:name])
    user.username = Rack::Utils.escape_html(params[:username])

    repo.create(user)
    return erb(:signup_success)

    rescue PG::UniqueViolation
      status 400
      return erb(:signup_error)
  end

  get '/login' do
    return erb(:login)
  end

  post '/login' do
    halt 400, "Bad request" unless params[:email].count("'").zero?

    repo = UserRepository.new
    # log_in method returns user id
    user_id = repo.log_in(params[:email], params[:password])

    if user_id.nil?
      status 403
      return erb(:login_error)
    else
      session[:user_id] = user_id
      return erb(:login_success)
    end
  end

  get '/logout' do
    session[:user_id] = nil

    return redirect('/peeps')
  end
end