giles
d53b9648a9
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 1m15s
Migrate ~52 GET route handlers across all 7 services from Jinja render_template() to s-expression component rendering. Each service gets a sexp_components.py with page/oob/cards render functions. - Add per-service sexp_components.py (account, blog, cart, events, federation, market, orders) with full page, OOB, and pagination card rendering - Add shared/sexp/helpers.py with call_url, root_header_html, full_page, oob_page utilities - Update all GET routes to use get_template_context() + render fns - Fix get_template_context() to inject Jinja globals (URL helpers) - Add qs_filter to base_context for sexp filter URL building - Mount sexp_components.py in docker-compose.dev.yml for all services - Import sexp_components in app.py for Hypercorn --reload watching - Fix route_prefix import (shared.utils not shared.infrastructure.urls) - Fix federation choose-username missing actor in context - Fix market page_markets missing post in context Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
106 lines
3.1 KiB
Python
106 lines
3.1 KiB
Python
from __future__ import annotations
|
|
|
|
from quart import Blueprint, render_template, make_response, request, g, abort
|
|
from sqlalchemy import select, or_
|
|
from sqlalchemy.orm import selectinload
|
|
|
|
from shared.browser.app.authz import require_login
|
|
from shared.browser.app.utils.htmx import is_htmx_request
|
|
from models import Snippet
|
|
|
|
|
|
VALID_VISIBILITY = frozenset({"private", "shared", "admin"})
|
|
|
|
|
|
async def _visible_snippets(session):
|
|
"""Return snippets visible to the current user (own + shared + admin-if-admin)."""
|
|
uid = g.user.id
|
|
is_admin = g.rights.get("admin")
|
|
|
|
filters = [Snippet.user_id == uid, Snippet.visibility == "shared"]
|
|
if is_admin:
|
|
filters.append(Snippet.visibility == "admin")
|
|
|
|
rows = (await session.execute(
|
|
select(Snippet).where(or_(*filters)).order_by(Snippet.name)
|
|
)).scalars().all()
|
|
|
|
return rows
|
|
|
|
|
|
def register():
|
|
bp = Blueprint("snippets", __name__, url_prefix="/settings/snippets")
|
|
|
|
@bp.get("/")
|
|
@require_login
|
|
async def list_snippets():
|
|
"""List snippets visible to the current user."""
|
|
snippets = await _visible_snippets(g.s)
|
|
is_admin = g.rights.get("admin")
|
|
|
|
from shared.sexp.page import get_template_context
|
|
from sexp_components import render_snippets_page, render_snippets_oob
|
|
|
|
tctx = await get_template_context()
|
|
tctx["snippets"] = snippets
|
|
tctx["is_admin"] = is_admin
|
|
if not is_htmx_request():
|
|
html = await render_snippets_page(tctx)
|
|
else:
|
|
html = await render_snippets_oob(tctx)
|
|
|
|
return await make_response(html)
|
|
|
|
@bp.delete("/<int:snippet_id>/")
|
|
@require_login
|
|
async def delete_snippet(snippet_id: int):
|
|
"""Delete a snippet. Owners delete their own; admins can delete any."""
|
|
snippet = await g.s.get(Snippet, snippet_id)
|
|
if not snippet:
|
|
abort(404)
|
|
|
|
is_admin = g.rights.get("admin")
|
|
if snippet.user_id != g.user.id and not is_admin:
|
|
abort(403)
|
|
|
|
await g.s.delete(snippet)
|
|
await g.s.flush()
|
|
|
|
snippets = await _visible_snippets(g.s)
|
|
html = await render_template(
|
|
"_types/snippets/_list.html",
|
|
snippets=snippets,
|
|
is_admin=is_admin,
|
|
)
|
|
return await make_response(html)
|
|
|
|
@bp.patch("/<int:snippet_id>/visibility/")
|
|
@require_login
|
|
async def patch_visibility(snippet_id: int):
|
|
"""Change snippet visibility. Admin only."""
|
|
if not g.rights.get("admin"):
|
|
abort(403)
|
|
|
|
snippet = await g.s.get(Snippet, snippet_id)
|
|
if not snippet:
|
|
abort(404)
|
|
|
|
form = await request.form
|
|
visibility = form.get("visibility", "").strip()
|
|
|
|
if visibility not in VALID_VISIBILITY:
|
|
abort(400)
|
|
|
|
snippet.visibility = visibility
|
|
await g.s.flush()
|
|
|
|
snippets = await _visible_snippets(g.s)
|
|
html = await render_template(
|
|
"_types/snippets/_list.html",
|
|
snippets=snippets,
|
|
is_admin=True,
|
|
)
|
|
return await make_response(html)
|
|
|
|
return bp
|