max/gonotes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow unsharing, only show share controls for owner

Browse source
This commit is contained in:
Maximilian Friedersdorff 2025-10-09 21:04:45 +01:00
parent a54abeaea2
commit 4fb4bec5a8
3 changed files with 60 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

37
internal/notes/views/views.go
View file

@ -28,6 +28,7 @@ func GetRoutes(prefix string) *http.ServeMux {
"delete": {Path: "/{note}/delete/", Protocol: "GET", Handler: delete},
"edit": {Path: "/{note}/edit/", Protocol: "GET", Handler: edit},
"share": {Path: "/{note}/share/", Protocol: "POST", Handler: share},
"unshare": {Path: "/{note}/unshare/", Protocol: "POST", Handler: unshare},
"save": {Path: "/{note}/edit/save/", Protocol: "POST", Handler: save},
"togglebox": {Path: "/{note}/togglebox/", Protocol: "POST", Handler: togglebox},
},
@ -47,12 +48,17 @@ func view(w http.ResponseWriter, r *http.Request) {
}
viewers := note.ViewersAsList()
urlEdit := myurls.Reverse("edit", urls.Repl{"note": uid})
urlNew := myurls.Reverse("new", urls.Repl{})
urlDelete := myurls.Reverse("delete", urls.Repl{"note": uid})
urlShare := myurls.Reverse("share", urls.Repl{"note": uid})
context := templ.Ctx{
"note": note,
"urlEdit": myurls.Reverse("edit", urls.Repl{"note": uid}),
"urlDelete": myurls.Reverse("delete", urls.Repl{"note": uid}),
"urlNew": myurls.Reverse("new", urls.Repl{}),
"urlShare": myurls.Reverse("share", urls.Repl{"note": uid}),
"urlUnshare": myurls.Reverse("unshare", urls.Repl{"note": uid}),
"viewers": viewers,
"isOwner": user == note.Owner,
}
context := templ.Ctx{"note": note, "urlEdit": urlEdit, "urlDelete": urlDelete, "urlNew": urlNew, "urlShare": urlShare, "viewers": viewers}
note.Render()
err := templ.RenderTemplate(w, r, "view.tmpl.html", context)
if err != nil {
@ -135,7 +141,7 @@ func share(w http.ResponseWriter, r *http.Request) {
uid := r.PathValue("note")
note, ok := notes.Notes.GetOne(user, uid)
if !ok {
if !ok || note.Owner != user {
http.NotFound(w, r)
}
@ -147,6 +153,23 @@ func share(w http.ResponseWriter, r *http.Request) {
http.Redirect(w, r, myurls.Reverse("view", urls.Repl{"note": note.Uid}), http.StatusFound)
}
func unshare(w http.ResponseWriter, r *http.Request) {
user := r.Context().Value(middleware.ContextKey("user")).(string)
uid := r.PathValue("note")
note, ok := notes.Notes.GetOne(user, uid)
if !ok || note.Owner != user {
http.NotFound(w, r)
}
viewer := r.FormValue("viewer")
note.DelViewer(viewer)
note.Save()
notes.Notes.Del(note, viewer)
http.Redirect(w, r, myurls.Reverse("view", urls.Repl{"note": note.Uid}), http.StatusFound)
}
func togglebox(w http.ResponseWriter, r *http.Request) {
user := r.Context().Value(middleware.ContextKey("user")).(string)
@ -182,7 +205,7 @@ func list(w http.ResponseWriter, r *http.Request) {
log.Printf("Notes: %+v", notes.Notes)
log.Printf("Notes for %s: %+v", user, ns)
for _, note := range ns {
for note := range ns {
titlesAndUrls = append(
titlesAndUrls,
titleAndURL{Title: note.Title, URL: myurls.Reverse("view", urls.Repl{"note": note.Uid})},