package web import ( "errors" "net/http" "strconv" "strings" "github.com/gramanas/blogspace/internal/markdown" "github.com/gramanas/blogspace/internal/slug" "github.com/gramanas/blogspace/internal/store" ) func (s *Server) handlePosts(w http.ResponseWriter, r *http.Request) { pageID, _ := strconv.ParseInt(r.URL.Query().Get("page"), 10, 64) pages, err := blogStore(r).ListPages(r.Context()) if err != nil { s.serverError(w, err) return } posts, err := blogStore(r).ListPosts(r.Context(), pageID) if err != nil { s.serverError(w, err) return } s.render(w, r, "dashboard/posts.html", map[string]any{"posts": posts, "pages": pages, "pageID": pageID}) } func (s *Server) loadPost(w http.ResponseWriter, r *http.Request) *store.Post { id, _ := strconv.ParseInt(r.PathValue("id"), 10, 64) p, err := blogStore(r).PostByID(r.Context(), id) if err != nil { if errors.Is(err, store.ErrNotFound) { http.NotFound(w, r) } else { s.serverError(w, err) } return nil } return p } func (s *Server) handlePostForm(w http.ResponseWriter, r *http.Request) { pages, err := blogStore(r).ListPages(r.Context()) if err != nil { s.serverError(w, err) return } p := &store.Post{Published: true} if r.PathValue("id") != "" { if p = s.loadPost(w, r); p == nil { return } } else if pid, _ := strconv.ParseInt(r.URL.Query().Get("page"), 10, 64); pid != 0 { p.PageID = pid } else if hp, err := blogStore(r).HomePage(r.Context()); err == nil { p.PageID = hp.ID } s.render(w, r, "dashboard/post_form.html", map[string]any{"post": p, "pages": pages}) } func (s *Server) handlePostSave(w http.ResponseWriter, r *http.Request) { blog := currentBlog(r) pages, err := blogStore(r).ListPages(r.Context()) if err != nil { s.serverError(w, err) return } p := &store.Post{} if r.PathValue("id") != "" { if p = s.loadPost(w, r); p == nil { return } } p.Title = strings.TrimSpace(r.FormValue("title")) p.Slug = strings.TrimSpace(r.FormValue("slug")) p.BodyMD = strings.ReplaceAll(r.FormValue("body"), "\r\n", "\n") p.Published = r.FormValue("published") == "on" p.PageID, _ = strconv.ParseInt(r.FormValue("page_id"), 10, 64) autoSlug := p.Slug == "" if autoSlug { p.Slug = slug.Make(p.Title) } fail := func(status int, msg string) { s.renderStatus(w, r, status, "dashboard/post_form.html", map[string]any{"post": p, "pages": pages, "error": msg}) } img, err := s.readUpload(r, "inline_image") if err != nil { fail(http.StatusBadRequest, "Image not added: "+err.Error()) return } p.BodyMD = appendImageMD(p.BodyMD, img) pageOK := false for _, pg := range pages { if pg.ID == p.PageID { pageOK = true } } switch { case p.Title == "" || len(p.Title) > 200: fail(http.StatusBadRequest, "Title is required (max 200 characters).") return case !slug.Valid(p.Slug): fail(http.StatusBadRequest, "Slug may only contain lowercase letters, digits and dashes.") return case !pageOK: fail(http.StatusBadRequest, "Pick a page for this post.") return case len(p.BodyMD) > 200_000: fail(http.StatusBadRequest, "Post is too long (200 KB max).") return } p.BodyHTML = markdown.Render(p.BodyMD) base := p.Slug for n := 1; ; n++ { // generated slugs get -2, -3… on collision; typed ones report the conflict p.Slug = slug.WithSuffix(base, n) if p.ID == 0 { var created *store.Post if created, err = blogStore(r).CreatePost(r.Context(), p); err == nil { p = created } } else { err = blogStore(r).UpdatePost(r.Context(), p) } if !errors.Is(err, store.ErrConflict) || !autoSlug || n >= 50 { break } } if err != nil { if errors.Is(err, store.ErrConflict) { fail(http.StatusConflict, "A post with that slug already exists on this page; choose another slug.") return } s.serverError(w, err) return } redirectOK(w, r, "/b/"+blog.Subdomain+"/posts/"+strconv.FormatInt(p.ID, 10)+"/edit", "Saved. Refresh your blog to see it.") } func (s *Server) handlePostDeleteConfirm(w http.ResponseWriter, r *http.Request) { p := s.loadPost(w, r) if p == nil { return } s.render(w, r, "dashboard/confirm.html", map[string]any{ "what": "the post \"" + p.Title + "\"", "action": r.URL.Path, "back": "/b/" + currentBlog(r).Subdomain + "/posts", }) } func (s *Server) handlePostDelete(w http.ResponseWriter, r *http.Request) { p := s.loadPost(w, r) if p == nil { return } if err := blogStore(r).DeletePost(r.Context(), p.ID); err != nil { s.serverError(w, err) return } redirectOK(w, r, "/b/"+currentBlog(r).Subdomain+"/posts", "Post deleted.") }