1 files changed, 265 insertions, 0 deletions
diff --git a/src/model/routes.rs b/src/model/routes.rs
new file mode 100644
index 0000000..26d1bb5
--- /dev/null
+++ b/src/model/routes.rs
@@ -0,0 +1,265 @@
+use crate::{
+    auth::models::Claims,
+    errors::AppError,
+    files::{delete_upload, upload},
+    likes::models::Like,
+    model::models::{Model, ModelCreate, ModelFilter, ModelUpload, ModelUser},
+    pagination::{ModelPagination, Pagination},
+    routes::JsonCreate,
+    user::models::User,
+};
+use axum::{
+    extract::{ContentLengthLimit, Multipart, Path, Query},
+    http::StatusCode,
+    routing::{delete, get, post},
+    Json, Router,
+};
+
+/// Create routes for `/v1/models/` namespace
+pub fn create_route() -> Router {
+    Router::new()
+        .route("/", get(list_models).post(create_model))
+        .route("/filter", post(filter_models))
+        .route("/:id", get(get_model).delete(delete_model).put(edit_model))
+        .route("/:id/like", post(add_like).delete(delete_like))
+        .route("/:id/upload", post(upload_model_file))
+        .route("/:id/upload/:uid", delete(delete_model_file))
+}
+
+/// List models.
+async fn list_models(pagination: Query<Pagination>) -> Result<Json<ModelPagination>, AppError> {
+    let page = pagination.0.page.unwrap_or_default();
+    let results = Model::list(page).await?;
+    let count = Model::count().await?;
+
+    Ok(Json(ModelPagination { count, results }))
+}
+
+/// Create a model. Checks Authorization token
+async fn create_model(
+    Json(payload): Json<ModelCreate>,
+    claims: Claims,
+) -> Result<JsonCreate<Model>, AppError> {
+    let model = Model::new(
+        payload.name,
+        payload.description,
+        payload.duration,
+        payload.height,
+        payload.weight,
+        payload.printer,
+        payload.material,
+        claims.user_id,
+    );
+
+    let model_new = Model::create(model).await?;
+
+    Ok(JsonCreate(model_new))
+}
+
+/// Get a model with id = `model_id`
+async fn get_model(Path(model_id): Path<i32>) -> Result<Json<ModelUser>, AppError> {
+    match Model::find_by_id(model_id).await {
+        Ok(model) => Ok(Json(model)),
+        Err(_) => Err(AppError::NotFound("Model not found".to_string())),
+    }
+}
+
+/// The owner or a staffer can delete a model
+async fn delete_model(claims: Claims, Path(model_id): Path<i32>) -> Result<StatusCode, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    let uploads: Vec<String> = model.list_upload_filepaths().await.unwrap_or_default();
+
+    if !(model.author_id() == user.id || user.is_staff.unwrap()) {
+        return Err(AppError::Unauthorized);
+    }
+
+    // If the model has been deleted, remove all old uploads from the file system
+    if Model::delete(model_id).await.is_ok() {
+        uploads
+            .iter()
+            .for_each(|path: &String| delete_upload(path).unwrap_or_default());
+    }
+
+    Ok(StatusCode::NO_CONTENT)
+}
+
+/// The owner or a staffer can edit a model
+async fn edit_model(
+    Json(payload): Json<ModelCreate>,
+    claims: Claims,
+    Path(model_id): Path<i32>,
+) -> Result<Json<ModelUser>, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    if !(model.author_id() == user.id || user.is_staff.unwrap()) {
+        return Err(AppError::Unauthorized);
+    }
+
+    let model_body = Model::new(
+        payload.name,
+        payload.description,
+        payload.duration,
+        payload.height,
+        payload.weight,
+        payload.printer,
+        payload.material,
+        claims.user_id,
+    );
+
+    // NOTE: can we edit this as same as `user.edit_avatar()`?
+    Model::edit(model.id, model_body).await?;
+    Ok(Json(model))
+}
+
+/// Upload a file for a model
+async fn upload_model_file(
+    claims: Claims,
+    Path(model_id): Path<i32>,
+    ContentLengthLimit(multipart): ContentLengthLimit<Multipart, { 1024 * 1024 * 40 }>,
+) -> Result<Json<ModelUpload>, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    if !(model.author_id() == user.id || user.is_staff.unwrap()) {
+        return Err(AppError::Unauthorized);
+    }
+
+    let allowed_extensions = vec![
+        "stl",
+        "obj",
+        "png",
+        "jpg",
+        "jpeg",
+        "gif",
+        "webp",
+        "blend",
+        "octet-stream",
+        "sla",
+    ];
+
+    match upload(multipart, allowed_extensions, None).await {
+        Ok(saved_file) => {
+            let model_file = ModelUpload::create(ModelUpload::new(saved_file, model_id)).await?;
+
+            Ok(Json(model_file))
+        }
+        Err(e) => Err(e),
+    }
+}
+
+/// The owner or a staffer can delete a model upload
+async fn delete_model_file(
+    claims: Claims,
+    Path((model_id, upload_id)): Path<(i32, i32)>,
+) -> Result<StatusCode, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    if !(model.author_id() == user.id || user.is_staff.unwrap()) {
+        return Err(AppError::Unauthorized);
+    }
+
+    let upload = match ModelUpload::find_by_id(upload_id).await {
+        Ok(upload) => upload,
+        Err(_) => {
+            return Err(AppError::NotFound("Upload not found".to_string()));
+        }
+    };
+
+    if upload.model_id != model.id {
+        return Err(AppError::NotFound("Upload not found".to_string()));
+    }
+
+    let filepath = upload.filepath.clone();
+
+    match ModelUpload::delete(upload_id).await {
+        Ok(_) => {
+            delete_upload(&filepath)?;
+
+            Ok(StatusCode::NO_CONTENT)
+        }
+        Err(e) => Err(e),
+    }
+}
+
+/// Assign a like to a model from the Authorization user
+async fn add_like(claims: Claims, Path(model_id): Path<i32>) -> Result<StatusCode, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    let like = Like::new(user.id, model.id);
+
+    match like.save().await {
+        Ok(_) => Ok(StatusCode::CREATED),
+        Err(e) => {
+            return Err(e);
+        }
+    }
+}
+
+/// Remove a like from a model and an Authorization user
+async fn delete_like(claims: Claims, Path(model_id): Path<i32>) -> Result<StatusCode, AppError> {
+    let model = match Model::find_by_id(model_id).await {
+        Ok(model) => model,
+        Err(_) => {
+            return Err(AppError::NotFound("Model not found".to_string()));
+        }
+    };
+
+    let user = User::find_by_id(claims.user_id).await?;
+
+    let like = Like::new(user.id, model.id);
+
+    match like.remove().await {
+        Ok(_) => Ok(StatusCode::NO_CONTENT),
+        Err(e) => {
+            return Err(e);
+        }
+    }
+}
+
+/// Filter models
+async fn filter_models(
+    pagination: Query<Pagination>,
+    Json(payload): Json<ModelFilter>,
+) -> Result<Json<ModelPagination>, AppError> {
+    let page = pagination.0.page.unwrap_or_default();
+
+    let results = Model::filter(page, payload.q.clone()).await?;
+    let count = Model::count_filter(payload.q).await?;
+
+    Ok(Json(ModelPagination { count, results }))
+}