ultisuite-backend/internal/api/photos/handlers.go

package photos

import (
	"context"
	"errors"
	"io"
	"log/slog"
	"net/http"

	"github.com/go-chi/chi/v5"

	"github.com/ultisuite/ulti-backend/internal/api/apiresponse"
	"github.com/ultisuite/ulti-backend/internal/api/apivalidate"
	"github.com/ultisuite/ulti-backend/internal/api/middleware"
	"github.com/ultisuite/ulti-backend/internal/api/query"
	"github.com/ultisuite/ulti-backend/internal/nextcloud"
	"github.com/ultisuite/ulti-backend/internal/permission"
	photospkg "github.com/ultisuite/ulti-backend/internal/photos"
)

type Handler struct {
	svc    *Service
	logger *slog.Logger
}

type contentLengthContextKey struct{}

func NewHandler(client *photospkg.Client, quota *nextcloud.Client) *Handler {
	return &Handler{
		svc:    NewService(client, quota),
		logger: slog.Default().With("component", "photos-api"),
	}
}

func (h *Handler) Routes() chi.Router {
	r := chi.NewRouter()
	read := middleware.RequirePermission(permission.ResourcePhotos, permission.LevelRead)
	write := middleware.RequirePermission(permission.ResourcePhotos, permission.LevelWrite)

	r.With(read).Get("/assets", h.ListAssets)
	r.With(read).Get("/assets/{assetID}/thumbnail", h.Thumbnail)
	r.With(read).Get("/albums", h.ListAlbums)
	r.With(read).Get("/albums/{albumID}", h.GetAlbum)
	r.With(write).Post("/assets", h.Upload)
	r.With(write).Post("/albums", h.CreateAlbum)
	r.With(write).Patch("/albums/{albumID}", h.UpdateAlbum)
	r.With(write).Delete("/assets/{assetID}", h.DeleteAsset)
	r.With(write).Delete("/albums/{albumID}", h.DeleteAlbum)
	r.With(write).Put("/albums/{albumID}/assets", h.AddAlbumAssets)
	r.With(write).Delete("/albums/{albumID}/assets", h.RemoveAlbumAssets)
	return r
}

func (h *Handler) ListAssets(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	params, err := query.ParseListRequest(r)
	if err != nil {
		apivalidate.WriteQueryError(w, r, err)
		return
	}

	result, err := h.svc.ListAssets(r.Context(), claims.Sub, params)
	if err != nil {
		h.logger.Error("list assets", "error", err)
		apivalidate.WriteInternal(w, r)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, result)
}

func (h *Handler) Upload(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	ctx := context.WithValue(r.Context(), contentLengthContextKey{}, r.ContentLength)

	id, err := h.svc.UploadAsset(ctx, claims.Sub, r.Body, r.Header.Get("Content-Type"))
	if err != nil {
		h.logger.Error("upload asset", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusCreated, map[string]string{"id": id})
}

func (h *Handler) Thumbnail(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	assetID := chi.URLParam(r, "assetID")
	if verr := validateAssetID(assetID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	body, ct, err := h.svc.GetAssetThumbnail(r.Context(), claims.Sub, assetID)
	if err != nil {
		writePhotosError(w, r, err)
		return
	}
	defer body.Close()

	w.Header().Set("Content-Type", ct)
	io.Copy(w, body)
}

func (h *Handler) DeleteAsset(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	assetID := chi.URLParam(r, "assetID")
	if verr := validateAssetID(assetID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	if err := h.svc.DeleteAsset(r.Context(), claims.Sub, assetID); err != nil {
		h.logger.Error("delete asset", "error", err)
		writePhotosError(w, r, err)
		return
	}
	w.WriteHeader(http.StatusNoContent)
}

func (h *Handler) ListAlbums(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	params, err := query.ParseListRequest(r)
	if err != nil {
		apivalidate.WriteQueryError(w, r, err)
		return
	}

	result, err := h.svc.ListAlbums(r.Context(), claims.Sub, params)
	if err != nil {
		h.logger.Error("list albums", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, result)
}

func (h *Handler) GetAlbum(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	albumID := chi.URLParam(r, "albumID")
	if verr := validateAlbumID(albumID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	album, err := h.svc.GetAlbum(r.Context(), claims.Sub, albumID)
	if err != nil {
		if errors.Is(err, ErrNotFound) {
			apivalidate.WriteNotFound(w, r, "not found")
			return
		}
		h.logger.Error("get album", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, album)
}

func (h *Handler) CreateAlbum(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())

	var req createAlbumRequest
	if err := apivalidate.DecodeJSON(w, r, maxJSONRequestBody, &req); err != nil {
		return
	}
	if verr := validateCreateAlbum(&req); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	album, err := h.svc.CreateAlbum(r.Context(), claims.Sub, &req)
	if err != nil {
		h.logger.Error("create album", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusCreated, album)
}

func (h *Handler) UpdateAlbum(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	albumID := chi.URLParam(r, "albumID")
	if verr := validateAlbumID(albumID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	var req updateAlbumRequest
	if err := apivalidate.DecodeJSON(w, r, maxJSONRequestBody, &req); err != nil {
		return
	}
	if verr := validateUpdateAlbum(&req); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	album, err := h.svc.UpdateAlbum(r.Context(), claims.Sub, albumID, &req)
	if err != nil {
		if errors.Is(err, ErrNotFound) {
			apivalidate.WriteNotFound(w, r, "not found")
			return
		}
		h.logger.Error("update album", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, album)
}

func (h *Handler) DeleteAlbum(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	albumID := chi.URLParam(r, "albumID")
	if verr := validateAlbumID(albumID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	if err := h.svc.DeleteAlbum(r.Context(), claims.Sub, albumID); err != nil {
		if errors.Is(err, ErrNotFound) {
			apivalidate.WriteNotFound(w, r, "not found")
			return
		}
		h.logger.Error("delete album", "error", err)
		writePhotosError(w, r, err)
		return
	}
	w.WriteHeader(http.StatusNoContent)
}

func (h *Handler) AddAlbumAssets(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	albumID := chi.URLParam(r, "albumID")
	if verr := validateAlbumID(albumID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	var req albumAssetsRequest
	if err := apivalidate.DecodeJSON(w, r, maxJSONRequestBody, &req); err != nil {
		return
	}
	if verr := validateAlbumAssetsRequest(&req); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	result, err := h.svc.AddAlbumAssets(r.Context(), claims.Sub, albumID, req.AssetIDs)
	if err != nil {
		if errors.Is(err, ErrNotFound) {
			apivalidate.WriteNotFound(w, r, "not found")
			return
		}
		h.logger.Error("add album assets", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, result)
}

func (h *Handler) RemoveAlbumAssets(w http.ResponseWriter, r *http.Request) {
	claims := middleware.ClaimsFromContext(r.Context())
	albumID := chi.URLParam(r, "albumID")
	if verr := validateAlbumID(albumID); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	var req albumAssetsRequest
	if err := apivalidate.DecodeJSON(w, r, maxJSONRequestBody, &req); err != nil {
		return
	}
	if verr := validateAlbumAssetsRequest(&req); verr != nil {
		apivalidate.WriteValidationError(w, r, verr)
		return
	}

	result, err := h.svc.RemoveAlbumAssets(r.Context(), claims.Sub, albumID, req.AssetIDs)
	if err != nil {
		if errors.Is(err, ErrNotFound) {
			apivalidate.WriteNotFound(w, r, "not found")
			return
		}
		h.logger.Error("remove album assets", "error", err)
		writePhotosError(w, r, err)
		return
	}
	apiresponse.WriteJSON(w, http.StatusOK, result)
}

func writePhotosError(w http.ResponseWriter, r *http.Request, err error) {
	switch {
	case errors.Is(err, ErrNotFound):
		apivalidate.WriteNotFound(w, r, "not found")
	case errors.Is(err, ErrConflict):
		apiresponse.WriteError(w, r, http.StatusConflict, "photos.conflict", "resource conflict", nil)
	case errors.Is(err, ErrForbidden):
		apiresponse.WriteError(w, r, http.StatusForbidden, "photos.forbidden", "forbidden", nil)
	case errors.Is(err, ErrQuotaExceeded):
		apiresponse.WriteError(w, r, http.StatusInsufficientStorage, "photos.quota_exceeded", "quota exceeded", nil)
	case errors.Is(err, ErrInvalid):
		apiresponse.WriteError(w, r, http.StatusBadRequest, apiresponse.CodeInvalidRequest, "invalid request body", nil)
	default:
		apivalidate.WriteInternal(w, r)
	}
}