openvk/VKAPI/Handlers/Notes.php

<?php

declare(strict_types=1);

namespace openvk\VKAPI\Handlers;

use openvk\Web\Models\Repositories\Notes as NotesRepo;
use openvk\Web\Models\Repositories\Users as UsersRepo;
use openvk\Web\Models\Repositories\Comments as CommentsRepo;
use openvk\Web\Models\Repositories\Photos as PhotosRepo;
use openvk\Web\Models\Repositories\Videos as VideosRepo;
use openvk\Web\Models\Entities\{Note, Comment};

final class Notes extends VKAPIRequestHandler
{
    public function add(string $title, string $text, int $privacy = 0, int $comment_privacy = 0, string $privacy_view  = "", string $privacy_comment  = "")
    {
        $this->requireUser();
        $this->willExecuteWriteAction();

        $note = new Note();
        $note->setOwner($this->getUser()->getId());
        $note->setCreated(time());
        $note->setName($title);
        $note->setSource($text);
        $note->setEdited(time());
        $note->save();

        return $note->getVirtualId();
    }

    public function createComment(string $note_id, int $owner_id, string $message, int $reply_to = 0, string $attachments = "")
    {
        $this->requireUser();
        $this->willExecuteWriteAction();
        $note = (new NotesRepo())->getNoteById((int) $owner_id, (int) $note_id);

        if (!$note) {
            $this->fail(180, "Note not found");
        }

        if ($note->isDeleted()) {
            $this->fail(189, "Note is deleted");
        }

        if ($note->getOwner()->isDeleted()) {
            $this->fail(403, "Owner is deleted");
        }

        if (!$note->canBeViewedBy($this->getUser())) {
            $this->fail(15, "Access denied");
        }

        if (!$note->getOwner()->getPrivacyPermission('notes.read', $this->getUser())) {
            $this->fail(43, "No access");
        }

        if (empty($message) && empty($attachments)) {
            $this->fail(100, "Required parameter 'message' missing.");
        }

        $comment = new Comment();
        $comment->setOwner($this->getUser()->getId());
        $comment->setModel(get_class($note));
        $comment->setTarget($note->getId());
        $comment->setContent($message);
        $comment->setCreated(time());
        $comment->save();

        if (!empty($attachments)) {
            $attachmentsArr = explode(",", $attachments);

            if (sizeof($attachmentsArr) > 10) {
                $this->fail(50, "Error: too many attachments");
            }

            foreach ($attachmentsArr as $attac) {
                $attachmentType = null;

                if (str_contains($attac, "photo")) {
                    $attachmentType = "photo";
                } elseif (str_contains($attac, "video")) {
                    $attachmentType = "video";
                } else {
                    $this->fail(205, "Unknown attachment type");
                }

                $attachment = str_replace($attachmentType, "", $attac);

                $attachmentOwner = (int) explode("_", $attachment)[0];
                $attachmentId    = (int) end(explode("_", $attachment));

                $attacc = null;

                if ($attachmentType == "photo") {
                    $attacc = (new PhotosRepo())->getByOwnerAndVID($attachmentOwner, $attachmentId);
                    if (!$attacc || $attacc->isDeleted()) {
                        $this->fail(100, "Photo does not exists");
                    }
                    if ($attacc->getOwner()->getId() != $this->getUser()->getId()) {
                        $this->fail(43, "You do not have access to this photo");
                    }

                    $comment->attach($attacc);
                } elseif ($attachmentType == "video") {
                    $attacc = (new VideosRepo())->getByOwnerAndVID($attachmentOwner, $attachmentId);
                    if (!$attacc || $attacc->isDeleted()) {
                        $this->fail(100, "Video does not exists");
                    }
                    if ($attacc->getOwner()->getId() != $this->getUser()->getId()) {
                        $this->fail(43, "You do not have access to this video");
                    }

                    $comment->attach($attacc);
                }
            }
        }

        return $comment->getId();
    }

    public function delete(string $note_id)
    {
        $this->requireUser();
        $this->willExecuteWriteAction();

        $note = (new NotesRepo())->get((int) $note_id);

        if (!$note) {
            $this->fail(180, "Note not found");
        }

        if (!$note->canBeModifiedBy($this->getUser())) {
            $this->fail(15, "Access to note denied");
        }

        $note->delete();

        return 1;
    }

    public function edit(string $note_id, string $title = "", string $text = "", int $privacy = 0, int $comment_privacy = 0, string $privacy_view  = "", string $privacy_comment  = "")
    {
        $this->requireUser();
        $this->willExecuteWriteAction();

        $note = (new NotesRepo())->getNoteById($this->getUser()->getId(), (int) $note_id);

        if (!$note) {
            $this->fail(180, "Note not found");
        }

        if ($note->isDeleted()) {
            $this->fail(189, "Note is deleted");
        }

        if (!$note->canBeModifiedBy($this->getUser())) {
            $this->fail(403, "No access");
        }

        !empty($title) ? $note->setName($title) : null;
        !empty($text) ? $note->setSource($text) : null;

        $note->setCached_Content(null);
        $note->setEdited(time());
        $note->save();

        return 1;
    }

    public function get(int $user_id, string $note_ids = "", int $offset = 0, int $count = 10, int $sort = 0)
    {
        $this->requireUser();
        $user = (new UsersRepo())->get($user_id);

        if (!$user || $user->isDeleted()) {
            $this->fail(15, "Invalid user");
        }

        if (!$user->getPrivacyPermission('notes.read', $this->getUser())) {
            $this->fail(15, "Access denied: this user chose to hide his notes");
        }

        if (!$user->canBeViewedBy($this->getUser())) {
            $this->fail(15, "Access denied");
        }

        if (empty($note_ids)) {
            $notes = array_slice(iterator_to_array((new NotesRepo())->getUserNotes($user, 1, $count + $offset, $sort == 0 ? "ASC" : "DESC")), $offset);
            $nodez = (object) [
                "count" => (new NotesRepo())->getUserNotesCount((new UsersRepo())->get($user_id)),
                "notes" => [],
            ];

            foreach ($notes as $note) {
                if ($note->isDeleted()) {
                    continue;
                }

                $nodez->notes[] = $note->toVkApiStruct();
            }
        } else {
            $notes = explode(',', $note_ids);

            foreach ($notes as $note) {
                $id    = explode("_", $note);

                $items = [];

                $note = (new NotesRepo())->getNoteById((int) $id[0], (int) $id[1]);
                if ($note && !$note->isDeleted()) {
                    $nodez->notes[] = $note->toVkApiStruct();
                }
            }
        }

        return $nodez;
    }

    public function getById(int $note_id, int $owner_id, bool $need_wiki = false)
    {
        $this->requireUser();

        $note = (new NotesRepo())->getNoteById($owner_id, $note_id);

        if (!$note) {
            $this->fail(180, "Note not found");
        }

        if ($note->isDeleted()) {
            $this->fail(189, "Note is deleted");
        }

        if (!$note->getOwner() || $note->getOwner()->isDeleted()) {
            $this->fail(177, "Owner does not exists");
        }

        if (!$note->getOwner()->getPrivacyPermission('notes.read', $this->getUser())) {
            $this->fail(40, "Access denied: this user chose to hide his notes");
        }

        if (!$note->canBeViewedBy($this->getUser())) {
            $this->fail(15, "Access to note denied");
        }

        return $note->toVkApiStruct();
    }

    public function getComments(int $note_id, int $owner_id, int $sort = 1, int $offset = 0, int $count = 100)
    {
        $this->requireUser();

        $note = (new NotesRepo())->getNoteById($owner_id, $note_id);

        if (!$note) {
            $this->fail(180, "Note not found");
        }

        if ($note->isDeleted()) {
            $this->fail(189, "Note is deleted");
        }

        if (!$note->getOwner()) {
            $this->fail(177, "Owner does not exists");
        }

        if (!$note->getOwner()->getPrivacyPermission('notes.read', $this->getUser())) {
            $this->fail(14, "No access");
        }

        if (!$note->canBeViewedBy($this->getUser())) {
            $this->fail(15, "Access to note denied");
        }

        $arr = (object) [
            "count" => $note->getCommentsCount(),
            "comments" => []];
        $comments = array_slice(iterator_to_array($note->getComments(1, $count + $offset)), $offset);

        foreach ($comments as $comment) {
            $arr->comments[] = $comment->toVkApiStruct($this->getUser(), false, false, $note);
        }

        return $arr;
    }

    public function getFriendsNotes(int $offset = 0, int $count = 0)
    {
        $this->fail(501, "Not implemented");
    }

    public function restoreComment(int $comment_id = 0, int $owner_id = 0)
    {
        $this->fail(501, "Not implemented");
    }
}