# frozen_string_literal: true CHAT_CHANNEL_EDITABLE_PARAMS = %i[name description] CATEGORY_CHAT_CHANNEL_EDITABLE_PARAMS = %i[auto_join_users] class Chat::Api::ChatChannelsController < Chat::Api def index options = { status: params[:status] ? ChatChannel.statuses[params[:status]] : nil }.merge( params.permit(:filter, :limit, :offset), ).symbolize_keys! memberships = Chat::ChatChannelMembershipManager.all_for_user(current_user) channels = Chat::ChatChannelFetcher.secured_public_channels(guardian, memberships, options) serialized_channels = channels.map do |channel| ChatChannelSerializer.new( channel, scope: Guardian.new(current_user), membership: memberships.find { |membership| membership.chat_channel_id == channel.id }, ) end render json: serialized_channels, root: false end def update guardian.ensure_can_edit_chat_channel! chat_channel = find_chat_channel if chat_channel.direct_message_channel? raise Discourse::InvalidParameters.new( I18n.t("chat.errors.cant_update_direct_message_channel"), ) end params_to_edit = editable_params(params, chat_channel) params_to_edit.each { |k, v| params_to_edit[k] = nil if params_to_edit[k].blank? } if ActiveRecord::Type::Boolean.new.deserialize(params_to_edit[:auto_join_users]) auto_join_limiter(chat_channel).performed! end chat_channel.update!(params_to_edit) ChatPublisher.publish_chat_channel_edit(chat_channel, current_user) if chat_channel.category_channel? && chat_channel.auto_join_users Chat::ChatChannelMembershipManager.new(chat_channel).enforce_automatic_channel_memberships end render_serialized( chat_channel, ChatChannelSerializer, root: false, membership: chat_channel.membership_for(current_user), ) end private def find_chat_channel chat_channel = ChatChannel.find(params.require(:chat_channel_id)) guardian.ensure_can_see_chat_channel!(chat_channel) chat_channel end def find_membership chat_channel = find_chat_channel membership = Chat::ChatChannelMembershipManager.new(chat_channel).find_for_user(current_user) raise Discourse::NotFound if membership.blank? membership end def auto_join_limiter(chat_channel) RateLimiter.new( current_user, "auto_join_users_channel_#{chat_channel.id}", 1, 3.minutes, apply_limit_to_staff: true, ) end def editable_params(params, chat_channel) permitted_params = CHAT_CHANNEL_EDITABLE_PARAMS permitted_params += CATEGORY_CHAT_CHANNEL_EDITABLE_PARAMS if chat_channel.category_channel? params.permit(*permitted_params) end end