Проведен аудит. Добавлено переключение треков
This commit is contained in:
@@ -7,7 +7,8 @@ using PlaylistShared.Api.Services;
|
||||
using PlaylistShared.Shared;
|
||||
using PlaylistShared.Shared.SharedPlaylist;
|
||||
using PlaylistShared.Shared.Yandex;
|
||||
using YandexMusic.API.Models.Playlist;
|
||||
|
||||
namespace PlaylistShared.Api.Controllers;
|
||||
|
||||
[ApiController]
|
||||
[Route("api/[controller]")]
|
||||
@@ -40,19 +41,16 @@ public class SharedPlaylistController : ControllerBase
|
||||
[HttpGet("{token}")]
|
||||
public async Task<ActionResult<ApiResponse<SharedPlaylistDto>>> GetByToken(string token)
|
||||
{
|
||||
var playlist = await _sharedService.GetByTokenAsync(token);
|
||||
if (playlist == null)
|
||||
var currentUserId = User.GetUserIdOrNull();
|
||||
|
||||
var entity = await _sharedService.GetEntityByTokenAsync(token);
|
||||
if (entity == null)
|
||||
return NotFound(ApiResponse<SharedPlaylistDto>.Fail(new ErrorResponse { StatusCode = 404, Message = "Плейлист не найден" }));
|
||||
|
||||
var currentUserId = User.FindFirst(System.Security.Claims.ClaimTypes.NameIdentifier)?.Value;
|
||||
var userIdGuid = !string.IsNullOrEmpty(currentUserId) ? Guid.Parse(currentUserId) : (Guid?)null;
|
||||
|
||||
// Проверка прав просмотра (требует доступа к сущности)
|
||||
var entity = await _sharedService.GetEntityByTokenAsync(token);
|
||||
if (entity == null || !await _sharedService.CanViewAsync(entity, userIdGuid))
|
||||
if (!await _sharedService.CanViewAsync(entity, currentUserId))
|
||||
return Unauthorized(ApiResponse<SharedPlaylistDto>.Fail(new ErrorResponse { StatusCode = 401, Message = "Недостаточно прав" }));
|
||||
|
||||
return Ok(ApiResponse<SharedPlaylistDto>.Ok(playlist));
|
||||
return Ok(ApiResponse<SharedPlaylistDto>.Ok(_sharedService.MapToDto(entity)));
|
||||
}
|
||||
|
||||
// GET /api/sharedplaylist/{token}/tracks
|
||||
@@ -71,11 +69,10 @@ public class SharedPlaylistController : ControllerBase
|
||||
if (creator == null)
|
||||
return StatusCode(500, ApiResponse<YandexPlaylistData>.Fail(new ErrorResponse { StatusCode = 500, Message = "Владелец плейлиста не найден" }));
|
||||
|
||||
var yandexPlaylist = await _yandexService.GetPlaylistAsync(creator, playlist.YandexPlaylistOwnerUid, playlist.YandexPlaylistKind);
|
||||
if (yandexPlaylist == null)
|
||||
var dto = await _yandexService.GetPlaylistDataAsync(creator, playlist.YandexPlaylistOwnerUid, playlist.YandexPlaylistKind);
|
||||
if (dto == null)
|
||||
return NotFound(ApiResponse<YandexPlaylistData>.Fail(new ErrorResponse { StatusCode = 404, Message = "Плейлист не найден в Яндекс.Музыке" }));
|
||||
|
||||
var dto = MapToYandexPlaylistData(yandexPlaylist);
|
||||
return Ok(ApiResponse<YandexPlaylistData>.Ok(dto));
|
||||
}
|
||||
|
||||
@@ -129,6 +126,22 @@ public class SharedPlaylistController : ControllerBase
|
||||
return Ok(ApiResponse<object>.Ok(new { message = "Треки добавлены" }));
|
||||
}
|
||||
|
||||
// GET /api/sharedplaylist/{token}/additions
|
||||
[HttpGet("{token}/additions")]
|
||||
public async Task<ActionResult<ApiResponse<Dictionary<string, string?>>>> GetAdditions(string token)
|
||||
{
|
||||
var currentUserId = User.GetUserIdOrNull();
|
||||
var playlist = await _sharedService.GetEntityByTokenAsync(token);
|
||||
if (playlist == null)
|
||||
return NotFound(ApiResponse<Dictionary<string, string?>>.Fail(new ErrorResponse { StatusCode = 404, Message = "Плейлист не найден" }));
|
||||
|
||||
if (!await _sharedService.CanViewAsync(playlist, currentUserId))
|
||||
return Unauthorized();
|
||||
|
||||
var additions = await _trackAdditionLogService.GetAdditionUserNamesAsync(playlist.Id);
|
||||
return Ok(ApiResponse<Dictionary<string, string?>>.Ok(additions));
|
||||
}
|
||||
|
||||
// POST /api/sharedplaylist/{token}/remove-tracks
|
||||
[HttpPost("{token}/remove-tracks")]
|
||||
public async Task<ActionResult<ApiResponse<object>>> RemoveTracks(string token, [FromBody] UpdateTrackListRequest request)
|
||||
@@ -164,26 +177,4 @@ public class SharedPlaylistController : ControllerBase
|
||||
return Ok(ApiResponse<object>.Ok(new { message = "Треки удалены" }));
|
||||
}
|
||||
|
||||
private YandexPlaylistData MapToYandexPlaylistData(YPlaylist playlist)
|
||||
{
|
||||
return new YandexPlaylistData
|
||||
{
|
||||
Title = playlist.Title,
|
||||
Description = playlist.Description,
|
||||
Tracks = playlist.Tracks.Select(t => new YandexTrack
|
||||
{
|
||||
TrackId = t.Track.Id,
|
||||
Title = t.Track.Title,
|
||||
Artists = t.Track.Artists.Select(t => new YandexArtist()
|
||||
{
|
||||
Id = t.Id,
|
||||
Name = t.Name,
|
||||
CoverUrl = t.Cover.GetUrl(),
|
||||
Description = t.Description?.Text ?? string.Empty,
|
||||
}).ToList(),
|
||||
DurationMs = (int)(t.Track?.DurationMs ?? 0),
|
||||
CoverUri = t.Track?.CoverUri ?? ""
|
||||
}).ToList() ?? new List<YandexTrack>()
|
||||
};
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user