opsdash-app/opsdash/lib/Controller/DeckController.php

<?php
declare(strict_types=1);

namespace OCA\Opsdash\Controller;

use OCA\Opsdash\Service\DeckDataService;
use OCP\AppFramework\Controller;
use OCP\AppFramework\Http;
use OCP\AppFramework\Http\Attribute\NoAdminRequired;
use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
use OCP\AppFramework\Http\DataResponse;
use OCP\IRequest;
use OCP\IUserSession;
use Psr\Log\LoggerInterface;

final class DeckController extends Controller {
    use RequestGuardTrait;

    private const MAX_QUERY_BYTES = 4096;

    public function __construct(
        string $appName,
        IRequest $request,
        private IUserSession $userSession,
        private LoggerInterface $logger,
        private DeckDataService $deckDataService,
    ) {
        parent::__construct($appName, $request);
    }

    #[NoAdminRequired]
    #[NoCSRFRequired]
    public function boards(): DataResponse {
        $uid = (string)($this->userSession->getUser()?->getUID() ?? '');
        if ($uid === '') {
            return new DataResponse(['message' => 'unauthorized'], Http::STATUS_UNAUTHORIZED);
        }
        if ($guard = $this->enforceQueryLength(self::MAX_QUERY_BYTES)) {
            return $guard;
        }

        $boards = $this->deckDataService->fetchBoards($uid);
        return new DataResponse(['ok' => true, 'boards' => $boards], Http::STATUS_OK);
    }

    #[NoAdminRequired]
    #[NoCSRFRequired]
    public function cards(): DataResponse {
        $uid = (string)($this->userSession->getUser()?->getUID() ?? '');
        if ($uid === '') {
            return new DataResponse(['message' => 'unauthorized'], Http::STATUS_UNAUTHORIZED);
        }
        if ($guard = $this->enforceQueryLength(self::MAX_QUERY_BYTES)) {
            return $guard;
        }

        $from = (string)$this->request->getParam('from', '');
        $to = (string)$this->request->getParam('to', '');
        $includeArchived = $this->toBool($this->request->getParam('includeArchived', null), true);
        $includeCompleted = $this->toBool($this->request->getParam('includeCompleted', null), true);

        try {
            $result = $this->deckDataService->fetchCards($uid, $from, $to, $includeArchived, $includeCompleted);
            return new DataResponse([
                'ok' => true,
                'cards' => $result['cards'] ?? [],
                'truncated' => (bool)($result['truncated'] ?? false),
                'rangeTruncated' => (bool)($result['rangeTruncated'] ?? false),
            ], Http::STATUS_OK);
        } catch (\Throwable $e) {
            $this->logger->error('Deck cards load failed: ' . $e->getMessage(), ['app' => 'opsdash']);
            return new DataResponse(['message' => 'deck_unavailable'], Http::STATUS_SERVICE_UNAVAILABLE);
        }
    }

    #[NoAdminRequired]
    #[NoCSRFRequired]
    public function stacks(): DataResponse {
        $uid = (string)($this->userSession->getUser()?->getUID() ?? '');
        if ($uid === '') {
            return new DataResponse(['message' => 'unauthorized'], Http::STATUS_UNAUTHORIZED);
        }
        $boardId = (int)$this->request->getParam('boardId', 0);
        if ($boardId <= 0) {
            return new DataResponse(['message' => 'invalid_board'], Http::STATUS_BAD_REQUEST);
        }
        return new DataResponse([
            'ok' => true,
            'stacks' => $this->deckDataService->fetchStacks($uid, $boardId),
        ], Http::STATUS_OK);
    }

    #[NoAdminRequired]
    public function create(): DataResponse {
        $uid = (string)($this->userSession->getUser()?->getUID() ?? '');
        if ($uid === '') {
            return new DataResponse(['message' => 'unauthorized'], Http::STATUS_UNAUTHORIZED);
        }
        $title = trim((string)$this->request->getParam('title', ''));
        $stackId = (int)$this->request->getParam('stackId', 0);
        if ($title === '' || $stackId <= 0) {
            return new DataResponse(['message' => 'title_and_stack_required'], Http::STATUS_BAD_REQUEST);
        }
        if (mb_strlen($title) > 255) {
            return new DataResponse(['message' => 'title_too_long'], Http::STATUS_BAD_REQUEST);
        }
        try {
            $card = $this->deckDataService->createCard($uid, $title, $stackId);
            // STATUS_CREATED is not available in every supported OCP Http version.
            return new DataResponse(['ok' => true, 'card' => $card], 201);
        } catch (\Throwable $e) {
            $this->logger->error('Deck card create failed: ' . $e->getMessage(), ['app' => 'opsdash']);
            return new DataResponse(['message' => 'deck_card_create_failed'], Http::STATUS_SERVICE_UNAVAILABLE);
        }
    }

    private function toBool(mixed $value, bool $default): bool {
        if ($value === null) {
            return $default;
        }
        if (is_bool($value)) {
            return $value;
        }
        if (is_numeric($value)) {
            return (int)$value !== 0;
        }
        if (is_string($value)) {
            $normalized = strtolower(trim($value));
            if (in_array($normalized, ['1', 'true', 'yes', 'on'], true)) {
                return true;
            }
            if (in_array($normalized, ['0', 'false', 'no', 'off'], true)) {
                return false;
            }
        }
        return $default;
    }
}