VueController.php

<?php

/**
 * SPDX-License-Identifier: MIT
 * Copyright (c) 2017-2018 Tobias Reich
 * Copyright (c) 2018-2025 LycheeOrg.
 */

namespace App\Http\Controllers;

use App\Contracts\Models\AbstractAlbum;
use App\Events\Metrics\AlbumShared;
use App\Events\Metrics\PhotoShared;
use App\Exceptions\Internal\InvalidSmartIdException;
use App\Exceptions\UnauthorizedException;
use App\Factories\AlbumFactory;
use App\Http\Requests\Traits\HasVisitorIdTrait;
use App\Models\Extensions\BaseAlbum;
use App\Models\Photo;
use App\Policies\AlbumPolicy;
use App\Policies\PhotoPolicy;
use Illuminate\Auth\Access\AuthorizationException;
use Illuminate\Contracts\Container\BindingResolutionException;
use Illuminate\Contracts\View\View;
use Illuminate\Database\Eloquent\ModelNotFoundException;
use Illuminate\Routing\Controller;
use Illuminate\Support\Facades\Gate;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;

/**
 * Controller responsible for the Vue front end.
 */
class VueController extends Controller
{
	use HasVisitorIdTrait;

	public const ACCESS = 'access';
	public const PASSWORD = 'password';

	/**
	 * @throws ModelNotFoundException
	 * @throws InvalidSmartIdException
	 * @throws AuthorizationException
	 * @throws BindingResolutionException
	 */
	public function gallery(?string $album_id = null, ?string $photo_id = null): View
	{
		$album_factory = resolve(AlbumFactory::class);
		$album = null;
		$photo = null;

		try {
			if ($album_id !== null && !in_array($album_id, ['all', 'favourites'], true)) {
				$album = $album_factory->findAbstractAlbumOrFail($album_id, false);

				session()->now('access', $this->check($album));
				session()->now('album', $album);
			}

			if ($photo_id !== null) {
				$photo = Photo::findOrFail($photo_id);
				Gate::authorize(PhotoPolicy::CAN_SEE, [Photo::class, $photo]);
				session()->now('photo', $photo);
			}
		} catch (ModelNotFoundException) {
			throw new NotFoundHttpException();
		}

		if ($photo !== null) {
			PhotoShared::dispatchIf(MetricsController::shouldMeasure() && $album_id !== null, $this->visitorId(), $photo->id, $album_id);
		} elseif ($album !== null) {
			AlbumShared::dispatchIf(MetricsController::shouldMeasure(), $this->visitorId(), $album->get_id());
		}

		return view('vueapp');
	}

	/**
	 * Simpler version of above function.
	 */
	public function __invoke(): View
	{
		return view('vueapp');
	}

	/**
	 * Check if user can access the album.
	 *
	 * @return bool true if access, false if password required
	 *
	 * @throws UnauthorizedException if user is not authorized at all
	 */
	private function check(AbstractAlbum $album): bool
	{
		$result = Gate::check(AlbumPolicy::CAN_ACCESS, [AbstractAlbum::class, $album]);
		if (
			!$result &&
			$album instanceof BaseAlbum &&
			$album->public_permissions()?->password !== null
		) {
			return false;
		}

		return $result ? true : throw new UnauthorizedException();
	}
}