UserAvatarAction.class.php

<?php

namespace wcf\action;

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\RequestHandlerInterface;
use wcf\data\user\UserProfile;
use wcf\event\user\UserAvatarFormFieldCollecting;
use wcf\http\Helper;
use wcf\system\cache\runtime\UserProfileRuntimeCache;
use wcf\system\event\EventHandler;
use wcf\system\exception\NamedUserException;
use wcf\system\exception\PermissionDeniedException;
use wcf\system\form\builder\field\FileProcessorFormField;
use wcf\system\form\builder\Psr15DialogForm;
use wcf\system\user\UserProfileHandler;
use wcf\system\WCF;
use wcf\util\HtmlString;

/**
 * Handles user avatars editing.
 *
 * @author      Olaf Braun
 * @copyright   2001-2024 WoltLab GmbH
 * @license     GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
 * @since       6.2
 */
final class UserAvatarAction implements RequestHandlerInterface
{
    #[\Override]
    public function handle(ServerRequestInterface $request): ResponseInterface
    {
        $parameters = Helper::mapQueryParameters(
            $request->getQueryParams(),
            <<<'EOT'
                array {
                    id?: positive-int
                }
                EOT
        );

        if (!WCF::getUser()->userID) {
            throw new PermissionDeniedException();
        }

        if (isset($parameters['id'])) {
            $user = UserProfileRuntimeCache::getInstance()->getObject($parameters['id']);
        } else {
            $user = UserProfileHandler::getInstance()->getUserProfile();
        }

        if ($user->disableAvatar && $user->userID === WCF::getUser()->userID) {
            throw new NamedUserException(HtmlString::fromSafeHtml(WCF::getLanguage()->getDynamicVariable(
                'wcf.user.avatar.error.disabled'
            )));
        }

        if (!$user->canEditAvatar()) {
            throw new PermissionDeniedException();
        }

        $form = $this->getForm($user);

        if ($request->getMethod() === 'GET') {
            return $form->toResponse();
        } else {
            throw new \LogicException('Unreachable');
        }
    }

    private function getForm(UserProfile $user): Psr15DialogForm
    {
        $form = new Psr15DialogForm(
            UserAvatarAction::class,
            WCF::getLanguage()->get('wcf.user.avatar.edit')
        );
        $form->appendChildren([
            FileProcessorFormField::create('avatarFileID')
                ->objectType('com.woltlab.wcf.user.avatar')
                ->description('wcf.user.avatar.type.custom.description')
                ->singleFileUpload()
                ->bigPreview()
                ->simpleReplace()
                ->thumbnailSize('128'),
        ]);

        $event = new UserAvatarFormFieldCollecting($user);
        EventHandler::getInstance()->fire($event);
        $form->appendChildren($event->getFormFields());

        $form->markRequiredFields(false);
        $form->updatedObject($user);
        $form->build();

        return $form;
    }
}