Add route to download the file of a document

Author: Gogs

app/controllers/documents_controller.rb

@@ -1,5 +1,6 @@
 class DocumentsController < ApplicationController
-  before_action :set_document, only: [:show, :update, :destroy]
+  before_action :set_document, only: [:show, :download, :update, :destroy]
+  skip_before_action :authorize_request, only: :download
 
   # GET /documents
   def index
@@ -10,13 +11,17 @@ def index
   # POST /documents
   def create
     @file = params[:document]
-    @file_name = (Time.now.to_f * 1000).to_s + '.pdf'
-  
-    File.open('/var/www/everydocs-files/' + @file_name, 'w+b') {|f| f.write(@file.read)}
+    
+    if @file.blank?
+      @file_name = nil
+    else
+      @file_name = SecureRandom.uuid + '.pdf'
+      File.open('/var/www/html/everydocs-web/files/' + @file_name, 'w+b') {|f| f.write(@file.read)}
+    end
 
-    @folder = Folder.find(params[:folder])
-    @state = State.find(params[:state])
-    @person = Person.find(params[:person])
+    @folder = params[:folder].blank? ? nil : Folder.find(params[:folder])
+    @state = params[:state].blank? ? nil : State.find(params[:state])
+    @person = params[:person].blank? ? nil : Person.find(params[:person])
 
     @params = {
       "title" => params[:title], 
@@ -37,6 +42,11 @@ def show
     json_response(@document)
   end
 
+  # GET /documents/file/:id
+  def download
+    send_file '/var/www/html/everydocs-web/files/' + @document.document_url, :type=>"application/pdf", :x_sendfile=>true
+  end
+
   # PUT /documents/:id
   def update
     @folder = Folder.find(params[:folder])

app/controllers/folders_controller.rb

@@ -7,6 +7,12 @@ def index
     json_response(@folders)
   end
 
+  # GET /folders-all
+  def all
+    @folders = current_user.folders
+    json_response(@folders)
+  end
+
   # POST /folders
   def create
     @folder = current_user.folders.create!(folder_params)

app/controllers/states_controller.rb

@@ -1,17 +1,35 @@
 class StatesController < ApplicationController
-  before_action :set_state, only: [:show]
+  before_action :set_state, only: [:show, :update, :destroy]
 
   # GET /states
   def index
     @states = State.where("id >= ?", 0)
     json_response(@states)
   end
 
+  # POST /states
+  def create
+    @state = current_user.states.create!(state_params)
+    json_response(@state, :created)
+  end
+
   # GET /states/:id
   def show
     json_response(@state)
   end
 
+  # PUT /states/:id
+  def update
+    @tag.update(state_params)
+    head :no_content
+  end
+
+  # DELETE /states/:id
+  def destroy
+    @tag.destroy
+    head :no_content
+  end
+
   private
 
   def state_params

app/models/document.rb

@@ -7,7 +7,7 @@ class Document < ActiveRecord::Base
   has_many :documenttags
   has_many :tags, through: :documenttags
 
-  validates_presence_of :title, :document_date, :user, :state, :folder
+  validates_presence_of :title, :document_date, :user, :document_url
 
   def as_json(_options = {})
     super include: {

app/models/state.rb

@@ -1,4 +1,6 @@
 class State < ActiveRecord::Base
+  belongs_to :user
+  
   has_many :documents
 
   validates_presence_of :name

app/models/tag.rb

@@ -4,5 +4,5 @@ class Tag < ActiveRecord::Base
   has_many :documenttags
   has_many :documents, through: :documenttags
 
-  validates_presence_of :name, :color
+  validates_presence_of :name
 end

app/models/user.rb

@@ -5,6 +5,7 @@ class User < ActiveRecord::Base
   has_many :folders
   has_many :tags
   has_many :people
+  has_many :states
 
   validates_presence_of :name, :email, :password_digest
 end

config/routes.rb

@@ -5,8 +5,10 @@
   post 'signup', to: 'users#create'
 
   resources :documents
+  get 'documents/file/:id', to: 'documents#download'
   resources :folders
-  resources :states, except: [:create, :update, :destroy, :new, :edit]
+  get 'folders-all', to: 'folders#all' 
+  resources :states
   resources :people
   resources :tags
 end

db/migrate/20190525164329_create_states.rb

@@ -2,7 +2,7 @@ class CreateStates < ActiveRecord::Migration
   def change
     create_table :states do |t|
       t.string :name
-
+      t.references :user
       t.timestamps null: false
     end
     add_index :states, :name, unique: true

db/schema.rb

@@ -63,6 +63,7 @@
 
   create_table "states", force: :cascade do |t|
     t.string   "name",       limit: 255
+    t.integer  "user_id",    limit: 4
     t.datetime "created_at",             null: false
     t.datetime "updated_at",             null: false
   end