Auth+cache fixess
[wolnelektury.git] / src / catalogue / api / views.py
1 # -*- coding: utf-8 -*-
2 # This file is part of Wolnelektury, licensed under GNU Affero GPLv3 or later.
3 # Copyright © Fundacja Nowoczesna Polska. See NOTICE for more information.
4 #
5 import json
6 from django.http import Http404, HttpResponse
7 from rest_framework.generics import ListAPIView, RetrieveAPIView, get_object_or_404
8 from rest_framework.permissions import DjangoModelPermissionsOrAnonReadOnly
9 from rest_framework.response import Response
10 from rest_framework import status
11 from paypal.permissions import IsSubscribed
12 from api.handlers import read_tags
13 from api.utils import vary_on_auth
14 from .helpers import books_after, order_books
15 from . import serializers
16 from catalogue.forms import BookImportForm
17 from catalogue.models import Book, Collection, Tag, Fragment
18 from catalogue.models.tag import prefetch_relations
19 from wolnelektury.utils import re_escape
20
21
22 book_tag_categories = ['author', 'epoch', 'kind', 'genre']
23
24
25 class CollectionList(ListAPIView):
26     queryset = Collection.objects.all()
27     serializer_class = serializers.CollectionListSerializer
28
29
30 @vary_on_auth  # Because of 'liked'.
31 class CollectionDetail(RetrieveAPIView):
32     queryset = Collection.objects.all()
33     lookup_field = 'slug'
34     serializer_class = serializers.CollectionSerializer
35
36
37 @vary_on_auth  # Because of 'liked'.
38 class BookList(ListAPIView):
39     permission_classes = [DjangoModelPermissionsOrAnonReadOnly]
40     queryset = Book.objects.none()  # Required for DjangoModelPermissions
41     serializer_class = serializers.BookListSerializer
42
43     def get_queryset(self):
44         try:
45             tags, ancestors = read_tags(
46                 self.kwargs.get('tags', ''), self.request,
47                 allowed=('author', 'epoch', 'kind', 'genre')
48             )
49         except ValueError:
50             raise Http404
51
52         new_api = self.request.query_params.get('new_api')
53         after = self.request.query_params.get('after', self.kwargs.get('after'))
54         count = self.request.query_params.get('count', self.kwargs.get('count'))
55
56         if tags:
57             if self.kwargs.get('top_level'):
58                 books = Book.tagged_top_level(tags)
59                 if not books:
60                     raise Http404
61                 return books
62             else:
63                 books = Book.tagged.with_all(tags)
64         else:
65             books = Book.objects.all()
66         books = order_books(books, new_api)
67
68         if self.kwargs.get('top_level'):
69             books = books.filter(parent=None)
70         if self.kwargs.get('audiobooks'):
71             books = books.filter(media__type='mp3').distinct()
72         if self.kwargs.get('daisy'):
73             books = books.filter(media__type='daisy').distinct()
74         if self.kwargs.get('recommended'):
75             books = books.filter(recommended=True)
76         if self.kwargs.get('newest'):
77             books = books.order_by('-created_at')
78
79         if after:
80             books = books_after(books, after, new_api)
81
82         prefetch_relations(books, 'author')
83         prefetch_relations(books, 'genre')
84         prefetch_relations(books, 'kind')
85         prefetch_relations(books, 'epoch')
86
87         if count:
88             books = books[:count]
89
90         return books
91
92     def post(self, request, **kwargs):
93         # Permission needed.
94         data = json.loads(request.POST.get('data'))
95         form = BookImportForm(data)
96         if form.is_valid():
97             form.save()
98             return Response({}, status=status.HTTP_201_CREATED)
99         else:
100             raise Http404
101
102
103 @vary_on_auth  # Because of 'liked'.
104 class BookDetail(RetrieveAPIView):
105     queryset = Book.objects.all()
106     lookup_field = 'slug'
107     serializer_class = serializers.BookDetailSerializer
108
109
110 class EbookList(BookList):
111     serializer_class = serializers.EbookSerializer
112
113
114 @vary_on_auth  # Because of 'liked'.
115 class Preview(ListAPIView):
116     queryset = Book.objects.filter(preview=True)
117     serializer_class = serializers.BookPreviewSerializer
118
119
120 @vary_on_auth  # Because of 'liked'.
121 class FilterBookList(ListAPIView):
122     serializer_class = serializers.FilterBookListSerializer
123
124     def parse_bool(self, s):
125         if s in ('true', 'false'):
126             return s == 'true'
127         else:
128             return None
129
130     def get_queryset(self):
131         key_sep = '$'
132         search_string = self.request.query_params.get('search')
133         is_lektura = self.parse_bool(self.request.query_params.get('lektura'))
134         is_audiobook = self.parse_bool(self.request.query_params.get('audiobook'))
135         preview = self.parse_bool(self.request.query_params.get('preview'))
136
137         new_api = self.request.query_params.get('new_api')
138         after = self.request.query_params.get('after')
139         count = int(self.request.query_params.get('count', 50))
140         books = order_books(Book.objects.distinct(), new_api)
141         if is_lektura is not None:
142             books = books.filter(has_audience=is_lektura)
143         if is_audiobook is not None:
144             if is_audiobook:
145                 books = books.filter(media__type='mp3')
146             else:
147                 books = books.exclude(media__type='mp3')
148         if preview is not None:
149             books = books.filter(preview=preview)
150         for category in book_tag_categories:
151             category_plural = category + 's'
152             if category_plural in self.request.query_params:
153                 slugs = self.request.query_params[category_plural].split(',')
154                 tags = Tag.objects.filter(category=category, slug__in=slugs)
155                 books = Book.tagged.with_any(tags, books)
156         if (search_string is not None) and len(search_string) < 3:
157             search_string = None
158         if search_string:
159             search_string = re_escape(search_string)
160             books_author = books.filter(cached_author__iregex=r'\m' + search_string)
161             books_title = books.filter(title__iregex=r'\m' + search_string)
162             books_title = books_title.exclude(id__in=list(books_author.values_list('id', flat=True)))
163             if after and (key_sep in after):
164                 which, key = after.split(key_sep, 1)
165                 if which == 'title':
166                     book_lists = [(books_after(books_title, key, new_api), 'title')]
167                 else:  # which == 'author'
168                     book_lists = [(books_after(books_author, key, new_api), 'author'), (books_title, 'title')]
169             else:
170                 book_lists = [(books_author, 'author'), (books_title, 'title')]
171         else:
172             if after and key_sep in after:
173                 which, key = after.split(key_sep, 1)
174                 books = books_after(books, key, new_api)
175             book_lists = [(books, 'book')]
176
177         filtered_books = []
178         for book_list, label in book_lists:
179             for category in book_tag_categories:
180                 book_list = prefetch_relations(book_list, category)
181             remaining_count = count - len(filtered_books)
182             for book in book_list[:remaining_count]:
183                 book.key = '%s%s%s' % (
184                     label, key_sep, book.slug if not new_api else book.full_sort_key())
185                 filtered_books.append(book)
186             if len(filtered_books) == count:
187                 break
188
189         return filtered_books
190
191
192 class EpubView(RetrieveAPIView):
193     queryset = Book.objects.all()
194     lookup_field = 'slug'
195     permission_classes = [IsSubscribed]
196
197     def get(self, *args, **kwargs):
198         return HttpResponse(self.get_object().get_media('epub'))
199
200
201 class TagCategoryView(ListAPIView):
202     serializer_class = serializers.TagSerializer
203
204     def get_queryset(self):
205         category = self.kwargs['category']
206         tags = Tag.objects.filter(category=category).exclude(items=None).order_by('slug')
207         if self.request.query_params.get('book_only') == 'true':
208             tags = tags.filter(for_books=True)
209         if self.request.GET.get('picture_only') == 'true':
210             tags = filter(for_pictures=True)
211
212         after = self.request.query_params.get('after')
213         count = self.request.query_params.get('count')
214         if after:
215             tags = tags.filter(slug__gt=after)
216         if count:
217             tags = tags[:count]
218
219         return tags
220
221
222 class TagView(RetrieveAPIView):
223     serializer_class = serializers.TagDetailSerializer
224
225     def get_object(self):
226         return get_object_or_404(
227             Tag,
228             category=self.kwargs['category'],
229             slug=self.kwargs['slug']
230         )
231
232
233 @vary_on_auth  # Because of 'liked'.
234 class FragmentList(ListAPIView):
235     serializer_class = serializers.FragmentSerializer
236
237     def get_queryset(self):
238         try:
239             tags, ancestors = read_tags(
240                 self.kwargs['tags'],
241                 self.request,
242                 allowed={'author', 'epoch', 'kind', 'genre', 'book', 'theme'}
243             )
244         except ValueError:
245             raise Http404
246         return Fragment.tagged.with_all(tags).select_related('book')
247
248
249 @vary_on_auth  # Because of 'liked'.
250 class FragmentView(RetrieveAPIView):
251     serializer_class = serializers.FragmentDetailSerializer
252
253     def get_object(self):
254         return get_object_or_404(
255             Fragment,
256             book__slug=self.kwargs['book'],
257             anchor=self.kwargs['anchor']
258         )