Merge branch 'main' of github.com:nagisa77/OpenIsle

src/main/java/com/openisle/controller/AdminPostController.java

@@ -0,0 +1,56 @@
+package com.openisle.controller;
+
+import com.openisle.model.Post;
+import com.openisle.service.PostService;
+import lombok.Data;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.stream.Collectors;
+
+/**
+ * Endpoints for administrators to manage posts.
+ */
+@RestController
+@RequestMapping("/api/admin/posts")
+@RequiredArgsConstructor
+public class AdminPostController {
+    private final PostService postService;
+
+    @GetMapping("/pending")
+    public List<PostDto> pendingPosts() {
+        return postService.listPendingPosts().stream()
+                .map(this::toDto)
+                .collect(Collectors.toList());
+    }
+
+    @PostMapping("/{id}/approve")
+    public PostDto approve(@PathVariable Long id) {
+        return toDto(postService.approvePost(id));
+    }
+
+    private PostDto toDto(Post post) {
+        PostDto dto = new PostDto();
+        dto.setId(post.getId());
+        dto.setTitle(post.getTitle());
+        dto.setContent(post.getContent());
+        dto.setCreatedAt(post.getCreatedAt());
+        dto.setAuthor(post.getAuthor().getUsername());
+        dto.setCategory(post.getCategory().getName());
+        dto.setViews(post.getViews());
+        return dto;
+    }
+
+    @Data
+    private static class PostDto {
+        private Long id;
+        private String title;
+        private String content;
+        private LocalDateTime createdAt;
+        private String author;
+        private String category;
+        private long views;
+    }
+}

src/main/java/com/openisle/controller/UserController.java

@@ -3,6 +3,7 @@ package com.openisle.controller;
 import com.openisle.model.User;
 import com.openisle.service.ImageUploader;
 import com.openisle.service.UserService;
+import org.springframework.beans.factory.annotation.Value;
 import lombok.Data;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
@@ -20,6 +21,12 @@ public class UserController {
     private final UserService userService;
     private final ImageUploader imageUploader;
 
+    @Value("${app.upload.check-type:true}")
+    private boolean checkImageType;
+
+    @Value("${app.upload.max-size:5242880}")
+    private long maxUploadSize;
+
     @GetMapping("/me")
     public ResponseEntity<UserDto> me(Authentication auth) {
         User user = userService.findByUsername(auth.getName()).orElseThrow();
@@ -29,6 +36,12 @@ public class UserController {
     @PostMapping("/me/avatar")
     public ResponseEntity<?> uploadAvatar(@RequestParam("file") MultipartFile file,
                                           Authentication auth) {
+        if (checkImageType && (file.getContentType() == null || !file.getContentType().startsWith("image/"))) {
+            return ResponseEntity.badRequest().body(Map.of("error", "File is not an image"));
+        }
+        if (file.getSize() > maxUploadSize) {
+            return ResponseEntity.badRequest().body(Map.of("error", "File too large"));
+        }
         String url = null;
         try {
             url = imageUploader.upload(file.getBytes(), file.getOriginalFilename()).join();

src/main/java/com/openisle/model/Post.java

@@ -5,8 +5,12 @@ import lombok.Getter;
 import lombok.NoArgsConstructor;
 import lombok.Setter;
 
+
 import java.time.LocalDateTime;
 
+/**
+ * Post entity representing an article posted by a user.
+ */
 @Entity
 @Getter
 @Setter
@@ -37,6 +41,10 @@ public class Post {
     @Column(nullable = false)
     private long views = 0;
 
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false)
+    private PostStatus status = PostStatus.PUBLISHED;
+
     @PrePersist
     protected void onCreate() {
         this.createdAt = LocalDateTime.now();

src/main/java/com/openisle/model/PostStatus.java

@@ -0,0 +1,9 @@
+package com.openisle.model;
+
+/**
+ * Status of a post during its lifecycle.
+ */
+public enum PostStatus {
+    PUBLISHED,
+    PENDING
+}

src/main/java/com/openisle/model/PublishMode.java

@@ -0,0 +1,9 @@
+package com.openisle.model;
+
+/**
+ * Application-wide article publish mode.
+ */
+public enum PublishMode {
+    DIRECT,
+    REVIEW
+}

src/main/java/com/openisle/repository/PostRepository.java

@@ -1,7 +1,11 @@
 package com.openisle.repository;
 
 import com.openisle.model.Post;
+import com.openisle.model.PostStatus;
 import org.springframework.data.jpa.repository.JpaRepository;
 
+import java.util.List;
+
 public interface PostRepository extends JpaRepository<Post, Long> {
+    List<Post> findByStatus(PostStatus status);
 }

src/main/java/com/openisle/service/CosImageUploader.java

@@ -12,6 +12,7 @@ import org.springframework.scheduling.concurrent.CustomizableThreadFactory;
 import org.springframework.stereotype.Service;
 
 import java.io.ByteArrayInputStream;
+import java.util.UUID;
 import java.util.concurrent.CompletableFuture;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
@@ -52,15 +53,22 @@ public class CosImageUploader extends ImageUploader {
     @Override
     public CompletableFuture<String> upload(byte[] data, String filename) {
         return CompletableFuture.supplyAsync(() -> {
+            String ext = "";
+            int dot = filename.lastIndexOf('.');
+            if (dot != -1) {
+                ext = filename.substring(dot);
+            }
+            String randomName = UUID.randomUUID().toString().replace("-", "") + ext;
+
             ObjectMetadata meta = new ObjectMetadata();
             meta.setContentLength(data.length);
             PutObjectRequest req = new PutObjectRequest(
                     bucketName,
-                    filename,
+                    randomName,
                     new ByteArrayInputStream(data),
                     meta);
             cosClient.putObject(req);
-            return baseUrl + "/" + filename;
+            return baseUrl + "/" + randomName;
         }, executor);
     }
 }

src/main/java/com/openisle/service/PostService.java

@@ -1,22 +1,35 @@
 package com.openisle.service;
 
 import com.openisle.model.Post;
+import com.openisle.model.PostStatus;
+import com.openisle.model.PublishMode;
 import com.openisle.model.User;
 import com.openisle.model.Category;
 import com.openisle.repository.PostRepository;
 import com.openisle.repository.UserRepository;
 import com.openisle.repository.CategoryRepository;
-import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Service;
 
 import java.util.List;
 
 @Service
-@RequiredArgsConstructor
 public class PostService {
     private final PostRepository postRepository;
     private final UserRepository userRepository;
     private final CategoryRepository categoryRepository;
+    private final PublishMode publishMode;
+
+    @org.springframework.beans.factory.annotation.Autowired
+    public PostService(PostRepository postRepository,
+                       UserRepository userRepository,
+                       CategoryRepository categoryRepository,
+                       @Value("${app.post.publish-mode:DIRECT}") PublishMode publishMode) {
+        this.postRepository = postRepository;
+        this.userRepository = userRepository;
+        this.categoryRepository = categoryRepository;
+        this.publishMode = publishMode;
+    }
 
     public Post createPost(String username, Long categoryId, String title, String content) {
         User author = userRepository.findByUsername(username)
@@ -28,17 +41,32 @@ public class PostService {
         post.setContent(content);
         post.setAuthor(author);
         post.setCategory(category);
+        post.setStatus(publishMode == PublishMode.REVIEW ? PostStatus.PENDING : PostStatus.PUBLISHED);
         return postRepository.save(post);
     }
 
     public Post getPost(Long id) {
         Post post = postRepository.findById(id)
                 .orElseThrow(() -> new IllegalArgumentException("Post not found"));
+        if (post.getStatus() != PostStatus.PUBLISHED) {
+            throw new IllegalArgumentException("Post not found");
+        }
         post.setViews(post.getViews() + 1);
         return postRepository.save(post);
     }
 
     public List<Post> listPosts() {
-        return postRepository.findAll();
+        return postRepository.findByStatus(PostStatus.PUBLISHED);
+    }
+
+    public List<Post> listPendingPosts() {
+        return postRepository.findByStatus(PostStatus.PENDING);
+    }
+
+    public Post approvePost(Long id) {
+        Post post = postRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Post not found"));
+        post.setStatus(PostStatus.PUBLISHED);
+        return postRepository.save(post);
     }
 }

src/main/resources/application.properties

@@ -8,6 +8,13 @@ spring.jpa.hibernate.ddl-auto=update
 app.jwt.secret=${JWT_SECRET:ChangeThisSecretKeyForJwt}
 app.jwt.expiration=${JWT_EXPIRATION:86400000}
 
+# Post publish mode: DIRECT or REVIEW
+app.post.publish-mode=${POST_PUBLISH_MODE:DIRECT}
+
+# Image upload configuration
+app.upload.check-type=${UPLOAD_CHECK_TYPE:true}
+app.upload.max-size=${UPLOAD_MAX_SIZE:5242880}
+
 # ========= Optional =========
 # for resend email send service, you can improve your service by yourself
 resend.api.key=${RESEND_API_KEY:}