mapknitter/app/controllers/images_controller.rb

require 'open-uri'
class ImagesController < ApplicationController
  rescue_from Errno::ENOENT, Errno::ETIMEDOUT,
              OpenURI::HTTPError, Timeout::Error,
              with: :url_upload_not_found
  protect_from_forgery except: %i(update delete)
  # Convert model to json without including root name. Eg. 'warpable'
  ActiveRecord::Base.include_root_in_json = false

  # proxy, used if MapKnitter is being backed by Amazon S3 file storage,
  # to enable client-side distortion using webgl-distort, which requires same-origin
  def fetch
    if Rails.env.production?
      if params[:url][0..42] == 'https://s3.amazonaws.com/grassrootsmapping/'
        url = URI.parse(params[:url])
        result = Net::HTTP.get_response(url)
        send_data result.body, type: result.content_type, disposition: 'inline'
      end
    else
      redirect_to params[:url]
    end
  end

  # assign attributes directly after rails update
  def create
    @warpable = Warpable.new
    @warpable.history = 'None'
    @warpable.image = params[:uploaded_data]
    map = Map.find_by(slug: params[:map_id])
    @warpable.map_id = map.id
    map.updated_at = Time.now
    map.save
    respond_to do |format|
      if @warpable.save
        format.html { render json: [@warpable.fup_json].to_json, content_type: 'text/html' }
        format.json { render json: { files: [@warpable.fup_json] }, status: :created, location: @warpable.image.url }
      else
        format.html { render action: 'new' }
        format.json { render json: { files: [@warpable.fup_error_json] }, layout: false }
      end
    end
  end

  # mapknitter.org/import/<map-name>/?url=http://myurl.com/image.jpg
  def import
    map = Map.find_by_name params[:name]
    @warpable = Warpable.new
    @warpable.map_id = map.id
    @warpable.url = params[:url]
    map.updated_at = Time.now
    map.save
    if @warpable.save
      redirect_to '/maps/' + params[:name]
    else
      flash[:notice] = 'Sorry, the image failed to import.'
      redirect_to '/map/edit/' + params[:name]
    end
  end

  def url_upload_not_found
    flash[:notice] = 'Sorry, the URL you provided was not valid.'
    redirect_to '/map/edit/' + params[:id]
  end

  def show
    @image = Warpable.find params[:id]
    respond_to do |format|
      format.html
      format.json { render json: @image.map(&:fup_json) }
    end
  end

  def update
    @warpable = Warpable.find params[:warpable_id]

    if Map.find(@warpable.map_id).anonymous? || logged_in?
      nodes = []
      author = @warpable.map.author
      # is it really necessary to make new points each time?
      params[:points].split(':').each do |point|
        lon = point.split(',')[0]
        lat = point.split(',')[1]
        node = Node.new(color: 'black',
                        lat: lat,
                        lon: lon,
                        author: author,
                        name: '')
        node.save
        nodes << node
      end
      @warpable.nodes = nodes.collect(&:id).join(',')
      @warpable.locked = params[:locked]
      @warpable.cm_per_pixel = @warpable.get_cm_per_pixel
      @warpable.save

      respond_to do |format|
        format.html { render html: 'success' }
        format.json { render json: @warpable.map.fetch_map_data }
      end
    else
      render plain: 'You must be logged in to update the image, unless the map is anonymous.'
    end
  end

  def revert
    @warpable = Warpable.find params[:id]
    version = @warpable.versions.find(params[:version])
    version.reify&.save
    redirect_to @warpable.map
  end

  def destroy
    @warpable = Warpable.find params[:id]
    if logged_in? && current_user.can_delete?(@warpable)
      @warpable.destroy
      respond_to do |format|
        format.html { redirect_to @warpable.map }
        format.json { render json: @warpable.map.fetch_map_data }
      end
    else
      flash[:error] = 'You must be logged in to delete images.'
      redirect_to '/login'
    end
  end
end