rank-king/lib/app.rb

# frozen_string_literal: true
require_relative "models"
require_relative "views"

require "roda"

module RankKing
  module Models
    require "sequel/model"
    require_relative "db"

    class Pool < Sequel::Model
    end
  end

  class App < Roda
    opts[:check_dynamic_arity] = false
    opts[:check_arity] = :warn

    plugin :default_headers,
      "Content-Type"              => "text/html",
      # "Strict-Transport-Security" => "max-age=16070400;", # Uncomment if only allowing https:// access
      "X-Frame-Options"           => "deny",
      "X-Content-Type-Options"    => "nosniff",
      "X-XSS-Protection"          => "1; mode=block"

    plugin :content_security_policy do |csp|
      csp.default_src :none
      # csp.style_src :self, "https://cdn.jsdelivr.net"
      csp.form_action :self
      csp.script_src :self
      csp.connect_src :self
      csp.base_uri :none
      csp.frame_ancestors :none
    end

    css_opts = {cache: false, style: :compressed}
    # :nocov:
    if ENV["RACK_ENV"] == 'development'
      css_opts.merge!(source_map_embed: true, source_map_contents: true, source_map_file: ".")
    end
    plugin :render_coverage if defined?(SimpleCov)
    # :nocov:

    plugin :route_csrf
    plugin :flash
    # plugin :assets, css: "app.scss", css_opts: css_opts, timestamp_paths: true
    # plugin :render, escape: true, layout: "./layout", :template_opts=>{chain_appends: !defined?(SimpleCov), freeze: true, skip_compiled_encoding_detection: true}
    plugin :public
    plugin :Integer_matcher_max
    plugin :typecast_params_sized_integers, sizes: [64], default_size: 64
    # plugin :hash_branch_view_subdir
    plugin :custom_block_results

    logger = if ENV["RACK_ENV"] == "test"
      Class.new{def write(_) end}.new
    else
      $stderr
    end
    plugin :common_logger, logger

    plugin :not_found do
      Views::Layout.call(title: "File Not Found")
    end

    if ENV["RACK_ENV"] == "development"
      plugin :exception_page
      class RodaRequest
        def assets
          exception_page_assets
          super
        end
      end
    else
      def self.freeze
        Sequel::Model.freeze_descendents
        DB.freeze
        super
      end
    end

    plugin :error_handler do |e|
      case e
      when Roda::RodaPlugins::RouteCsrf::InvalidToken
        @page_title = "Invalid Security Token"
        response.status = 400
        view(content: "<p>An invalid security token was submitted with this request, and this request could not be processed.</p>")
      else
        $stderr.print "#{e.class}: #{e.message}\n"
        $stderr.puts e.backtrace
        next exception_page(e, assets: true) if ENV["RACK_ENV"] == "development"
        # @page_title = "Internal Server Error"
        # view(content: "")
      end
    end

    plugin :sessions,
      key: "_App.session",
      #cookie_options: {secure: ENV['RACK_ENV'] != 'test'}, # Uncomment if only allowing https:// access
      secret: ENV.send((ENV["RACK_ENV"] == "development" ? :[] : :delete), "APP_SESSION_SECRET")

    # if Unreloader.autoload?
    #   plugin :autoload_hash_branches
    #   autoload_hash_branch_dir("./routes")
    # end
    # Unreloader.autoload("routes", delete_hook: proc{|f| hash_branch(File.basename(f).delete_suffix(".rb"))}){}

    class Template < Phlex::HTML
      def initialize(block)
        @block = block
      end

      def template
        instance_eval(&@block)
      end
    end

    # def render(&block)
    #   template = Template.new(block)
    #   instance_variables
    #     .reject { _1.start_with?("@_") }
    #     .each { template.instance_variable_set(_1, instance_variable_get(_1)) }
    #   Views::Layout.call do
    #     plain ""
    #   end
    #   # Views::Layout.call(template)
    #   # Views::Layout.call do |layout|
    #   #   layout.page_title "New Pool"
    #   #   plain ""
    #   # end
    # end

    def view(&block)
      Class.new(Phlex::HTML, &block).call
    end

    route do |r|

      # r.public
      # r.assets
      check_csrf!

      r.root do
        if DB[:pools].empty?
          r.redirect "/pools/new"
        else
          render do
            h1 { "ohai" }
          end
        end
      end

      r.on "pools" do
        r.is "new" do
          r.get do
            @csrf_token = csrf_token(r.path)
            view do
              Views::Layout.new(title: "New Pool") do
                Views::NewPool.new(csrf_token: @csrf_token)
              end
            end
            # Views::Layout.call(title: "New Pool") do
            #   render Views::NewPool.new(csrf_token: csrf_token(r.path))
            # end
            # layout = Views::Layout.new do |layout|
            #   layout.page_title "New Pool"
            #   render Views::NewPool.new(csrf_token: csrf_token(r.path))
            # end
            # layout.call
            # @csrf_token = csrf_token(r.path)
            # render do
            #   form(method: "post") do
            #     input(type: "hidden", name: "_csrf", value: @csrf_token)
            #     label(for: "name")
            #     input(type: "text", name: "name", id: "name", required: true)
            #     input(type: "submit", value: "Create")
            #   end
            # end
          end

          r.post do
            pool = Models::Pool.create(name: r.params.fetch("name"))
            r.redirect "/pools/#{pool.id}"
          end
        end

        r.is Integer do |id|
          pool = Models::Pool[id]
          render do
            h2 { pool.name }
          end
        end
      end
    end
  end
end