1 | package edu.ucsb.cs156.example.controllers; | |
2 | ||
3 | import edu.ucsb.cs156.example.entities.Todo; | |
4 | import edu.ucsb.cs156.example.entities.User; | |
5 | import edu.ucsb.cs156.example.errors.EntityNotFoundException; | |
6 | import edu.ucsb.cs156.example.models.CurrentUser; | |
7 | import edu.ucsb.cs156.example.repositories.TodoRepository; | |
8 | import io.swagger.v3.oas.annotations.tags.Tag; | |
9 | import io.swagger.v3.oas.annotations.Operation; | |
10 | import io.swagger.v3.oas.annotations.Parameter; | |
11 | import lombok.extern.slf4j.Slf4j; | |
12 | ||
13 | ||
14 | import org.springframework.beans.factory.annotation.Autowired; | |
15 | import org.springframework.security.access.prepost.PreAuthorize; | |
16 | import org.springframework.web.bind.annotation.DeleteMapping; | |
17 | import org.springframework.web.bind.annotation.GetMapping; | |
18 | import org.springframework.web.bind.annotation.PostMapping; | |
19 | import org.springframework.web.bind.annotation.PutMapping; | |
20 | import org.springframework.web.bind.annotation.RequestBody; | |
21 | import org.springframework.web.bind.annotation.RequestMapping; | |
22 | import org.springframework.web.bind.annotation.RequestParam; | |
23 | import org.springframework.web.bind.annotation.RestController; | |
24 | ||
25 | import jakarta.validation.Valid; | |
26 | ||
27 | /** | |
28 | * This is a REST controller for Todos | |
29 | */ | |
30 | ||
31 | @Tag(name = "Todos") | |
32 | @RequestMapping("/api/todos") | |
33 | @RestController | |
34 | @Slf4j | |
35 | public class TodosController extends ApiController { | |
36 | ||
37 | @Autowired | |
38 | TodoRepository todoRepository; | |
39 | ||
40 | /** | |
41 | * This method returns a list of all todos. Accessible only to users with the role "ROLE_ADMIN". | |
42 | * @return a list of all todos | |
43 | */ | |
44 | @Operation(summary = "List all todos") | |
45 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
46 | @GetMapping("/admin/all") | |
47 | public Iterable<Todo> allUsersTodos() { | |
48 | Iterable<Todo> todos = todoRepository.findAll(); | |
49 |
1
1. allUsersTodos : replaced return value with Collections.emptyList for edu/ucsb/cs156/example/controllers/TodosController::allUsersTodos → KILLED |
return todos; |
50 | } | |
51 | ||
52 | /** | |
53 | * This method returns a list of all todos owned by the current user. | |
54 | * @return a list of all todos owned by the current user | |
55 | */ | |
56 | @Operation(summary = "List this user's todos") | |
57 | @PreAuthorize("hasRole('ROLE_USER')") | |
58 | @GetMapping("/all") | |
59 | public Iterable<Todo> thisUsersTodos() { | |
60 | CurrentUser currentUser = getCurrentUser(); | |
61 | Iterable<Todo> todos = todoRepository.findAllByUserId(currentUser.getUser().getId()); | |
62 |
1
1. thisUsersTodos : replaced return value with Collections.emptyList for edu/ucsb/cs156/example/controllers/TodosController::thisUsersTodos → KILLED |
return todos; |
63 | } | |
64 | ||
65 | /** | |
66 | * This method returns a single todo owned by the current user. | |
67 | * @param id id of the todo to get | |
68 | * @return a single todo owned by the current user | |
69 | */ | |
70 | @Operation(summary = "Get a single todo (if it belongs to current user)") | |
71 | @PreAuthorize("hasRole('ROLE_USER')") | |
72 | @GetMapping("") | |
73 | public Todo getTodoById( | |
74 | @Parameter(name="id") @RequestParam Long id) { | |
75 | User currentUser = getCurrentUser().getUser(); | |
76 | Todo todo = todoRepository.findByIdAndUser(id, currentUser) | |
77 |
1
1. lambda$getTodoById$0 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$getTodoById$0 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
78 | ||
79 |
1
1. getTodoById : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::getTodoById → KILLED |
return todo; |
80 | } | |
81 | ||
82 | /** | |
83 | * This method returns a single todo regardless of ownership. Accessible only to users with the role "ROLE_ADMIN". | |
84 | * @param id id of the todo to get | |
85 | * @return a single todo regardless of ownership | |
86 | */ | |
87 | @Operation(summary = "Get a single todo (no matter who it belongs to, admin only)") | |
88 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
89 | @GetMapping("/admin") | |
90 | public Todo getTodoById_admin( | |
91 | @Parameter(name="id") @RequestParam Long id) { | |
92 | Todo todo = todoRepository.findById(id) | |
93 |
1
1. lambda$getTodoById_admin$1 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$getTodoById_admin$1 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
94 | ||
95 |
1
1. getTodoById_admin : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::getTodoById_admin → KILLED |
return todo; |
96 | } | |
97 | ||
98 | /** | |
99 | * This method creates a new todo owned by the current user. | |
100 | * @param title title of the todo | |
101 | * @param details details of the todo | |
102 | * @param done whether the todo has been done or not | |
103 | * @return the saved todo (with it's id field set by the database) | |
104 | */ | |
105 | @Operation(summary = "Create a new Todo") | |
106 | @PreAuthorize("hasRole('ROLE_USER')") | |
107 | @PostMapping("/post") | |
108 | public Todo postTodo( | |
109 | @Parameter(name="title") @RequestParam String title, | |
110 | @Parameter(name="details") @RequestParam String details, | |
111 | @Parameter(name="done") @RequestParam Boolean done) { | |
112 | CurrentUser currentUser = getCurrentUser(); | |
113 | log.info("currentUser={}", currentUser); | |
114 | ||
115 | Todo todo = new Todo(); | |
116 |
1
1. postTodo : removed call to edu/ucsb/cs156/example/entities/Todo::setUser → KILLED |
todo.setUser(currentUser.getUser()); |
117 |
1
1. postTodo : removed call to edu/ucsb/cs156/example/entities/Todo::setTitle → KILLED |
todo.setTitle(title); |
118 |
1
1. postTodo : removed call to edu/ucsb/cs156/example/entities/Todo::setDetails → KILLED |
todo.setDetails(details); |
119 |
1
1. postTodo : removed call to edu/ucsb/cs156/example/entities/Todo::setDone → KILLED |
todo.setDone(done); |
120 | Todo savedTodo = todoRepository.save(todo); | |
121 |
1
1. postTodo : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::postTodo → KILLED |
return savedTodo; |
122 | } | |
123 | ||
124 | /** | |
125 | * Delete a Todo owned by this user | |
126 | * @param id id of the todo to delete | |
127 | * @return a message indicating the todo was deleted | |
128 | */ | |
129 | @Operation(summary = "Delete a Todo owned by this user") | |
130 | @PreAuthorize("hasRole('ROLE_USER')") | |
131 | @DeleteMapping("") | |
132 | public Object deleteTodo( | |
133 | @Parameter(name="id") @RequestParam Long id) { | |
134 | User currentUser = getCurrentUser().getUser(); | |
135 | Todo todo = todoRepository.findByIdAndUser(id, currentUser) | |
136 |
1
1. lambda$deleteTodo$2 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$deleteTodo$2 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
137 | ||
138 |
1
1. deleteTodo : removed call to edu/ucsb/cs156/example/repositories/TodoRepository::delete → KILLED |
todoRepository.delete(todo); |
139 | ||
140 |
1
1. deleteTodo : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::deleteTodo → KILLED |
return genericMessage("Todo with id %s deleted".formatted(id)); |
141 | ||
142 | } | |
143 | ||
144 | /** | |
145 | * Delete a Todo regardless of ownership, admin only | |
146 | * @param id id of the todo to delete | |
147 | * @return a message indicating the todo was deleted | |
148 | */ | |
149 | @Operation(summary = "Delete another user's todo") | |
150 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
151 | @DeleteMapping("/admin") | |
152 | public Object deleteTodo_Admin( | |
153 | @Parameter(name="id") @RequestParam Long id) { | |
154 | Todo todo = todoRepository.findById(id) | |
155 |
1
1. lambda$deleteTodo_Admin$3 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$deleteTodo_Admin$3 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
156 | ||
157 |
1
1. deleteTodo_Admin : removed call to edu/ucsb/cs156/example/repositories/TodoRepository::delete → KILLED |
todoRepository.delete(todo); |
158 | ||
159 |
1
1. deleteTodo_Admin : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::deleteTodo_Admin → KILLED |
return genericMessage("Todo with id %s deleted".formatted(id)); |
160 | } | |
161 | ||
162 | /** | |
163 | * Update a single todo (if it belongs to current user) | |
164 | * @param id id of the todo to update | |
165 | * @param incomingTodo the new todo contents | |
166 | * @return the updated todo object | |
167 | */ | |
168 | @Operation(summary = "Update a single todo (if it belongs to current user)") | |
169 | @PreAuthorize("hasRole('ROLE_USER')") | |
170 | @PutMapping("") | |
171 | public Todo putTodoById( | |
172 | @Parameter(name="id") @RequestParam Long id, | |
173 | @RequestBody @Valid Todo incomingTodo) { | |
174 | User currentUser = getCurrentUser().getUser(); | |
175 | Todo todo = todoRepository.findByIdAndUser(id, currentUser) | |
176 |
1
1. lambda$putTodoById$4 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$putTodoById$4 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
177 | ||
178 |
1
1. putTodoById : removed call to edu/ucsb/cs156/example/entities/Todo::setTitle → KILLED |
todo.setTitle(incomingTodo.getTitle()); |
179 |
1
1. putTodoById : removed call to edu/ucsb/cs156/example/entities/Todo::setDetails → KILLED |
todo.setDetails(incomingTodo.getDetails()); |
180 |
1
1. putTodoById : removed call to edu/ucsb/cs156/example/entities/Todo::setDone → KILLED |
todo.setDone(incomingTodo.isDone()); |
181 | ||
182 | todoRepository.save(todo); | |
183 | ||
184 |
1
1. putTodoById : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::putTodoById → KILLED |
return todo; |
185 | } | |
186 | ||
187 | /** | |
188 | * Update a single todo (regardless of ownership, admin only, can't change ownership) | |
189 | * @param id id of the todo to update | |
190 | * @param incomingTodo the new todo contents | |
191 | * @return the updated todo object | |
192 | */ | |
193 | @Operation(summary = "Update a single todo (regardless of ownership, admin only, can't change ownership)") | |
194 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
195 | @PutMapping("/admin") | |
196 | public Todo putTodoById_admin( | |
197 | @Parameter(name="id") @RequestParam Long id, | |
198 | @RequestBody @Valid Todo incomingTodo) { | |
199 | Todo todo = todoRepository.findById(id) | |
200 |
1
1. lambda$putTodoById_admin$5 : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::lambda$putTodoById_admin$5 → KILLED |
.orElseThrow(() -> new EntityNotFoundException(Todo.class, id)); |
201 | ||
202 |
1
1. putTodoById_admin : removed call to edu/ucsb/cs156/example/entities/Todo::setTitle → KILLED |
todo.setTitle(incomingTodo.getTitle()); |
203 |
1
1. putTodoById_admin : removed call to edu/ucsb/cs156/example/entities/Todo::setDetails → KILLED |
todo.setDetails(incomingTodo.getDetails()); |
204 |
1
1. putTodoById_admin : removed call to edu/ucsb/cs156/example/entities/Todo::setDone → KILLED |
todo.setDone(incomingTodo.isDone()); |
205 | ||
206 | todoRepository.save(todo); | |
207 | ||
208 |
1
1. putTodoById_admin : replaced return value with null for edu/ucsb/cs156/example/controllers/TodosController::putTodoById_admin → KILLED |
return todo; |
209 | } | |
210 | } | |
Mutations | ||
49 |
1.1 |
|
62 |
1.1 |
|
77 |
1.1 |
|
79 |
1.1 |
|
93 |
1.1 |
|
95 |
1.1 |
|
116 |
1.1 |
|
117 |
1.1 |
|
118 |
1.1 |
|
119 |
1.1 |
|
121 |
1.1 |
|
136 |
1.1 |
|
138 |
1.1 |
|
140 |
1.1 |
|
155 |
1.1 |
|
157 |
1.1 |
|
159 |
1.1 |
|
176 |
1.1 |
|
178 |
1.1 |
|
179 |
1.1 |
|
180 |
1.1 |
|
184 |
1.1 |
|
200 |
1.1 |
|
202 |
1.1 |
|
203 |
1.1 |
|
204 |
1.1 |
|
208 |
1.1 |