1 | package edu.ucsb.cs156.frontiers.controllers; | |
2 | ||
3 | import java.security.NoSuchAlgorithmException; | |
4 | import java.security.spec.InvalidKeySpecException; | |
5 | import java.util.Map; | |
6 | import java.util.Optional; | |
7 | import java.util.List; | |
8 | import java.util.stream.Collectors; | |
9 | import java.util.stream.StreamSupport; | |
10 | import java.util.stream.Collectors; | |
11 | ||
12 | import org.springframework.beans.factory.annotation.Autowired; | |
13 | import org.springframework.http.HttpHeaders; | |
14 | import org.springframework.http.HttpStatus; | |
15 | import org.springframework.http.ResponseEntity; | |
16 | import org.springframework.security.access.prepost.PreAuthorize; | |
17 | import org.springframework.web.bind.annotation.ExceptionHandler; | |
18 | import org.springframework.web.bind.annotation.GetMapping; | |
19 | import org.springframework.web.bind.annotation.PostMapping; | |
20 | import org.springframework.web.bind.annotation.RequestMapping; | |
21 | import org.springframework.web.bind.annotation.RequestParam; | |
22 | import org.springframework.web.bind.annotation.ResponseStatus; | |
23 | import org.springframework.web.bind.annotation.RestController; | |
24 | ||
25 | import com.fasterxml.jackson.core.JsonProcessingException; | |
26 | ||
27 | import edu.ucsb.cs156.frontiers.entities.Course; | |
28 | import edu.ucsb.cs156.frontiers.entities.RosterStudent; | |
29 | import edu.ucsb.cs156.frontiers.errors.EntityNotFoundException; | |
30 | import edu.ucsb.cs156.frontiers.errors.InvalidInstallationTypeException; | |
31 | import edu.ucsb.cs156.frontiers.models.CurrentUser; | |
32 | import edu.ucsb.cs156.frontiers.models.RosterStudentDTO; | |
33 | import edu.ucsb.cs156.frontiers.repositories.CourseRepository; | |
34 | import edu.ucsb.cs156.frontiers.repositories.RosterStudentRepository; | |
35 | import edu.ucsb.cs156.frontiers.services.OrganizationLinkerService; | |
36 | import io.swagger.v3.oas.annotations.Operation; | |
37 | import io.swagger.v3.oas.annotations.Parameter; | |
38 | import io.swagger.v3.oas.annotations.tags.Tag; | |
39 | import lombok.extern.slf4j.Slf4j; | |
40 | ||
41 | import java.util.ArrayList; | |
42 | import java.util.List; | |
43 | import java.util.stream.Collectors; | |
44 | ||
45 | import edu.ucsb.cs156.frontiers.enums.OrgStatus; | |
46 | ||
47 | @Tag(name = "Course") | |
48 | @RequestMapping("/api/courses") | |
49 | @RestController | |
50 | @Slf4j | |
51 | public class CoursesController extends ApiController { | |
52 | | |
53 | @Autowired | |
54 | private CourseRepository courseRepository; | |
55 | ||
56 | @Autowired private OrganizationLinkerService linkerService; | |
57 | ||
58 | @Autowired | |
59 | private RosterStudentRepository rosterStudentRepository; | |
60 | /** | |
61 | * This method creates a new Course. | |
62 | * | |
63 | * @param orgName the name of the organization | |
64 | * @param courseName the name of the course | |
65 | * @param term the term of the course | |
66 | * @param school the school of the course | |
67 | * @return the created course | |
68 | */ | |
69 | ||
70 | @Operation(summary = "Create a new course") | |
71 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
72 | @PostMapping("/post") | |
73 | public Course postCourse( | |
74 | @Parameter(name = "orgName") @RequestParam String orgName, | |
75 | @Parameter(name = "courseName") @RequestParam String courseName, | |
76 | @Parameter(name = "term") @RequestParam String term, | |
77 | @Parameter(name = "school") @RequestParam String school | |
78 | ) | |
79 | { | |
80 | //get current date right now and set status to pending | |
81 | CurrentUser currentUser = getCurrentUser(); | |
82 | Course course = Course.builder() | |
83 | .orgName(orgName) | |
84 | .courseName(courseName) | |
85 | .term(term) | |
86 | .school(school) | |
87 | .creator(currentUser.getUser()) | |
88 | .build(); | |
89 | Course savedCourse = courseRepository.save(course); | |
90 | ||
91 |
1
1. postCourse : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::postCourse → KILLED |
return savedCourse; |
92 | } | |
93 | ||
94 | /** | |
95 | * This method returns a list of courses. | |
96 | * @return a list of all courses. | |
97 | */ | |
98 | @Operation(summary = "List all courses") | |
99 | @PreAuthorize("hasRole('ROLE_ADMIN')") | |
100 | @GetMapping("/all") | |
101 | public Iterable<Course> allCourses( | |
102 | ) { | |
103 | Iterable<Course> courses = courseRepository.findAll(); | |
104 |
1
1. allCourses : replaced return value with Collections.emptyList for edu/ucsb/cs156/frontiers/controllers/CoursesController::allCourses → KILLED |
return courses; |
105 | } | |
106 | ||
107 | ||
108 | /** | |
109 | * <p>This is the outgoing method, redirecting from Frontiers to GitHub to allow a Course to be linked to a GitHub Organization. | |
110 | * It redirects from Frontiers to the GitHub app installation process, and will return with the {@link #addInstallation(Optional, String, String, Long) addInstallation()} endpoint | |
111 | * </p> | |
112 | * @param courseId id of the course to be linked to | |
113 | * @return dynamically loaded url to install Frontiers to a Github Organization, with the courseId marked as the state parameter, which GitHub will return. | |
114 | * | |
115 | */ | |
116 | @Operation(summary = "Authorize Frontiers to a Github Course") | |
117 | @PreAuthorize("hasRole('ROLE_PROFESSOR')") | |
118 | @GetMapping("/redirect") | |
119 | public ResponseEntity<Void> linkCourse(@Parameter Long courseId) throws JsonProcessingException, NoSuchAlgorithmException, InvalidKeySpecException { | |
120 | String newUrl = linkerService.getRedirectUrl(); | |
121 | newUrl += "/installations/new?state="+courseId; | |
122 | //found this convenient solution here: https://stackoverflow.com/questions/29085295/spring-mvc-restcontroller-and-redirect | |
123 |
1
1. linkCourse : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::linkCourse → KILLED |
return ResponseEntity.status(HttpStatus.MOVED_PERMANENTLY).header(HttpHeaders.LOCATION, newUrl).build(); |
124 | } | |
125 | ||
126 | ||
127 | /** | |
128 | * | |
129 | * @param installation_id id of the incoming GitHub Organization installation | |
130 | * @param setup_action whether the permissions are installed or updated. Required RequestParam but not used by the method. | |
131 | * @param code token to be exchanged with GitHub to ensure the request is legitimate and not spoofed. | |
132 | * @param state id of the Course to be linked with the GitHub installation. | |
133 | * @return ResponseEntity, returning /success if the course was successfully linked or /noperms if the user does not have the permission to install the application on GitHub. Alternately returns 403 Forbidden if the user is not the creator. | |
134 | */ | |
135 | @Operation(summary = "Link a Course to a Github Course") | |
136 | @PreAuthorize("hasRole('ROLE_PROFESSOR')") | |
137 | @GetMapping("link") | |
138 | public ResponseEntity<Void> addInstallation(@Parameter(name = "installationId") @RequestParam Optional<String> installation_id, | |
139 | @Parameter(name = "setupAction") @RequestParam String setup_action, | |
140 | @Parameter(name = "code") @RequestParam String code, | |
141 | @Parameter(name = "state") @RequestParam Long state) throws NoSuchAlgorithmException, InvalidKeySpecException, JsonProcessingException { | |
142 |
1
1. addInstallation : negated conditional → KILLED |
if(installation_id.isEmpty()) { |
143 |
1
1. addInstallation : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::addInstallation → KILLED |
return ResponseEntity.status(HttpStatus.MOVED_PERMANENTLY).header(HttpHeaders.LOCATION, "/courses/nopermissions").build(); |
144 | }else { | |
145 |
1
1. lambda$addInstallation$0 : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::lambda$addInstallation$0 → KILLED |
Course course = courseRepository.findById(state).orElseThrow(() -> new EntityNotFoundException(Course.class, state)); |
146 |
1
1. addInstallation : negated conditional → KILLED |
if(!(course.getCreator().getId() ==getCurrentUser().getUser().getId())) { |
147 |
1
1. addInstallation : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::addInstallation → KILLED |
return ResponseEntity.status(HttpStatus.FORBIDDEN).build(); |
148 | }else{ | |
149 | String orgName = linkerService.getOrgName(installation_id.get()); | |
150 |
1
1. addInstallation : removed call to edu/ucsb/cs156/frontiers/entities/Course::setInstallationId → KILLED |
course.setInstallationId(installation_id.get()); |
151 |
1
1. addInstallation : removed call to edu/ucsb/cs156/frontiers/entities/Course::setOrgName → KILLED |
course.setOrgName(orgName); |
152 | courseRepository.save(course); | |
153 |
1
1. addInstallation : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::addInstallation → KILLED |
return ResponseEntity.status(HttpStatus.MOVED_PERMANENTLY).header(HttpHeaders.LOCATION, "/admin/courses?success=True&course=" + state).build(); |
154 | } | |
155 | } | |
156 | } | |
157 | ||
158 | /** | |
159 | * This method returns a list of students in the roster for a given course, | |
160 | * with each student represented as a RosterStudentDTO including GitHub org status. | |
161 | * | |
162 | * @param courseId the ID of the course | |
163 | * @return a list of RosterStudentDTOs for the given course | |
164 | */ | |
165 | @Operation(summary = "Get list of students in a course roster, including orgStatus") | |
166 | @PreAuthorize("hasRole('ROLE_ADMIN') or hasRole('ROLE_PROFESSOR')") | |
167 | @GetMapping("/roster") | |
168 | public List<RosterStudentDTO> getRosterForCourse( | |
169 | @Parameter(name = "courseId") @RequestParam Long courseId | |
170 | ) { | |
171 | Iterable<RosterStudent> studentsIterable = rosterStudentRepository.findByCourseId(courseId); | |
172 | List<RosterStudent> students = StreamSupport.stream(studentsIterable.spliterator(), false).collect(Collectors.toList()); | |
173 |
1
1. getRosterForCourse : replaced return value with Collections.emptyList for edu/ucsb/cs156/frontiers/controllers/CoursesController::getRosterForCourse → KILLED |
return students.stream() |
174 | .map(RosterStudentDTO::from) | |
175 | .collect(Collectors.toList()); | |
176 | } | |
177 | ||
178 | /** | |
179 | * This method handles the InvalidInstallationTypeException. | |
180 | * @param e the exception | |
181 | * @return a map with the type and message of the exception | |
182 | */ | |
183 | @ExceptionHandler({ InvalidInstallationTypeException.class }) | |
184 | @ResponseStatus(HttpStatus.BAD_REQUEST) | |
185 | public Object handleInvalidInstallationType(Throwable e) { | |
186 |
1
1. handleInvalidInstallationType : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::handleInvalidInstallationType → KILLED |
return Map.of( |
187 | "type", e.getClass().getSimpleName(), | |
188 | "message", e.getMessage() | |
189 | ); | |
190 | } | |
191 | ||
192 | ||
193 | ||
194 | /** | |
195 | * This method looks up a current user and gets their email. | |
196 | * With that email, it that email on every course roster, | |
197 | * and when it appears, notes/stores course id | |
198 | * We then return all courses for those course ids, with relevant | |
199 | * fields for the student. | |
200 | * | |
201 | * Relevant fields are: id, installationId, orgName, courseName, term, school | |
202 | * For each course, return the status that the student is in | |
203 | */ | |
204 | | |
205 | @Operation(summary = "Get all courses for a student") | |
206 | @PreAuthorize("hasRole('ROLE_USER')") | |
207 | @GetMapping("/student") | |
208 | public ResponseEntity<List<StudentCourseView>> getCoursesForStudent() { | |
209 | String email = getCurrentUser().getUser().getEmail(); | |
210 | ||
211 | List<StudentCourseView> results = courseRepository | |
212 | .findAllByRosterStudents_Email(email) | |
213 | .stream() | |
214 |
1
1. lambda$getCoursesForStudent$1 : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::lambda$getCoursesForStudent$1 → KILLED |
.map(c -> new StudentCourseView(c, email)) |
215 | .toList(); | |
216 | ||
217 |
1
1. getCoursesForStudent : replaced return value with null for edu/ucsb/cs156/frontiers/controllers/CoursesController::getCoursesForStudent → KILLED |
return ResponseEntity.ok(results); |
218 | } | |
219 | ||
220 | | |
221 | // Lightweight projection of Course entity with only student-relevant fields | |
222 | public static record StudentCourseView( | |
223 | Long id, | |
224 | String installationId, | |
225 | String orgName, | |
226 | String courseName, | |
227 | String term, | |
228 | String school, | |
229 | String status) { | |
230 | ||
231 | | |
232 | // Creates view from Course entity and student email | |
233 | public StudentCourseView(Course c, String email) { | |
234 | this( | |
235 | c.getId(), | |
236 | c.getInstallationId(), | |
237 | c.getOrgName(), | |
238 | c.getCourseName(), | |
239 | c.getTerm(), | |
240 | c.getSchool(), | |
241 | mapStatus( | |
242 | c.getRosterStudents() | |
243 | .stream() | |
244 |
2
1. lambda$new$0 : replaced boolean return with true for edu/ucsb/cs156/frontiers/controllers/CoursesController$StudentCourseView::lambda$new$0 → KILLED 2. lambda$new$0 : replaced boolean return with false for edu/ucsb/cs156/frontiers/controllers/CoursesController$StudentCourseView::lambda$new$0 → KILLED |
.filter(s -> s.getEmail().equals(email)) |
245 | .findFirst() | |
246 | .orElse(null))); | |
247 | } | |
248 | ||
249 | | |
250 | // Maps OrgStatus enum to human-readable status message | |
251 | private static String mapStatus(RosterStudent rs) { | |
252 |
2
1. mapStatus : replaced return value with "" for edu/ucsb/cs156/frontiers/controllers/CoursesController$StudentCourseView::mapStatus → KILLED 2. mapStatus : negated conditional → KILLED |
if (rs == null) return "Not yet requested an invitation"; |
253 | ||
254 |
1
1. mapStatus : replaced return value with "" for edu/ucsb/cs156/frontiers/controllers/CoursesController$StudentCourseView::mapStatus → KILLED |
return switch (rs.getOrgStatus()) { |
255 | case NONE -> "Not yet requested an invitation"; | |
256 | case INVITED -> "Has requested an invitation but isn't yet a member"; | |
257 | case MEMBER -> "Is a member of the org"; | |
258 | case OWNER -> "Is an admin in the org"; | |
259 | case EXPIRED -> "Invitation has expired"; | |
260 | }; | |
261 | } | |
262 | } | |
263 | ||
264 | } | |
Mutations | ||
91 |
1.1 |
|
104 |
1.1 |
|
123 |
1.1 |
|
142 |
1.1 |
|
143 |
1.1 |
|
145 |
1.1 |
|
146 |
1.1 |
|
147 |
1.1 |
|
150 |
1.1 |
|
151 |
1.1 |
|
153 |
1.1 |
|
173 |
1.1 |
|
186 |
1.1 |
|
214 |
1.1 |
|
217 |
1.1 |
|
244 |
1.1 2.2 |
|
252 |
1.1 2.2 |
|
254 |
1.1 |