Use fetch() instead of iframe to make remote control requests

[rails.git] / app / models / diary_comment.rb

diff --git a/app/models/diary_comment.rb b/app/models/diary_comment.rb
index 0013606d06b55afa885306e38b7777f16518016b..a88c69f12ee3b3d8db208fa6405569e7dee5af15 100644 (file)
--- a/app/models/diary_comment.rb
+++ b/app/models/diary_comment.rb
@@ -1,16 +1,53 @@
-class DiaryComment < ActiveRecord::Base
-  belongs_to :user
+# == Schema Information
+#
+# Table name: diary_comments
+#
+#  id             :bigint(8)        not null, primary key
+#  diary_entry_id :bigint(8)        not null
+#  user_id        :bigint(8)        not null
+#  body           :text             not null
+#  created_at     :datetime         not null
+#  updated_at     :datetime         not null
+#  visible        :boolean          default(TRUE), not null
+#  body_format    :enum             default("markdown"), not null
+#
+# Indexes
+#
+#  diary_comment_user_id_created_at_index  (user_id,created_at)
+#  diary_comments_entry_id_idx             (diary_entry_id,id) UNIQUE
+#
+# Foreign Keys
+#
+#  diary_comments_diary_entry_id_fkey  (diary_entry_id => diary_entries.id)
+#  diary_comments_user_id_fkey         (user_id => users.id)
+#
+
+class DiaryComment < ApplicationRecord
+  belongs_to :user, :counter_cache => true
   belongs_to :diary_entry
 
-  validates_presence_of :body
-  validates_associated :diary_entry
+  scope :visible, -> { where(:visible => true) }
+
+  validates :body, :presence => true, :characters => true
+  validates :diary_entry, :user, :associated => true
+
+  after_save :spam_check
+
+  def body
+    RichText.new(self[:body_format], self[:body])
+  end
+
+  def notification_token(subscriber)
+    sha256 = Digest::SHA256.new
+    sha256 << Rails.application.key_generator.generate_key("openstreetmap/diary_comment")
+    sha256 << id.to_s
+    sha256 << subscriber.to_s
+    Base64.urlsafe_encode64(sha256.digest)[0, 8]
+  end
+
+  private
 
-  def digest
-    md5 = Digest::MD5.new
-    md5 << diary_entry_id.to_s
-    md5 << user_id.to_s
-    md5 << created_at.xmlschema
-    md5 << body
-    md5.hexdigest
+  def spam_check
+    user.spam_check
   end
 end