blob: 74ada5fa0a468d0a35d185b889b133b0a6c62869 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
<?php
namespace JsonApi\Routes\Files;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Message\ResponseInterface as Response;
use JsonApi\Errors\AuthorizationFailedException;
use JsonApi\Errors\RecordNotFoundException;
use JsonApi\JsonApiController;
class FileRefsOfFilesShow extends JsonApiController
{
protected $allowedIncludePaths = ['file', 'owner', 'parent', 'range', 'terms-of-use'];
/**
* @SuppressWarnings(PHPMD.UnusedFormalParameters)
*/
public function __invoke(Request $request, Response $response, $args)
{
if (!$file = \File::find($args['id'])) {
throw new RecordNotFoundException();
}
if (!Authority::canShowFile($user = $this->getUser($request), $file)) {
throw new AuthorizationFailedException();
}
return $this->getContentResponse(
$file->refs->filter(
function ($ref) use ($user) {
return Authority::canShowFileRef($user, $ref);
}
)
);
}
}
|