mirror of
https://github.com/flarum/framework.git
synced 2025-06-07 17:24:33 +08:00
22b32bd601
This will cause the right error (HTTP 401) to be thrown whenever we're checking for a specific permission, but the user is not even logged in. Authenticated users will still get HTTP 403.
97 lines
2.2 KiB
PHP
97 lines
2.2 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Flarum.
|
|
*
|
|
* For detailed copyright and license information, please view the
|
|
* LICENSE file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Flarum\Api\Controller;
|
|
|
|
use Flarum\Api\Serializer\UserSerializer;
|
|
use Flarum\Http\UrlGenerator;
|
|
use Flarum\Search\SearchCriteria;
|
|
use Flarum\User\AssertPermissionTrait;
|
|
use Flarum\User\Search\UserSearcher;
|
|
use Illuminate\Support\Arr;
|
|
use Psr\Http\Message\ServerRequestInterface;
|
|
use Tobscure\JsonApi\Document;
|
|
|
|
class ListUsersController extends AbstractListController
|
|
{
|
|
use AssertPermissionTrait;
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public $serializer = UserSerializer::class;
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public $include = ['groups'];
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public $sortFields = [
|
|
'username',
|
|
'commentCount',
|
|
'discussionCount',
|
|
'lastSeenAt',
|
|
'joinedAt'
|
|
];
|
|
|
|
/**
|
|
* @var UserSearcher
|
|
*/
|
|
protected $searcher;
|
|
|
|
/**
|
|
* @var UrlGenerator
|
|
*/
|
|
protected $url;
|
|
|
|
/**
|
|
* @param UserSearcher $searcher
|
|
* @param UrlGenerator $url
|
|
*/
|
|
public function __construct(UserSearcher $searcher, UrlGenerator $url)
|
|
{
|
|
$this->searcher = $searcher;
|
|
$this->url = $url;
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
protected function data(ServerRequestInterface $request, Document $document)
|
|
{
|
|
$actor = $request->getAttribute('actor');
|
|
|
|
$this->assertCan($actor, 'viewUserList');
|
|
|
|
$query = Arr::get($this->extractFilter($request), 'q');
|
|
$sort = $this->extractSort($request);
|
|
|
|
$criteria = new SearchCriteria($actor, $query, $sort);
|
|
|
|
$limit = $this->extractLimit($request);
|
|
$offset = $this->extractOffset($request);
|
|
$load = $this->extractInclude($request);
|
|
|
|
$results = $this->searcher->search($criteria, $limit, $offset, $load);
|
|
|
|
$document->addPaginationLinks(
|
|
$this->url->to('api')->route('users.index'),
|
|
$request->getQueryParams(),
|
|
$offset,
|
|
$limit,
|
|
$results->areMoreResults() ? null : 0
|
|
);
|
|
|
|
return $results->getResults();
|
|
}
|
|
}
|