todos-contra-el-fuego-web/imports/api/Comments/server/methods.js

/* eslint-disable import/no-absolute-path */
import { Meteor } from 'meteor/meteor';
import { check } from 'meteor/check';
import Comments from '/imports/api/Comments/Comments';
import getMediaFromContent from '/imports/api/Comments/mediaAnalyzers';
import rateLimit from '/imports/modules/rate-limit';
import onCommentAdd from '/imports/api/Comments/server/onCommentAdd';

const MAX_LEN = 5000;

function usernameOf(user) {
  return (user && user.profile && user.profile.name && user.profile.name.first)
    ? user.profile.name.first
    : '';
}

function requireOwner(commentId, userId) {
  const comment = Comments.findOne(commentId);
  if (!comment) throw new Meteor.Error('404', 'Comment not found');
  if (comment.userId !== userId) throw new Meteor.Error('403', 'Not your comment');
  return comment;
}

function toggle(commentId, field, otherField, userId) {
  check(commentId, String);
  if (!userId) throw new Meteor.Error('403', 'Login required');
  const comment = Comments.findOne(commentId);
  if (!comment) throw new Meteor.Error('404', 'Comment not found');
  const has = (comment[field] || []).includes(userId);
  const modifier = has
    ? { $pull: { [field]: userId } }
    : { $addToSet: { [field]: userId }, $pull: { [otherField]: userId } };
  Comments.update(commentId, modifier);
}

Meteor.methods({
  'comments.insert': function commentsInsert(referenceId, content) {
    check(referenceId, String);
    check(content, String);
    if (!this.userId) throw new Meteor.Error('403', 'Login required to comment');
    const text = content.trim();
    if (!text) throw new Meteor.Error('400', 'Empty comment');
    if (text.length > MAX_LEN) throw new Meteor.Error('400', 'Comment too long');

    const now = new Date();
    const doc = {
      referenceId,
      content: text,
      userId: this.userId,
      username: usernameOf(Meteor.users.findOne(this.userId)),
      media: getMediaFromContent(text),
      likes: [],
      dislikes: [],
      status: 'approved',
      createdAt: now,
      updatedAt: now
    };
    const _id = Comments.insert(doc);
    // Fire-and-forget: notify other commenters of this fire. Never let a mail
    // failure break the insert.
    try {
      onCommentAdd({ ...doc, _id });
    } catch (e) {
      console.warn(`comments onCommentAdd failed: ${e}`);
    }
    return _id;
  },

  'comments.edit': function commentsEdit(commentId, content) {
    check(commentId, String);
    check(content, String);
    if (!this.userId) throw new Meteor.Error('403', 'Login required');
    requireOwner(commentId, this.userId);
    const text = content.trim();
    if (!text) throw new Meteor.Error('400', 'Empty comment');
    if (text.length > MAX_LEN) throw new Meteor.Error('400', 'Comment too long');
    Comments.update(commentId, {
      $set: { content: text, media: getMediaFromContent(text), updatedAt: new Date() }
    });
  },

  'comments.remove': function commentsRemove(commentId) {
    check(commentId, String);
    if (!this.userId) throw new Meteor.Error('403', 'Login required');
    requireOwner(commentId, this.userId);
    Comments.remove(commentId);
  },

  'comments.like': function commentsLike(commentId) {
    toggle(commentId, 'likes', 'dislikes', this.userId);
  },

  'comments.dislike': function commentsDislike(commentId) {
    toggle(commentId, 'dislikes', 'likes', this.userId);
  }
});

rateLimit({
  methods: ['comments.insert', 'comments.edit', 'comments.remove', 'comments.like', 'comments.dislike'],
  limit: 5,
  timeRange: 1000
});