* * @author Christopher Ng * @author Kate Döen * * @license GNU AGPL version 3 or any later version * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as * published by the Free Software Foundation, either version 3 of the * License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see . * */ namespace OC\Core\Controller; use OC\Profile\ProfileManager; use OCP\AppFramework\Controller; use OCP\AppFramework\Http\Attribute\OpenAPI; use OCP\AppFramework\Http\TemplateResponse; use OCP\AppFramework\Services\IInitialState; use OCP\EventDispatcher\IEventDispatcher; use OCP\INavigationManager; use OCP\IRequest; use OCP\IUser; use OCP\IUserManager; use OCP\IUserSession; use OCP\Profile\BeforeTemplateRenderedEvent; use OCP\Share\IManager as IShareManager; use OCP\UserStatus\IManager as IUserStatusManager; #[OpenAPI(scope: OpenAPI::SCOPE_IGNORE)] class ProfilePageController extends Controller { public function __construct( string $appName, IRequest $request, private IInitialState $initialStateService, private ProfileManager $profileManager, private IShareManager $shareManager, private IUserManager $userManager, private IUserSession $userSession, private IUserStatusManager $userStatusManager, private INavigationManager $navigationManager, private IEventDispatcher $eventDispatcher, ) { parent::__construct($appName, $request); } /** * @PublicPage * @NoCSRFRequired * @NoAdminRequired * @NoSubAdminRequired */ public function index(string $targetUserId): TemplateResponse { $profileNotFoundTemplate = new TemplateResponse( 'core', '404-profile', [], TemplateResponse::RENDER_AS_GUEST, ); $targetUser = $this->userManager->get($targetUserId); if (!($targetUser instanceof IUser) || !$targetUser->isEnabled()) { return $profileNotFoundTemplate; } $visitingUser = $this->userSession->getUser(); if (!$this->profileManager->isProfileEnabled($targetUser)) { return $profileNotFoundTemplate; } // Run user enumeration checks only if viewing another user's profile if ($targetUser !== $visitingUser) { if (!$this->shareManager->currentUserCanEnumerateTargetUser($visitingUser, $targetUser)) { return $profileNotFoundTemplate; } } if ($visitingUser !== null) { $userStatuses = $this->userStatusManager->getUserStatuses([$targetUserId]); $status = $userStatuses[$targetUserId] ?? null; if ($status !== null) { $this->initialStateService->provideInitialState('status', [ 'icon' => $status->getIcon(), 'message' => $status->getMessage(), ]); } } $this->initialStateService->provideInitialState( 'profileParameters', $this->profileManager->getProfileFields($targetUser, $visitingUser), ); if ($targetUser === $visitingUser) { $this->navigationManager->setActiveEntry('profile'); } $this->eventDispatcher->dispatchTyped(new BeforeTemplateRenderedEvent($targetUserId)); \OCP\Util::addScript('core', 'profile'); return new TemplateResponse( 'core', 'profile', [], $this->userSession->isLoggedIn() ? TemplateResponse::RENDER_AS_USER : TemplateResponse::RENDER_AS_PUBLIC, ); } }