added command with interactive dialog

server/api.go

@@ -0,0 +1,93 @@
+package main
+
+import (
+	"net/http"
+
+	"github.com/gorilla/mux"
+)
+
+type API struct {
+	plugin *Plugin
+	router *mux.Router
+}
+
+func (a *API) ServeHTTP(w http.ResponseWriter, r *http.Request) {
+	a.router.ServeHTTP(w, r)
+}
+
+func (a *API) handlerRemoveAttachments(w http.ResponseWriter, r *http.Request) {
+	// Get post_id from the query parameters
+	err := r.ParseForm()
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusBadRequest)
+		return
+	}
+
+	postID := r.FormValue("post_id")
+
+	// Check if the user is the post author or a system admin
+	userID := r.Header.Get("Mattermost-User-ID")
+	post, appErr := a.plugin.API.GetPost(postID)
+	if appErr != nil {
+		http.Error(w, appErr.Error(), appErr.StatusCode)
+		return
+	}
+
+	if errReason := a.plugin.userHasRemovePermissionsToPost(userID, post.ChannelId, postID); errReason != "" {
+		http.Error(w, errReason, http.StatusForbidden)
+		return
+	}
+
+	// Soft-delete the attachments
+	for _, fileID := range post.FileIds {
+		if err := a.plugin.SQLStore.DetatchAttachmentFromChannel(fileID); err != nil {
+			a.plugin.API.LogError("error detaching attachment from channel", "err", err)
+			http.Error(w, "Internal server error, check logs", http.StatusInternalServerError)
+			return
+		}
+	}
+
+	originalFileIDs := post.FileIds
+
+	// Edit the post to remove the attachments
+	post.FileIds = []string{}
+	newPost, appErr := a.plugin.API.UpdatePost(post)
+	if appErr != nil {
+		http.Error(w, appErr.Error(), appErr.StatusCode)
+		return
+	}
+
+	// Attach the original file IDs to the original post so history is not lost
+	if err := a.plugin.SQLStore.AttachFileIDsToPost(newPost.OriginalId, originalFileIDs); err != nil {
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	w.WriteHeader(http.StatusOK)
+}
+
+// setupAPI sets up the API for the plugin.
+func setupAPI(plugin *Plugin) (*API, error) {
+	api := &API{
+		plugin: plugin,
+		router: mux.NewRouter(),
+	}
+
+	group := api.router.PathPrefix("/api/v1").Subrouter()
+	group.Use(authorizationRequiredMiddleware)
+	group.HandleFunc("/remove_attachments", api.handlerRemoveAttachments)
+
+	return api, nil
+}
+
+func authorizationRequiredMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		userID := r.Header.Get("Mattermost-User-ID")
+		if userID != "" {
+			next.ServeHTTP(w, r)
+			return
+		}
+
+		http.Error(w, "Not authorized", http.StatusUnauthorized)
+	})
+}