From 8d29d74b02fb07be8efaae002fca9b9033c536f0 Mon Sep 17 00:00:00 2001
From: Erik Michelson
Date: Wed, 4 Sep 2019 12:28:44 +0200
Subject: Added endpoint for note-creation with given alias

Signed-off-by: Erik Michelson <erik@liltv.de>
---
 lib/response.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'lib/response.js')

diff --git a/lib/response.js b/lib/response.js
index 6450bdf5..cf4b5c1d 100644
--- a/lib/response.js
+++ b/lib/response.js
@@ -123,10 +123,10 @@ function newNote (req, res, next) {
   }
   models.Note.create({
     ownerId: owner,
-    alias: req.alias ? req.alias : null,
+    alias: req.alias ? req.alias : (config.allowFreeURL ? (req.params.alias ? req.params.alias : null) : null),
     content: body
   }).then(function (note) {
-    return res.redirect(config.serverURL + '/' + models.Note.encodeNoteId(note.id))
+    return res.redirect(config.serverURL + '/' + (note.alias ? note.alias : models.Note.encodeNoteId(note.id)))
   }).catch(function (err) {
     logger.error(err)
     return response.errorInternalError(res)
-- 
cgit v1.2.3


From 6e5e6696ad5c336be700641caf94676a281fc181 Mon Sep 17 00:00:00 2001
From: Erik Michelson
Date: Wed, 4 Sep 2019 20:25:32 +0200
Subject: Refactored note-creation with given noteId

Known bugs/features:
 - pushing towards an existing note results in an error 500

Signed-off-by: Erik Michelson <erik@liltv.de>
---
 lib/response.js | 26 +++++++++++++++-----------
 1 file changed, 15 insertions(+), 11 deletions(-)

(limited to 'lib/response.js')

diff --git a/lib/response.js b/lib/response.js
index cf4b5c1d..81d732a5 100644
--- a/lib/response.js
+++ b/lib/response.js
@@ -41,12 +41,12 @@ var response = {
   errorServiceUnavailable: function (res) {
     res.status(503).send("I'm busy right now, try again later.")
   },
-  newNote: newNote,
   showNote: showNote,
   showPublishNote: showPublishNote,
   showPublishSlide: showPublishSlide,
   showIndex: showIndex,
   noteActions: noteActions,
+  postNote: postNote,
   publishNoteActions: publishNoteActions,
   publishSlideActions: publishSlideActions,
   githubActions: githubActions,
@@ -107,8 +107,7 @@ function responseCodiMD (res, note) {
   })
 }
 
-function newNote (req, res, next) {
-  var owner = null
+function postNote (req, res, next) {
   var body = ''
   if (req.body && req.body.length > config.documentMaxLength) {
     return response.errorTooLong(res)
@@ -116,14 +115,25 @@ function newNote (req, res, next) {
     body = req.body
   }
   body = body.replace(/[\r]/g, '')
+  return newNote(req, res, body)
+}
+
+function newNote (req, res, body) {
+  var owner = null
+  var noteId = req.params.noteId ? req.params.noteId : null
   if (req.isAuthenticated()) {
     owner = req.user.id
   } else if (!config.allowAnonymous) {
     return response.errorForbidden(res)
   }
+  if (config.allowFreeURL && noteId && !config.forbiddenNoteIDs.includes(noteId)) {
+    req.alias = noteId
+  } else if (noteId) {
+    return req.method === 'POST' ? response.errorForbidden(res) : response.errorNotFound(res)
+  }
   models.Note.create({
     ownerId: owner,
-    alias: req.alias ? req.alias : (config.allowFreeURL ? (req.params.alias ? req.params.alias : null) : null),
+    alias: req.alias ? req.alias : null,
     content: body
   }).then(function (note) {
     return res.redirect(config.serverURL + '/' + (note.alias ? note.alias : models.Note.encodeNoteId(note.id)))
@@ -144,7 +154,6 @@ function checkViewPermission (req, note) {
 }
 
 function findNote (req, res, callback, include) {
-  var noteId = req.params.noteId
   var id = req.params.noteId || req.params.shortid
   models.Note.parseNoteId(id, function (err, _id) {
     if (err) {
@@ -158,12 +167,7 @@ function findNote (req, res, callback, include) {
       include: include || null
     }).then(function (note) {
       if (!note) {
-        if (config.allowFreeURL && noteId && !config.forbiddenNoteIDs.includes(noteId)) {
-          req.alias = noteId
-          return newNote(req, res)
-        } else {
-          return response.errorNotFound(res)
-        }
+        return newNote(req, res, null)
       }
       if (!checkViewPermission(req, note)) {
         return response.errorForbidden(res)
-- 
cgit v1.2.3