router_comments.py

# router_comments.py
from fastapi import APIRouter, HTTPException, Depends
import time
import uuid
import 数据库连接 as db
from notifications import add_notification
from models import InteractionToggle, CommentCreate
from 安全认证 import require_auth, is_admin

router = APIRouter()

@router.post("/api/interactions/toggle")
async def toggle_interaction(interaction: InteractionToggle):
    items_db = db.load_data("items.json", default_data=[])
    target_item = next((item for item in items_db if item["id"] == interaction.item_id), None)
    if not target_item: raise HTTPException(status_code=404, detail="目标存在问题")

    list_key = f"{interaction.action_type}d_by" 
    count_key = "likes" if interaction.action_type == "like" else "favorites"
    if list_key not in target_item: target_item[list_key] = []; target_item[count_key] = 0

    user_list = target_item[list_key]
    if interaction.is_active:
        if interaction.user_id not in user_list: 
            user_list.append(interaction.user_id)
            target_item[count_key] += 1
            add_notification(target_item.get("author", ""), {"type": interaction.action_type, "from_user": interaction.user_id, "target_item_id": target_item["id"], "target_item_title": target_item["title"]})
    else:
        if interaction.user_id in user_list: 
            user_list.remove(interaction.user_id)
            target_item[count_key] = max(0, target_item[count_key] - 1)
    db.save_data("items.json", items_db)
    return {"status": "success", "new_count": target_item[count_key]}

@router.post("/api/comments")
async def post_comment(comment: CommentCreate):
    comments_db = db.load_data("comments.json", default_data={}) 
    users_db = db.load_data("users.json", default_data={})
    author_info = users_db.get(comment.author, {})
    reply_name = users_db.get(comment.reply_to_user, {}).get("name", comment.reply_to_user) if comment.reply_to_user else None

    item_comments = comments_db.get(comment.item_id, [])
    new_comment = {
        "id": f"c_{int(time.time())}_{uuid.uuid4().hex[:6]}", "author": comment.author, 
        "authorName": author_info.get("name", comment.author), "avatar": author_info.get("avatarDataUrl", ""),
        "content": comment.content, "replyToUser": comment.reply_to_user, "replyToUserName": reply_name,
        "isDeleted": False, "replies": [], "created_at": int(time.time())
    }
    
    if comment.parent_id:
        parent = next((c for c in item_comments if c["id"] == comment.parent_id), None)
        if parent: 
            parent["replies"].append(new_comment)
            if comment.reply_to_user:
                add_notification(comment.reply_to_user, {"type": "reply", "from_user": comment.author, "target_item_id": comment.item_id, "target_item_title": "收到新的回复", "content": comment.content})
        else: raise HTTPException(status_code=404, detail="找不到要回复的评论")
    else: 
        item_comments.append(new_comment)
        items_db = db.load_data("items.json", default_data=[])
        posts_db = db.load_data("posts.json", default_data=[])
        target_item = next((item for item in items_db if item["id"] == comment.item_id), None)
        target_post = next((post for post in posts_db if post["id"] == comment.item_id), None)
        if target_item:
            add_notification(target_item.get("author", ""), {"type": "comment", "from_user": comment.author, "target_item_id": comment.item_id, "target_item_title": target_item["title"], "content": comment.content})
        elif target_post:
            add_notification(target_post.get("author", ""), {"type": "comment", "from_user": comment.author, "target_item_id": comment.item_id, "target_item_title": target_post.get("title", "") or "", "content": comment.content})
        elif comment.item_id in users_db:
            add_notification(comment.item_id, {"type": "comment", "from_user": comment.author, "target_item_id": comment.item_id, "target_item_title": "您的个人留言板", "content": comment.content})

    comments_db[comment.item_id] = item_comments
    db.save_data("comments.json", comments_db)
    return {"status": "success", "data": new_comment}

@router.delete("/api/comments/{item_id}/{comment_id}")
async def soft_delete_comment(item_id: str, comment_id: str, account: str = Depends(require_auth)):
    """
    软删除评论
    权限规则：评论作者可删除自己的评论，帖子/内容作者可删除其帖子下的评论，管理员可删除任何评论
    """
    comments_db = db.load_data("comments.json", default_data={})
    items_db = db.load_data("items.json", default_data=[])
    posts_db = db.load_data("posts.json", default_data=[])
    users_db = db.load_data("users.json", default_data={})
    tasks_db = db.load_data("tasks.json", default_data=[])
    
    item_comments = comments_db.get(item_id, [])
    target_comment = None
    
    def find_comment(comments_list, depth=0):
        """查找目标评论"""
        if depth > 20:  # 防止极端嵌套导致栈溢出
            return False
        nonlocal target_comment
        for c in comments_list:
            if c["id"] == comment_id:
                target_comment = c
                return True
            if "replies" in c and find_comment(c["replies"], depth + 1):
                return True
        return False
    
    if not find_comment(item_comments):
        raise HTTPException(status_code=404, detail="找不到该评论")
    
    # 权限检查
    is_comment_author = target_comment["author"] == account
    is_admin_user = is_admin(account)
    
    # 检查是否为内容作者（帖子作者或资源作者）
    is_content_author = False
    # 检查是否为帖子作者
    for post in posts_db:
        if post["id"] == item_id and post.get("author") == account:
            is_content_author = True
            break
    # 检查是否为资源作者
    if not is_content_author:
        for item in items_db:
            if item["id"] == item_id and item.get("author") == account:
                is_content_author = True
                break
    # 任务发布者
    if not is_content_author:
        for task in tasks_db:
            if task["id"] == item_id and task.get("publisher") == account:
                is_content_author = True
                break
    # 检查是否为个人主页留言板作者
    if not is_content_author:
        if item_id in users_db and item_id == account:
            is_content_author = True
    
    # 权限判断：评论作者、内容作者或管理员可删除
    if not (is_comment_author or is_content_author or is_admin_user):
        raise HTTPException(status_code=403, detail="无权删除此评论")
    
    # 执行软删除
    def mark_deleted(comments_list, depth=0):
        if depth > 20:  # 防止极端嵌套导致栈溢出
            return False
        for c in comments_list:
            if c["id"] == comment_id:
                c["isDeleted"] = True
                c["content"] = ""
                return True
            if "replies" in c and mark_deleted(c["replies"], depth + 1):
                return True
        return False
    
    mark_deleted(item_comments)
    comments_db[item_id] = item_comments
    db.save_data("comments.json", comments_db)
    
    return {"status": "success"}