From ba483a9daf2a9192acfcbe04f6c3c84eb87ec1a5 Mon Sep 17 00:00:00 2001
From: Daniel Friesel <derf@finalrewind.org>
Date: Tue, 28 Feb 2023 19:45:27 +0100
Subject: journey: add token to share link if non-public

---
 lib/Travelynx/Controller/Traveling.pm | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

(limited to 'lib')

diff --git a/lib/Travelynx/Controller/Traveling.pm b/lib/Travelynx/Controller/Traveling.pm
index 15b131a..f1f689b 100755
--- a/lib/Travelynx/Controller/Traveling.pm
+++ b/lib/Travelynx/Controller/Traveling.pm
@@ -479,6 +479,26 @@ sub status_token_ok {
 	return;
 }
 
+sub journey_token_ok {
+	my ( $self, $journey, $ts2_ext ) = @_;
+	my $token = $self->param('token') // q{};
+
+	my ( $eva, $ts, $ts2 ) = split( qr{-}, $token );
+	if ( not $ts ) {
+		return;
+	}
+
+	$ts2 //= $ts2_ext;
+
+	if (    $eva == $journey->{from_eva}
+		and $ts == $journey->{checkin_ts}
+		and $ts2 == $journey->{sched_dep_ts} )
+	{
+		return 1;
+	}
+	return;
+}
+
 sub user_status {
 	my ($self) = @_;
 
@@ -507,6 +527,8 @@ sub user_status {
 		  )
 		{
 			if ( $candidate->{sched_dep_ts} eq $ts ) {
+
+				# TODO pass token
 				$self->redirect_to("/p/${name}/j/$candidate->{id}");
 				return;
 			}
@@ -707,11 +729,11 @@ sub public_journey_details {
 		not(
 			$visibility eq 'public'
 			or (    $visibility eq 'unlisted'
-				and $self->status_token_ok($journey) )
+				and $self->journey_token_ok($journey) )
 			or (
 				$visibility eq 'travelynx'
 				and (  $self->is_user_authenticated
-					or $self->status_token_ok($journey) )
+					or $self->journey_token_ok($journey) )
 			)
 		)
 	  )
-- 
cgit v1.2.3