Joseph

.vscode/settings.json

@@ -0,0 +1,4 @@
+{
+    "java.configuration.updateBuildConfiguration": "interactive",
+    "java.compile.nullAnalysis.mode": "automatic"
+}

cookies.txt

@@ -0,0 +1,5 @@
+# Netscape HTTP Cookie File
+# https://curl.se/docs/http-cookies.html
+# This file was generated by libcurl! Edit at your own risk.
+
+#HttpOnly_localhost	FALSE	/	FALSE	0	JSESSIONID	DB5849AC053301B7D9FEDABF995B3D34

java/Dockerfile

@@ -0,0 +1,12 @@
+# Build stage
+FROM maven:3.9-eclipse-temurin-17 AS builder
+WORKDIR /app
+COPY pom.xml .
+COPY src ./src
+RUN mvn clean package -q -DskipTests
+# Runtime stage
+FROM eclipse-temurin:17-jre
+WORKDIR /app
+COPY --from=builder /app/target/Stardust-0.0.1-SNAPSHOT.jar app.jar
+EXPOSE 8080
+CMD ["java", "-jar", "app.jar"]

java/README.md

@@ -54,3 +54,25 @@ By default, the app runs on:
 - user profile/settings pages
 - media embedding (image/video links)
 - moderation tools and role-based controls
+
+to run it- cd java
+mvn spring-boot:run
+
+curl -s -b cookies.txt http://localhost:5000/viewpost?post=1 | grep -o "action_react" | head -1
+
+curl -s -o /dev/null -w "%{http_code}" -X POST \
+  -b cookies.txt -c cookies.txt \
+  -d "postId=1&type=LIKE" \
+  http://localhost:5000/action_react
+
+Reaction.java
+→
+ReactionRepository
+→
+ForumService
+→
+ForumController
+→
+viewpost.html
+
+lsof -ti :5000 | xargs kill -9 2>/dev/null && mvn spring-boot:run

java/docker-compose.yml

@@ -0,0 +1,9 @@
+services:
+  app:
+    build: .
+    ports:
+      - "7071:8080"
+    environment:
+      SPRING_DATASOURCE_URL: "jdbc:postgresql://xo.zipcode.rocks:9088/circus"
+      SPRING_DATASOURCE_USERNAME: sunflower_user
+      SPRING_DATASOURCE_PASSWORD: zipmusic

java/pom.xml

@@ -1,13 +1,13 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0"
-         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
 
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.2.5</version>
+        <version>3.5.13</version>
         <relativePath/>
     </parent>
 
@@ -43,14 +43,9 @@
             <artifactId>thymeleaf-extras-springsecurity6</artifactId>
         </dependency>
         <dependency>
-            <groupId>org.xerial</groupId>
-            <artifactId>sqlite-jdbc</artifactId>
-            <version>3.45.3.0</version>
-        </dependency>
-        <dependency>
-            <groupId>org.hibernate.orm</groupId>
-            <artifactId>hibernate-community-dialects</artifactId>
-            <version>6.4.4.Final</version>
+            <groupId>org.postgresql</groupId>
+            <artifactId>postgresql</artifactId>
+            <scope>runtime</scope>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -62,6 +57,36 @@
             <artifactId>spring-security-test</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.commonmark</groupId>
+            <artifactId>commonmark</artifactId>
+            <version>0.22.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.commonmark</groupId>
+            <artifactId>commonmark-ext-gfm-tables</artifactId>
+            <version>0.22.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.commonmark</groupId>
+            <artifactId>commonmark-ext-gfm-strikethrough</artifactId>
+            <version>0.22.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.commonmark</groupId>
+            <artifactId>commonmark-ext-task-list-items</artifactId>
+            <version>0.22.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.commonmark</groupId>
+            <artifactId>commonmark-ext-autolink</artifactId>
+            <version>0.22.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.googlecode.owasp-java-html-sanitizer</groupId>
+            <artifactId>owasp-java-html-sanitizer</artifactId>
+            <version>20240325.1</version>
+        </dependency>
     </dependencies>
 
     <build>

java/src/main/java/com/zipcode/stardust/config/DataInitializer.java

@@ -1,7 +1,9 @@
 package com.zipcode.stardust.config;
 
 import com.zipcode.stardust.model.Subforum;
+import com.zipcode.stardust.model.User;
 import com.zipcode.stardust.repository.SubforumRepository;
+import com.zipcode.stardust.repository.UserRepository;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.ApplicationArguments;
 import org.springframework.boot.ApplicationRunner;
@@ -13,6 +15,9 @@ public class DataInitializer implements ApplicationRunner {
     @Autowired
     private SubforumRepository subforumRepository;
 
+    @Autowired
+    private UserRepository userRepository;
+
     @Override
     public void run(ApplicationArguments args) {
         if (subforumRepository.count() == 0) {
@@ -36,5 +41,13 @@ public void run(ApplicationArguments args) {
                     "Discuss other things here", null);
             subforumRepository.save(other);
         }
+
+        // Promote any existing accounts that belong to privileged usernames
+        for (User user : userRepository.findAll()) {
+            if (User.isPrivilegedUsername(user.getUsername()) && !user.isAdmin()) {
+                user.setAdmin(true);
+                userRepository.save(user);
+            }
+        }
     }
 }

java/src/main/java/com/zipcode/stardust/config/SecurityConfig.java

@@ -1,9 +1,9 @@
 package com.zipcode.stardust.config;
 
-import com.zipcode.stardust.repository.UserRepository;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.core.userdetails.UserDetailsService;
@@ -12,8 +12,11 @@
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
 
+import com.zipcode.stardust.repository.UserRepository;
+
 @Configuration
 @EnableWebSecurity
+@EnableMethodSecurity
 public class SecurityConfig {
 
     @Autowired
@@ -35,10 +38,11 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http
             .authorizeHttpRequests(auth -> auth
                 .requestMatchers("/", "/subforum", "/loginform", "/viewpost", "/action_login",
-                        "/action_createaccount", "/static/**", "/style.css").permitAll()
-                .requestMatchers("/addpost", "/action_post", "/action_comment")
+                        "/action_createaccount", "/static/**", "/style.css",
+                        "/uploads/**").permitAll()
+                .requestMatchers("/addpost", "/action_post", "/action_comment", "/upload")
                         .authenticated()
-                .anyRequest().permitAll()
+                .anyRequest().authenticated()
             )
             .formLogin(form -> form
                 .loginPage("/loginform")

java/src/main/java/com/zipcode/stardust/config/WebConfig.java

@@ -0,0 +1,20 @@
+package com.zipcode.stardust.config;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.lang.NonNull;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+
+    @Value("${upload.dir:uploads}")
+    private String uploadDir;
+
+    @Override
+    public void addResourceHandlers(@NonNull ResourceHandlerRegistry registry) {
+        registry.addResourceHandler("/uploads/**")
+                .addResourceLocations("file:" + uploadDir + "/");
+    }
+}