bookmark collections

app/routes/api.py

@@ -2,7 +2,7 @@ from flask import Blueprint, request, url_for
 from ..lib.babycode import babycode_to_html
 from ..constants import REACTION_EMOJI
 from .users import is_logged_in, get_active_user
-from ..models import APIRateLimits, Threads, Reactions
+from ..models import APIRateLimits, Threads, Reactions, Users, BookmarkCollections
 from ..db import db
 
 bp = Blueprint("api", __name__, url_prefix="/api/")
@@ -96,3 +96,46 @@ def remove_reaction(post_id):
     reaction.delete()
 
     return {'status': 'removed'}
+
+@bp.post('/manage-bookmark-collections/<user_id>')
+def manage_bookmark_collections(user_id):
+    if not is_logged_in():
+        return {'error': 'not authorized', 'error_code': 401}, 401
+
+    target_user = Users.find({'id': user_id})
+    if target_user.id != get_active_user().id:
+        return {'error': 'forbidden', 'error_code': 403}, 403
+
+    if target_user.is_guest():
+        return {'error': 'forbidden', 'error_code': 403}, 403
+
+    collections_data = request.json
+    for idx, coll_data in enumerate(collections_data.get('collections')):
+        if coll_data['is_new']:
+            collection = BookmarkCollections.create({
+                'name': coll_data['name'],
+                'user_id': target_user.id,
+                'sort_order': idx,
+            })
+        else:
+            collection = BookmarkCollections.find({'id': coll_data['id']})
+            if not collection:
+                continue
+
+            update = {'name': coll_data['name']}
+            if not collection.is_default:
+                update['sort_order'] = idx
+            collection.update(update)
+
+    for removed_id in collections_data.get('removed_collections'):
+        collection = BookmarkCollections.find({'id': removed_id})
+        if not collection:
+            continue
+
+        if collection.is_default:
+            continue
+
+        collection.delete()
+
+
+    return {'status': 'ok'}, 200