debian-mirror-gitlab/app/controllers/abuse_reports_controller.rb

# frozen_string_literal: true

class AbuseReportsController < ApplicationController
  before_action :set_user, only: [:new]

  feature_category :insider_threat

  def new
    @abuse_report = AbuseReport.new
    @abuse_report.user_id = @user.id
    @ref_url = params.fetch(:ref_url, '')
  end

  def create
    @abuse_report = AbuseReport.new(report_params)
    @abuse_report.reporter = current_user

    if @abuse_report.save
      @abuse_report.notify

      message = _("Thank you for your report. A GitLab administrator will look into it shortly.")
      redirect_to root_path, notice: message
    elsif report_params[:user_id].present?
      render :new
    else
      redirect_to root_path, alert: _("Cannot create the abuse report. The reported user was invalid. Please try again or contact support.")
    end
  end

  private

  def report_params
    params.require(:abuse_report).permit(:message, :user_id)
  end

  # rubocop: disable CodeReuse/ActiveRecord
  def set_user
    @user = User.find_by(id: params[:user_id])

    if @user.nil?
      redirect_to root_path, alert: _("Cannot create the abuse report. The user has been deleted.")
    elsif @user.blocked?
      redirect_to @user, alert: _("Cannot create the abuse report. This user has been blocked.")
    end
  end
  # rubocop: enable CodeReuse/ActiveRecord
end