add post editing

doc/todo.md

···
 - [x] post:likes/dislikes
 - [x] post:mentioning ('tagging') other users in posts
 	- [x] post:mentioning:who mentioned you (send notifications when a user mentions you)
+- [x] post:editing
 - [ ] ~~site:stylesheet (and a toggle for html-only mode)~~
 	- replaced with per-user optional stylesheets
 - [x] site:message of the day (admins can add a welcome message displayed on index.html)

src/api.v

···
 	return ctx.text(post.title)
 }
 
+@['/api/post/edit'; post]
+fn (mut app App) api_post_edit(mut ctx Context, id int, title string, body string) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('not logged in!')
+		return ctx.redirect('/login')
+	}
+	post := app.get_post_by_id(id) or {
+		ctx.error('no such post')
+		return ctx.redirect('/')
+	}
+	if post.author_id != user.id {
+		ctx.error('insufficient permissions')
+		return ctx.redirect('/')
+	}
+
+	sql app.db {
+		update Post set body = body, title = title where id == id
+	} or {
+		eprintln('failed to update post')
+		ctx.error('failed to update post')
+		return ctx.redirect('/')
+	}
+
+	return ctx.redirect('/post/${id}')
+}
+
 ////// site //////
 
 @['/api/site/set_motd'; post]

src/app.v

···
 	return posts
 }
 
-// pub fn (app &App) get_popular_posts() []Post {
-// 	posts := sql app.db {
-// 		select from Post order by likes desc limit 10
-// 	} or { [] }
-// 	return posts
-// }
+pub fn (app &App) get_popular_posts() []Post {
+	cached_likes := sql app.db {
+		select from LikeCache order by likes desc limit 10
+	} or { [] }
+	posts := cached_likes.map(fn [app] (it LikeCache) Post {
+		return app.get_post_by_id(it.post_id) or {
+			eprintln('cached like ${it} does not have a post related to it (from get_popular_posts)')
+			return Post{}
+		}
+	}).filter(it.id != 0)
+	return posts
+}
 
 pub fn (app &App) get_posts_from_user(user_id int) []Post {
 	posts := sql app.db {

src/pages.v

···
 	user := app.whoami(mut ctx) or { User{} }
 	return $veb.html()
 }
+
+@['/post/:post_id/edit']
+fn (mut app App) edit(mut ctx Context, post_id int) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('not logged in')
+		return ctx.redirect('/login')
+	}
+	post := app.get_post_by_id(post_id) or {
+		ctx.error('no such post')
+		return ctx.redirect('/')
+	}
+	if post.author_id != user.id {
+		ctx.error('insufficient permissions')
+		return ctx.redirect('/post/${post_id}')
+	}
+	ctx.title = '${app.config.instance.name} - editing ${post.title}'
+	return $veb.html()
+}

src/templates/edit.html

···
+@include 'partial/header.html'
+
+<script src="/static/js/post.js"></script>
+<script src="/static/js/render_body.js"></script>
+
+<h1>edit post</h1>
+
+<div class="post post-full">
+	<form action="/api/post/edit" method="post">
+		<input
+			type="number"
+			name="id"
+			id="id"
+			placeholder="post id"
+			value="@post.id"
+			required
+			readonly
+			hidden
+			aria-hidden
+		>
+		<input
+			type="text"
+			name="title"
+			id="title"
+			minlength="@app.config.post.title_min_len"
+			maxlength="@app.config.post.title_max_len"
+			pattern="@app.config.post.title_pattern"
+			placeholder="title"
+			value="@post.title"
+			required
+		>
+		<br>
+		<textarea
+			name="body"
+			id="body"
+			minlength="@app.config.post.body_min_len"
+			maxlength="@app.config.post.body_max_len"
+			rows="10"
+			cols="30"
+			placeholder="body"
+			required
+		>@post.body</textarea>
+		<br>
+		<input type="submit" value="save">
+	</form>
+</div>
+
+@include 'partial/footer.html'

src/templates/post.html

···
 	<p><em>likes: @{app.get_net_likes_for_post(post.id)}</em></p>
 	<p><em>posted at: @post.posted_at</em></p>
 
+	@if ctx.is_logged_in() && post.author_id == user.id
+	<p><a href="/post/@{post.id}/edit">edit post</a></p>
+	@end
+
 	@if ctx.is_logged_in()
 	<br>
 	<div>
···
 	</div>
 	@end
 
-	@if (ctx.is_logged_in() && user.admin) || (ctx.is_logged_in() && post.author_id == user.id)
-	<hr>
-	@if user.admin
+	@if ctx.is_logged_in() && (post.author_id == user.id || user.admin)
+	<br>
+	<div>
+
+	@if post.author_id == user.id
+	<h4>manage post:</h4>
+	@else if user.admin
 	<h4>admin powers:</h4>
-	@else if post.author_id == user.id
-	<h4>manage post:</h4>
 	@end
+
 	<form action="/api/post/delete" method="post">
 		<input
 			type="number"
···
 		>
 		<input type="submit" value="delete">
 	</form>
+
+	</div>
 	@end
 </div>