Guest control: Cleaned methods involved in fetching/handling

- Moves guest user caching from User class to app container for
  simplicity.
- Updates test to use simpler $this->users->guest() method for
  consistency.
- Streamlined helpers to avoid function overlap for simplicity.
- Extracted user profile dropdown while doing changes.

diff --git a/app/Activity/Models/View.php b/app/Activity/Models/View.php
index 512e0829596089434f0ad772d455fa04d2fdcfc4..b593a7d27be74209f746c32c335361f0ac538995 100644 (file)
--- a/app/Activity/Models/View.php
+++ b/app/Activity/Models/View.php
@@ -41,7 +41,7 @@ class View extends Model
     public static function incrementFor(Viewable $viewable): int
     {
         $user = user();
     public static function incrementFor(Viewable $viewable): int
     {
         $user = user();

-        if (is_null($user) || $user->isDefault()) {
+        if (is_null($user) || $user->isGuest()) {

             return 0;
         }
 
             return 0;
         }
 

diff --git a/app/Activity/Tools/UserEntityWatchOptions.php b/app/Activity/Tools/UserEntityWatchOptions.php
index 231204fdf67b1f9f54fcbb90636fbea5de15ff24..559d7903d6f510671ae01c74a61409b0de93c875 100644 (file)
--- a/app/Activity/Tools/UserEntityWatchOptions.php
+++ b/app/Activity/Tools/UserEntityWatchOptions.php
@@ -22,7 +22,7 @@ class UserEntityWatchOptions
 
     public function canWatch(): bool
     {
 
     public function canWatch(): bool
     {

-        return $this->user->can('receive-notifications') && !$this->user->isDefault();
+        return $this->user->can('receive-notifications') && !$this->user->isGuest();

     }
 
     public function getWatchLevel(): string
     }
 
     public function getWatchLevel(): string

diff --git a/app/App/Providers/AuthServiceProvider.php b/app/App/Providers/AuthServiceProvider.php
index dc482ce33062725ba05ca2e353273ec5851c9e4f..26d1803107d41466a6e7c80cec72c23325fce1c3 100644 (file)
--- a/app/App/Providers/AuthServiceProvider.php
+++ b/app/App/Providers/AuthServiceProvider.php
@@ -9,6 +9,7 @@ use BookStack\Access\LdapService;
 use BookStack\Access\LoginService;
 use BookStack\Access\RegistrationService;
 use BookStack\Api\ApiTokenGuard;
 use BookStack\Access\LoginService;
 use BookStack\Access\RegistrationService;
 use BookStack\Api\ApiTokenGuard;

+use BookStack\Users\Models\User;

 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\ServiceProvider;
 use Illuminate\Validation\Rules\Password;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\ServiceProvider;
 use Illuminate\Validation\Rules\Password;


@@ -65,5 +66,11 @@ class AuthServiceProvider extends ServiceProvider
         Auth::provider('external-users', function ($app, array $config) {
             return new ExternalBaseUserProvider($config['model']);
         });
         Auth::provider('external-users', function ($app, array $config) {
             return new ExternalBaseUserProvider($config['model']);
         });

+
+        // Bind and provide the default system user as a singleton to the app instance when needed.
+        // This effectively "caches" fetching the user at an app-instance level.
+        $this->app->singleton('users.default', function () {
+            return User::query()->where('system_name', '=', 'public')->first();
+        });

     }
 }
     }
 }

diff --git a/app/App/helpers.php b/app/App/helpers.php
index 00d3e9243d7288096d39f91af5200212bb532316..b59a63448340d716fd5a24e5b2328f2c2b7d273e 100644 (file)
--- a/app/App/helpers.php
+++ b/app/App/helpers.php
@@ -35,23 +35,7 @@ function versioned_asset(string $file = ''): string
  */
 function user(): User
 {
  */
 function user(): User
 {

-    return auth()->user() ?: User::getDefault();
-}
-
-/**
- * Check if current user is a signed in user.
- */
-function signedInUser(): bool
-{
-    return auth()->user() && !auth()->user()->isDefault();
-}
-
-/**
- * Check if the current user has general access.
- */
-function hasAppAccess(): bool
-{
-    return !auth()->guest() || setting('app-public');
+    return auth()->user() ?: User::getGuest();

 }
 
 /**
 }
 
 /**


@@ -61,7 +45,7 @@ function hasAppAccess(): bool
 function userCan(string $permission, Model $ownable = null): bool
 {
     if ($ownable === null) {
 function userCan(string $permission, Model $ownable = null): bool
 {
     if ($ownable === null) {

-        return user() && user()->can($permission);
+        return user()->can($permission);

     }
 
     // Check permission on ownable item
     }
 
     // Check permission on ownable item

diff --git a/app/Entities/Queries/RecentlyViewed.php b/app/Entities/Queries/RecentlyViewed.php
index ffa3468882631e10f86ebc90e42ba135cd6d330c..5895b97a2ae8ad608ec95a77f5929bb43d380388 100644 (file)
--- a/app/Entities/Queries/RecentlyViewed.php
+++ b/app/Entities/Queries/RecentlyViewed.php
@@ -10,7 +10,7 @@ class RecentlyViewed extends EntityQuery
     public function run(int $count, int $page): Collection
     {
         $user = user();
     public function run(int $count, int $page): Collection
     {
         $user = user();

-        if ($user === null || $user->isDefault()) {
+        if ($user === null || $user->isGuest()) {

             return collect();
         }
 
             return collect();
         }
 

diff --git a/app/Entities/Queries/TopFavourites.php b/app/Entities/Queries/TopFavourites.php
index cbccf35b054eceedd863e3edde10647b7462e650..a2f8d9ea1d2cdd42a93bebecf073f381bb14b672 100644 (file)
--- a/app/Entities/Queries/TopFavourites.php
+++ b/app/Entities/Queries/TopFavourites.php
@@ -10,7 +10,7 @@ class TopFavourites extends EntityQuery
     public function run(int $count, int $skip = 0)
     {
         $user = user();
     public function run(int $count, int $skip = 0)
     {
         $user = user();

-        if ($user->isDefault()) {
+        if ($user->isGuest()) {

             return collect();
         }
 
             return collect();
         }
 

diff --git a/app/Http/Controller.php b/app/Http/Controller.php
index 584cea3aa74cd8ccffa7d5e366376b19ff8718dd..6e81dfd65738942ee30cdb542fe9775360c6a8a1 100644 (file)
--- a/app/Http/Controller.php
+++ b/app/Http/Controller.php
@@ -71,7 +71,7 @@ abstract class Controller extends BaseController
      */
     protected function preventGuestAccess(): void
     {
      */
     protected function preventGuestAccess(): void
     {

-        if (!signedInUser()) {
+        if (user()->isGuest()) {

             $this->showPermissionError();
         }
     }
             $this->showPermissionError();
         }
     }

diff --git a/app/Http/Middleware/ApiAuthenticate.php b/app/Http/Middleware/ApiAuthenticate.php
index b348473cf4d3dc40c1e353f1fb31c3b90e3c00de..5f3ad3168a0bbd3bbd1209996f50067027ce630f 100644 (file)
--- a/app/Http/Middleware/ApiAuthenticate.php
+++ b/app/Http/Middleware/ApiAuthenticate.php
@@ -31,7 +31,7 @@ class ApiAuthenticate
     {
         // Return if the user is already found to be signed in via session-based auth.
         // This is to make it easy to browser the API via browser after just logging into the system.
     {
         // Return if the user is already found to be signed in via session-based auth.
         // This is to make it easy to browser the API via browser after just logging into the system.

-        if (signedInUser() || session()->isStarted()) {
+        if (!user()->isGuest() || session()->isStarted()) {

             if (!$this->sessionUserHasApiAccess()) {
                 throw new ApiAuthException(trans('errors.api_user_no_api_permission'), 403);
             }
             if (!$this->sessionUserHasApiAccess()) {
                 throw new ApiAuthException(trans('errors.api_user_no_api_permission'), 403);
             }


@@ -53,6 +53,6 @@ class ApiAuthenticate
     {
         $hasApiPermission = user()->can('access-api');
 
     {
         $hasApiPermission = user()->can('access-api');
 

-        return $hasApiPermission && hasAppAccess();
+        return $hasApiPermission && user()->hasAppAccess();

     }
 }
     }
 }

diff --git a/app/Http/Middleware/Authenticate.php b/app/Http/Middleware/Authenticate.php
index a320291122b6f632b0bc36a8e96d15e42472a5f8..6a5c6e3542e0ec80c6f7205b80a48fc12ef2aa50 100644 (file)
--- a/app/Http/Middleware/Authenticate.php
+++ b/app/Http/Middleware/Authenticate.php
@@ -12,7 +12,7 @@ class Authenticate
      */
     public function handle(Request $request, Closure $next)
     {
      */
     public function handle(Request $request, Closure $next)
     {

-        if (!hasAppAccess()) {
+        if (!user()->hasAppAccess()) {

             if ($request->ajax()) {
                 return response('Unauthorized.', 401);
             }
             if ($request->ajax()) {
                 return response('Unauthorized.', 401);
             }

diff --git a/app/Http/Middleware/PreventAuthenticatedResponseCaching.php b/app/Http/Middleware/PreventAuthenticatedResponseCaching.php
index 60c9138110a1665947c56a5c06f5896b1c4fd273..0a90ddd9e0f95d10dfa5a4ac67191ec8fbe5a8a5 100644 (file)
--- a/app/Http/Middleware/PreventAuthenticatedResponseCaching.php
+++ b/app/Http/Middleware/PreventAuthenticatedResponseCaching.php
@@ -20,7 +20,7 @@ class PreventAuthenticatedResponseCaching
         /** @var Response $response */
         $response = $next($request);
 
         /** @var Response $response */
         $response = $next($request);
 

-        if (signedInUser()) {
+        if (!user()->isGuest()) {

             $response->headers->set('Cache-Control', 'max-age=0, no-store, private');
             $response->headers->set('Pragma', 'no-cache');
             $response->headers->set('Expires', 'Sun, 12 Jul 2015 19:01:00 GMT');
             $response->headers->set('Cache-Control', 'max-age=0, no-store, private');
             $response->headers->set('Pragma', 'no-cache');
             $response->headers->set('Expires', 'Sun, 12 Jul 2015 19:01:00 GMT');

diff --git a/app/Settings/SettingController.php b/app/Settings/SettingController.php
index bd55222f2302ee6a820fff3f67c8ecb8a007c4ad..bdbc3c78a392dce4bc97b7ae419f586147205b66 100644 (file)
--- a/app/Settings/SettingController.php
+++ b/app/Settings/SettingController.php
@@ -34,7 +34,7 @@ class SettingController extends Controller
         return view('settings.' . $category, [
             'category'  => $category,
             'version'   => $version,
         return view('settings.' . $category, [
             'category'  => $category,
             'version'   => $version,

-            'guestUser' => User::getDefault(),
+            'guestUser' => User::getGuest(),

         ]);
     }
 
         ]);
     }
 

diff --git a/app/Settings/SettingService.php b/app/Settings/SettingService.php
index 1c5cbdf5af37e12df8c77b9908b76126e90467b4..31debdaea85066835fa21e1f231e54b539c5c444 100644 (file)
--- a/app/Settings/SettingService.php
+++ b/app/Settings/SettingService.php
@@ -47,7 +47,7 @@ class SettingService
             $default = config('setting-defaults.user.' . $key, false);
         }
 
             $default = config('setting-defaults.user.' . $key, false);
         }
 

-        if ($user->isDefault()) {
+        if ($user->isGuest()) {

             return $this->getFromSession($key, $default);
         }
 
             return $this->getFromSession($key, $default);
         }
 


@@ -206,7 +206,7 @@ class SettingService
      */
     public function putUser(User $user, string $key, string $value): bool
     {
      */
     public function putUser(User $user, string $key, string $value): bool
     {

-        if ($user->isDefault()) {
+        if ($user->isGuest()) {

             session()->put($key, $value);
 
             return true;
             session()->put($key, $value);
 
             return true;

diff --git a/app/Translation/LanguageManager.php b/app/Translation/LanguageManager.php
index ec116fd70a4b620b46d081baf143f027dc27dcbb..f3432d0387a8b82b8b0a8b7b6cd4238fad2d3e6a 100644 (file)
--- a/app/Translation/LanguageManager.php
+++ b/app/Translation/LanguageManager.php
@@ -75,7 +75,7 @@ class LanguageManager
             return $default;
         }
 
             return $default;
         }
 

-        if ($user->isDefault() && config('app.auto_detect_locale')) {
+        if ($user->isGuest() && config('app.auto_detect_locale')) {

             return $this->autoDetectLocale($request, $default);
         }
 
             return $this->autoDetectLocale($request, $default);
         }
 

diff --git a/app/Users/Controllers/UserSearchController.php b/app/Users/Controllers/UserSearchController.php
index 1c7786f58961f78a5b9dd2133d4783e700491135..b6f37bce08b1f3daea32e13a3ba45b634a50f34f 100644 (file)
--- a/app/Users/Controllers/UserSearchController.php
+++ b/app/Users/Controllers/UserSearchController.php
@@ -14,7 +14,7 @@ class UserSearchController extends Controller
      */
     public function forSelect(Request $request)
     {
      */
     public function forSelect(Request $request)
     {

-        $hasPermission = signedInUser() && (
+        $hasPermission = !user()->isGuest() && (

             userCan('users-manage')
                 || userCan('restrictions-manage-own')
                 || userCan('restrictions-manage-all')
             userCan('users-manage')
                 || userCan('restrictions-manage-own')
                 || userCan('restrictions-manage-all')

diff --git a/app/Users/Models/User.php b/app/Users/Models/User.php
index 2479521a2e91d86f046490ef346a488534001c7f..1eeacfe2e18553931dd397cb1ef0c454f870bf80 100644 (file)
--- a/app/Users/Models/User.php
+++ b/app/Users/Models/User.php
@@ -88,36 +88,29 @@ class User extends Model implements AuthenticatableContract, CanResetPasswordCon
      */
     protected string $avatarUrl = '';
 
      */
     protected string $avatarUrl = '';
 

-    /**
-     * This holds the default user when loaded.
-     */
-    protected static ?User $defaultUser = null;
-

     /**
      * Returns the default public user.
     /**
      * Returns the default public user.

+     * Fetches from the container as a singleton to effectively cache at an app level.

      */
      */

-    public static function getDefault(): self
+    public static function getGuest(): self

     {
     {

-        if (!is_null(static::$defaultUser)) {
-            return static::$defaultUser;
-        }
-
-        static::$defaultUser = static::query()->where('system_name', '=', 'public')->first();
-
-        return static::$defaultUser;
+        return app()->make('users.default');

     }
 
     }
 

-    public static function clearDefault(): void
+    /**
+     * Check if the user is the default public user.
+     */
+    public function isGuest(): bool

     {
     {

-        static::$defaultUser = null;
+        return $this->system_name === 'public';

     }
 
     /**
     }
 
     /**

-     * Check if the user is the default public user.
+     * Check if the user has general access to the application.

      */
      */

-    public function isDefault(): bool
+    public function hasAppAccess(): bool

     {
     {

-        return $this->system_name === 'public';
+        return !$this->isGuest() || setting('app-public');

     }
 
     /**
     }
 
     /**

diff --git a/resources/views/books/show.blade.php b/resources/views/books/show.blade.php
index e3aef845ce09a061c969c909fe9b9308090a60e0..9e7df4156d429c629edffc1837f2328da900c5ad 100644 (file)
--- a/resources/views/books/show.blade.php
+++ b/resources/views/books/show.blade.php
@@ -142,7 +142,7 @@
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $book])
             @endif
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $book])
             @endif

-            @if(signedInUser())
+            @if(!user()->isGuest())

                 @include('entities.favourite-action', ['entity' => $book])
             @endif
             @if(userCan('content-export'))
                 @include('entities.favourite-action', ['entity' => $book])
             @endif
             @if(userCan('content-export'))

diff --git a/resources/views/chapters/show.blade.php b/resources/views/chapters/show.blade.php
index 3cb512ccc532ae565ccc392a0ab75e0f18a099d5..0e5224d54783294da51558a0e3d231bdcb8919d1 100644 (file)
--- a/resources/views/chapters/show.blade.php
+++ b/resources/views/chapters/show.blade.php
@@ -160,7 +160,7 @@
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $chapter])
             @endif
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $chapter])
             @endif

-            @if(signedInUser())
+            @if(!user()->isGuest())

                 @include('entities.favourite-action', ['entity' => $chapter])
             @endif
             @if(userCan('content-export'))
                 @include('entities.favourite-action', ['entity' => $chapter])
             @endif
             @if(userCan('content-export'))

diff --git a/resources/views/common/header-user-menu.blade.php b/resources/views/common/header-user-menu.blade.php
new file mode 100644 (file)
index 0000000..8ba750f
--- /dev/null
+++ b/resources/views/common/header-user-menu.blade.php
@@ -0,0 +1,47 @@
+<div class="dropdown-container" component="dropdown" option:dropdown:bubble-escapes="true">
+    <span class="user-name py-s hide-under-l" refs="dropdown@toggle"
+          aria-haspopup="true" aria-expanded="false" aria-label="{{ trans('common.profile_menu') }}" tabindex="0">
+        <img class="avatar" src="{{$user->getAvatar(30)}}" alt="{{ $user->name }}">
+        <span class="name">{{ $user->getShortName(9) }}</span> @icon('caret-down')
+    </span>
+    <ul refs="dropdown@menu" class="dropdown-menu" role="menu">
+        <li>
+            <a href="{{ url('/favourites') }}" data-shortcut="favourites_view" class="icon-item">
+                @icon('star')
+                <div>{{ trans('entities.my_favourites') }}</div>
+            </a>
+        </li>
+        <li>
+            <a href="{{ $user->getProfileUrl() }}" data-shortcut="profile_view" class="icon-item">
+                @icon('user')
+                <div>{{ trans('common.view_profile') }}</div>
+            </a>
+        </li>
+        <li>
+            <a href="{{ $user->getEditUrl() }}" class="icon-item">
+                @icon('edit')
+                <div>{{ trans('common.edit_profile') }}</div>
+            </a>
+        </li>
+        <li>
+            <form action="{{ url(config('auth.method') === 'saml2' ? '/saml2/logout' : '/logout') }}"
+                  method="post">
+                {{ csrf_field() }}
+                <button class="icon-item" data-shortcut="logout">
+                    @icon('logout')
+                    <div>{{ trans('auth.logout') }}</div>
+                </button>
+            </form>
+        </li>
+        <li><hr></li>
+        <li>
+            <a href="{{ url('/preferences') }}" class="icon-item">
+                @icon('user-preferences')
+                <div>{{ trans('preferences.preferences') }}</div>
+            </a>
+        </li>
+        <li>
+            @include('common.dark-mode-toggle', ['classes' => 'icon-item'])
+        </li>
+    </ul>
+</div>
\ No newline at end of file

diff --git a/resources/views/common/header.blade.php b/resources/views/common/header.blade.php
index 97a411d84541684150f5b81bd4e6b6c8e9a8825f..86ad3563dd497f68f99a238c867c7d4aa8e980af 100644 (file)
--- a/resources/views/common/header.blade.php
+++ b/resources/views/common/header.blade.php
@@ -18,7 +18,7 @@
         </div>
 
         <div class="flex-container-column items-center justify-center hide-under-l">
         </div>
 
         <div class="flex-container-column items-center justify-center hide-under-l">

-            @if (hasAppAccess())
+            @if (user()->hasAppAccess())

             <form component="global-search" action="{{ url('/search') }}" method="GET" class="search-box" role="search" tabindex="0">
                 <button id="header-search-box-button"
                         refs="global-search@button"
             <form component="global-search" action="{{ url('/search') }}" method="GET" class="search-box" role="search" tabindex="0">
                 <button id="header-search-box-button"
                         refs="global-search@button"


@@ -44,76 +44,29 @@
 
         <nav refs="header-mobile-toggle@menu" class="header-links">
             <div class="links text-center">
 
         <nav refs="header-mobile-toggle@menu" class="header-links">
             <div class="links text-center">

-                @if (hasAppAccess())
+                @if (user()->hasAppAccess())

                     <a class="hide-over-l" href="{{ url('/search') }}">@icon('search'){{ trans('common.search') }}</a>
                     @if(userCanOnAny('view', \BookStack\Entities\Models\Bookshelf::class) || userCan('bookshelf-view-all') || userCan('bookshelf-view-own'))
                         <a href="{{ url('/shelves') }}" data-shortcut="shelves_view">@icon('bookshelf'){{ trans('entities.shelves') }}</a>
                     @endif
                     <a href="{{ url('/books') }}" data-shortcut="books_view">@icon('books'){{ trans('entities.books') }}</a>
                     <a class="hide-over-l" href="{{ url('/search') }}">@icon('search'){{ trans('common.search') }}</a>
                     @if(userCanOnAny('view', \BookStack\Entities\Models\Bookshelf::class) || userCan('bookshelf-view-all') || userCan('bookshelf-view-own'))
                         <a href="{{ url('/shelves') }}" data-shortcut="shelves_view">@icon('bookshelf'){{ trans('entities.shelves') }}</a>
                     @endif
                     <a href="{{ url('/books') }}" data-shortcut="books_view">@icon('books'){{ trans('entities.books') }}</a>

-                    @if(signedInUser() && userCan('settings-manage'))
+                    @if(!user()->isGuest() && userCan('settings-manage'))

                         <a href="{{ url('/settings') }}" data-shortcut="settings_view">@icon('settings'){{ trans('settings.settings') }}</a>
                     @endif
                         <a href="{{ url('/settings') }}" data-shortcut="settings_view">@icon('settings'){{ trans('settings.settings') }}</a>
                     @endif

-                    @if(signedInUser() && userCan('users-manage') && !userCan('settings-manage'))
+                    @if(!user()->isGuest() && userCan('users-manage') && !userCan('settings-manage'))

                         <a href="{{ url('/settings/users') }}" data-shortcut="settings_view">@icon('users'){{ trans('settings.users') }}</a>
                     @endif
                 @endif
 
                         <a href="{{ url('/settings/users') }}" data-shortcut="settings_view">@icon('users'){{ trans('settings.users') }}</a>
                     @endif
                 @endif
 

-                @if(!signedInUser())
+                @if(user()->isGuest())

                     @if(setting('registration-enabled') && config('auth.method') === 'standard')
                         <a href="{{ url('/register') }}">@icon('new-user'){{ trans('auth.sign_up') }}</a>
                     @endif
                     <a href="{{ url('/login')  }}">@icon('login'){{ trans('auth.log_in') }}</a>
                 @endif
             </div>
                     @if(setting('registration-enabled') && config('auth.method') === 'standard')
                         <a href="{{ url('/register') }}">@icon('new-user'){{ trans('auth.sign_up') }}</a>
                     @endif
                     <a href="{{ url('/login')  }}">@icon('login'){{ trans('auth.log_in') }}</a>
                 @endif
             </div>

-            @if(signedInUser())
-                <?php $currentUser = user(); ?>
-                <div class="dropdown-container" component="dropdown" option:dropdown:bubble-escapes="true">
-                        <span class="user-name py-s hide-under-l" refs="dropdown@toggle"
-                              aria-haspopup="true" aria-expanded="false" aria-label="{{ trans('common.profile_menu') }}" tabindex="0">
-                            <img class="avatar" src="{{$currentUser->getAvatar(30)}}" alt="{{ $currentUser->name }}">
-                            <span class="name">{{ $currentUser->getShortName(9) }}</span> @icon('caret-down')
-                        </span>
-                    <ul refs="dropdown@menu" class="dropdown-menu" role="menu">
-                        <li>
-                            <a href="{{ url('/favourites') }}" data-shortcut="favourites_view" class="icon-item">
-                                @icon('star')
-                                <div>{{ trans('entities.my_favourites') }}</div>
-                            </a>
-                        </li>
-                        <li>
-                            <a href="{{ $currentUser->getProfileUrl() }}" data-shortcut="profile_view" class="icon-item">
-                                @icon('user')
-                                <div>{{ trans('common.view_profile') }}</div>
-                            </a>
-                        </li>
-                        <li>
-                            <a href="{{ $currentUser->getEditUrl() }}" class="icon-item">
-                                @icon('edit')
-                                <div>{{ trans('common.edit_profile') }}</div>
-                            </a>
-                        </li>
-                        <li>
-                            <form action="{{ url(config('auth.method') === 'saml2' ? '/saml2/logout' : '/logout') }}"
-                                  method="post">
-                                {{ csrf_field() }}
-                                <button class="icon-item" data-shortcut="logout">
-                                    @icon('logout')
-                                    <div>{{ trans('auth.logout') }}</div>
-                                </button>
-                            </form>
-                        </li>
-                        <li><hr></li>
-                        <li>
-                            <a href="{{ url('/preferences') }}" class="icon-item">
-                                @icon('user-preferences')
-                                <div>{{ trans('preferences.preferences') }}</div>
-                            </a>
-                        </li>
-                        <li>
-                            @include('common.dark-mode-toggle', ['classes' => 'icon-item'])
-                        </li>
-                    </ul>
-                </div>
+            @if(!user()->isGuest())
+                @include('common.header-user-menu', ['user' => user()])

             @endif
         </nav>
 
             @endif
         </nav>
 

diff --git a/resources/views/errors/404.blade.php b/resources/views/errors/404.blade.php
index a4e5a0dd4c115c30ed1a0df46062109061f9f97d..27d66b30bb9a7a71ad6ea34e235b1d17e1c75f2b 100644 (file)
--- a/resources/views/errors/404.blade.php
+++ b/resources/views/errors/404.blade.php
@@ -1,55 +1,55 @@
 @extends('layouts.simple')
 
 @section('content')
 @extends('layouts.simple')
 
 @section('content')

-<div class="container mt-l">
+    <div class="container mt-l">

 
 

-    <div class="card mb-xl px-l pb-l pt-l">
-        <div class="grid half v-center">
-            <div>
-                @include('errors.parts.not-found-text', [
-                    'title' => $message ?? trans('errors.404_page_not_found'),
-                    'subtitle' => $subtitle ?? trans('errors.sorry_page_not_found'),
-                    'details' => $details ?? trans('errors.sorry_page_not_found_permission_warning'),
-                ])
-            </div>
-            <div class="text-right">
-                @if(!signedInUser())
-                    <a href="{{ url('/login') }}" class="button outline">{{ trans('auth.log_in') }}</a>
-                @endif
-                <a href="{{ url('/') }}" class="button outline">{{ trans('errors.return_home') }}</a>
+        <div class="card mb-xl px-l pb-l pt-l">
+            <div class="grid half v-center">
+                <div>
+                    @include('errors.parts.not-found-text', [
+                        'title' => $message ?? trans('errors.404_page_not_found'),
+                        'subtitle' => $subtitle ?? trans('errors.sorry_page_not_found'),
+                        'details' => $details ?? trans('errors.sorry_page_not_found_permission_warning'),
+                    ])
+                </div>
+                <div class="text-right">
+                    @if(user()->isGuest())
+                        <a href="{{ url('/login') }}" class="button outline">{{ trans('auth.log_in') }}</a>
+                    @endif
+                    <a href="{{ url('/') }}" class="button outline">{{ trans('errors.return_home') }}</a>
+                </div>

             </div>
             </div>

-        </div>

 
 

-    </div>
+        </div>

 
 

-    @if (setting('app-public') || !user()->isDefault())
-        <div class="grid third gap-xxl">
-            <div>
-                <div class="card mb-xl">
-                    <h3 class="card-title">{{ trans('entities.pages_popular') }}</h3>
-                    <div class="px-m">
-                        @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['page']), 'style' => 'compact'])
+        @if (setting('app-public') || !user()->isGuest())
+            <div class="grid third gap-xxl">
+                <div>
+                    <div class="card mb-xl">
+                        <h3 class="card-title">{{ trans('entities.pages_popular') }}</h3>
+                        <div class="px-m">
+                            @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['page']), 'style' => 'compact'])
+                        </div>

                     </div>
                 </div>
                     </div>
                 </div>

-            </div>
-            <div>
-                <div class="card mb-xl">
-                    <h3 class="card-title">{{ trans('entities.books_popular') }}</h3>
-                    <div class="px-m">
-                        @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['book']), 'style' => 'compact'])
+                <div>
+                    <div class="card mb-xl">
+                        <h3 class="card-title">{{ trans('entities.books_popular') }}</h3>
+                        <div class="px-m">
+                            @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['book']), 'style' => 'compact'])
+                        </div>

                     </div>
                 </div>
                     </div>
                 </div>

-            </div>
-            <div>
-                <div class="card mb-xl">
-                    <h3 class="card-title">{{ trans('entities.chapters_popular') }}</h3>
-                    <div class="px-m">
-                        @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['chapter']), 'style' => 'compact'])
+                <div>
+                    <div class="card mb-xl">
+                        <h3 class="card-title">{{ trans('entities.chapters_popular') }}</h3>
+                        <div class="px-m">
+                            @include('entities.list', ['entities' => (new \BookStack\Entities\Queries\Popular)->run(10, 0, ['chapter']), 'style' => 'compact'])
+                        </div>

                     </div>
                 </div>
             </div>
                     </div>
                 </div>
             </div>

-        </div>
-    @endif
-</div>
+        @endif
+    </div>

 
 @stop
\ No newline at end of file
 
 @stop
\ No newline at end of file

diff --git a/resources/views/pages/show.blade.php b/resources/views/pages/show.blade.php
index 1cbb819804f27a09ee934a24ffb047ac3610d80f..5d70f7c28e984d3400872c7ae4566699444d8591 100644 (file)
--- a/resources/views/pages/show.blade.php
+++ b/resources/views/pages/show.blade.php
@@ -188,7 +188,7 @@
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $page])
             @endif
             @if($watchOptions->canWatch() && !$watchOptions->isWatching())
                 @include('entities.watch-action', ['entity' => $page])
             @endif

-            @if(signedInUser())
+            @if(!user()->isGuest())

                 @include('entities.favourite-action', ['entity' => $page])
             @endif
             @if(userCan('content-export'))
                 @include('entities.favourite-action', ['entity' => $page])
             @endif
             @if(userCan('content-export'))

diff --git a/resources/views/search/all.blade.php b/resources/views/search/all.blade.php
index 96b14f6e534c6931d92e61698bf51e35e368541a..64325d4c1bf08cee9efac6da8329cc7b9633a3c0 100644 (file)
--- a/resources/views/search/all.blade.php
+++ b/resources/views/search/all.blade.php
@@ -32,7 +32,7 @@
                         <h6>{{ trans('entities.search_tags') }}</h6>
                         @include('search.parts.term-list', ['type' => 'tags', 'currentList' => $options->tags])
 
                         <h6>{{ trans('entities.search_tags') }}</h6>
                         @include('search.parts.term-list', ['type' => 'tags', 'currentList' => $options->tags])
 

-                        @if(signedInUser())
+                        @if(!user()->isGuest())

                             <h6>{{ trans('entities.search_options') }}</h6>
 
                             @component('search.parts.boolean-filter', ['filters' => $options->filters, 'name' => 'viewed_by_me', 'value' => null])
                             <h6>{{ trans('entities.search_options') }}</h6>
 
                             @component('search.parts.boolean-filter', ['filters' => $options->filters, 'name' => 'viewed_by_me', 'value' => null])

diff --git a/resources/views/shelves/show.blade.php b/resources/views/shelves/show.blade.php
index 86dd6326d758b030af2143a99f203b4fd2086cbd..8694ce86da55b2a85b55ac03c5a8fe203fe92273 100644 (file)
--- a/resources/views/shelves/show.blade.php
+++ b/resources/views/shelves/show.blade.php
@@ -143,7 +143,7 @@
                 </a>
             @endif
 
                 </a>
             @endif
 

-            @if(signedInUser())
+            @if(!user()->isGuest())

                 <hr class="primary-background">
                 @include('entities.favourite-action', ['entity' => $shelf])
             @endif
                 <hr class="primary-background">
                 @include('entities.favourite-action', ['entity' => $shelf])
             @endif

diff --git a/resources/views/users/preferences/index.blade.php b/resources/views/users/preferences/index.blade.php
index 712fdb288e183b91de30284b72f7a2069aa1a991..f8576ed9e4ba8a634734a165037bdb1a1e4afb2b 100644 (file)
--- a/resources/views/users/preferences/index.blade.php
+++ b/resources/views/users/preferences/index.blade.php
@@ -13,7 +13,7 @@
             </div>
         </section>
 
             </div>
         </section>
 

-        @if(signedInUser() && userCan('receive-notifications'))
+        @if(!user()->isGuest() && userCan('receive-notifications'))

             <section class="card content-wrap auto-height items-center justify-space-between gap-m flex-container-row wrap">
                 <div class="flex min-width-m">
                     <h2 class="list-heading">{{ trans('preferences.notifications') }}</h2>
             <section class="card content-wrap auto-height items-center justify-space-between gap-m flex-container-row wrap">
                 <div class="flex min-width-m">
                     <h2 class="list-heading">{{ trans('preferences.notifications') }}</h2>


@@ -25,7 +25,7 @@
             </section>
         @endif
 
             </section>
         @endif
 

-        @if(signedInUser())
+        @if(!user()->isGuest())

             <section class="card content-wrap auto-height items-center justify-space-between gap-m flex-container-row wrap">
                 <div class="flex min-width-m">
                     <h2 class="list-heading">{{ trans('settings.users_edit_profile') }}</h2>
             <section class="card content-wrap auto-height items-center justify-space-between gap-m flex-container-row wrap">
                 <div class="flex min-width-m">
                     <h2 class="list-heading">{{ trans('settings.users_edit_profile') }}</h2>

diff --git a/tests/Entity/PageRevisionTest.php b/tests/Entity/PageRevisionTest.php
index 97d5a6664daef838a9095dbdbeeea242e86ea1a6..a272dc38bdbd911cf302679bc668dd0f091be3e7 100644 (file)
--- a/tests/Entity/PageRevisionTest.php
+++ b/tests/Entity/PageRevisionTest.php
@@ -136,7 +136,7 @@ class PageRevisionTest extends TestCase
         $page = $this->entities->page();
         $this->createRevisions($page, 2);
 
         $page = $this->entities->page();
         $this->createRevisions($page, 2);
 

-        $pageView = $this->get($page->getUrl());
+        $pageView = $this->asViewer()->get($page->getUrl());

         $pageView->assertSee('Revision #' . $page->revision_count);
     }
 
         $pageView->assertSee('Revision #' . $page->revision_count);
     }
 

diff --git a/tests/Helpers/UserRoleProvider.php b/tests/Helpers/UserRoleProvider.php
index 3b2da369de5235251e23574e0eb5bc80d07f2d90..fe19cad4aab97e587990bbc1b978a869944505d9 100644 (file)
--- a/tests/Helpers/UserRoleProvider.php
+++ b/tests/Helpers/UserRoleProvider.php
@@ -55,7 +55,7 @@ class UserRoleProvider
      */
     public function guest(): User
     {
      */
     public function guest(): User
     {

-        return User::getDefault();
+        return User::getGuest();

     }
 
     /**
     }
 
     /**

diff --git a/tests/PublicActionTest.php b/tests/PublicActionTest.php
index 1e4dcbfb7b80df50c843ed6ff1e0bd591b2aec63..875b279a81c381d2394da96d4b7892bc161ee9b6 100644 (file)
--- a/tests/PublicActionTest.php
+++ b/tests/PublicActionTest.php
@@ -103,7 +103,7 @@ class PublicActionTest extends TestCase
         $resp = $this->post($chapter->getUrl('/create-guest-page'), ['name' => 'My guest page']);
         $resp->assertRedirect($chapter->book->getUrl('/page/my-guest-page/edit'));
 
         $resp = $this->post($chapter->getUrl('/create-guest-page'), ['name' => 'My guest page']);
         $resp->assertRedirect($chapter->book->getUrl('/page/my-guest-page/edit'));
 

-        $user = User::getDefault();
+        $user = $this->users->guest();

         $this->assertDatabaseHas('pages', [
             'name'       => 'My guest page',
             'chapter_id' => $chapter->id,
         $this->assertDatabaseHas('pages', [
             'name'       => 'My guest page',
             'chapter_id' => $chapter->id,


@@ -197,7 +197,7 @@ class PublicActionTest extends TestCase
     public function test_public_view_can_take_on_other_roles()
     {
         $this->setSettings(['app-public' => 'true']);
     public function test_public_view_can_take_on_other_roles()
     {
         $this->setSettings(['app-public' => 'true']);

-        $newRole = $this->users->attachNewRole(User::getDefault(), []);
+        $newRole = $this->users->attachNewRole($this->users->guest(), []);

         $page = $this->entities->page();
         $this->permissions->disableEntityInheritedPermissions($page);
         $this->permissions->addEntityPermission($page, ['view', 'update'], $newRole);
         $page = $this->entities->page();
         $this->permissions->disableEntityInheritedPermissions($page);
         $this->permissions->addEntityPermission($page, ['view', 'update'], $newRole);

diff --git a/tests/TestCase.php b/tests/TestCase.php
index f8f59977a1e1ac6a282f91e0cca4399e0c47b853..c59f843e94bdd877c4e8601c6d214c1977405e40 100644 (file)
--- a/tests/TestCase.php
+++ b/tests/TestCase.php
@@ -42,7 +42,6 @@ abstract class TestCase extends BaseTestCase
         $this->permissions = new PermissionsProvider($this->users);
         $this->files = new FileProvider();
 
         $this->permissions = new PermissionsProvider($this->users);
         $this->files = new FileProvider();
 

-        User::clearDefault();

         parent::setUp();
 
         // We can uncomment the below to run tests with failings upon deprecations.
         parent::setUp();
 
         // We can uncomment the below to run tests with failings upon deprecations.

diff --git a/tests/User/UserManagementTest.php b/tests/User/UserManagementTest.php
index df60bede6e1de83d83720ad5ed2608f7a524a9ce..a6d869b2fd135159fc09b6ced35115b7c0a5b321 100644 (file)
--- a/tests/User/UserManagementTest.php
+++ b/tests/User/UserManagementTest.php
@@ -191,7 +191,7 @@ class UserManagementTest extends TestCase
 
     public function test_guest_profile_shows_limited_form()
     {
 
     public function test_guest_profile_shows_limited_form()
     {

-        $guest = User::getDefault();
+        $guest = $this->users->guest();

         $resp = $this->asAdmin()->get('/settings/users/' . $guest->id);
         $resp->assertSee('Guest');
         $this->withHtml($resp)->assertElementNotExists('#password');
         $resp = $this->asAdmin()->get('/settings/users/' . $guest->id);
         $resp->assertSee('Guest');
         $this->withHtml($resp)->assertElementNotExists('#password');


@@ -199,7 +199,7 @@ class UserManagementTest extends TestCase
 
     public function test_guest_profile_cannot_be_deleted()
     {
 
     public function test_guest_profile_cannot_be_deleted()
     {

-        $guestUser = User::getDefault();
+        $guestUser = $this->users->guest();

         $resp = $this->asAdmin()->get('/settings/users/' . $guestUser->id . '/delete');
         $resp->assertSee('Delete User');
         $resp->assertSee('Guest');
         $resp = $this->asAdmin()->get('/settings/users/' . $guestUser->id . '/delete');
         $resp->assertSee('Delete User');
         $resp->assertSee('Guest');

diff --git a/tests/User/UserSearchTest.php b/tests/User/UserSearchTest.php
index 1387311ce7576d131e6b648197deedf5d9d69612..76efbf4af9ba27d7405911373b0e4bd1a362a7e9 100644 (file)
--- a/tests/User/UserSearchTest.php
+++ b/tests/User/UserSearchTest.php
@@ -57,8 +57,7 @@ class UserSearchTest extends TestCase
     public function test_select_requires_logged_in_user()
     {
         $this->setSettings(['app-public' => true]);
     public function test_select_requires_logged_in_user()
     {
         $this->setSettings(['app-public' => true]);

-        $defaultUser = User::getDefault();
-        $this->permissions->grantUserRolePermissions($defaultUser, ['users-manage']);
+        $this->permissions->grantUserRolePermissions($this->users->guest(), ['users-manage']);

 
         $resp = $this->get('/search/users/select?search=a');
         $this->assertPermissionError($resp);
 
         $resp = $this->get('/search/users/select?search=a');
         $this->assertPermissionError($resp);