From 31c1873cb0dd0ecba92e7b9f94cab9d34c18abef Mon Sep 17 00:00:00 2001
From: Simon Bear <simon.bear@csiro.au>
Date: Sat, 23 Nov 2024 19:06:22 +1100
Subject: [PATCH] Downloads require authentication

---
 .../au/org/ala/images/SearchController.groovy |  1 +
 grails-app/views/search/list.gsp              | 33 ++++++++++++++++---
 2 files changed, 30 insertions(+), 4 deletions(-)

diff --git a/grails-app/controllers/au/org/ala/images/SearchController.groovy b/grails-app/controllers/au/org/ala/images/SearchController.groovy
index c30993ba..237e1e89 100644
--- a/grails-app/controllers/au/org/ala/images/SearchController.groovy
+++ b/grails-app/controllers/au/org/ala/images/SearchController.groovy
@@ -121,6 +121,7 @@ class SearchController {
         redirect(action:'list', params:[q:params.q, fq:params.fq])
     }
 
+    @AlaSecured
     def download(){
         response.setHeader("Content-Disposition", "attachment; filename=\"images.zip\"")
         response.setHeader("Content-Type", "application/zip")
diff --git a/grails-app/views/search/list.gsp b/grails-app/views/search/list.gsp
index b47f193b..225ec42d 100644
--- a/grails-app/views/search/list.gsp
+++ b/grails-app/views/search/list.gsp
@@ -32,10 +32,19 @@
                             <a id="btnAddCriteria" class="btn btn-default">
                                 <g:message code="list.advanced.search" />
                             </a>
-                            <a class="btn btn-default" href="${createLink(controller:'search', action:'download')}?${request.getQueryString()}">
-                                <span class="glyphicon glyphicon-download"></span>
-                                <g:message code="list.download.results" />
-                            </a>
+                            <auth:ifLoggedIn>
+                                <a class="btn btn-default" href="${createLink(controller:'search', action:'download')}?${request.getQueryString()}">
+                                    <span class="glyphicon glyphicon-download"></span>
+                                    <g:message code="list.download.results" />
+                                </a>
+                            </auth:ifLoggedIn>
+                            <auth:ifNotLoggedIn>
+                                <!-- Button trigger modal -->
+                                <button type="button" class="btn btn-default" data-toggle="modal" data-target="#modal-download-login-required">
+                                    <span class="glyphicon glyphicon-download"></span>
+                                    <g:message code="list.download.results" />
+                                </button>
+                            </auth:ifNotLoggedIn>
                         </div>
                     </div>
                 </g:form>
@@ -85,6 +94,22 @@
                 </div>
             </div>
         </div>
+        <div class="modal fade" id="modal-download-login-required" tabindex="-1" role="dialog" aria-labelledby="label-download-login-required">
+            <div class="modal-dialog" role="document">
+                <div class="modal-content">
+                    <div class="modal-header">
+                        <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
+                        <h4 class="modal-title" id="label-download-login-required"><g:message code="list.download.loginRequiredModal.title" default="Login Required"/></h4>
+                    </div>
+                    <div class="modal-body">
+                        <p><g:message code="list.download.loginRequiredModal.body" default="Please login to download image search results."/></p>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-default" data-dismiss="modal"><g:message code="list.download.loginRequiredModal.close" default="Close"/></button>
+                    </div>
+                </div>
+            </div>
+        </div>
 
     <script>