From c81c4a55aa679e35a9716fbb3e49cd9c715be248 Mon Sep 17 00:00:00 2001
From: Lee Araneta <lee.araneta@gmail.com>
Date: Mon, 5 Aug 2024 22:20:59 -0400
Subject: [PATCH] feat: add privacy policy, allow user to delete account

---
 lib/snippit/users.ex                          |   5 +
 .../components/layouts/root.html.heex         |   7 +-
 .../controllers/page_controller.ex            |   9 --
 .../controllers/page_html/hello.html.heex     |  62 ---------
 lib/snippit_web/live/add_snippet_live.ex      |  31 +++--
 lib/snippit_web/live/hello_live.ex            | 123 ++++++++++++++++++
 lib/snippit_web/live/home_live.ex             |  43 ++++++
 lib/snippit_web/router.ex                     |   3 +-
 lib/snippit_web/user_auth.ex                  |   2 +-
 9 files changed, 194 insertions(+), 91 deletions(-)
 delete mode 100644 lib/snippit_web/controllers/page_controller.ex
 create mode 100644 lib/snippit_web/live/hello_live.ex

diff --git a/lib/snippit/users.ex b/lib/snippit/users.ex
index a26d6e7..ee5ef4f 100644
--- a/lib/snippit/users.ex
+++ b/lib/snippit/users.ex
@@ -105,4 +105,9 @@ defmodule Snippit.Users do
     {:ok, _} = create_collection_invites_from_app_invites(user)
     {:ok, user}
   end
+
+  def delete_user(%User{} = user) do
+    {:ok, user} = Repo.delete(user)
+    {:ok, user}
+  end
 end
diff --git a/lib/snippit_web/components/layouts/root.html.heex b/lib/snippit_web/components/layouts/root.html.heex
index b79a5e9..e118ab5 100644
--- a/lib/snippit_web/components/layouts/root.html.heex
+++ b/lib/snippit_web/components/layouts/root.html.heex
@@ -4,7 +4,7 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <meta name="csrf-token" content={get_csrf_token()} />
-    <.live_title suffix=" · Phoenix Framework">
+    <.live_title>
       <%= assigns[:page_title] || "Snippit" %>
     </.live_title>
     <link phx-track-static rel="stylesheet" href={~p"/assets/app.css"} />
@@ -15,7 +15,10 @@
     <%= if @current_user do %>
       <header class="relative z-10 px-4 sm:px-6 lg:px-8 py-6">
         <ul class="flex items-center gap-4 justify-end">
-          <li class="text-[0.8125rem] leading-6 text-zinc-900">
+          <li
+            class="cursor-pointer"
+            phx-click={show_modal("user")}
+          >
             <%= @current_user.username %>
           </li>
           <li>
diff --git a/lib/snippit_web/controllers/page_controller.ex b/lib/snippit_web/controllers/page_controller.ex
deleted file mode 100644
index 7f89198..0000000
--- a/lib/snippit_web/controllers/page_controller.ex
+++ /dev/null
@@ -1,9 +0,0 @@
-defmodule SnippitWeb.PageController do
-  use SnippitWeb, :controller
-
-  def hello(conn, _params) do
-    # The home page is often custom made,
-    # so skip the default app layout.
-    render(conn, :hello, layout: false)
-  end
-end
diff --git a/lib/snippit_web/controllers/page_html/hello.html.heex b/lib/snippit_web/controllers/page_html/hello.html.heex
index 6aad9dd..e69de29 100644
--- a/lib/snippit_web/controllers/page_html/hello.html.heex
+++ b/lib/snippit_web/controllers/page_html/hello.html.heex
@@ -1,62 +0,0 @@
-<.flash_group flash={@flash} />
-<div class="h-full left-[40rem] fixed inset-y-0 right-0 z-0 hidden lg:block xl:left-[50rem]">
-  <svg
-    viewBox="0 0 1480 957"
-    fill="none"
-    aria-hidden="true"
-    class="absolute inset-0 h-full w-full"
-    preserveAspectRatio="xMinYMid slice"
-  >
-    <path fill="#EE7868" d="M0 0h1480v957H0z" />
-    <path
-      d="M137.542 466.27c-582.851-48.41-988.806-82.127-1608.412 658.2l67.39 810 3083.15-256.51L1535.94-49.622l-98.36 8.183C1269.29 281.468 734.115 515.799 146.47 467.012l-8.928-.742Z"
-      fill="#FF9F92"
-    />
-    <path
-      d="M371.028 528.664C-169.369 304.988-545.754 149.198-1361.45 665.565l-182.58 792.025 3014.73 694.98 389.42-1689.25-96.18-22.171C1505.28 697.438 924.153 757.586 379.305 532.09l-8.277-3.426Z"
-      fill="#FA8372"
-    />
-    <path
-      d="M359.326 571.714C-104.765 215.795-428.003-32.102-1349.55 255.554l-282.3 1224.596 3047.04 722.01 312.24-1354.467C1411.25 1028.3 834.355 935.995 366.435 577.166l-7.109-5.452Z"
-      fill="#E96856"
-      fill-opacity=".6"
-    />
-    <path
-      d="M1593.87 1236.88c-352.15 92.63-885.498-145.85-1244.602-613.557l-5.455-7.105C-12.347 152.31-260.41-170.8-1225-131.458l-368.63 1599.048 3057.19 704.76 130.31-935.47Z"
-      fill="#C42652"
-      fill-opacity=".2"
-    />
-    <path
-      d="M1411.91 1526.93c-363.79 15.71-834.312-330.6-1085.883-863.909l-3.822-8.102C72.704 125.95-101.074-242.476-1052.01-408.907l-699.85 1484.267 2837.75 1338.01 326.02-886.44Z"
-      fill="#A41C42"
-      fill-opacity=".2"
-    />
-    <path
-      d="M1116.26 1863.69c-355.457-78.98-720.318-535.27-825.287-1115.521l-1.594-8.816C185.286 163.833 112.786-237.016-762.678-643.898L-1822.83 608.665 571.922 2635.55l544.338-771.86Z"
-      fill="#A41C42"
-      fill-opacity=".2"
-    />
-  </svg>
-</div>
-<div class="px-4 py-10 sm:px-6 sm:py-28 lg:px-8 xl:px-28 xl:py-32">
-  <div class="mx-auto max-w-xl lg:mx-0">
-    <p class="text-[2rem] mt-4 font-semibold leading-10 tracking-tighter text-zinc-900 text-balance">
-      musical moodboarding (with friends)
-    </p>
-    <p class="mt-4 mb-2 text-base leading-7 text-zinc-600">
-      create snippets of tracks and organize them to your heart's desire
-    </p>
-    <p class="mt-2 mb-8 text-sm leading-7 text-zinc-600">
-      (requires spotify premium)
-    </p>
-    <a
-      class={[
-        "rounded-lg bg-zinc-900 hover:bg-zinc-700 py-2 px-3",
-        "text-sm font-semibold leading-6 text-white active:text-white/80"
-      ]}
-      href={~p"/auth/login"}
-    >
-      login via spotify
-    </a>
-  </div>
-</div>
diff --git a/lib/snippit_web/live/add_snippet_live.ex b/lib/snippit_web/live/add_snippet_live.ex
index 774f34f..a0eb09b 100644
--- a/lib/snippit_web/live/add_snippet_live.ex
+++ b/lib/snippit_web/live/add_snippet_live.ex
@@ -260,22 +260,21 @@ defmodule SnippitWeb.AddSnippet do
                 <div class="flex-1" />
               </div>
             </.form>
-            <div class="flex-1 flex flex-col overflow-scroll">
-              <ul :for={{track, i} <- Enum.with_index(@track_search_results)}>
-                <li
-                  class="flex items-center gap-2 cursor-pointer hover:bg-gray-100 h-[60px] pl-[5px]"
-                  phx-value-idx={i}
-                  phx-click="track_selected"
-                  phx-target={@myself}
-                >
-                  <img src={track.thumbnail_url} width="50" height="50" />
-                  <div class="flex flex-col">
-                    <span class="font-bold"> <%= track.track %> </span>
-                    <span> <%= track.artist %> </span>
-                  </div>
-                </li>
-              </ul>
-            </div>
+            <ul class="flex-1 flex flex-col gap-2 overflow-scroll">
+              <li
+                :for={{track, i} <- Enum.with_index(@track_search_results)}
+                class="flex items-center gap-2 cursor-pointer hover:bg-gray-100 h-[60px] pl-[5px]"
+                phx-value-idx={i}
+                phx-click="track_selected"
+                phx-target={@myself}
+              >
+                <img src={track.thumbnail_url} width="50" height="50" />
+                <div class="flex flex-col">
+                  <span class="font-bold"> <%= track.track %> </span>
+                  <span> <%= track.artist %> </span>
+                </div>
+              </li>
+            </ul>
           </div>
           <div
             :if={@selected_track}
diff --git a/lib/snippit_web/live/hello_live.ex b/lib/snippit_web/live/hello_live.ex
new file mode 100644
index 0000000..694e481
--- /dev/null
+++ b/lib/snippit_web/live/hello_live.ex
@@ -0,0 +1,123 @@
+defmodule SnippitWeb.HelloLive do
+  use SnippitWeb, :live_view
+
+  def mount(_, _, socket) do
+    {:ok, assign(socket, :privacy_policy_accepted?, false)}
+  end
+
+  def handle_event("accept_privacy_policy_changed", %{"privacy_policy_accepted?" => privacy_policy_accepted?}, socket) do
+    {:noreply, assign(socket, :privacy_policy_accepted?, privacy_policy_accepted?)}
+  end
+
+  def handle_event("login_clicked", _, socket) do
+    {:noreply, redirect(socket, to: ~p"/auth/login") }
+  end
+
+  def render(assigns) do
+    ~H"""
+    <.flash_group flash={@flash} />
+    <.modal id="privacy_policy">
+      <div class="h-[64vh] flex flex-col gap-8 overflow-scroll">
+        <div class="text-2xl"> Privacy Policy </div>
+        <div class="flex flex-col gap-8">
+          <span> A couple of things to know before we get started... </span>
+          <ul class="flex flex-col gap-4 ml-8 list-disc">
+            <li>
+              We store your email so we can notify you when someone has shared a collection with you.
+            </li>
+            <li>
+              We store your username to display to others, and your Spotify ID so we can find you in our database.
+            </li>
+            <li>
+              We transfer your Spotify playback to the device running Snippit when necessary. This is limited to:
+              <ul class="ml-8 mt-2 list-disc flex flex-col gap-2">
+                <li> when a snippet is clicked </li>
+                <li> when creating a snippet </li>
+              </ul>
+            </li>
+          </ul>
+        </div>
+        <.form
+          class="flex flex-col gap-8"
+          phx-change="accept_privacy_policy_changed"
+          phx-submit="login_clicked"
+        >
+          <.input
+            label="I accept Snippit's privacy policy"
+            name="privacy_policy_accepted?"
+            type="checkbox"
+          />
+          <.button
+            class="w-40"
+            disabled={!@privacy_policy_accepted?}
+          >
+            continue to snippit
+          </.button>
+        </.form>
+      </div>
+    </.modal>
+    <div class="h-full left-[40rem] fixed inset-y-0 right-0 z-0 hidden lg:block xl:left-[50rem]">
+      <svg
+        viewBox="0 0 1480 957"
+        fill="none"
+        aria-hidden="true"
+        class="absolute inset-0 h-full w-full"
+        preserveAspectRatio="xMinYMid slice"
+      >
+        <path fill="#EE7868" d="M0 0h1480v957H0z" />
+        <path
+          d="M137.542 466.27c-582.851-48.41-988.806-82.127-1608.412 658.2l67.39 810 3083.15-256.51L1535.94-49.622l-98.36 8.183C1269.29 281.468 734.115 515.799 146.47 467.012l-8.928-.742Z"
+          fill="#FF9F92"
+        />
+        <path
+          d="M371.028 528.664C-169.369 304.988-545.754 149.198-1361.45 665.565l-182.58 792.025 3014.73 694.98 389.42-1689.25-96.18-22.171C1505.28 697.438 924.153 757.586 379.305 532.09l-8.277-3.426Z"
+          fill="#FA8372"
+        />
+        <path
+          d="M359.326 571.714C-104.765 215.795-428.003-32.102-1349.55 255.554l-282.3 1224.596 3047.04 722.01 312.24-1354.467C1411.25 1028.3 834.355 935.995 366.435 577.166l-7.109-5.452Z"
+          fill="#E96856"
+          fill-opacity=".6"
+        />
+        <path
+          d="M1593.87 1236.88c-352.15 92.63-885.498-145.85-1244.602-613.557l-5.455-7.105C-12.347 152.31-260.41-170.8-1225-131.458l-368.63 1599.048 3057.19 704.76 130.31-935.47Z"
+          fill="#C42652"
+          fill-opacity=".2"
+        />
+        <path
+          d="M1411.91 1526.93c-363.79 15.71-834.312-330.6-1085.883-863.909l-3.822-8.102C72.704 125.95-101.074-242.476-1052.01-408.907l-699.85 1484.267 2837.75 1338.01 326.02-886.44Z"
+          fill="#A41C42"
+          fill-opacity=".2"
+        />
+        <path
+          d="M1116.26 1863.69c-355.457-78.98-720.318-535.27-825.287-1115.521l-1.594-8.816C185.286 163.833 112.786-237.016-762.678-643.898L-1822.83 608.665 571.922 2635.55l544.338-771.86Z"
+          fill="#A41C42"
+          fill-opacity=".2"
+        />
+      </svg>
+    </div>
+    <div class="px-4 py-10 sm:px-6 sm:py-28 lg:px-8 xl:px-28 xl:pt-[24rem] xl:pb-32">
+      <div class="mx-auto max-w-xl lg:mx-0">
+        <p class="text-[2rem] mt-4 font-semibold leading-10 tracking-tighter text-zinc-900 text-balance">
+          musical moodboarding (with friends)
+        </p>
+        <p class="mt-4 mb-2 text-base leading-7 text-zinc-600">
+          create snippets of tracks and organize them to your heart's desire
+        </p>
+        <p class="mt-2 mb-8 text-sm leading-7 text-zinc-600">
+          (requires spotify premium)
+        </p>
+        <button
+          class={[
+            "rounded-lg bg-zinc-900 hover:bg-zinc-700 py-2 px-3",
+            "text-sm font-semibold leading-6 text-white active:text-white/80"
+          ]}
+          phx-click={show_modal("privacy_policy")}
+        >
+          login via spotify
+        </button>
+      </div>
+    </div>
+    """
+  end
+
+end
diff --git a/lib/snippit_web/live/home_live.ex b/lib/snippit_web/live/home_live.ex
index ea604b3..f01567d 100644
--- a/lib/snippit_web/live/home_live.ex
+++ b/lib/snippit_web/live/home_live.ex
@@ -1,4 +1,5 @@
 defmodule SnippitWeb.HomeLive do
+  alias Snippit.Users
   alias SnippitWeb.SnippetsLive
   alias Snippit.Collections
   alias Snippit.CollectionSnippets
@@ -37,6 +38,7 @@ defmodule SnippitWeb.HomeLive do
     |> assign(:loading?, false)
     |> assign(:player_url, nil)
     |> assign(:audio_ms, 0)
+    |> assign(:confirming_delete?, false)
 
     {:ok, socket}
   end
@@ -200,6 +202,19 @@ defmodule SnippitWeb.HomeLive do
     {:noreply, redirect(socket, to: ~p"/auth/logout")}
   end
 
+  def handle_event("delete_account_clicked", _, socket) do
+    if !socket.assigns.confirming_delete? do
+      {:noreply, assign(socket, :confirming_delete?, true)}
+    else
+      Users.delete_user(socket.assigns.current_user)
+      {:noreply, redirect(socket, to: ~p"/auth/logout")}
+    end
+  end
+
+  def handle_event("user_modal_closed", _, socket) do
+    {:noreply, assign(socket, :confirming_delete?, false)}
+  end
+
   def render(assigns) do
     ~H"""
       <div
@@ -208,6 +223,34 @@ defmodule SnippitWeb.HomeLive do
         phx-hook="root"
         data-token={@user_token}
       >
+        <.modal
+          id="user"
+          on_cancel={JS.push("user_modal_closed")}
+        >
+          <div class="h-[28vh] flex flex-col gap-8 overflow-scroll">
+            <div class="text-2xl"> Your Profile </div>
+            <div class="flex flex-col gap-4">
+              <span> Username: <%= @current_user.username %> </span>
+              <span> Email: <%= @current_user.email %> </span>
+            </div>
+            <div class="flex justify-between items-center">
+              <.button
+                class="w-32 bg-red-600"
+                phx-click="delete_account_clicked"
+              >
+                <span :if={!@confirming_delete?}> Delete Account </span>
+                <span :if={@confirming_delete?}> Confirm Delete </span>
+              </.button>
+              <div
+                :if={@confirming_delete?}
+                class="text-red-400 transition-opacity"
+                phx-mounted={JS.transition({"transform-opacity duration-100", "opacity-0", "opacity-100"})}
+              >
+                Are you sure? You'll lose all of your collections.
+              </div>
+            </div>
+          </div>
+        </.modal>
         <.live_component
           module={CollectionsLive}
           id={:show}
diff --git a/lib/snippit_web/router.ex b/lib/snippit_web/router.ex
index a443859..6368a6c 100644
--- a/lib/snippit_web/router.ex
+++ b/lib/snippit_web/router.ex
@@ -21,7 +21,7 @@ defmodule SnippitWeb.Router do
     pipe_through :browser
 
     live "/", HomeLive
-    get "/hello", PageController, :hello
+    live "/hello", HelloLive
   end
 
   # Other scopes may use custom stacks.
@@ -51,6 +51,7 @@ defmodule SnippitWeb.Router do
   scope "/", SnippitWeb do
     pipe_through :browser
     get "/auth/logout", AuthController, :logout
+    delete "/auth/delete", AuthController, :delete_account
 
     pipe_through :redirect_if_user_is_authenticated
     get "/auth/login", AuthController, :login
diff --git a/lib/snippit_web/user_auth.ex b/lib/snippit_web/user_auth.ex
index e12ff5d..440fc76 100644
--- a/lib/snippit_web/user_auth.ex
+++ b/lib/snippit_web/user_auth.ex
@@ -109,7 +109,7 @@ defmodule SnippitWeb.UserAuth do
     Poison.decode!(response.body)
   end
 
-  defp ensure_user_token(conn) do
+  def ensure_user_token(conn) do
     if token = get_session(conn, :user_token) do
       {token, conn}
     else