changed names of database columns
This commit is contained in:
@@ -5,130 +5,93 @@ import (
|
||||
"github.com/johannesbuehl/golunteer/backend/pkg/db/availabilities"
|
||||
)
|
||||
|
||||
func getAvailabilities(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) getAvailabilities() {
|
||||
// get all the availabilites from the database
|
||||
if avails, err := availabilities.Slice(); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't get availabilites: %v", err)
|
||||
|
||||
return response
|
||||
} else {
|
||||
response.Data = avails
|
||||
|
||||
return response
|
||||
a.Data = avails
|
||||
}
|
||||
}
|
||||
|
||||
func postAvailability(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) postAvailability() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusUnauthorized
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
|
||||
logger.Warn().Msg("user is no admin")
|
||||
|
||||
return response
|
||||
|
||||
// parse the body
|
||||
} else {
|
||||
var body availabilities.Availability
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
return response
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(&response); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
} else if err := validate.Struct(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("invalid body: %v", err)
|
||||
|
||||
return response
|
||||
} else if err := availabilities.Add(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't add availability: %v", err)
|
||||
|
||||
return response
|
||||
} else {
|
||||
return response
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func patchAvailabilitiy(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) patchAvailabilitiy() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusUnauthorized
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
|
||||
logger.Warn().Msg("user is no admin")
|
||||
|
||||
return response
|
||||
|
||||
// parse the body
|
||||
} else {
|
||||
var body availabilities.AvailabilityDB
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
return response
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(&response); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
} else if err := validate.Struct(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("invalid body: %v", err)
|
||||
|
||||
return response
|
||||
} else if err := availabilities.Update(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't update availability: %v", err)
|
||||
|
||||
return response
|
||||
} else {
|
||||
return response
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func deleteAvailability(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) deleteAvailability() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
logger.Warn().Msg("availability-deletion failed: user is no admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
|
||||
// parse the query
|
||||
} else if taskID := args.C.QueryInt("id", -1); taskID == -1 {
|
||||
logger.Log().Msg("availability-deletion failed: invalid query: doesn't include \"id\"")
|
||||
} else if taskID := a.C.QueryInt("availabilityID", -1); taskID == -1 {
|
||||
logger.Log().Msg("availability-deletion failed: invalid query: doesn't include \"availabilityID\"")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// delete the task from the database
|
||||
} else if err := availabilities.Delete(taskID); err != nil {
|
||||
logger.Error().Msgf("availability-deletion failed: can't delete task from database: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
} else {
|
||||
return responseMessage{}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
}
|
||||
}
|
||||
|
||||
@@ -5,144 +5,138 @@ import (
|
||||
"github.com/johannesbuehl/golunteer/backend/pkg/db/events"
|
||||
)
|
||||
|
||||
func postEvent(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) postEvent() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
} else {
|
||||
|
||||
// write the event
|
||||
var body events.EventCreate
|
||||
|
||||
// try to parse the body
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
// validate the parsed body
|
||||
} else if err := validate.Struct(body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("invalid body: %v", err)
|
||||
|
||||
// create the event
|
||||
} else if err := events.Create(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't create event: %v", err)
|
||||
}
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func patchEvent(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) patchEvent() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
} else {
|
||||
// parse the body
|
||||
var body events.EventPatch
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("ivnalid body: %v", err)
|
||||
|
||||
// update the event
|
||||
} else if err := events.Update(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("updating the event failed: %v", err)
|
||||
}
|
||||
}
|
||||
return response
|
||||
}
|
||||
|
||||
func getEventsAssignments(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) getEventsAssignments() {
|
||||
if events, err := events.WithAssignments(); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't retrieve events with assignments: %v", err)
|
||||
} else {
|
||||
response.Data = events
|
||||
a.Data = events
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func getEventsAvailabilities(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) getEventsAvailabilities() {
|
||||
// check for admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
} else {
|
||||
if events, err := events.WithAvailabilities(); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't retrieve events with availabilities: %v", err)
|
||||
} else {
|
||||
response.Data = events
|
||||
a.Data = events
|
||||
}
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func getEventsUserPending(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
func (a *Handler) getEventsUserPending() {
|
||||
if events, err := events.UserPending(a.UserName); err != nil {
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
if count, err := events.UserPending(args.User.UserName); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Warn().Msgf("can't query database for users %q pending events: %v", args.User.UserName, err)
|
||||
logger.Warn().Msgf("can't query database for users %q pending events: %v", a.UserName, err)
|
||||
} else {
|
||||
response.Data = count
|
||||
a.Data = events
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func deleteEvent(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) getEventsUserPendingCount() {
|
||||
if count, err := events.UserPendingCount(a.UserName); err != nil {
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Warn().Msgf("can't query database for users %q pending events: %v", a.UserName, err)
|
||||
} else {
|
||||
a.Data = count
|
||||
}
|
||||
}
|
||||
|
||||
func (a *Handler) getEventsUserAssigned() {
|
||||
// retrieve the events from the database
|
||||
if events, err := events.User(a.UserName); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("retrieval of user-assigned-events failed: %v", err)
|
||||
} else {
|
||||
a.Data = events
|
||||
}
|
||||
}
|
||||
|
||||
func (a *Handler) deleteEvent() {
|
||||
// check for admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
|
||||
logger.Warn().Msg("event-delete failed: user is no admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusForbidden,
|
||||
}
|
||||
a.Status = fiber.StatusForbidden
|
||||
// -1 can't be valid
|
||||
} else if eventId := args.C.QueryInt("id", -1); eventId == -1 {
|
||||
logger.Log().Msgf("event-delete failed: \"id\" is missing in query")
|
||||
} else if eventId := a.C.QueryInt("eventID", -1); eventId == -1 {
|
||||
logger.Log().Msgf("event-delete failed: \"eventID\" is missing in query")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
} else if err := events.Delete(eventId); err != nil {
|
||||
|
||||
logger.Error().Msgf("event-delete failed: can't delete from database: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
} else {
|
||||
logger.Log().Msgf("deleted event with id %d", eventId)
|
||||
|
||||
return responseMessage{}
|
||||
logger.Log().Msgf("deleted event with eventID %d", eventId)
|
||||
}
|
||||
}
|
||||
|
||||
@@ -8,33 +8,32 @@ import (
|
||||
|
||||
// handle welcome-messages from clients
|
||||
func handleWelcome(c *fiber.Ctx) error {
|
||||
args := Handler{C: c}
|
||||
|
||||
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
||||
|
||||
response := responseMessage{}
|
||||
response.Data = UserChecked{
|
||||
args.Data = UserChecked{
|
||||
Admin: false,
|
||||
}
|
||||
|
||||
args := HandlerArgs{C: c}
|
||||
|
||||
if loggedIn, err := args.checkUser(); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
args.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Warn().Msgf("can't check user: %v", err)
|
||||
} else if !loggedIn {
|
||||
response.Status = fiber.StatusUnauthorized
|
||||
args.Status = fiber.StatusUnauthorized
|
||||
|
||||
logger.Debug().Msgf("user not authorized")
|
||||
} else {
|
||||
response.Data = UserChecked{
|
||||
UserName: args.User.UserName,
|
||||
Admin: args.User.Admin,
|
||||
args.Data = UserChecked{
|
||||
UserName: args.UserName,
|
||||
Admin: args.Admin,
|
||||
}
|
||||
|
||||
logger.Debug().Msgf("welcomed user %q", args.User.UserName)
|
||||
logger.Debug().Msgf("welcomed user %q", args.UserName)
|
||||
}
|
||||
|
||||
return response.send(c)
|
||||
return args.send(c)
|
||||
}
|
||||
|
||||
const messageWrongLogin = "Unkown user or wrong password"
|
||||
@@ -42,7 +41,7 @@ const messageWrongLogin = "Unkown user or wrong password"
|
||||
func handleLogin(c *fiber.Ctx) error {
|
||||
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
||||
|
||||
args := HandlerArgs{C: c}
|
||||
args := Handler{C: c}
|
||||
|
||||
// extract username and password from the request
|
||||
requestBody := struct {
|
||||
@@ -50,12 +49,10 @@ func handleLogin(c *fiber.Ctx) error {
|
||||
Password string `json:"password" validate:"required"`
|
||||
}{}
|
||||
|
||||
var response responseMessage
|
||||
|
||||
if err := args.C.BodyParser(&requestBody); err != nil {
|
||||
logger.Debug().Msgf("can't parse login-body: %v", err)
|
||||
|
||||
response.Status = fiber.StatusBadRequest
|
||||
args.Status = fiber.StatusBadRequest
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(requestBody); err != nil {
|
||||
@@ -63,29 +60,29 @@ func handleLogin(c *fiber.Ctx) error {
|
||||
} else {
|
||||
// query the database for the user
|
||||
var result userDB
|
||||
if err := db.DB.QueryRowx("SELECT password, admin, tokenID FROM USERS WHERE name = ?", requestBody.Username).StructScan(&result); err != nil {
|
||||
response.Status = fiber.StatusForbidden
|
||||
response.Message = messageWrongLogin
|
||||
if err := db.DB.QueryRowx("SELECT password, admin, tokenID FROM USERS WHERE userName = ?", requestBody.Username).StructScan(&result); err != nil {
|
||||
args.Status = fiber.StatusForbidden
|
||||
args.Message = messageWrongLogin
|
||||
|
||||
logger.Info().Msgf("can't get user with name = %q from database", requestBody.Username)
|
||||
logger.Info().Msgf("can't get user with userName = %q from database", requestBody.Username)
|
||||
} else {
|
||||
// hash the password
|
||||
if bcrypt.CompareHashAndPassword(result.Password, []byte(requestBody.Password)) != nil {
|
||||
response.Status = fiber.StatusForbidden
|
||||
args.Status = fiber.StatusForbidden
|
||||
|
||||
logger.Info().Msgf("login denied: wrong password for user with name = %q", requestBody.Username)
|
||||
logger.Info().Msgf("login denied: wrong password for user with userName = %q", requestBody.Username)
|
||||
} else {
|
||||
// password is correct -> generate the JWT
|
||||
if jwt, err := config.SignJWT(JWTPayload{
|
||||
UserName: requestBody.Username,
|
||||
TokenID: result.TokenID,
|
||||
}); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
args.Status = fiber.StatusInternalServerError
|
||||
logger.Error().Msgf("can't create JWT: %v", err)
|
||||
} else {
|
||||
args.setSessionCookie(&jwt)
|
||||
|
||||
response.Data = UserChecked{
|
||||
args.Data = UserChecked{
|
||||
UserName: requestBody.Username,
|
||||
Admin: true,
|
||||
}
|
||||
@@ -96,18 +93,18 @@ func handleLogin(c *fiber.Ctx) error {
|
||||
}
|
||||
}
|
||||
|
||||
return response.send(args.C)
|
||||
return args.send(args.C)
|
||||
}
|
||||
|
||||
// handles logout-requests
|
||||
func handleLogout(c *fiber.Ctx) error {
|
||||
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
||||
|
||||
args := HandlerArgs{
|
||||
args := Handler{
|
||||
C: c,
|
||||
}
|
||||
|
||||
args.removeSessionCookie()
|
||||
|
||||
return responseMessage{}.send(c)
|
||||
return args.send(c)
|
||||
}
|
||||
|
||||
@@ -27,32 +27,33 @@ type responseMessage struct {
|
||||
}
|
||||
|
||||
// answer the client request with the response-message
|
||||
func (result responseMessage) send(c *fiber.Ctx) error {
|
||||
func (a *Handler) send(c *fiber.Ctx) error {
|
||||
// if the status-code is in the error-region, return an error
|
||||
if result.Status >= 400 {
|
||||
if a.Status >= 400 {
|
||||
// if available, include the message
|
||||
if result.Message != "" {
|
||||
return fiber.NewError(result.Status, result.Message)
|
||||
if a.Message != "" {
|
||||
return fiber.NewError(a.Status, a.Message)
|
||||
} else {
|
||||
return fiber.NewError(result.Status)
|
||||
return fiber.NewError(a.Status)
|
||||
}
|
||||
} else {
|
||||
// if there is data, send it as JSON
|
||||
if result.Data != nil {
|
||||
c.JSON(result.Data)
|
||||
if a.Data != nil {
|
||||
c.JSON(a.Data)
|
||||
|
||||
// if there is a message, send it instead
|
||||
} else if result.Message != "" {
|
||||
c.SendString(result.Message)
|
||||
} else if a.Message != "" {
|
||||
c.SendString(a.Message)
|
||||
}
|
||||
|
||||
return c.SendStatus(result.Status)
|
||||
return c.SendStatus(a.Status)
|
||||
}
|
||||
}
|
||||
|
||||
type HandlerArgs struct {
|
||||
C *fiber.Ctx
|
||||
User UserChecked
|
||||
type Handler struct {
|
||||
C *fiber.Ctx
|
||||
UserChecked
|
||||
responseMessage
|
||||
}
|
||||
|
||||
func init() {
|
||||
@@ -74,35 +75,45 @@ func init() {
|
||||
}
|
||||
|
||||
// map with the individual registered endpoints
|
||||
endpoints := map[string]map[string]func(HandlerArgs) responseMessage{
|
||||
endpoints := map[string]map[string]func(*Handler){
|
||||
"GET": {
|
||||
"events/assignments": getEventsAssignments,
|
||||
"events/availabilities": getEventsAvailabilities,
|
||||
"events/user/pending": getEventsUserPending,
|
||||
"tasks": getTasks,
|
||||
"users": getUsers,
|
||||
"availabilities": getAvailabilities,
|
||||
// all events with the task-assignments
|
||||
"events/assignments": (*Handler).getEventsAssignments,
|
||||
|
||||
// all events with the availabilities of the individual users
|
||||
"events/availabilities": (*Handler).getEventsAvailabilities,
|
||||
|
||||
// events the user has to enter his availability for
|
||||
"events/user/pending": (*Handler).getEventsUserPending,
|
||||
|
||||
// number of events the user has to enter his availability for
|
||||
"events/user/pending/count": (*Handler).getEventsUserPendingCount,
|
||||
|
||||
"events/user/assigned": (*Handler).getEventsUserAssigned,
|
||||
"tasks": (*Handler).getTasks, // all available tasks
|
||||
"users": (*Handler).getUsers, // all users
|
||||
"availabilities": (*Handler).getAvailabilities, // all available availabilities
|
||||
},
|
||||
"POST": {
|
||||
"events": postEvent,
|
||||
"users": postUser,
|
||||
"availabilities": postAvailability,
|
||||
"tasks": postTask,
|
||||
"events": (*Handler).postEvent, // create an event
|
||||
"users": (*Handler).postUser, // add an user
|
||||
"availabilities": (*Handler).postAvailability, // add an availability
|
||||
"tasks": (*Handler).postTask, // add a task
|
||||
},
|
||||
"PATCH": {
|
||||
"users": patchUser,
|
||||
"events": patchEvent,
|
||||
"availabilities": patchAvailabilitiy,
|
||||
"tasks": patchTask,
|
||||
"users": (*Handler).patchUser, // modify an user
|
||||
"events": (*Handler).patchEvent, // modify an event
|
||||
"availabilities": (*Handler).patchAvailabilitiy, // modify an availability
|
||||
"tasks": (*Handler).patchTask, // modify a task
|
||||
},
|
||||
"PUT": {
|
||||
"users/password": putPassword,
|
||||
"users/password": (*Handler).putPassword, // change the password
|
||||
},
|
||||
"DELETE": {
|
||||
"event": deleteEvent,
|
||||
"tasks": deleteTask,
|
||||
"availabilities": deleteAvailability,
|
||||
"users": deleteUser,
|
||||
"event": (*Handler).deleteEvent, // remove an event
|
||||
"tasks": (*Handler).deleteTask, // remove a task
|
||||
"availabilities": (*Handler).deleteAvailability, // remove an availability
|
||||
"users": (*Handler).deleteUser, // remove an user
|
||||
},
|
||||
}
|
||||
|
||||
@@ -117,28 +128,23 @@ func init() {
|
||||
handleMethods[method]("/api/"+address, func(c *fiber.Ctx) error {
|
||||
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
||||
|
||||
var response responseMessage
|
||||
args := HandlerArgs{
|
||||
args := Handler{
|
||||
C: c,
|
||||
}
|
||||
|
||||
if loggedIn, err := args.checkUser(); err != nil {
|
||||
response = responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
args.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Error().Msgf("can't check user: %v", err)
|
||||
} else if !loggedIn {
|
||||
response = responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
args.Status = fiber.StatusUnauthorized
|
||||
|
||||
logger.Log().Msgf("user not authorized")
|
||||
} else {
|
||||
response = handler(args)
|
||||
}
|
||||
|
||||
return response.send(c)
|
||||
handler(&args)
|
||||
|
||||
return args.send(c)
|
||||
})
|
||||
}
|
||||
}
|
||||
@@ -151,7 +157,7 @@ func Listen() {
|
||||
fmt.Println(err)
|
||||
}
|
||||
|
||||
func (args HandlerArgs) setSessionCookie(jwt *string) {
|
||||
func (args Handler) setSessionCookie(jwt *string) {
|
||||
var value string
|
||||
|
||||
if jwt == nil {
|
||||
@@ -170,7 +176,7 @@ func (args HandlerArgs) setSessionCookie(jwt *string) {
|
||||
}
|
||||
|
||||
// removes the session-coockie from a request
|
||||
func (args HandlerArgs) removeSessionCookie() {
|
||||
func (args Handler) removeSessionCookie() {
|
||||
args.C.Cookie(&fiber.Cookie{
|
||||
Name: "session",
|
||||
Value: "",
|
||||
@@ -233,7 +239,7 @@ type UserChecked struct {
|
||||
}
|
||||
|
||||
// checks wether the request is from a valid user
|
||||
func (args *HandlerArgs) checkUser() (bool, error) {
|
||||
func (args *Handler) checkUser() (bool, error) {
|
||||
userName, tokenID, err := extractJWT(args.C)
|
||||
|
||||
if err != nil {
|
||||
@@ -246,7 +252,7 @@ func (args *HandlerArgs) checkUser() (bool, error) {
|
||||
}
|
||||
|
||||
// retrieve the user from the database
|
||||
if err := db.DB.Get(&dbResult, "SELECT tokenID, admin FROM USERS WHERE name = ?", userName); err != nil {
|
||||
if err := db.DB.Get(&dbResult, "SELECT tokenID, admin FROM USERS WHERE userName = ?", userName); err != nil {
|
||||
return false, err
|
||||
|
||||
// if the tokenID is valid, the user is authorized
|
||||
@@ -256,11 +262,9 @@ func (args *HandlerArgs) checkUser() (bool, error) {
|
||||
// reset the expiration of the cookie
|
||||
args.setSessionCookie(nil)
|
||||
|
||||
args.User = UserChecked{
|
||||
UserName: userName,
|
||||
Admin: dbResult.Admin,
|
||||
}
|
||||
return true, nil
|
||||
|
||||
args.UserName = userName
|
||||
args.Admin = dbResult.Admin
|
||||
}
|
||||
return true, nil
|
||||
|
||||
}
|
||||
|
||||
@@ -5,125 +5,93 @@ import (
|
||||
"github.com/johannesbuehl/golunteer/backend/pkg/db/tasks"
|
||||
)
|
||||
|
||||
func getTasks(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) getTasks() {
|
||||
if taskSlice, err := tasks.GetSlice(); err != nil {
|
||||
logger.Error().Msgf("can't get tasks: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
} else {
|
||||
return responseMessage{
|
||||
Data: taskSlice,
|
||||
}
|
||||
a.Data = taskSlice
|
||||
}
|
||||
}
|
||||
|
||||
func postTask(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) postTask() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
logger.Log().Msgf("user is not admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
} else {
|
||||
// parse the body
|
||||
var task tasks.Task
|
||||
|
||||
if err := args.C.BodyParser(&task); err != nil {
|
||||
if err := a.C.BodyParser(&task); err != nil {
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(&task); err != nil {
|
||||
logger.Log().Msgf("invalid body: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// insert the task into the database
|
||||
} else if err := tasks.Add(task); err != nil {
|
||||
logger.Error().Msgf("can't add task: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
} else {
|
||||
return responseMessage{}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func patchTask(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) patchTask() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
logger.Log().Msgf("user is not admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
} else {
|
||||
// parse the body
|
||||
var task tasks.TaskDB
|
||||
|
||||
if err := args.C.BodyParser(&task); err != nil {
|
||||
if err := a.C.BodyParser(&task); err != nil {
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(&task); err != nil {
|
||||
logger.Log().Msgf("invalid body: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// insert the task into the database
|
||||
} else if err := tasks.Update(task); err != nil {
|
||||
logger.Error().Msgf("can't update task: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
} else {
|
||||
return responseMessage{}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func deleteTask(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) deleteTask() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
logger.Warn().Msg("task-deletion failed: user is no admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
|
||||
// parse the query
|
||||
} else if taskID := args.C.QueryInt("id", -1); taskID == -1 {
|
||||
logger.Log().Msg("task-deletion failed: invalid query: doesn't include \"id\"")
|
||||
} else if taskID := a.C.QueryInt("taskID", -1); taskID == -1 {
|
||||
logger.Log().Msg("task-deletion failed: invalid query: doesn't include \"taskID\"")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// delete the task from the database
|
||||
} else if err := tasks.Delete(taskID); err != nil {
|
||||
logger.Error().Msgf("task-deletion failed: can't delete task from database: %v", err)
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusInternalServerError,
|
||||
}
|
||||
} else {
|
||||
return responseMessage{}
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
}
|
||||
}
|
||||
|
||||
@@ -5,76 +5,75 @@ import (
|
||||
"github.com/johannesbuehl/golunteer/backend/pkg/db/users"
|
||||
)
|
||||
|
||||
func getUsers(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
|
||||
func (a *Handler) getUsers() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
|
||||
logger.Log().Msgf("user is no admin")
|
||||
} else if users, err := users.Get(); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't get users: %v", err)
|
||||
} else {
|
||||
response.Data = users
|
||||
a.Data = users
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func postUser(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
func (a *Handler) postUser() {
|
||||
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
|
||||
logger.Log().Msgf("user is no admin")
|
||||
} else {
|
||||
// parse the body
|
||||
var body users.UserAdd
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Warn().Msgf("can't parse body: %v", err)
|
||||
|
||||
// validate the body
|
||||
} else if err := validate.Struct(body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Warn().Msgf("invalid body: %v", err)
|
||||
} else if err := users.Add(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Warn().Msgf("can't add user: %v", err)
|
||||
}
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func putPassword(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
func (a *Handler) putPassword() {
|
||||
// parse the body
|
||||
var body users.UserChangePassword
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// body has been parsed successfully
|
||||
} else {
|
||||
body.UserName = args.User.UserName
|
||||
body.UserName = a.UserName
|
||||
|
||||
// validate the body
|
||||
if err := validate.Struct(body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Info().Msgf("invalid body: %v", err)
|
||||
} else if tokenID, err := users.ChangePassword(body); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// send the password change to the database and get the new tokenID back
|
||||
} else if tokenID, err := users.ChangePassword(body); err != nil {
|
||||
logger.Error().Msgf("can't update password: %v", err)
|
||||
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
// sign a new JWT with the new tokenID
|
||||
} else if jwt, err := config.SignJWT(JWTPayload{
|
||||
UserName: body.UserName,
|
||||
@@ -82,23 +81,22 @@ func putPassword(args HandlerArgs) responseMessage {
|
||||
|
||||
// if something failed, remove the current session-cookie
|
||||
}); err != nil {
|
||||
args.removeSessionCookie()
|
||||
a.removeSessionCookie()
|
||||
|
||||
a.Status = fiber.StatusPartialContent
|
||||
|
||||
// set the new session-cookie
|
||||
} else {
|
||||
// update the token in the session-cookie
|
||||
args.setSessionCookie(&jwt)
|
||||
a.setSessionCookie(&jwt)
|
||||
}
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func patchUser(args HandlerArgs) responseMessage {
|
||||
response := responseMessage{}
|
||||
func (a *Handler) patchUser() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
response.Status = fiber.StatusForbidden
|
||||
if !a.Admin {
|
||||
a.Status = fiber.StatusForbidden
|
||||
|
||||
logger.Log().Msgf("user is no admin")
|
||||
} else {
|
||||
@@ -108,20 +106,20 @@ func patchUser(args HandlerArgs) responseMessage {
|
||||
NewName string `json:"newName"`
|
||||
}
|
||||
|
||||
if err := args.C.BodyParser(&body); err != nil {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
if err := a.C.BodyParser(&body); err != nil {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Log().Msgf("can't parse body: %v", err)
|
||||
|
||||
// prevent to demoting self from admin
|
||||
} else if !body.Admin && body.UserName == args.User.UserName {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
} else if !body.Admin && body.UserName == a.UserName {
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Warn().Msgf("can't demote self from admin")
|
||||
} else {
|
||||
// check for an empty user-name
|
||||
if len(body.UserName) == 0 {
|
||||
response.Status = fiber.StatusBadRequest
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
logger.Warn().Msgf("username is empty")
|
||||
|
||||
@@ -135,36 +133,36 @@ func patchUser(args HandlerArgs) responseMessage {
|
||||
}
|
||||
|
||||
if _, err = users.ChangePassword(usePasswordChange); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't change password: %v", err)
|
||||
|
||||
return response
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
// only change the name, if it differs
|
||||
if body.NewName != body.UserName {
|
||||
if err := users.ChangeName(body.UserName, body.NewName); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't change user-name: %v", err)
|
||||
|
||||
return response
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
// set the admin-status
|
||||
if err := users.SetAdmin(body.NewName, body.Admin); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("updating admin-status failed: %v", err)
|
||||
} else {
|
||||
// if we modified ourself, update the session-cookie
|
||||
if body.UserName == args.User.UserName {
|
||||
if body.UserName == a.UserName {
|
||||
// get the tokenID
|
||||
if tokenID, err := users.TokenID(body.NewName); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("can't get tokenID: %v", err)
|
||||
|
||||
@@ -172,65 +170,51 @@ func patchUser(args HandlerArgs) responseMessage {
|
||||
UserName: body.NewName,
|
||||
TokenID: tokenID,
|
||||
}); err != nil {
|
||||
response.Status = fiber.StatusInternalServerError
|
||||
a.Status = fiber.StatusInternalServerError
|
||||
|
||||
logger.Error().Msgf("JWT-signing failed: %v", err)
|
||||
|
||||
// remove the session-cookie
|
||||
args.removeSessionCookie()
|
||||
a.removeSessionCookie()
|
||||
} else {
|
||||
args.setSessionCookie(&jwt)
|
||||
a.setSessionCookie(&jwt)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return response
|
||||
}
|
||||
|
||||
func deleteUser(args HandlerArgs) responseMessage {
|
||||
func (a *Handler) deleteUser() {
|
||||
// check admin
|
||||
if !args.User.Admin {
|
||||
if !a.Admin {
|
||||
logger.Warn().Msg("user-deletion failed: user is no admin")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusUnauthorized,
|
||||
}
|
||||
a.Status = fiber.StatusUnauthorized
|
||||
|
||||
// get the username from the query
|
||||
} else if userName := args.C.Query("userName"); userName == "" {
|
||||
} else if userName := a.C.Query("userName"); userName == "" {
|
||||
logger.Log().Msg("user-deletion failed: query is missing \"userName\"")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// check wether the user tries to delete himself
|
||||
} else if userName == args.User.UserName {
|
||||
} else if userName == a.UserName {
|
||||
logger.Log().Msg("user-deletion failed: self-deletion is illegal")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// check wether the user tries to delete the admin
|
||||
} else if userName == "admin" {
|
||||
logger.Log().Msg("user-deletion failed: admin-deletion is illegal")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusBadRequest,
|
||||
}
|
||||
a.Status = fiber.StatusBadRequest
|
||||
|
||||
// delete the user
|
||||
} else if err := users.Delete(userName); err != nil {
|
||||
logger.Error().Msgf("user-deletion failed: user doesn't exist")
|
||||
|
||||
return responseMessage{
|
||||
Status: fiber.StatusNotFound,
|
||||
}
|
||||
} else {
|
||||
return responseMessage{}
|
||||
a.Status = fiber.StatusNotFound
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user