Goit

// Copyright (C) 2023, Jakob Wakeling

// All rights reserved.

package goit

import (

	"database/sql"

	"errors"

	"fmt"

	"net/http"

	"strings"

)

type User struct {

	Id       int64  `json:"id"`

	Name     string `json:"name"`

	FullName string `json:"name_full"`

	Pass     []byte `json:"pass"`

	PassAlgo string `json:"pass_algo"`

	Salt     []byte `json:"salt"`

	IsAdmin  bool   `json:"is_admin"`

}

func HandleUserLogout(w http.ResponseWriter, r *http.Request) {

	id, s := GetSessionCookie(r)

	EndSession(id, s.Token)

	EndSessionCookie(w)

	http.Redirect(w, r, "/", http.StatusFound)

}

func GetUsers() ([]User, error) {

	users := []User{}

	rows, err := db.Query("SELECT id, name, name_full, pass, pass_algo, salt, is_admin FROM users")

	if err != nil {

		return nil, err

	}

	defer rows.Close()

	for rows.Next() {

		u := User{}

		if err := rows.Scan(&u.Id, &u.Name, &u.FullName, &u.Pass, &u.PassAlgo, &u.Salt, &u.IsAdmin); err != nil {

			return nil, err

		}

		users = append(users, u)

	}

	if rows.Err() != nil {

		return nil, err

	}

	return users, nil

}

func GetUser(id int64) (*User, error) {

	u := User{}

	if err := db.QueryRow(

		"SELECT id, name, name_full, pass, pass_algo, salt, is_admin FROM users WHERE id = ?", id,

	).Scan(&u.Id, &u.Name, &u.FullName, &u.Pass, &u.PassAlgo, &u.Salt, &u.IsAdmin); err != nil {

		if !errors.Is(err, sql.ErrNoRows) {

			return nil, fmt.Errorf("[SELECT:user] %w", err)

		} else {

			return nil, nil

		}

	} else {

		return &u, nil

	}

}

func GetUserByName(name string) (*User, error) {

	u := &User{}

	err := db.QueryRow(

		"SELECT id, name, name_full, pass, pass_algo, salt, is_admin FROM users WHERE name = ?", strings.ToLower(name),

	).Scan(&u.Id, &u.Name, &u.FullName, &u.Pass, &u.PassAlgo, &u.Salt, &u.IsAdmin)

	if errors.Is(err, sql.ErrNoRows) {

		return nil, nil

	} else if err != nil {

		return nil, err

	}

	return u, nil

}

func UserExists(name string) (bool, error) {

	if err := db.QueryRow("SELECT name FROM users WHERE name = ?", strings.ToLower(name)).Scan(&name); err != nil {

		if !errors.Is(err, sql.ErrNoRows) {

			return false, err

		} else {

			return false, nil

		}

	} else {

		return true, nil

	}

}

func CreateUser(user User) error {

	if _, err := db.Exec(

		"INSERT INTO users (name, name_full, pass, pass_algo, salt, is_admin) VALUES (?, ?, ?, ?, ?, ?)",

		user.Name, user.FullName, user.Pass, user.PassAlgo, user.Salt, user.IsAdmin,

	); err != nil {

		return err

	}

	return nil

}

func UpdateUser(uid int64, user User) error {

	if _, err := db.Exec(

		"UPDATE users SET name = ?, name_full = ?, is_admin = ? WHERE id = ?",

		user.Name, user.FullName, user.IsAdmin, uid,

	); err != nil {

		return err

	}

	return nil

}

func UpdatePassword(uid int64, password string) error {

	salt, err := Salt()

	if err != nil {

		return err

	}

	if _, err := db.Exec(

		"UPDATE users SET pass = ?, pass_algo = ?, salt = ? WHERE id = ?",

		Hash(password, salt), "argon2", salt, uid,

	); err != nil {

		return err

	}

	return nil

}