aboutsummaryrefslogtreecommitdiffstats
path: root/walrss/internal/core/users.go
blob: 5e7c80c20351b09e671d8021f3344fa63c21c8b3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
package core

import (
	"context"
	"database/sql"
	"errors"
	"github.com/codemicro/walrss/walrss/internal/db"
	"github.com/codemicro/walrss/walrss/internal/state"
	"github.com/lithammer/shortuuid/v4"
	"github.com/mattn/go-sqlite3"
	"golang.org/x/crypto/bcrypt"
)

func RegisterUser(st *state.State, email, password string) (*db.User, error) {
	if err := validateEmailAddress(email); err != nil {
		return nil, err
	}

	if err := validatePassword(password); err != nil {
		return nil, err
	}

	u := &db.User{
		ID:    shortuuid.New(),
		Email: email,
		Salt:  generateRandomData(30),
	}

	hash, err := bcrypt.GenerateFromPassword(combineStringAndSalt(password, u.Salt), bcrypt.DefaultCost)
	if err != nil {
		return nil, err
	}

	u.Password = hash

	if err := coreRegisterUser(st, u); err != nil {
		return nil, err
	}

	return u, nil
}

func RegisterUserOIDC(st *state.State, email string) (*db.User, error) {
	u := &db.User{
		ID:    shortuuid.New(),
		Email: email,
	}

	if err := coreRegisterUser(st, u); err != nil {
		return nil, err
	}

	return u, nil
}

func coreRegisterUser(st *state.State, u *db.User) error {
	if _, err := st.Data.NewInsert().Model(u).Exec(context.Background()); err != nil {
		if e, ok := err.(sqlite3.Error); ok {
			if e.Code == sqlite3.ErrConstraint {
				return NewUserError("email address in use")
			}
		}
		return err
	}
	return nil
}

func AreUserCredentialsCorrect(st *state.State, email, password string) (bool, error) {
	user, err := GetUserByEmail(st, email)
	if err != nil {
		return false, err
	}

	if len(user.Password) == 0 {
		return false, nil
	}

	if err := bcrypt.CompareHashAndPassword(user.Password, combineStringAndSalt(password, user.Salt)); err != nil {
		if errors.Is(err, bcrypt.ErrMismatchedHashAndPassword) {
			return false, nil
		}
		return false, err
	}

	return true, nil
}

func GetUserByID(st *state.State, userID string) (res *db.User, err error) {
	res = new(db.User)
	err = st.Data.NewSelect().Model(res).Where("id = ?", userID).Scan(context.Background())
	if errors.Is(err, sql.ErrNoRows) {
		return nil, ErrNotFound
	}
	return
}

func GetUserByEmail(st *state.State, email string) (res *db.User, err error) {
	res = new(db.User)
	err = st.Data.NewSelect().Model(res).Where("email = ?", email).Scan(context.Background())
	if errors.Is(err, sql.ErrNoRows) {
		return nil, ErrNotFound
	}
	return
}

func UpdateUser(st *state.State, user *db.User) error {
	_, err := st.Data.NewUpdate().Model(user).WherePK().Exec(context.Background())
	if errors.Is(err, sql.ErrNoRows) {
		return ErrNotFound
	}
	return err
}

func GetUsersBySchedule(st *state.State, day db.SendDay, hour int) (res []*db.User, err error) {
	err = st.Data.NewSelect().
		Model(&res).
		Where(
			"active = ? and (schedule_day = ? or schedule_day = ?) and schedule_hour = ?",
			true,
			day,
			db.SendDaily,
			hour,
		).
		Scan(context.Background())
	return
}