1
0
Fork 0
miniflux/api/user.go

180 lines
3.5 KiB
Go
Raw Normal View History

2017-11-20 00:10:04 -05:00
// Copyright 2017 Frédéric Guillot. All rights reserved.
// Use of this source code is governed by the Apache 2.0
// license that can be found in the LICENSE file.
2018-08-25 00:51:50 -04:00
package api // import "miniflux.app/api"
2017-11-20 00:10:04 -05:00
import (
"errors"
"net/http"
2017-11-28 00:30:04 -05:00
2018-08-25 00:51:50 -04:00
"miniflux.app/http/request"
"miniflux.app/http/response/json"
2017-11-20 00:10:04 -05:00
)
func (h *handler) currentUser(w http.ResponseWriter, r *http.Request) {
user, err := h.store.UserByID(request.UserID(r))
2018-05-14 21:41:41 -04:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.ServerError(w, r, err)
2018-05-14 21:41:41 -04:00
return
}
json.OK(w, r, user)
2018-05-14 21:41:41 -04:00
}
func (h *handler) createUser(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
2017-11-20 00:10:04 -05:00
return
}
user, err := decodeUserCreationPayload(r.Body)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
if err := user.ValidateUserCreation(); err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
if h.store.UserExists(user.Username) {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, errors.New("This user already exists"))
2017-11-20 00:10:04 -05:00
return
}
err = h.store.CreateUser(user)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.ServerError(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
user.Password = ""
2018-10-07 21:42:43 -04:00
json.Created(w, r, user)
2017-11-20 00:10:04 -05:00
}
func (h *handler) updateUser(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
2017-11-20 00:10:04 -05:00
return
}
userID := request.RouteInt64Param(r, "userID")
userChanges, err := decodeUserModificationPayload(r.Body)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
originalUser, err := h.store.UserByID(userID)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
2017-11-20 00:10:04 -05:00
return
}
if originalUser == nil {
2018-10-07 21:42:43 -04:00
json.NotFound(w, r)
2017-11-20 00:10:04 -05:00
return
}
userChanges.Update(originalUser)
if err := originalUser.ValidateUserModification(); err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, err)
return
}
if err = h.store.UpdateUser(originalUser); err != nil {
2018-10-07 21:42:43 -04:00
json.ServerError(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
2018-10-07 21:42:43 -04:00
json.Created(w, r, originalUser)
2017-11-20 00:10:04 -05:00
}
func (h *handler) users(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
2017-11-20 00:10:04 -05:00
return
}
users, err := h.store.Users()
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.ServerError(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
2018-09-03 17:26:40 -04:00
users.UseTimezone(request.UserTimezone(r))
json.OK(w, r, users)
2017-11-20 00:10:04 -05:00
}
func (h *handler) userByID(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
2017-11-20 00:10:04 -05:00
return
}
userID := request.RouteInt64Param(r, "userID")
user, err := h.store.UserByID(userID)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
2017-11-20 00:10:04 -05:00
return
}
if user == nil {
2018-10-07 21:42:43 -04:00
json.NotFound(w, r)
2017-11-20 00:10:04 -05:00
return
}
2018-09-03 17:26:40 -04:00
user.UseTimezone(request.UserTimezone(r))
json.OK(w, r, user)
2017-11-20 00:10:04 -05:00
}
func (h *handler) userByUsername(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
return
}
username := request.RouteStringParam(r, "username")
user, err := h.store.UserByUsername(username)
if err != nil {
2018-10-07 21:42:43 -04:00
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
return
}
if user == nil {
2018-10-07 21:42:43 -04:00
json.NotFound(w, r)
return
}
json.OK(w, r, user)
}
func (h *handler) removeUser(w http.ResponseWriter, r *http.Request) {
2018-09-03 17:26:40 -04:00
if !request.IsAdminUser(r) {
2018-10-07 21:42:43 -04:00
json.Forbidden(w, r)
2017-11-20 00:10:04 -05:00
return
}
userID := request.RouteInt64Param(r, "userID")
user, err := h.store.UserByID(userID)
2017-11-20 00:10:04 -05:00
if err != nil {
2018-10-07 21:42:43 -04:00
json.ServerError(w, r, err)
2017-11-20 00:10:04 -05:00
return
}
if user == nil {
2018-10-07 21:42:43 -04:00
json.NotFound(w, r)
2017-11-20 00:10:04 -05:00
return
}
if user.ID == request.UserID(r) {
json.BadRequest(w, r, errors.New("You cannot remove yourself"))
2017-11-20 00:10:04 -05:00
return
}
h.store.RemoveUserAsync(user.ID)
2018-10-07 21:42:43 -04:00
json.NoContent(w, r)
2017-11-20 00:10:04 -05:00
}