user.go

package main

import (
	"context"
	"fmt"
	"strings"

	"github.com/gin-gonic/gin"
	"github.com/lib/pq"
)

type role string

const (
	Jeune     role = "jeune"
	Chef           = "chef"
	AP             = "ap"
	Relecteur      = "relecteur"
	Admin          = "admin"
)

type User struct {
	CodeAdherent            string        `json:"code_adherent" gorm:"primary_key;unique"`
	Role                    role          `sql:"type:role" json:"role"`
	Progressions            []Progression `gorm:"foreignkey:CodeAdherent" json:"progressions"`
	CodeStructureGroupe     string        `json:"code_structure_groupe"`
	CodeStructureTerritoire string        `json:"code_structure_territoire"`
}

func authenticate() gin.HandlerFunc {
	return func(c *gin.Context) {
		bearerToken := c.GetHeader("Authorization")
		slice := strings.Split(bearerToken, " ")
		if len(slice) == 2 {
			token := slice[1]
			user, err := verifyToken(token)
			if err != nil {
				c.AbortWithStatusJSON(401, gin.H{"error": "invalid_token"})
				return
			}

			auth := context.WithValue(c, "user", user)
			r := c.Request.WithContext(auth)
			c.Request = r
			c.Next()

			return
		} else {
			c.AbortWithStatusJSON(401, gin.H{"error": "invalid_token"})
		}
	}
}

func restrictAccess(authorizedRoles []role) gin.HandlerFunc {
	return func(c *gin.Context) {
		user := c.Request.Context().Value("user").(User)

		if authorized(authorizedRoles, user.Role) == false {
			c.AbortWithError(403, fmt.Errorf("Forbidden"))
		}

		c.Next()
	}
}

func authorized(authorizedRoles []role, userRole role) bool {
	for _, authorizedRole := range authorizedRoles {
		if authorizedRole == userRole {
			return true
		}
	}
	return false
}

func createUser(c *gin.Context) {
	var user User

	err := c.BindJSON(&user)

	if err != nil {
		fmt.Println(err)
		c.JSON(400, gin.H{
			"error": "failed_to_map_user",
		})
		return
	}

	err = db.Create(&user).Error
	if err != nil {
		if err.(*pq.Error).Code == "23505" {
			c.JSON(409, gin.H{"error": "user_already_exists"})
			return
		}
		c.JSON(500, gin.H{"error": "internal_server_error"})
		return
	}

	c.JSON(200, gin.H{
		"message": "created_user",
	})
	return
}

func login(c *gin.Context) {
	var user User

	err := c.BindJSON(&user)

	if err != nil {
		fmt.Println(err)
		c.JSON(412, gin.H{
			"error": "failed_to_map_user",
		})
		return
	}
	err = db.Where(&user).First(&user).Error
	if err != nil {
		fmt.Println(err)
		c.JSON(400, gin.H{
			"login": false,
			"error": "user_does_not_exists",
		})
		return
	}

	c.JSON(200, gin.H{
		"login": true,
		"token": generateToken(user),
	})
	return
}

func listUsers(c *gin.Context) {

	var users []User

	err := db.Find(&users).Error
	if err != nil {
		c.JSON(500, gin.H{"error": "internal_server_error"})
		return
	}

	c.JSON(200, gin.H{"users": users})
	return
}