package models import ( "GoWeb/app" "log" "net/http" "strconv" "time" "golang.org/x/crypto/bcrypt" ) type User struct { Id int64 Username string Password string CreatedAt time.Time UpdatedAt time.Time } const userColumnsNoId = "\"Username\", \"Password\", \"CreatedAt\", \"UpdatedAt\"" const userColumns = "\"Id\", " + userColumnsNoId const userTable = "public.\"User\"" const ( selectSessionIdByAuthToken = "SELECT \"Id\" FROM public.\"Session\" WHERE \"AuthToken\" = $1" selectUserById = "SELECT " + userColumns + " FROM " + userTable + " WHERE \"Id\" = $1" selectUserByUsername = "SELECT " + userColumns + " FROM " + userTable + " WHERE \"Username\" = $1" insertUser = "INSERT INTO " + userTable + " (" + userColumnsNoId + ") VALUES ($1, $2, $3, $4) RETURNING \"Id\"" ) // GetCurrentUser finds the currently logged-in user by session cookie func GetCurrentUser(app *app.App, r *http.Request) (User, error) { cookie, err := r.Cookie("session") if err != nil { log.Println("Error getting session cookie") return User{}, err } var userId int64 // Query row by AuthToken err = app.Db.QueryRow(selectSessionIdByAuthToken, cookie.Value).Scan(&userId) if err != nil { log.Println("Error querying session row with session: " + cookie.Value) return User{}, err } return GetUserById(app, userId) } // GetUserById finds a User table row in the database by id and returns a struct representing this row func GetUserById(app *app.App, id int64) (User, error) { user := User{} // Query row by id err := app.Db.QueryRow(selectUserById, id).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt) if err != nil { log.Println("Get user error (user not found) for user id:" + strconv.FormatInt(id, 10)) return User{}, err } return user, nil } // GetUserByUsername finds a User table row in the database by username and returns a struct representing this row func GetUserByUsername(app *app.App, username string) (User, error) { user := User{} // Query row by username err := app.Db.QueryRow(selectUserByUsername, username).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt) if err != nil { log.Println("Get user error (user not found) for user:" + username) return User{}, err } return user, nil } // CreateUser creates a User table row in the database func CreateUser(app *app.App, username string, password string, createdAt time.Time, updatedAt time.Time) (User, error) { // Hash password hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost) if err != nil { log.Println("Error hashing password when creating user") return User{}, err } var lastInsertId int64 err = app.Db.QueryRow(insertUser, username, string(hash), createdAt, updatedAt).Scan(&lastInsertId) if err != nil { log.Println("Error creating user row") return User{}, err } return GetUserById(app, lastInsertId) } // AuthenticateUser validates the password for the specified user func AuthenticateUser(app *app.App, w http.ResponseWriter, username string, password string) (Session, error) { var user User // Query row by username err := app.Db.QueryRow(selectUserByUsername, username).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt) if err != nil { log.Println("Authentication error (user not found) for user:" + username) return Session{}, err } // Validate password err = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)) if err != nil { // Failed to validate password, doesn't match log.Println("Authentication error (incorrect password) for user:" + username) return Session{}, err } else { return CreateSession(app, w, user.Id) } } // LogoutUser deletes the session cookie and AuthToken from the database func LogoutUser(app *app.App, w http.ResponseWriter, r *http.Request) { // Get cookie from request cookie, err := r.Cookie("session") if err != nil { log.Println("Error getting cookie from request") return } // Set token to empty string err = DeleteSessionByAuthToken(app, w, cookie.Value) if err != nil { log.Println("Error deleting session by AuthToken") return } // Delete cookie cookie = &http.Cookie{ Name: "session", Value: "", Path: "/", MaxAge: -1, } http.SetCookie(w, cookie) }